$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/a6ff856c-46ae-36b6-987f-46ef805f5376.roa File: a6ff856c-46ae-36b6-987f-46ef805f5376.roa (raw, json) Hash identifier: vVatVfwF/N7iMiuus4y9F63V4ZlGIFuQWa6+n3Ui/2M= Subject key identifier: DC:BD:D6:74:1F:EF:AB:F0:34:68:9B:EA:05:5B:E2:C7:58:8D:C3:53 Certificate issuer: /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Certificate serial: 010D0C9F432858493269BAAD8E31FA25486D8000 Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/a6ff856c-46ae-36b6-987f-46ef805f5376.roa Signing time: Sat 15 Mar 2025 14:17:16 +0000 ROA not before: Sat 15 Mar 2025 14:17:16 +0000 ROA not after: Fri 13 Jun 2025 14:17:16 +0000 asID: 22351 IP address blocks: 2607:f668::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:69:ba:ad:8e:31:fa:25:48:6d:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Validity Not Before: Mar 15 14:17:16 2025 GMT Not After : Jun 13 14:17:16 2025 GMT Subject: CN=6bea7367-8804-4336-a49e-a4a8a4484cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:67:62:7c:80:98:3b:0f:64:67:71:a1:d0: b0:a3:32:b2:88:5c:99:0e:eb:30:0f:51:cc:71:03: 4f:fb:4b:9f:a7:22:5d:41:20:4f:f9:a2:5e:e5:8b: 62:ce:cc:d3:49:36:3a:c9:f4:99:04:8d:87:18:08: c7:f2:8d:22:3d:8f:dc:b2:22:18:83:f1:9b:11:ec: 52:41:4d:53:7e:1d:fc:df:6c:55:a7:41:05:75:31: 05:ef:6f:1e:e5:02:fe:42:e9:5f:65:fd:2c:ee:51: 43:8a:d4:32:18:a8:02:36:dc:ff:9f:7c:25:22:e7: 6e:17:b7:22:06:21:e4:3a:a2:56:85:49:1a:69:a2: ea:dd:1a:69:50:48:a7:49:61:f1:ba:52:cf:6e:7d: 5c:0d:85:fe:54:3f:e0:7b:ee:db:41:40:5d:df:f6: 3a:79:30:72:32:8e:f8:9f:a2:35:2c:ac:ea:cc:af: c0:8f:1b:0e:5c:ce:0a:0f:73:3b:33:19:d2:13:e1: b3:b6:11:7c:a5:45:a0:3b:23:d1:f4:8c:46:5d:60: 5f:5a:6b:90:ca:e6:57:4e:82:58:ff:ef:6a:2d:fb: 4f:3d:59:c0:56:7b:de:d4:c6:59:00:e6:cf:01:7b: a3:80:8f:33:67:1a:f0:e3:4c:e8:ac:25:47:4f:78: 15:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BD:D6:74:1F:EF:AB:F0:34:68:9B:EA:05:5B:E2:C7:58:8D:C3:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/a6ff856c-46ae-36b6-987f-46ef805f5376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl X509v3 Authority Key Identifier: keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer sbgp-ipAddrBlock: critical IPv6: 2607:f668::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:4e:c5:e4:c7:41:c5:b1:d8:a5:df:be:55:2a:bb:c9:fd:42: 0a:47:ba:3b:8a:ee:21:d2:a1:89:6e:8c:fc:ca:b7:97:99:7b: 46:17:d5:be:49:05:ca:75:fd:09:30:98:d7:58:03:8f:d5:d7: 91:b1:50:f0:96:e8:68:84:72:df:b7:16:72:17:75:3e:65:e7: ac:cf:b2:2e:dd:4d:3d:5d:c8:27:24:5b:b1:a2:29:ea:df:bb: 7f:d5:98:4d:ef:77:71:b5:c1:8b:6b:d0:20:ac:a9:3e:83:15: 4f:19:22:3b:4c:8c:fc:69:cc:cf:ff:b7:53:ee:de:56:17:82: cd:62:77:5a:c2:b1:af:0d:45:2a:ff:a0:c4:d1:a1:d8:e2:5d: 7f:c8:26:c4:cb:3d:93:db:ad:c8:af:a7:4f:4a:02:26:f4:8e: 3c:8a:00:e9:f2:78:b6:29:88:12:3a:aa:77:1f:90:ca:2c:ee: 5d:8f:3d:f4:38:5c:fb:c1:da:1e:6c:e9:74:9b:27:b9:2e:d9: 8e:7d:cf:ba:72:6a:b7:ce:49:dc:b8:a5:7d:ac:a0:04:b7:e7: 55:f1:bc:38:0d:86:37:7e:ca:23:dd:26:10:ed:28:6a:cf:6f: b6:31:43:bd:85:f5:f1:4e:22:73:ff:b3:6e:d1:86:df:e4:67: bd:29:75:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkyabqtjjH6JUhtgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm YTUzMB4XDTI1MDMxNTE0MTcxNloXDTI1MDYxMzE0MTcxNlowLzEtMCsGA1UEAxMk NmJlYTczNjctODgwNC00MzM2LWE0OWUtYTRhOGE0NDg0Y2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxFnYnyAmDsPZGdxodCwozKyiFyZDuswD1HM cQNP+0ufpyJdQSBP+aJe5YtizszTSTY6yfSZBI2HGAjH8o0iPY/csiIYg/GbEexS QU1Tfh3832xVp0EFdTEF728e5QL+QulfZf0s7lFDitQyGKgCNtz/n3wlIuduF7ci BiHkOqJWhUkaaaLq3RppUEinSWHxulLPbn1cDYX+VD/ge+7bQUBd3/Y6eTByMo74 n6I1LKzqzK/AjxsOXM4KD3M7MxnSE+GzthF8pUWgOyPR9IxGXWBfWmuQyuZXToJY /+9qLftPPVnAVnve1MZZAObPAXujgI8zZxrw40zorCVHT3gVsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNy91nQf76vwNGib6gVb4sdYjcNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0 YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvYTZmZjg1NmMtNDZhZS0z NmI2LTk4N2YtNDZlZjgwNWY1Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3 NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5 ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm Y2QyOWZhNTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf2aDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCnTsXkx0HFsdil375VKrvJ/UIKR7o7iu4h0qGJboz8yreXmXtGF9W+ SQXKdf0JMJjXWAOP1deRsVDwluhohHLftxZyF3U+Zeesz7Iu3U09XcgnJFuxoinq 37t/1ZhN73dxtcGLa9AgrKk+gxVPGSI7TIz8aczP/7dT7t5WF4LNYndawrGvDUUq /6DE0aHY4l1/yCbEyz2T263Ir6dPSgIm9I48igDp8ni2KYgSOqp3H5DKLO5djz30 OFz7wdoebOl0mye5LtmOfc+6cmq3zkncuKV9rKAEt+dV8bw4DYY3fsoj3SYQ7Shq z2+2MUO9hfXxTiJz/7Nu0Ybf5Ge9KXXG -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:58 2025 by rpki-client