$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/d9e8402b-f0af-3dd1-806f-ada7baa0fa6a.roa File: d9e8402b-f0af-3dd1-806f-ada7baa0fa6a.roa (raw, json) Hash identifier: AEuW5kEKORo61D7sPXOMlHwnU3hvr+F/Ipuyu2kfZJ0= Subject key identifier: 50:E5:4E:D7:1B:52:FA:B5:2B:F2:8D:83:6A:84:B8:24:20:DD:FF:80 Certificate issuer: /CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Certificate serial: 010D0C9F43285849B6DF451B6A149C185ED10F00 Authority key identifier: DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/d9e8402b-f0af-3dd1-806f-ada7baa0fa6a.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 15130 IP address blocks: 2607:f330::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:45:1b:6a:14:9c:18:5e:d1:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=421b04c1-1ed4-4d2b-bfac-8e32b3c9754c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d1:20:4a:db:e9:6a:cf:f0:62:93:51:7f:3d: 3b:41:dc:12:f3:9c:f7:6e:ff:9f:e4:ad:e4:7a:12: 2b:16:b7:97:9c:3e:21:ce:41:ff:5f:e0:3b:3b:13: 60:ed:94:4b:c1:63:f0:63:17:2a:d3:de:42:a3:73: 8d:58:b5:3f:4c:c8:84:c0:54:ed:c3:2a:0e:b9:59: 37:51:4b:4e:fe:52:e9:38:30:69:c9:ca:a1:f8:a0: 02:49:5e:e0:af:55:57:23:4f:1e:6e:2d:47:6b:8f: ab:22:58:fd:39:23:82:ad:4e:d7:ba:24:5d:27:5e: 7a:15:11:46:3f:6c:21:47:6c:39:a6:cd:5f:d3:ba: 16:be:9f:b7:2b:b9:7c:ee:67:85:2f:c3:a0:f4:a6: 89:32:bd:8d:b1:e3:c1:58:9e:4a:18:ea:0a:10:2d: f6:dc:58:6c:a1:8d:ec:18:4e:cc:a8:a0:16:42:43: 64:40:46:ad:6a:3e:89:28:4c:bb:3c:fb:af:0d:df: b6:63:41:bc:8c:0b:36:ba:58:7c:a0:48:87:02:08: 0e:08:74:11:34:92:3d:21:14:0f:f9:0c:13:78:3f: 13:32:4d:eb:c5:75:27:3b:7a:f4:cc:10:fe:88:45: 37:01:60:3c:e0:a4:c5:c5:98:fb:cb:ca:29:42:05: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E5:4E:D7:1B:52:FA:B5:2B:F2:8D:83:6A:84:B8:24:20:DD:FF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/d9e8402b-f0af-3dd1-806f-ada7baa0fa6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl X509v3 Authority Key Identifier: keyid:DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer sbgp-ipAddrBlock: critical IPv6: 2607:f330::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7c:46:36:66:97:c9:be:db:76:d8:90:fc:dd:7f:ac:fd:94: 41:d7:a5:77:e4:e3:54:b1:dd:b3:65:25:a3:64:cd:7a:e1:04: aa:7e:4a:94:bc:51:a0:b3:d7:f2:e3:03:00:1e:f0:0f:42:54: cc:74:65:9f:33:c7:b3:3d:d0:2f:51:72:02:f9:1d:79:4b:c4: df:eb:51:18:54:45:3c:5b:93:61:45:1a:26:7d:5a:8a:83:0e: 5c:09:38:ea:2b:74:85:c5:de:db:7e:d7:ad:5b:2b:df:a5:62: e1:4c:00:77:7e:4d:0b:8b:60:75:7c:d1:b4:bb:f1:9c:e4:6e: d8:18:b3:ea:66:51:f0:dd:a6:71:ea:57:33:3a:35:50:f0:22: ae:64:fe:f2:82:3d:a7:62:48:9d:17:c3:29:97:26:bb:4b:0b: dc:ae:6f:07:19:0c:ba:ff:0e:22:88:25:d0:a1:88:e6:7b:d7: 2e:6b:f4:90:8f:b3:5f:0d:17:fd:cb:ae:00:36:76:51:a7:5b: 57:b8:fe:fa:a8:5e:35:cf:6b:6c:2f:92:be:5a:e6:a7:35:94: ae:27:dd:e8:bd:19:18:af:50:1b:c6:da:fc:b1:01:68:22:99: 19:99:d6:8f:57:e8:29:d5:04:3e:62:fb:f8:0b:9f:1e:c6:f8: 47:df:23:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm230UbahScGF7RDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlYzA0YzItMmI2Yy00ZTlhLTgwNjItZTQyMGFjMWEy NTdhMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk NDIxYjA0YzEtMWVkNC00ZDJiLWJmYWMtOGUzMmIzYzk3NTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdEgStvpas/wYpNRfz07QdwS85z3bv+f5K3k ehIrFreXnD4hzkH/X+A7OxNg7ZRLwWPwYxcq095Co3ONWLU/TMiEwFTtwyoOuVk3 UUtO/lLpODBpycqh+KACSV7gr1VXI08ebi1Ha4+rIlj9OSOCrU7XuiRdJ156FRFG P2whR2w5ps1f07oWvp+3K7l87meFL8Og9KaJMr2NsePBWJ5KGOoKEC323FhsoY3s GE7MqKAWQkNkQEataj6JKEy7PPuvDd+2Y0G8jAs2ulh8oEiHAggOCHQRNJI9IRQP +QwTeD8TMk3rxXUnO3r0zBD+iEU3AWA84KTFxZj7y8opQgXo4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFDlTtcbUvq1K/KNg2qEuCQg3f+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZmVj MDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIwYWMxYTI1N2EvZDllODQwMmItZjBhZi0z ZGQxLTgwNmYtYWRhN2JhYTBmYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWZlYzA0YzItMmI2Yy00ZTlhLTgw NjItZTQyMGFjMWEyNTdhLzFmZWMwNGMyLTJiNmMtNGU5YS04MDYyLWU0MjBhYzFh MjU3YS5jcmwwHwYDVR0jBBgwFoAU2qb7zY3/ImjEHrqszoAkhr3N00QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZmVjMDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIw YWMxYTI1N2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfzMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGfEY2ZpfJvtt22JD83X+s/ZRB16V35ONUsd2zZSWjZM164QSqfkqU vFGgs9fy4wMAHvAPQlTMdGWfM8ezPdAvUXIC+R15S8Tf61EYVEU8W5NhRRomfVqK gw5cCTjqK3SFxd7bftetWyvfpWLhTAB3fk0Li2B1fNG0u/Gc5G7YGLPqZlHw3aZx 6lczOjVQ8CKuZP7ygj2nYkidF8Mplya7Swvcrm8HGQy6/w4iiCXQoYjme9cua/SQ j7NfDRf9y64ANnZRp1tXuP76qF41z2tsL5K+WuanNZSuJ93ovRkYr1Abxtr8sQFo IpkZmdaPV+gp1QQ+Yvv4C58exvhH3yMp -----END CERTIFICATE-----Generated at Sun May 4 12:29:58 2025 by rpki-client