$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa File: 4738a0db-ee50-3a8a-9636-ac0584f52f61.roa (raw, json) Hash identifier: wFFjhIe37yQ0zT4Nu23v872rjBIhkhEtrOLF28+U/NM= Subject key identifier: E0:69:20:FB:73:41:30:93:52:7A:46:BD:AD:22:91:18:91:51:06:84 Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Certificate serial: 010D0C9F432858499AF47A4DAD248DC9336C6680 Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 14325 IP address blocks: 2604:a700::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7a:4d:ad:24:8d:c9:33:6c:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=97f58bc1-191f-49b9-a871-c6e8d4f072fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:37:de:4b:fc:1c:f0:a6:39:20:5c:c6:b2:c4: 34:01:f1:ad:84:ac:2c:a8:39:90:b6:e3:bf:69:0b: 72:0b:67:f7:82:ac:d2:9e:c5:83:bc:bf:8a:81:c1: 30:87:65:1b:cf:8e:ce:a2:77:a3:41:77:99:91:38: 13:63:b1:2d:52:61:cc:ef:41:d1:2f:f7:6d:92:9d: df:c9:8a:60:ac:2e:0e:6f:05:51:5b:3d:85:88:24: ad:13:ff:6d:95:1a:6c:12:5d:c1:af:62:66:33:ef: 11:da:eb:5c:b3:ec:a9:b9:cd:97:84:a0:7d:7f:00: 5a:f5:92:b3:8c:cd:eb:4c:4b:57:08:47:4b:70:e2: 18:72:1b:a3:bd:43:d9:93:7f:fe:fc:e8:75:f4:0c: bd:3a:a8:da:f1:ad:3a:9f:42:96:a3:72:c2:09:7d: cd:42:fe:6b:ee:83:06:f5:b4:82:4d:1e:f6:98:60: cd:32:2a:7c:ce:f8:53:b7:e1:1c:bd:67:cc:f8:89: d4:a0:ae:c4:51:3a:b0:9f:b4:13:ad:03:45:ee:a4: 85:1c:9c:a7:9d:5b:b9:50:53:08:81:ea:0a:2e:42: d9:f7:b4:92:25:3e:3d:8c:d9:50:4b:24:f5:a4:16: 11:9e:e4:fc:13:0b:d7:1d:50:ed:47:06:60:d8:b3: 22:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:69:20:FB:73:41:30:93:52:7A:46:BD:AD:22:91:18:91:51:06:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl X509v3 Authority Key Identifier: keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer sbgp-ipAddrBlock: critical IPv6: 2604:a700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:49:61:ea:6a:98:c2:68:ee:bd:b1:89:28:e2:26:f6:5e:22: b0:32:9f:7c:b0:2d:5f:82:d6:76:06:7f:a6:3e:6b:ed:ab:bf: b3:2a:9e:47:02:1c:0b:aa:5a:96:63:8e:1d:2f:59:c9:89:48: 3a:a1:a2:0b:89:8a:e0:34:38:28:a8:73:e1:7e:41:06:c7:fd: d6:51:57:ed:b0:25:39:ca:7d:31:80:c3:9d:68:b1:30:e1:35: f0:f4:1a:ee:d4:e7:a4:ee:cd:37:e0:b7:ea:9c:e1:1b:a8:93: f9:a8:04:93:54:8e:53:c8:88:37:cb:c6:5d:43:21:c8:4b:51: 92:e1:a8:4b:c1:71:5e:6c:9b:55:94:1d:ac:26:a6:3b:e8:00: b0:e6:c5:a7:4c:07:5f:83:00:53:4d:5f:ea:e9:5a:48:ec:c0: a2:14:be:b9:98:a8:ae:62:9b:c6:86:73:37:2f:3b:81:02:d0: 40:f0:fe:b7:08:06:cd:05:89:55:90:d2:18:2b:93:da:0c:16: 38:60:20:47:b8:66:39:1a:92:7a:40:00:b9:75:3b:d6:3e:b0: c0:4d:44:dd:40:59:ee:c2:c4:ff:2f:84:bd:ab:f6:fc:be:d7: 50:ab:04:1d:31:9c:b9:30:69:de:16:6b:36:8d:b6:d3:a3:0a: 41:ec:36:db -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEma9HpNrSSNyTNsZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj Nzc3MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk OTdmNThiYzEtMTkxZi00OWI5LWE4NzEtYzZlOGQ0ZjA3MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTfeS/wc8KY5IFzGssQ0AfGthKwsqDmQtuO/ aQtyC2f3gqzSnsWDvL+KgcEwh2Ubz47OonejQXeZkTgTY7EtUmHM70HRL/dtkp3f yYpgrC4ObwVRWz2FiCStE/9tlRpsEl3Br2JmM+8R2utcs+ypuc2XhKB9fwBa9ZKz jM3rTEtXCEdLcOIYchujvUPZk3/+/Oh19Ay9Oqja8a06n0KWo3LCCX3NQv5r7oMG 9bSCTR72mGDNMip8zvhTt+EcvWfM+InUoK7EUTqwn7QTrQNF7qSFHJynnVu5UFMI geoKLkLZ97SSJT49jNlQSyT1pBYRnuT8EwvXHVDtRwZg2LMiTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOBpIPtzQTCTUnpGva0ikRiRUQaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvNDczOGEwZGItZWU1MC0z YThhLTk2MzYtYWMwNTg0ZjUyZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4 Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4 ZGZiOGM3NzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSnADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAOSWHqapjCaO69sYko4ib2XiKwMp98sC1fgtZ2Bn+mPmvtq7+zKp5H AhwLqlqWY44dL1nJiUg6oaILiYrgNDgoqHPhfkEGx/3WUVftsCU5yn0xgMOdaLEw 4TXw9Bru1Oek7s034LfqnOEbqJP5qASTVI5TyIg3y8ZdQyHIS1GS4ahLwXFebJtV lB2sJqY76ACw5sWnTAdfgwBTTV/q6VpI7MCiFL65mKiuYpvGhnM3LzuBAtBA8P63 CAbNBYlVkNIYK5PaDBY4YCBHuGY5GpJ6QAC5dTvWPrDATUTdQFnuwsT/L4S9q/b8 vtdQqwQdMZy5MGneFms2jbbTowpB7Dbb -----END CERTIFICATE-----Generated at Mon Apr 28 02:11:51 2025 by rpki-client