$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa File: b7a020da-0d7e-3b24-9670-acd6fe134da5.roa (raw, json) Hash identifier: VT6/tHiPVLDYAA4dCUiOZhF031mBsVksWuH6sQnf/MI= Subject key identifier: 25:2B:D2:9F:4B:E9:28:3A:78:EF:10:EC:E4:1C:52:55:62:17:1A:57 Certificate issuer: /CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Certificate serial: 010D0C9F432858493C092B0828DCE3A9B0714080 Authority key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 22251 IP address blocks: 2604:5ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:2b:08:28:dc:e3:a9:b0:71:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=0e5140bb-6220-4336-a9e4-3e95f3c5eb2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:19:2c:1f:34:7f:cf:6e:cc:83:6a:6c:19: 4f:a5:4c:97:7e:52:65:c0:20:f0:e8:ab:2e:89:cb: 8b:27:37:d8:76:62:86:de:c9:ab:44:86:50:ef:e8: dc:1d:da:b5:b0:7c:21:90:8e:83:99:33:d9:71:f4: 30:13:42:69:ef:23:6f:ea:b2:ba:81:f0:43:3c:11: 5d:06:2f:7b:cb:9c:15:21:37:d8:8e:d4:80:e4:c1: 52:4b:dc:e2:0b:a2:2c:ff:08:9f:a7:8f:60:9d:af: 69:ae:be:1b:a0:67:c6:fb:61:aa:cb:bf:4f:72:54: f8:73:99:ae:90:b9:e0:da:93:80:c5:ca:26:15:3d: 37:49:d3:b9:d8:32:54:da:0f:a9:e8:9a:e7:e8:0e: 98:8c:0e:34:43:e3:6b:22:f2:eb:b6:f5:c8:83:98: 4d:6c:a2:0a:c6:c4:c8:07:cb:af:89:38:db:cf:9d: 6c:60:63:5a:07:9e:14:25:ab:08:2b:34:4e:0b:46: 20:ee:57:44:ff:ac:b9:1b:20:63:79:8f:af:a0:ca: dd:2e:c7:89:6c:05:c1:72:2c:7a:eb:27:2e:4e:8b: e5:45:e1:57:72:c4:b9:d8:56:d7:b4:65:5f:9a:07: 69:68:52:bf:4a:8e:f6:1a:5f:c3:70:bd:e1:c7:4a: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2B:D2:9F:4B:E9:28:3A:78:EF:10:EC:E4:1C:52:55:62:17:1A:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl X509v3 Authority Key Identifier: keyid:99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer sbgp-ipAddrBlock: critical IPv6: 2604:5ac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a5:a2:55:58:ad:9e:48:63:91:77:a5:8a:6f:9e:34:27:5e: f2:18:91:f4:dd:60:d0:1a:fe:ab:8e:64:26:f2:5c:df:6b:39: 72:c6:11:dd:78:40:ca:60:f0:30:f9:4c:14:db:55:6d:a0:16: 3f:de:db:02:09:a0:96:33:49:74:28:2f:3e:db:94:cb:4f:68: 92:00:03:ca:93:1e:89:c5:fd:22:ac:2f:2a:15:60:22:ec:72: a4:17:ad:f8:6a:79:95:f7:d0:fd:4e:08:f3:74:02:8e:65:fc: e7:0c:b0:cd:58:cb:e0:36:d7:e4:3d:21:31:47:28:9a:4d:3a: ca:56:51:7e:36:28:04:9f:76:00:13:7a:6e:f0:8d:6d:49:29: c6:b6:79:3b:4a:d7:63:66:7d:7c:a4:c3:34:09:bf:6e:ca:34: 91:a1:fa:9c:e1:55:23:1b:b6:a6:84:ca:ff:16:91:bc:06:b3: 5d:05:81:2a:8d:69:fd:18:e8:73:38:13:72:45:b5:ae:ba:11: ee:eb:02:5d:ed:f8:33:10:96:8a:19:5e:27:5a:82:83:bd:93: 41:aa:00:49:6d:9e:dc:44:bb:04:88:db:37:2c:d8:20:33:15: cb:0d:d3:6f:9a:05:c9:b5:2d:e4:2e:43:e0:42:1f:9b:b6:80: 16:1d:17:f5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEk8CSsIKNzjqbBxQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmODgwN2MtNDk0ZS00MWFiLTg0MmMtYzA2NzJkNjI4 M2IxMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MGU1MTQwYmItNjIyMC00MzM2LWE5ZTQtM2U5NWYzYzVlYjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQgZLB80f89uzINqbBlPpUyXflJlwCDw6Ksu icuLJzfYdmKG3smrRIZQ7+jcHdq1sHwhkI6DmTPZcfQwE0Jp7yNv6rK6gfBDPBFd Bi97y5wVITfYjtSA5MFSS9ziC6Is/wifp49gna9prr4boGfG+2Gqy79PclT4c5mu kLng2pOAxcomFT03SdO52DJU2g+p6Jrn6A6YjA40Q+NrIvLrtvXIg5hNbKIKxsTI B8uviTjbz51sYGNaB54UJasIKzROC0Yg7ldE/6y5GyBjeY+voMrdLseJbAXBcix6 6ycuTovlReFXcsS52FbXtGVfmgdpaFK/So72Gl/DcL3hx0ryzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCUr0p9L6Sg6eO8Q7OQcUlViFxpXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4 ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2MjgzYjEvYjdhMDIwZGEtMGQ3ZS0z YjI0LTk2NzAtYWNkNmZlMTM0ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNmODgwN2MtNDk0ZS00MWFiLTg0 MmMtYzA2NzJkNjI4M2IxLzhjZjg4MDdjLTQ5NGUtNDFhYi04NDJjLWMwNjcyZDYy ODNiMS5jcmwwHwYDVR0jBBgwFoAUmSK0wlNyF+E9BTJuTe5jaHRRhJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3 MmQ2MjgzYjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRawDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmpaJVWK2eSGORd6WKb540J17yGJH03WDQGv6rjmQm8lzfazlyxhHd eEDKYPAw+UwU21VtoBY/3tsCCaCWM0l0KC8+25TLT2iSAAPKkx6Jxf0irC8qFWAi 7HKkF634anmV99D9TgjzdAKOZfznDLDNWMvgNtfkPSExRyiaTTrKVlF+NigEn3YA E3pu8I1tSSnGtnk7StdjZn18pMM0Cb9uyjSRofqc4VUjG7amhMr/FpG8BrNdBYEq jWn9GOhzOBNyRbWuuhHu6wJd7fgzEJaKGV4nWoKDvZNBqgBJbZ7cRLsEiNs3LNgg MxXLDdNvmgXJtS3kLkPgQh+btoAWHRf1 -----END CERTIFICATE-----Generated at Tue Apr 29 14:20:42 2025 by rpki-client