$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/dafd8568-abcf-38c2-ab0a-122f4f104c0b.roa File: dafd8568-abcf-38c2-ab0a-122f4f104c0b.roa (raw, json) Hash identifier: 1DYJB3JC+30UMlwowExczpvgU9eN3ATofh7RBs2YOtM= Subject key identifier: B0:C4:00:4D:D4:1D:C6:22:A7:A8:A9:C0:DA:D8:82:B2:32:DF:F8:FA Certificate issuer: /CN=05791d14-11f0-4527-a43c-e6b2425f6d16 Certificate serial: 010D0C9F43285848C346AE7E7EA24B5840D6F6C0 Authority key identifier: 53:51:5E:AE:54:4C:F2:11:56:B1:64:C7:39:72:A6:76:CC:56:2E:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/dafd8568-abcf-38c2-ab0a-122f4f104c0b.roa Signing time: Mon 03 Feb 2025 18:51:56 +0000 ROA not before: Mon 03 Feb 2025 18:51:56 +0000 ROA not after: Sun 04 May 2025 17:51:56 +0000 asID: 32738 IP address blocks: 2604:4a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c3:46:ae:7e:7e:a2:4b:58:40:d6:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05791d14-11f0-4527-a43c-e6b2425f6d16 Validity Not Before: Feb 3 18:51:56 2025 GMT Not After : May 4 17:51:56 2025 GMT Subject: CN=b6ab7739-07e8-4ce4-b608-fe1148b4ad39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:33:50:5e:85:d0:07:9e:9a:8c:f7:07:41: 93:f3:6e:5c:62:11:1d:db:06:0d:54:07:74:af:bd: 0b:3c:7c:3e:88:8e:9f:a6:a8:00:db:02:29:90:eb: 88:df:68:fe:56:e7:d5:76:a6:9d:e6:95:cd:bf:e8: 05:16:fc:58:9f:1e:0d:f5:8c:2a:79:06:f6:bd:ef: aa:5a:64:4e:5b:b8:a2:e8:d8:e5:bc:8e:13:93:1c: f5:c3:fd:98:4b:c8:72:d0:06:f0:bf:dd:42:6a:db: ac:ae:a7:bb:d8:2e:16:e0:f2:6e:df:ec:28:e7:a8: b4:17:5f:2b:1d:06:17:89:dd:c1:54:55:d1:c0:d8: 4e:d5:f7:55:33:fc:6d:86:45:79:bc:4b:8c:dc:84: 76:4d:db:a5:a2:23:4c:ec:d1:e7:65:1e:ad:a3:04: a2:f8:10:87:3b:c0:52:a1:b0:08:9d:9f:55:2a:3b: 9b:24:5d:a6:72:6a:50:80:c0:4f:30:06:15:8b:f4: 09:08:52:d4:f1:54:c6:3a:69:4e:7a:94:d1:2c:36: 75:af:aa:79:47:0f:c2:89:60:30:3e:55:73:3e:3f: c2:8f:3b:6d:98:90:74:2e:11:c4:41:3d:e7:ec:09: 42:74:37:6d:36:29:19:c1:c2:68:5b:52:ae:6f:d7: 71:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C4:00:4D:D4:1D:C6:22:A7:A8:A9:C0:DA:D8:82:B2:32:DF:F8:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/dafd8568-abcf-38c2-ab0a-122f4f104c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.crl X509v3 Authority Key Identifier: keyid:53:51:5E:AE:54:4C:F2:11:56:B1:64:C7:39:72:A6:76:CC:56:2E:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c3:4c:0c:b0:bf:93:43:c8:7e:d0:c9:25:e3:3f:44:1c:02: 39:5a:24:c2:0b:f0:b9:29:4e:57:97:e2:77:c8:99:a1:76:36: 1a:73:76:9f:65:ad:c6:1f:80:10:d4:c5:04:50:7f:5d:f1:7c: a4:19:59:ca:f6:3a:78:c6:a5:6c:d9:14:75:6c:43:d8:2a:8e: 5d:87:1c:b9:46:59:bb:dd:ee:1c:04:95:73:db:59:fd:c5:1b: db:be:e5:56:fd:0b:9b:0e:4b:ff:af:91:bf:29:24:c1:33:0b: ce:a2:52:5b:4d:6f:f5:c6:62:15:9a:cb:93:bd:c6:48:31:71: 9a:8b:8e:95:ad:70:dc:30:69:d5:61:55:af:90:34:14:b0:5e: 39:dc:e0:15:89:20:97:30:3c:63:73:dd:a4:da:06:a1:50:5f: 53:79:41:08:25:61:26:27:d4:11:bc:b3:ba:e5:68:8a:32:18: c9:82:cf:11:db:83:a1:66:c6:bc:14:60:57:c6:a1:07:ab:e5: 5e:fe:f4:08:c5:5f:81:b7:fd:2d:0a:3b:87:68:f4:24:27:fa: 2d:cd:35:ad:d8:02:5e:b7:a8:71:4b:d3:7d:37:b7:09:57:89: 37:58:38:61:68:ea:0b:4c:fc:f5:6c:b5:98:57:92:40:09:d4: 8f:33:36:12 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjDRq5+fqJLWEDW9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU3OTFkMTQtMTFmMC00NTI3LWE0M2MtZTZiMjQyNWY2 ZDE2MB4XDTI1MDIwMzE4NTE1NloXDTI1MDUwNDE3NTE1NlowLzEtMCsGA1UEAxMk YjZhYjc3MzktMDdlOC00Y2U0LWI2MDgtZmUxMTQ4YjRhZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwskzUF6F0Aeemoz3B0GT825cYhEd2wYNVAd0 r70LPHw+iI6fpqgA2wIpkOuI32j+VufVdqad5pXNv+gFFvxYnx4N9YwqeQb2ve+q WmROW7ii6NjlvI4Tkxz1w/2YS8hy0Abwv91Catusrqe72C4W4PJu3+wo56i0F18r HQYXid3BVFXRwNhO1fdVM/xthkV5vEuM3IR2TduloiNM7NHnZR6towSi+BCHO8BS obAInZ9VKjubJF2mcmpQgMBPMAYVi/QJCFLU8VTGOmlOepTRLDZ1r6p5Rw/CiWAw PlVzPj/CjzttmJB0LhHEQT3n7AlCdDdtNikZwcJoW1Kub9dxZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLDEAE3UHcYip6ipwNrYgrIy3/j6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNTc5 MWQxNC0xMWYwLTQ1MjctYTQzYy1lNmIyNDI1ZjZkMTYvZGFmZDg1NjgtYWJjZi0z OGMyLWFiMGEtMTIyZjRmMTA0YzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDU3OTFkMTQtMTFmMC00NTI3LWE0 M2MtZTZiMjQyNWY2ZDE2LzA1NzkxZDE0LTExZjAtNDUyNy1hNDNjLWU2YjI0MjVm NmQxNi5jcmwwHwYDVR0jBBgwFoAUU1FerlRM8hFWsWTHOXKmdsxWLvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNTc5MWQxNC0xMWYwLTQ1MjctYTQzYy1lNmIy NDI1ZjZkMTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRKQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWw0wMsL+TQ8h+0Mkl4z9EHAI5WiTCC/C5KU5Xl+J3yJmhdjYac3af Za3GH4AQ1MUEUH9d8XykGVnK9jp4xqVs2RR1bEPYKo5dhxy5Rlm73e4cBJVz21n9 xRvbvuVW/QubDkv/r5G/KSTBMwvOolJbTW/1xmIVmsuTvcZIMXGai46VrXDcMGnV YVWvkDQUsF453OAViSCXMDxjc92k2gahUF9TeUEIJWEmJ9QRvLO65WiKMhjJgs8R 24OhZsa8FGBXxqEHq+Ve/vQIxV+Bt/0tCjuHaPQkJ/otzTWt2AJet6hxS9N9N7cJ V4k3WDhhaOoLTPz1bLWYV5JACdSPMzYS -----END CERTIFICATE-----Generated at Sun Apr 6 07:15:18 2025 by rpki-client