$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/aa1e9760-1e22-38ea-9430-d287417cba9b.roa File: aa1e9760-1e22-38ea-9430-d287417cba9b.roa (raw, json) Hash identifier: 7Th8ldl+9iZaFRFNLTghK5ueaCDuw2hvc3ExwqAucuY= Subject key identifier: B1:D3:46:07:F0:2D:67:87:48:F7:52:77:82:B5:50:EF:F6:2A:B9:3E Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F43285849780F0E3E95C25CF53348D1E0 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/aa1e9760-1e22-38ea-9430-d287417cba9b.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 400097 IP address blocks: 2606:3d40:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:0e:3e:95:c2:5c:f5:33:48:d1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=cf95e8da-d266-4a8a-8701-452f9dcee1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:80:28:18:b2:98:38:cf:71:d0:b3:d6:93: 71:81:32:4e:6a:98:59:67:69:47:3f:68:74:ec:c6: 34:8c:40:15:6c:dd:45:75:ff:fe:11:d3:17:83:d2: 13:22:92:62:77:c9:8e:11:a5:e0:d5:ea:1f:6c:41: 51:dd:48:1f:e6:ea:f7:72:d0:2b:c8:20:0d:3a:3f: 08:ea:ca:b6:2e:01:e9:38:89:ad:a3:b8:49:7e:2c: 30:8d:9f:4f:2b:23:53:b0:5b:79:80:3d:9d:ba:8b: 7d:2c:56:4d:d6:b8:9d:bf:2c:97:69:a8:83:22:d1: b8:fd:11:21:31:0b:34:09:ea:33:3f:af:4d:55:a6: 44:8f:a2:c8:c7:46:f1:6a:88:33:6d:84:e1:f5:f7: 51:2a:da:5c:07:ae:7a:3e:72:2e:5a:35:18:fc:f3: 57:af:1b:2f:04:3b:33:97:3c:9f:ba:15:f7:1e:e0: 73:46:8a:d5:14:ad:95:33:49:94:61:76:db:63:06: a4:f5:f4:2a:d4:94:3d:02:9f:19:24:fb:09:85:d9: 6f:81:b4:ee:de:22:f7:34:b4:df:58:b0:58:0d:60: f8:88:6f:71:64:db:ae:54:a0:e3:99:01:e5:25:b1: 8c:b2:3b:d7:99:d8:8d:dd:32:6b:e4:c3:3f:ce:55: f8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D3:46:07:F0:2D:67:87:48:F7:52:77:82:B5:50:EF:F6:2A:B9:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/aa1e9760-1e22-38ea-9430-d287417cba9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:32:f5:0f:8c:e7:fa:ad:36:2b:ae:2f:4d:81:64:f9:7e:de: 7c:09:5a:8e:4b:b8:89:35:73:1d:90:2f:a2:27:28:b1:c5:ab: 6b:30:2d:6a:e9:a9:a4:1d:e4:44:bd:a1:00:7c:c6:0a:fc:9b: ae:90:06:ea:11:0d:53:1f:ed:6e:ab:60:14:75:ca:19:b3:8e: 26:3b:57:48:35:c2:02:6e:bb:9e:aa:a7:ab:28:57:5f:0d:4d: 54:00:73:ce:ed:0d:92:04:73:b1:e3:34:15:15:71:ef:8e:a3: 7d:ae:a4:89:01:9d:ee:0c:90:15:b6:f6:2d:59:08:97:6d:67: e9:d0:57:e2:a9:87:d8:0a:1e:4b:36:25:9b:c5:bb:07:a0:47: 36:86:53:7c:25:3c:cd:bc:8d:b6:72:ed:e7:b1:81:76:7f:b0: eb:85:cd:d7:1e:df:31:34:54:f6:76:ad:69:9a:35:a7:0b:3b: ba:f6:00:bf:20:01:fd:8b:a8:ce:f5:50:b5:d9:ef:96:a8:6c: ae:92:f2:9a:e9:c1:52:00:f1:0a:57:bb:7f:bd:5a:8f:fc:1e: 23:e1:97:6b:cf:5d:15:56:92:53:78:e5:80:16:7e:a0:de:b7: 63:19:07:05:5e:b6:80:ec:85:52:6a:81:34:a6:5d:ae:ba:e4: 52:bb:8f:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl4Dw4+lcJc9TNI0eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk Y2Y5NWU4ZGEtZDI2Ni00YThhLTg3MDEtNDUyZjlkY2VlMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W2AKBiymDjPcdCz1pNxgTJOaphZZ2lHP2h0 7MY0jEAVbN1Fdf/+EdMXg9ITIpJid8mOEaXg1eofbEFR3Ugf5ur3ctAryCANOj8I 6sq2LgHpOImto7hJfiwwjZ9PKyNTsFt5gD2duot9LFZN1ridvyyXaaiDItG4/REh MQs0CeozP69NVaZEj6LIx0bxaogzbYTh9fdRKtpcB656PnIuWjUY/PNXrxsvBDsz lzyfuhX3HuBzRorVFK2VM0mUYXbbYwak9fQq1JQ9Ap8ZJPsJhdlvgbTu3iL3NLTf WLBYDWD4iG9xZNuuVKDjmQHlJbGMsjvXmdiN3TJr5MM/zlX4hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLHTRgfwLWeHSPdSd4K1UO/2Krk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvYWExZTk3NjAtMWUyMi0z OGVhLTk0MzAtZDI4NzQxN2NiYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKcy9Q+M5/qtNiuuL02BZPl+3nwJWo5LuIk1cx2QL6InKLHFq2sw LWrpqaQd5ES9oQB8xgr8m66QBuoRDVMf7W6rYBR1yhmzjiY7V0g1wgJuu56qp6so V18NTVQAc87tDZIEc7HjNBUVce+Oo32upIkBne4MkBW29i1ZCJdtZ+nQV+Kph9gK Hks2JZvFuwegRzaGU3wlPM28jbZy7eexgXZ/sOuFzdce3zE0VPZ2rWmaNacLO7r2 AL8gAf2LqM71ULXZ75aobK6S8prpwVIA8QpXu3+9Wo/8HiPhl2vPXRVWklN45YAW fqDet2MZBwVetoDshVJqgTSmXa665FK7j5o= -----END CERTIFICATE-----Generated at Fri Apr 11 22:42:36 2025 by rpki-client