$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/499b886a-a5d1-3f37-a9f3-1f6f164d192e.roa File: 499b886a-a5d1-3f37-a9f3-1f6f164d192e.roa (raw, json) Hash identifier: iUJYynsBMHSRGfg/7wnkXuMH91ulhpDxItp9f7SUJzU= Subject key identifier: EF:FD:65:5C:64:59:7F:36:8C:AE:45:5C:90:2E:64:17:A3:6F:F7:E9 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F432858497974387D1C22CB3DDA2E57C0 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/499b886a-a5d1-3f37-a9f3-1f6f164d192e.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 400097 IP address blocks: 2606:3d40:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:38:7d:1c:22:cb:3d:da:2e:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=aa625203-50c2-4a8c-8e64-6dc34a267f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:6a:dd:8e:f7:78:a9:ed:22:9d:ac:c3:40: 40:56:e7:5e:c4:8e:a0:e8:31:e1:84:df:7c:9c:40: 94:44:e9:98:e3:14:db:2b:49:f6:c0:c4:a2:41:d1: 8c:6b:3a:81:00:16:7f:4f:03:ea:2f:76:36:17:16: 50:6f:71:1b:bc:8e:de:a6:2d:a0:99:b9:69:f1:d6: 57:1e:7b:11:7c:e2:24:70:96:cc:2c:c9:fa:48:7d: c2:07:44:77:7f:c8:c7:24:cb:60:88:a8:e5:d9:b7: f9:71:ce:d3:15:83:c0:c6:35:44:6d:01:e3:03:38: 39:c0:9f:73:f9:ce:e2:e0:71:5b:34:0c:e5:bf:71: 24:f8:cb:98:c2:ac:b7:4b:ba:b5:a8:80:a1:10:21: 27:cb:17:b8:2a:1d:46:53:43:24:4d:ff:61:46:4d: e5:c3:bf:eb:ff:11:90:8c:2d:7e:1b:6c:e7:5c:3e: 06:00:2a:43:02:5d:17:3b:90:18:4d:1d:5d:29:28: 12:2a:39:1a:39:84:9f:4e:2b:c3:ba:8a:51:dd:a2: 19:6d:81:43:96:31:7a:28:34:da:13:ef:31:c4:fc: 75:b4:1b:59:63:44:80:88:18:e5:0b:37:f9:17:7b: 34:37:86:d5:7c:b1:23:74:5d:8c:9c:d9:2e:67:ea: c8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FD:65:5C:64:59:7F:36:8C:AE:45:5C:90:2E:64:17:A3:6F:F7:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/499b886a-a5d1-3f37-a9f3-1f6f164d192e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:f5:e7:9a:60:6d:4c:8c:1b:c3:77:aa:81:04:ed:93:1f:b2: ae:0c:0a:22:f6:54:6d:06:d5:00:ad:bb:5a:d6:57:a4:91:ed: df:4c:13:5e:a6:23:55:ad:08:08:24:5d:27:2c:1a:d4:a7:b0: 16:15:40:b8:3a:da:8c:e5:52:2d:2d:44:c0:4f:a3:dc:1f:11: 83:75:02:de:f3:a5:02:4f:ff:1b:80:60:f4:52:7b:15:8f:5c: 8a:b1:30:cd:3b:ac:80:f4:ea:17:a3:77:f9:af:c1:88:3b:62: 95:aa:26:5f:b5:d3:c5:bb:87:fb:18:f0:a9:4b:cb:6b:86:cf: 9c:30:79:dc:5f:d9:0c:2e:5e:cd:e4:f2:20:0e:91:b3:ff:59: 20:a2:15:84:2f:c6:1b:da:66:e4:68:9b:9b:b2:bd:66:e1:9a: 3e:d9:b2:3f:96:9b:c6:02:59:77:17:90:36:1a:f8:65:95:bc: 3e:35:01:23:f3:74:b0:86:a7:51:07:77:a5:15:ad:8d:83:11: d6:2c:99:8f:15:31:47:e0:05:81:37:98:a4:b7:3c:a4:39:8a: 2a:cb:94:40:a1:4e:e5:8b:98:c7:51:61:2d:df:52:e8:b4:76: bb:0b:97:04:45:bf:53:bf:c2:6b:4b:71:4e:3d:5d:2b:5a:a9: cd:26:0e:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl5dDh9HCLLPdouV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk YWE2MjUyMDMtNTBjMi00YThjLThlNjQtNmRjMzRhMjY3ZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8xq3Y73eKntIp2sw0BAVudexI6g6DHhhN98 nECUROmY4xTbK0n2wMSiQdGMazqBABZ/TwPqL3Y2FxZQb3EbvI7epi2gmblp8dZX HnsRfOIkcJbMLMn6SH3CB0R3f8jHJMtgiKjl2bf5cc7TFYPAxjVEbQHjAzg5wJ9z +c7i4HFbNAzlv3Ek+MuYwqy3S7q1qIChECEnyxe4Kh1GU0MkTf9hRk3lw7/r/xGQ jC1+G2znXD4GACpDAl0XO5AYTR1dKSgSKjkaOYSfTivDuopR3aIZbYFDljF6KDTa E+8xxPx1tBtZY0SAiBjlCzf5F3s0N4bVfLEjdF2MnNkuZ+rIxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO/9ZVxkWX82jK5FXJAuZBejb/fpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvNDk5Yjg4NmEtYTVkMS0z ZjM3LWE5ZjMtMWY2ZjE2NGQxOTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJH155pgbUyMG8N3qoEE7ZMfsq4MCiL2VG0G1QCtu1rWV6SR7d9M E16mI1WtCAgkXScsGtSnsBYVQLg62ozlUi0tRMBPo9wfEYN1At7zpQJP/xuAYPRS exWPXIqxMM07rID06hejd/mvwYg7YpWqJl+108W7h/sY8KlLy2uGz5wwedxf2Qwu Xs3k8iAOkbP/WSCiFYQvxhvaZuRom5uyvWbhmj7Zsj+Wm8YCWXcXkDYa+GWVvD41 ASPzdLCGp1EHd6UVrY2DEdYsmY8VMUfgBYE3mKS3PKQ5iirLlEChTuWLmMdRYS3f Uui0drsLlwRFv1O/wmtLcU49XStaqc0mDiY= -----END CERTIFICATE-----Generated at Sat Apr 12 00:03:14 2025 by rpki-client