$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a7719717-e276-3bf6-ab9c-91c3f00bc8b6.roa File: a7719717-e276-3bf6-ab9c-91c3f00bc8b6.roa (raw, json) Hash identifier: 7++T90xhDEbCQ60Li22HhGXt3U3pWy1n1lRn8t646/E= Subject key identifier: 8B:87:53:DE:50:9E:6E:AE:3D:A0:05:C9:4A:64:C5:30:E3:33:3D:8E Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F43285848A1360FC52D61EE83EA96B300 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a7719717-e276-3bf6-ab9c-91c3f00bc8b6.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 400097 IP address blocks: 2606:3d40:5d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:0f:c5:2d:61:ee:83:ea:96:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=d8fef7ed-9c66-46db-bcad-68e37c1a4355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:6d:e4:e1:81:2e:45:17:b9:81:79:5a:af: 39:07:cd:8b:64:5a:68:25:1f:27:3c:fc:a0:17:ca: 7f:16:50:91:dc:43:97:be:af:d7:8c:6e:37:f9:f3: 4a:35:f9:bd:77:f2:2f:ad:45:76:9d:25:ba:27:36: b0:ff:8d:58:d5:58:1d:99:49:7f:6d:6f:6a:97:01: ff:5a:71:38:d4:32:15:70:17:9a:43:e3:4b:15:54: ba:c1:b1:03:92:1e:18:83:62:aa:2a:74:ad:04:f3: c2:38:a4:27:d5:9d:92:f6:51:2c:73:84:11:60:1b: c5:61:35:e8:1e:9e:c6:1c:44:fa:c9:5c:ab:10:3f: 5f:55:58:0d:cf:99:cd:b9:6a:43:2d:7c:2d:77:0a: eb:21:1d:41:2e:3d:6e:7a:67:e2:d7:0c:cb:b0:bf: 15:eb:17:90:dc:cb:41:21:a7:7e:cd:a9:6c:86:d0: 83:f8:c8:91:dd:7e:f3:89:a7:b7:de:84:7d:6a:6f: a3:79:66:4e:67:8c:79:d9:64:47:8a:3a:90:86:56: d4:cf:c7:ed:35:ac:a8:6b:89:f1:43:72:eb:62:86: 85:87:39:5b:f1:b6:f0:e6:f6:04:ed:b8:97:17:ef: 79:e8:c5:3a:83:e7:9a:f0:94:a9:8e:5b:03:24:7d: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:87:53:DE:50:9E:6E:AE:3D:A0:05:C9:4A:64:C5:30:E3:33:3D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a7719717-e276-3bf6-ab9c-91c3f00bc8b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:5d00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f6:4f:c8:50:3e:2c:dd:53:b8:1e:7d:17:c7:7f:fa:10:b7: 0b:de:1e:79:15:fd:e4:93:52:5b:cd:e5:e6:5f:d9:df:96:1d: 92:f2:54:36:e8:8f:ab:92:2d:c8:9b:72:9e:c6:69:9a:cc:5b: ee:34:cc:d5:7d:fd:a8:77:5e:1e:2f:46:66:55:d6:6d:43:5f: c9:99:df:5f:e8:0f:ab:5d:de:94:38:bf:8a:a6:e0:e3:4d:2e: 65:0d:6a:2a:a2:2a:c0:1c:4a:17:8f:24:ed:54:9f:b2:c5:ec: 4e:5c:65:e8:5c:26:97:5f:a4:00:94:78:58:11:e0:73:2a:dc: 7e:77:56:cc:4f:ab:96:c2:d0:03:91:97:5a:26:a3:6c:8e:fc: a5:94:ed:66:a9:b8:90:c8:a7:60:a0:48:ec:fd:c5:fe:66:2b: 0a:95:ad:ad:d3:12:84:0d:4a:29:92:13:33:16:b0:a2:7d:48: 99:72:41:46:71:cc:a7:8d:d5:37:3f:38:0f:ac:bd:37:9e:15: 63:a6:f1:7b:b3:e4:19:ff:b6:00:f9:3f:2b:ab:79:d5:3b:84: c5:a7:ea:27:ec:f6:a7:92:37:e5:0a:d6:48:79:9d:d9:33:ea: 8c:48:b1:68:94:63:11:a3:ec:ee:e5:74:d8:05:89:97:b4:9c: a2:1d:7f:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNg/FLWHug+qWswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZDhmZWY3ZWQtOWM2Ni00NmRiLWJjYWQtNjhlMzdjMWE0MzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrZt5OGBLkUXuYF5Wq85B82LZFpoJR8nPPyg F8p/FlCR3EOXvq/XjG43+fNKNfm9d/IvrUV2nSW6Jzaw/41Y1VgdmUl/bW9qlwH/ WnE41DIVcBeaQ+NLFVS6wbEDkh4Yg2KqKnStBPPCOKQn1Z2S9lEsc4QRYBvFYTXo Hp7GHET6yVyrED9fVVgNz5nNuWpDLXwtdwrrIR1BLj1uemfi1wzLsL8V6xeQ3MtB Iad+zalshtCD+MiR3X7ziae33oR9am+jeWZOZ4x52WRHijqQhlbUz8ftNayoa4nx Q3LrYoaFhzlb8bbw5vYE7biXF+956MU6g+ea8JSpjlsDJH06hwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIuHU95Qnm6uPaAFyUpkxTDjMz2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvYTc3MTk3MTctZTI3Ni0z YmY2LWFiOWMtOTFjM2YwMGJjOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QF0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABD2T8hQPizdU7gefRfHf/oQtwveHnkV/eSTUlvN5eZf2d+WHZLy VDboj6uSLcibcp7GaZrMW+40zNV9/ah3Xh4vRmZV1m1DX8mZ31/oD6td3pQ4v4qm 4ONNLmUNaiqiKsAcShePJO1Un7LF7E5cZehcJpdfpACUeFgR4HMq3H53VsxPq5bC 0AORl1omo2yO/KWU7WapuJDIp2CgSOz9xf5mKwqVra3TEoQNSimSEzMWsKJ9SJly QUZxzKeN1Tc/OA+svTeeFWOm8Xuz5Bn/tgD5PyuredU7hMWn6ifs9qeSN+UK1kh5 ndkz6oxIsWiUYxGj7O7ldNgFiZe0nKIdf5s= -----END CERTIFICATE-----Generated at Fri Apr 11 23:46:19 2025 by rpki-client