$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa File: f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa (raw, json) Hash identifier: Qdj5iOQ1zEPSYLVsbbQHgiwbLIGePF5ma7I5X3QFekk= Subject key identifier: 7D:0A:CE:AF:7D:5D:00:71:8A:30:BE:C7:F4:B6:E4:18:59:36:17:DA Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F43285848E20916B0EB40781F8A9CA3B0 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa Signing time: Fri 14 Feb 2025 19:17:53 +0000 ROA not before: Fri 14 Feb 2025 19:17:53 +0000 ROA not after: Thu 15 May 2025 18:17:53 +0000 asID: 398395 IP address blocks: 2606:fc40:40::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:09:16:b0:eb:40:78:1f:8a:9c:a3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Feb 14 19:17:53 2025 GMT Not After : May 15 18:17:53 2025 GMT Subject: CN=f4b05c72-0949-4407-860a-9e7b9cf2f2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1d:e4:52:9d:8b:62:ea:39:98:37:31:92:7f: c8:61:79:2d:19:57:b9:6e:dd:1a:76:04:6f:91:ff: 51:b4:cb:10:3a:c2:8c:e5:09:51:78:53:92:d0:22: 11:65:4d:9c:09:e4:a9:a6:bc:49:6e:c5:d1:93:1f: 07:f5:dc:84:d9:d7:38:b2:3d:1d:1f:ba:f9:f4:dc: 4b:a3:bc:64:c6:bf:18:1f:a5:27:68:5c:61:f1:4d: 08:a3:c6:5b:f0:93:e3:26:ea:d1:90:a9:62:2e:72: e1:39:64:80:86:d0:66:d0:d9:f0:d4:68:46:73:e9: ad:ad:17:dd:46:cc:2e:71:ae:69:a2:5a:a7:44:da: a8:dc:1f:01:6e:28:1e:7a:b4:b1:8d:06:93:cd:31: 88:7c:8d:97:0f:c5:b5:92:bb:5e:88:64:9c:38:51: 92:03:d7:fc:ca:ba:9c:b1:b2:63:3d:d6:af:10:d3: ed:10:42:d3:84:ce:27:c1:2f:62:41:12:be:e0:48: 29:37:63:8e:9e:b0:3c:94:ad:00:c9:42:40:d9:58: ea:79:cd:9a:18:25:23:47:ec:37:86:aa:25:c4:6d: 2d:08:da:a4:e6:7a:d9:71:a8:e0:20:b9:3a:0d:d3: 47:e1:24:22:53:64:96:62:38:18:5a:a9:59:64:0b: 33:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0A:CE:AF:7D:5D:00:71:8A:30:BE:C7:F4:B6:E4:18:59:36:17:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv6: 2606:fc40:40::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d1:1e:da:71:83:f4:48:89:f5:22:0d:e8:87:16:8c:e8:9d: f6:68:ac:ad:6f:cd:80:66:f2:15:c3:b0:a6:74:11:01:96:3e: b6:49:4a:27:d2:cb:4a:47:e9:a6:bd:ca:25:b2:cd:25:7d:ef: bc:59:78:23:6d:31:8d:db:36:98:7b:9d:44:bc:1a:72:d3:a2: c1:02:79:b6:05:f6:14:00:88:ba:65:5b:3c:c0:f4:bc:e2:48: df:55:ad:48:18:6f:3b:d0:69:7d:7f:ed:43:71:57:b7:79:8c: 9b:d6:0e:a1:f9:48:d7:0f:15:c9:51:d9:89:83:90:b8:8a:72: 0d:39:bc:ff:6c:94:45:4a:78:97:42:43:1c:5d:49:38:f6:f3: fa:91:19:7e:2f:b6:a7:75:2a:cc:8a:6e:b1:fc:7c:d0:1e:93: 0b:47:e4:1b:99:5f:db:e1:db:75:1a:20:f6:24:db:a9:7a:a6: 15:38:21:54:7d:67:33:d6:a8:9d:4c:72:0f:4a:32:d4:00:49: 42:fa:1d:02:12:a5:9d:89:55:bb:6f:a2:ec:fd:95:fb:82:59: b4:e3:fa:45:21:f7:50:53:42:1b:97:ae:28:83:b2:93:5f:bd: f7:ad:63:9a:2d:22:3b:39:3e:91:84:1b:d1:68:87:0d:0c:69: 67:d1:9f:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjiCRaw60B4H4qco7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDIxNDE5MTc1M1oXDTI1MDUxNTE4MTc1M1owLzEtMCsGA1UEAxMk ZjRiMDVjNzItMDk0OS00NDA3LTg2MGEtOWU3YjljZjJmMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B3kUp2LYuo5mDcxkn/IYXktGVe5bt0adgRv kf9RtMsQOsKM5QlReFOS0CIRZU2cCeSpprxJbsXRkx8H9dyE2dc4sj0dH7r59NxL o7xkxr8YH6UnaFxh8U0Io8Zb8JPjJurRkKliLnLhOWSAhtBm0Nnw1GhGc+mtrRfd Rswuca5polqnRNqo3B8BbigeerSxjQaTzTGIfI2XD8W1krteiGScOFGSA9f8yrqc sbJjPdavENPtEELThM4nwS9iQRK+4EgpN2OOnrA8lK0AyUJA2Vjqec2aGCUjR+w3 hqolxG0tCNqk5nrZcajgILk6DdNH4SQiU2SWYjgYWqlZZAszzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH0Kzq99XQBxijC+x/S25BhZNhfaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvZjg1ZTVhYmMtM2Q2MC0z NmM1LTg2M2UtYjdmZWYxNGRlMmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgb8QABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ/RHtpxg/RIifUiDeiHFozonfZorK1vzYBm8hXDsKZ0EQGWPrZJ SifSy0pH6aa9yiWyzSV977xZeCNtMY3bNph7nUS8GnLTosECebYF9hQAiLplWzzA 9LziSN9VrUgYbzvQaX1/7UNxV7d5jJvWDqH5SNcPFclR2YmDkLiKcg05vP9slEVK eJdCQxxdSTj28/qRGX4vtqd1KsyKbrH8fNAekwtH5BuZX9vh23UaIPYk26l6phU4 IVR9ZzPWqJ1Mcg9KMtQASUL6HQISpZ2JVbtvouz9lfuCWbTj+kUh91BTQhuXriiD spNfvfetY5otIjs5PpGEG9Fohw0MaWfRn84= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:29 2025 by rpki-client