$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa File: de9871b6-c06a-3910-8be5-7c2c3df1b317.roa (raw, json) Hash identifier: ladYDRLbpiTTQBfdayz8vFWO7I2PNaw79BSPlyeIevc= Subject key identifier: 58:31:41:96:39:E2:F5:22:A5:AD:FF:0D:47:B2:B2:8C:08:9B:1E:3D Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F43285848DBD66FAAB1530E24C68D8A80 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 2607:340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:6f:aa:b1:53:0e:24:c6:8d:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=3fad0736-c5fa-4f72-9a7b-930cac25dbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:74:44:80:67:2b:00:1c:be:af:b7:c5:8c:44: c8:9f:f3:be:1a:8f:f6:ad:7c:ac:09:5b:8b:45:a1: db:59:08:d9:72:8a:17:e5:2d:6e:e0:72:40:81:3d: f5:07:25:84:5b:78:76:24:4c:46:03:81:3d:e9:4f: 5a:31:48:92:fa:54:5d:98:52:52:69:6b:87:98:03: e3:6e:5b:f3:51:62:b8:be:4e:36:d5:4a:7b:b5:52: b1:61:c5:70:25:ac:78:81:41:d0:19:ff:43:3a:78: 9b:10:c8:ce:e8:76:e5:d9:bf:a5:ff:76:40:d3:06: fc:5b:2d:79:2a:7d:4b:93:fb:ae:de:9e:3f:e0:68: 88:8c:2e:15:ec:1d:25:c7:f3:f8:c5:95:44:8f:0a: 55:06:ad:3f:9a:aa:22:ba:64:08:c6:9b:92:c2:21: c7:7d:16:8c:a3:42:ce:7f:2b:65:0b:6a:3d:f5:8e: ed:d9:42:2d:5c:2b:b4:09:20:38:85:f0:65:9e:58: 05:5e:e1:2e:dc:45:88:06:df:2f:17:46:2d:07:14: 8c:e3:c3:6a:20:e8:ce:60:20:86:77:e3:1c:5a:1a: 40:97:d8:bc:08:42:c7:bc:c3:e6:c0:70:25:37:ce: 30:d1:a4:cc:fd:e0:27:81:f5:3f:b9:b6:f4:2a:4d: 8c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:31:41:96:39:E2:F5:22:A5:AD:FF:0D:47:B2:B2:8C:08:9B:1E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv6: 2607:340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:c5:eb:56:e8:af:d6:cb:ee:e0:3d:6a:93:cf:b8:e2:e1:4a: 8d:4a:e1:cc:d4:30:20:3a:81:ee:e3:03:50:32:60:5c:83:5c: b3:0b:fd:76:5f:68:80:94:04:ef:18:33:33:66:fa:2c:e3:0b: b1:c2:02:3a:9b:09:f7:e8:69:fe:f4:36:ca:36:95:cb:0b:87: 83:98:6c:ea:70:bf:52:3b:1e:fe:da:14:9c:bb:fd:c4:fe:33: 3a:68:9d:aa:c1:82:a5:f7:6c:6c:98:26:78:06:21:56:cd:56: db:e2:e2:2a:82:36:89:c7:d4:02:74:4d:a3:24:e1:9b:b4:cc: 6a:ea:54:62:c0:64:8e:c4:1d:3a:a1:b5:d4:53:2e:0a:b7:5d: fe:56:b7:d5:c3:0f:ba:cc:b9:fb:e2:2d:88:a1:ab:a7:e9:d3: a6:f4:40:84:f3:c9:4a:f9:5c:db:38:8c:4e:5c:f8:c5:95:7b: 27:b4:c6:e7:db:80:96:b0:8a:a3:0f:f4:2f:dd:ec:70:7e:7a: 28:ed:e0:f4:33:ee:11:42:e3:3a:dc:73:bf:e4:53:b8:f8:2d: 87:88:61:0b:14:3e:b6:fa:82:5a:a2:f4:b1:5b:ef:65:e1:b3: 31:2b:2a:9d:69:10:22:88:04:90:bf:47:74:09:5d:ed:4c:40: 21:2a:a8:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjb1m+qsVMOJMaNioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk M2ZhZDA3MzYtYzVmYS00ZjcyLTlhN2ItOTMwY2FjMjVkYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknREgGcrABy+r7fFjETIn/O+Go/2rXysCVuL RaHbWQjZcooX5S1u4HJAgT31ByWEW3h2JExGA4E96U9aMUiS+lRdmFJSaWuHmAPj blvzUWK4vk421Up7tVKxYcVwJax4gUHQGf9DOnibEMjO6Hbl2b+l/3ZA0wb8Wy15 Kn1Lk/uu3p4/4GiIjC4V7B0lx/P4xZVEjwpVBq0/mqoiumQIxpuSwiHHfRaMo0LO fytlC2o99Y7t2UItXCu0CSA4hfBlnlgFXuEu3EWIBt8vF0YtBxSM48NqIOjOYCCG d+McWhpAl9i8CELHvMPmwHAlN84w0aTM/eAngfU/ubb0Kk2MCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFgxQZY54vUipa3/DUeysowImx49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvZGU5ODcxYjYtYzA2YS0z OTEwLThiZTUtN2MyYzNkZjFiMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcDQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6xetW6K/Wy+7gPWqTz7ji4UqNSuHM1DAgOoHu4wNQMmBcg1yzC/12 X2iAlATvGDMzZvos4wuxwgI6mwn36Gn+9DbKNpXLC4eDmGzqcL9SOx7+2hScu/3E /jM6aJ2qwYKl92xsmCZ4BiFWzVbb4uIqgjaJx9QCdE2jJOGbtMxq6lRiwGSOxB06 obXUUy4Kt13+VrfVww+6zLn74i2Ioaun6dOm9ECE88lK+VzbOIxOXPjFlXsntMbn 24CWsIqjD/Qv3exwfnoo7eD0M+4RQuM63HO/5FO4+C2HiGELFD62+oJaovSxW+9l 4bMxKyqdaRAiiASQv0d0CV3tTEAhKqjs -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:02 2025 by rpki-client