$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5b112f50-dd0b-3879-8ce1-3f549b1d5358.roa File: 5b112f50-dd0b-3879-8ce1-3f549b1d5358.roa (raw, json) Hash identifier: xfB6N/iAIXpt8EZryYmmdEgyuHLDDxq1u9QjJAFm23w= Subject key identifier: 3F:C0:BC:09:CE:58:D8:1F:B6:37:EB:4B:C0:5E:C6:F6:E9:B6:7B:1D Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F43285849780F02D7F448880885CC8F80 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5b112f50-dd0b-3879-8ce1-3f549b1d5358.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 400097 IP address blocks: 2606:3d40:3b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:02:d7:f4:48:88:08:85:cc:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=07727dcc-602a-470f-9461-e970c55c30e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d5:0e:f1:c2:f9:0a:a5:43:1b:46:d2:e8:35: b0:80:a6:f9:e5:67:7a:85:37:8f:b6:af:b1:c7:63: 64:b2:aa:44:e0:28:9d:44:d1:c9:75:bc:33:1a:d0: cb:23:b8:de:ef:67:f4:ed:00:05:6a:77:80:69:9a: 2f:70:29:c0:fc:2d:a8:60:5e:d3:25:0f:15:18:14: 61:e5:37:bf:fd:a3:a4:49:fd:5a:48:58:cd:48:88: 8a:0a:d4:ac:66:c4:3f:bc:63:ae:40:45:3c:87:af: b9:27:7a:1d:7e:22:e5:8f:60:5c:6f:4c:fe:3d:fc: 83:53:b9:07:ad:7c:d7:ef:8e:8d:0a:d6:b9:a5:83: b3:9b:d7:ac:ce:d8:d0:d7:2c:6f:03:9a:23:cc:3a: 33:56:46:24:03:ab:f7:48:40:1d:3f:fe:ff:02:77: f1:2a:dc:c6:49:39:be:7d:99:22:44:39:53:60:f4: 86:ed:98:94:3e:cf:16:00:29:76:21:88:59:27:ef: 94:1b:32:e7:a4:72:4f:25:56:bf:48:8a:3b:a0:5d: bc:9f:c2:bc:40:99:a9:49:4e:bf:04:0b:f9:c4:31: ac:8b:19:46:74:3f:93:54:8b:a8:f7:b2:5d:c7:1c: b6:46:0f:10:94:f0:87:df:ab:8a:3b:c4:89:3e:04: 82:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C0:BC:09:CE:58:D8:1F:B6:37:EB:4B:C0:5E:C6:F6:E9:B6:7B:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5b112f50-dd0b-3879-8ce1-3f549b1d5358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:3b00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:6d:ff:83:3f:c9:d4:de:46:79:4e:8f:f0:3d:0d:1b:02:54: 63:5b:6c:4d:6b:2b:4d:c3:10:a7:07:4b:b0:3e:34:f3:3f:6e: 8d:86:6e:06:4b:d7:3f:86:56:94:83:3e:f7:28:29:92:3c:0f: 4d:ab:76:b3:0b:29:18:42:eb:63:08:10:eb:b8:70:66:1b:70: 00:c4:e6:38:0c:64:74:2a:e4:ea:6f:f6:a4:97:32:ea:ae:be: 27:91:24:6f:42:ad:66:6b:82:ff:c5:ce:7d:47:2f:ea:2e:9a: 3f:53:36:68:30:64:6b:3c:51:cf:22:e8:49:9e:c9:5c:f3:64: 8d:7d:8f:b5:14:55:3e:ad:89:d5:b7:01:76:f6:a9:4a:a9:1e: a8:68:d2:53:21:43:f5:e1:7b:b3:75:bd:57:46:95:2a:2d:5d: 68:db:cf:53:52:57:c9:db:e9:24:89:40:f3:7b:3d:c3:9f:25: db:23:5a:f8:01:e1:25:8b:47:ab:73:20:91:db:19:8f:5e:3d: 49:5a:db:18:70:67:9d:47:20:d1:da:3b:61:4e:2d:7f:59:24: a1:e2:ae:c8:8f:6d:49:b6:55:df:6b:5a:d1:da:ec:84:f2:db: 52:25:a5:9f:9e:4a:a8:22:77:ae:d8:b2:79:ab:b8:8a:64:40: bc:d3:db:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl4DwLX9EiICIXMj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk MDc3MjdkY2MtNjAyYS00NzBmLTk0NjEtZTk3MGM1NWMzMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdUO8cL5CqVDG0bS6DWwgKb55Wd6hTePtq+x x2NksqpE4CidRNHJdbwzGtDLI7je72f07QAFaneAaZovcCnA/C2oYF7TJQ8VGBRh 5Te//aOkSf1aSFjNSIiKCtSsZsQ/vGOuQEU8h6+5J3odfiLlj2Bcb0z+PfyDU7kH rXzX746NCta5pYOzm9esztjQ1yxvA5ojzDozVkYkA6v3SEAdP/7/AnfxKtzGSTm+ fZkiRDlTYPSG7ZiUPs8WACl2IYhZJ++UGzLnpHJPJVa/SIo7oF28n8K8QJmpSU6/ BAv5xDGsixlGdD+TVIuo97Jdxxy2Rg8QlPCH36uKO8SJPgSCqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD/AvAnOWNgftjfrS8BexvbptnsdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvNWIxMTJmNTAtZGQwYi0z ODc5LThjZTEtM2Y1NDliMWQ1MzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QDsA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpt/4M/ydTeRnlOj/A9DRsCVGNbbE1rK03DEKcHS7A+NPM/bo2G bgZL1z+GVpSDPvcoKZI8D02rdrMLKRhC62MIEOu4cGYbcADE5jgMZHQq5Opv9qSX MuquvieRJG9CrWZrgv/Fzn1HL+oumj9TNmgwZGs8Uc8i6EmeyVzzZI19j7UUVT6t idW3AXb2qUqpHqho0lMhQ/Xhe7N1vVdGlSotXWjbz1NSV8nb6SSJQPN7PcOfJdsj WvgB4SWLR6tzIJHbGY9ePUla2xhwZ51HINHaO2FOLX9ZJKHirsiPbUm2Vd9rWtHa 7ITy21IlpZ+eSqgid67YsnmruIpkQLzT23E= -----END CERTIFICATE-----Generated at Fri Apr 11 23:18:40 2025 by rpki-client