$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa File: 54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa (raw, json) Hash identifier: EbuLNUTdVnNaMv9honQbLcR0uD2+7MlNZr8bPaZ+Edc= Subject key identifier: 9E:5C:77:A3:BE:5A:12:B4:D1:EA:5F:86:4F:BC:FB:34:ED:9C:18:26 Certificate issuer: /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf Certificate serial: 010D0C9F4328584988CF24690DF1744DC3FCE120 Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 14939 IP address blocks: 2604:5000:1000::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:24:69:0d:f1:74:4d:c3:fc:e1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=3bf87cf6-bd4e-41f8-b965-10d635eceea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:48:75:d1:a3:85:ad:dd:d1:02:5e:9d:cc:40: 47:0f:d8:a5:96:ee:88:24:4a:73:61:51:82:09:96: 2c:af:5b:8d:ce:3b:c4:b3:fd:1e:a6:f2:67:f5:df: 0e:9a:0a:99:f8:cd:f0:db:4e:97:68:9f:33:f4:3b: 33:af:b1:a9:27:3e:ae:19:b7:6b:58:ca:94:55:3c: cb:0c:0e:19:e0:88:6f:ec:f1:62:8a:62:88:c4:d0: b4:18:90:8b:9a:21:de:1a:9b:c9:7a:f5:71:86:5d: cb:6a:64:3d:74:2f:15:68:e7:ad:cb:da:7d:53:54: 19:f5:42:33:d9:dd:e1:c2:0f:59:46:fd:20:de:79: 26:62:4a:dd:61:07:b9:e2:18:3b:4a:aa:31:a4:07: 91:f1:50:6a:76:0c:93:f6:44:cc:74:3a:73:66:7f: 3a:bd:98:04:1b:18:98:92:08:b7:73:ca:bd:e6:ba: fd:01:f2:89:42:24:53:01:96:f6:7c:f8:37:39:5c: bf:5a:bd:9c:57:a1:7b:29:e4:6b:90:90:d8:99:f0: 75:94:1d:66:5f:21:08:1b:8e:ed:69:18:56:ca:82: 27:2a:a0:74:14:58:be:fa:97:1a:20:7b:56:34:fe: 77:a5:df:cf:c9:97:cf:48:58:f2:3c:1d:36:1d:db: a1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5C:77:A3:BE:5A:12:B4:D1:EA:5F:86:4F:BC:FB:34:ED:9C:18:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl X509v3 Authority Key Identifier: keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer sbgp-ipAddrBlock: critical IPv6: 2604:5000:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5f:b7:e4:1d:dd:fe:e9:34:f5:02:ba:2e:e8:37:cb:aa:c6: 1b:db:c9:4f:09:3a:2b:15:6a:22:9c:31:64:7b:d8:ab:4d:0a: 3b:b6:6b:a7:6a:f5:21:90:61:15:38:da:bb:61:87:5f:8c:d2: f4:e2:70:30:11:d0:4c:16:f9:09:3c:3a:5c:a2:4f:83:ff:e0: b6:d3:1a:70:e4:8c:1d:d6:ba:6c:80:a7:2a:3e:19:98:84:78: 42:ba:52:cd:e6:e2:08:93:7d:05:19:a8:87:a7:e6:28:0a:45: 23:5d:b1:92:a4:e2:cf:1c:a6:9e:7a:3e:ab:5f:11:7e:e8:a0: 4e:0d:e7:05:ef:49:c8:fa:89:01:ee:d4:9e:63:ef:b4:43:38: 01:b6:a1:08:0b:cc:78:f6:ff:7c:08:66:25:fa:e2:75:c7:a5: 97:0e:a2:07:fc:df:b1:3e:9b:f0:37:cb:3a:f0:1d:33:5f:06: 7b:c5:14:07:36:4d:7e:fd:08:21:78:42:1c:0b:da:27:6f:c1: 55:d2:27:e0:54:f7:4e:a7:65:f0:99:07:d6:05:27:07:fd:ce: d2:58:52:99:50:26:51:14:90:42:de:1a:2c:50:0b:de:78:ca: 56:37:61:7a:84:fa:c5:24:fa:d8:6a:8d:33:5e:9b:8e:27:e9: 5c:3d:a1:b6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmIzyRpDfF0TcP84SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZiZDA5OGYtOWUwMS00YzI2LTkzOTUtZTViNjMzOTlh Y2FmMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk M2JmODdjZjYtYmQ0ZS00MWY4LWI5NjUtMTBkNjM1ZWNlZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEh10aOFrd3RAl6dzEBHD9illu6IJEpzYVGC CZYsr1uNzjvEs/0epvJn9d8OmgqZ+M3w206XaJ8z9Dszr7GpJz6uGbdrWMqUVTzL DA4Z4Ihv7PFiimKIxNC0GJCLmiHeGpvJevVxhl3LamQ9dC8VaOety9p9U1QZ9UIz 2d3hwg9ZRv0g3nkmYkrdYQe54hg7SqoxpAeR8VBqdgyT9kTMdDpzZn86vZgEGxiY kgi3c8q95rr9AfKJQiRTAZb2fPg3OVy/Wr2cV6F7KeRrkJDYmfB1lB1mXyEIG47t aRhWyoInKqB0FFi++pcaIHtWNP53pd/PyZfPSFjyPB02HduhyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ5cd6O+WhK00epfhk+8+zTtnBgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85ZmJk MDk4Zi05ZTAxLTRjMjYtOTM5NS1lNWI2MzM5OWFjYWYvNTRhYzhlODEtNGU1Zi0z NmVjLWE2N2YtZWJiMWUxMzkyNzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWZiZDA5OGYtOWUwMS00YzI2LTkz OTUtZTViNjMzOTlhY2FmLzlmYmQwOThmLTllMDEtNGMyNi05Mzk1LWU1YjYzMzk5 YWNhZi5jcmwwHwYDVR0jBBgwFoAUOFJoHvmhwRVyZ6MF4Rpo/COLcxAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85ZmJkMDk4Zi05ZTAxLTRjMjYtOTM5NS1lNWI2 MzM5OWFjYWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRQABAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALF+35B3d/uk09QK6Lug3y6rGG9vJTwk6KxVqIpwxZHvYq00KO7Zr p2r1IZBhFTjau2GHX4zS9OJwMBHQTBb5CTw6XKJPg//gttMacOSMHda6bICnKj4Z mIR4QrpSzebiCJN9BRmoh6fmKApFI12xkqTizxymnno+q18RfuigTg3nBe9JyPqJ Ae7UnmPvtEM4AbahCAvMePb/fAhmJfridcellw6iB/zfsT6b8DfLOvAdM18Ge8UU BzZNfv0IIXhCHAvaJ2/BVdIn4FT3Tqdl8JkH1gUnB/3O0lhSmVAmURSQQt4aLFAL 3njKVjdheoT6xST62GqNM16bjifpXD2htg== -----END CERTIFICATE-----Generated at Wed Apr 16 17:09:06 2025 by rpki-client