$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/72c6a5fc-5997-3514-aaa9-9d610df32949.roa File: 72c6a5fc-5997-3514-aaa9-9d610df32949.roa (raw, json) Hash identifier: vkb48BghiDl0ewqnQqTYYodDsSEy8PNSVEpYJKM9/Y4= Subject key identifier: 03:46:4A:C0:DA:F3:11:24:CA:E0:0D:86:B7:B8:23:83:1F:31:4B:96 Certificate issuer: /CN=c9d5fed8-9c87-4745-b68b-390b14873b57 Certificate serial: 010D0C9F4328584921840D5B20311769AEBBD880 Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/72c6a5fc-5997-3514-aaa9-9d610df32949.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2607:28c0:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:0d:5b:20:31:17:69:ae:bb:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=75ffdab2-95b3-4f93-b735-dd984381e4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:26:35:39:32:7d:11:66:f1:6e:92:f5:9d:a7: be:2c:6d:50:2c:78:cf:13:2a:04:0c:66:7c:98:c2: 75:aa:3d:2c:cb:0e:f2:0d:ec:70:2a:2d:71:82:e2: de:36:b9:f5:85:a8:f0:1c:c8:b8:73:1f:65:21:35: e4:e0:b4:e3:8b:22:ab:68:9e:91:f9:d9:34:7d:a8: bd:d7:59:c1:43:90:ba:bc:69:04:96:72:ab:8a:a2: 87:3d:4f:27:d2:ef:9f:ff:71:1d:55:6a:bf:65:c8: 59:ba:34:0f:4e:b4:39:35:47:aa:52:c0:03:4a:cc: ad:1b:c9:6d:22:aa:87:d9:14:5b:c6:f9:18:55:da: a9:23:d9:29:4b:3a:1c:a2:b0:0d:a8:f7:f0:3c:63: c2:7e:96:dd:bb:47:5f:55:77:21:05:d3:cb:c8:16: 7e:13:5e:fe:57:2a:c9:53:6e:53:b7:8b:cf:bd:a0: 56:be:63:15:c4:04:0f:e7:ce:11:54:f6:1d:97:bd: cf:ee:6d:fb:ce:20:b6:d6:ec:13:02:09:e0:12:38: 9d:44:02:da:05:a1:72:f3:de:40:01:c6:7a:26:5c: 1f:74:ef:4b:7f:4f:e3:27:2c:11:da:6f:b3:5e:08: bc:f0:a6:77:fe:78:fd:9b:b8:a0:10:2e:f3:f6:02: 07:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:46:4A:C0:DA:F3:11:24:CA:E0:0D:86:B7:B8:23:83:1F:31:4B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/72c6a5fc-5997-3514-aaa9-9d610df32949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl X509v3 Authority Key Identifier: keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer sbgp-ipAddrBlock: critical IPv6: 2607:28c0:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:95:e4:35:ec:dc:56:ba:d3:96:27:63:93:19:0b:3a:5b:d8: 8b:52:29:ed:07:ee:40:dd:d4:65:19:52:4a:e8:42:25:2b:1a: c6:b2:d5:7a:be:53:f0:9f:86:af:4a:91:f3:6b:fd:0c:d5:f4: e7:04:65:7d:67:87:29:d7:cb:cb:21:a7:f4:f8:4a:e7:ae:b3: 51:6e:f4:18:3c:ca:87:3c:d1:5d:47:2d:4a:9d:2e:89:86:81: 6f:7f:5b:ae:c0:65:f0:80:01:3e:14:d4:ef:1d:0d:14:ce:74: 29:a2:5c:40:e5:6f:1b:cf:80:f0:f6:8a:40:f3:0e:08:8d:0e: 41:ea:7b:3d:ed:af:09:29:06:f5:84:c5:81:cb:42:8f:74:fa: b6:1b:97:a5:b4:10:a8:5a:31:ff:c4:25:2d:83:30:83:07:f1: 2c:f8:30:42:e1:07:42:bb:2a:88:4b:ca:aa:b7:e2:45:92:9a: bb:24:9b:58:53:d5:3f:77:56:a1:8a:ab:79:a9:1c:29:06:fb: 42:04:87:cf:e0:2e:9c:b1:d1:73:38:e2:e0:15:39:5a:be:12: 2d:2c:77:30:1f:b1:fa:16:77:01:37:9e:6c:8a:03:9d:d3:a1: 5d:80:f6:f7:04:d4:53:80:a3:1c:cb:8f:ae:90:eb:81:5b:93: 84:0c:e4:c4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkhhA1bIDEXaa672IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz YjU3MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NzVmZmRhYjItOTViMy00ZjkzLWI3MzUtZGQ5ODQzODFlNGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriY1OTJ9EWbxbpL1nae+LG1QLHjPEyoEDGZ8 mMJ1qj0syw7yDexwKi1xguLeNrn1hajwHMi4cx9lITXk4LTjiyKraJ6R+dk0fai9 11nBQ5C6vGkElnKriqKHPU8n0u+f/3EdVWq/ZchZujQPTrQ5NUeqUsADSsytG8lt IqqH2RRbxvkYVdqpI9kpSzocorANqPfwPGPCfpbdu0dfVXchBdPLyBZ+E17+VyrJ U25Tt4vPvaBWvmMVxAQP584RVPYdl73P7m37ziC21uwTAgngEjidRALaBaFy895A AcZ6JlwfdO9Lf0/jJywR2m+zXgi88KZ3/nj9m7igEC7z9gIHCwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFANGSsDa8xEkyuANhre4I4MfMUuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1 ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvNzJjNmE1ZmMtNTk5Ny0z NTE0LWFhYTktOWQ2MTBkZjMyOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2 OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3 M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi MTQ4NzNiNTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgcowAIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHJXkNezcVrrTlidjkxkLOlvYi1Ip7QfuQN3UZRlSSuhCJSsaxrLV er5T8J+Gr0qR82v9DNX05wRlfWeHKdfLyyGn9PhK566zUW70GDzKhzzRXUctSp0u iYaBb39brsBl8IABPhTU7x0NFM50KaJcQOVvG8+A8PaKQPMOCI0OQep7Pe2vCSkG 9YTFgctCj3T6thuXpbQQqFox/8QlLYMwgwfxLPgwQuEHQrsqiEvKqrfiRZKauySb WFPVP3dWoYqreakcKQb7QgSHz+AunLHRczji4BU5Wr4SLSx3MB+x+hZ3ATeebIoD ndOhXYD29wTUU4CjHMuPrpDrgVuThAzkxA== -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:22 2025 by rpki-client