$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/fef891a5-b993-3e38-8e28-d12d12385a6a.roa File: fef891a5-b993-3e38-8e28-d12d12385a6a.roa (raw, json) Hash identifier: 8C7IdVJv3XAAPJYwUPrRc4FeomgILkjRQ0n0oCRmJWY= Subject key identifier: 59:38:5D:CA:7E:40:D0:73:8A:BB:22:E8:9C:1E:1F:4B:7D:A0:D8:BF Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F43285849350EAB4BC4195FF71C193A00 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/fef891a5-b993-3e38-8e28-d12d12385a6a.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2606:7bc0:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:ab:4b:c4:19:5f:f7:1c:19:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=9b0a6525-d9f2-4af7-84e1-ab020b492f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:c6:c1:f1:eb:58:1f:47:e2:9d:20:1f:7d: 0f:a4:5b:fa:79:6a:9c:3b:39:cf:ec:1d:c6:b5:e1: 58:f5:39:6f:77:63:3b:ff:2c:88:ea:92:8c:9b:cf: 3e:b8:35:4c:38:e6:80:50:44:f7:0a:19:00:10:b0: f7:bb:41:50:3d:18:09:7d:9b:df:46:5a:76:59:5b: 7d:24:8e:51:b5:82:6a:87:c0:f1:0b:2d:32:96:75: ee:95:6f:05:f3:08:93:6a:db:27:a2:52:9b:7c:56: a5:64:e0:80:84:99:31:21:b5:86:a3:73:9f:bc:84: 7b:cd:42:65:c1:87:9a:fc:ab:da:17:28:c5:33:dd: 3b:e8:06:b9:1e:09:0e:c8:0b:94:4d:9a:84:de:95: 24:ed:04:97:88:1d:34:40:3c:ec:29:9f:6d:91:35: a5:f5:bf:28:8e:77:d6:2f:ee:79:e9:4a:aa:7b:2e: 36:c8:9e:7a:36:6e:ae:7d:92:1b:73:9f:af:38:f6: 2c:bd:15:ef:35:f7:99:55:5a:50:b0:82:a2:ba:74: e6:ee:59:ad:a7:d7:6e:78:fe:72:ce:2d:6d:c0:7b: f8:d9:f3:9f:e3:6b:1e:97:ac:dd:de:f2:3f:8b:f1: 2e:43:9d:f7:56:e8:f8:91:f7:f4:e2:59:ff:96:82: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:38:5D:CA:7E:40:D0:73:8A:BB:22:E8:9C:1E:1F:4B:7D:A0:D8:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/fef891a5-b993-3e38-8e28-d12d12385a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1080::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:dc:80:a4:bf:df:e6:05:e9:0c:35:03:d1:07:07:6d:1b:d6: 54:32:fa:44:ed:28:54:49:c6:14:33:8e:91:29:37:1c:a8:47: cd:39:f0:91:43:10:cb:86:3b:42:f6:53:15:62:33:fb:0b:2f: ea:4a:df:c8:ee:e5:ab:8a:9e:98:8a:60:91:c3:84:42:2a:ae: 56:88:a8:e4:84:3b:46:09:2a:64:eb:a1:ba:a0:ae:4e:c4:a4: 1b:7e:37:dd:08:ab:e2:9f:c3:14:53:db:3d:93:f2:a9:17:b7: 57:4b:78:0f:0f:79:39:e2:5f:6d:10:13:fc:bb:19:bf:3b:d6: 16:05:61:8a:99:c3:a1:ce:9b:02:bf:0f:e4:ce:a7:5c:01:e0: ed:f5:d8:01:b0:e9:6e:31:b8:ad:9d:9e:f7:4f:56:82:1f:90: f9:1b:1c:9b:54:c6:37:94:45:51:ef:d8:2c:53:4d:5a:86:07: 17:67:68:3d:cf:09:ff:2a:9d:c8:02:ad:67:cf:52:c0:6a:55: dc:3f:05:d3:42:37:cc:11:e7:f8:16:3f:a4:ec:9f:ab:d5:6f: ae:b0:05:8e:62:73:67:73:00:96:7b:09:60:2d:c2:84:d6:94: b9:69:d2:cf:90:aa:73:7e:11:54:38:2d:76:f4:9e:b1:12:7c: fb:ff:76:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1DqtLxBlf9xwZOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk OWIwYTY1MjUtZDlmMi00YWY3LTg0ZTEtYWIwMjBiNDkyZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtljGwfHrWB9H4p0gH30PpFv6eWqcOznP7B3G teFY9Tlvd2M7/yyI6pKMm88+uDVMOOaAUET3ChkAELD3u0FQPRgJfZvfRlp2WVt9 JI5RtYJqh8DxCy0ylnXulW8F8wiTatsnolKbfFalZOCAhJkxIbWGo3OfvIR7zUJl wYea/KvaFyjFM9076Aa5HgkOyAuUTZqE3pUk7QSXiB00QDzsKZ9tkTWl9b8ojnfW L+556Uqqey42yJ56Nm6ufZIbc5+vOPYsvRXvNfeZVVpQsIKiunTm7lmtp9dueP5y zi1twHv42fOf42sel6zd3vI/i/EuQ533Vuj4kff04ln/loJJywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFk4Xcp+QNBzirsi6JweH0t9oNi/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZmVmODkxYTUtYjk5My0z ZTM4LThlMjgtZDEyZDEyMzg1YTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADfcgKS/3+YF6Qw1A9EHB20b1lQy+kTtKFRJxhQzjpEpNxyoR805 8JFDEMuGO0L2UxViM/sLL+pK38ju5auKnpiKYJHDhEIqrlaIqOSEO0YJKmTrobqg rk7EpBt+N90Iq+KfwxRT2z2T8qkXt1dLeA8PeTniX20QE/y7Gb871hYFYYqZw6HO mwK/D+TOp1wB4O312AGw6W4xuK2dnvdPVoIfkPkbHJtUxjeURVHv2CxTTVqGBxdn aD3PCf8qncgCrWfPUsBqVdw/BdNCN8wR5/gWP6Tsn6vVb66wBY5ic2dzAJZ7CWAt woTWlLlp0s+QqnN+EVQ4LXb0nrESfPv/dis= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:08 2025 by rpki-client