$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/720e130f-8be5-36ae-92b6-a0a5025a0ca6.roa File: 720e130f-8be5-36ae-92b6-a0a5025a0ca6.roa (raw, json) Hash identifier: Xyl1bIsTM9dRPiAHcwZFRzBq6fUznIOiZ/cW7adqAYw= Subject key identifier: E9:30:AF:02:8A:76:F8:01:9A:1A:33:64:65:CF:76:5D:87:2A:29:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848B1F636C3329490D7B3188E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/720e130f-8be5-36ae-92b6-a0a5025a0ca6.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 7922 IP address blocks: 2601:9c0::/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:36:c3:32:94:90:d7:b3:18:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=6eac563d-8b36-4780-9caf-3df803db6900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4f:16:03:86:f4:f0:51:67:e1:ae:7a:78:98: c6:e5:86:5b:22:9b:b2:ff:40:fe:eb:ca:59:d4:dd: cd:60:6a:54:3f:e0:bc:b9:e9:cd:96:f3:58:d5:33: 1b:0d:5b:66:d7:bb:79:b0:ff:75:3b:40:cf:40:3e: 8a:a8:6c:7d:ef:48:ad:75:03:89:3a:4e:9c:d8:9a: 03:c4:f2:e1:85:ff:77:43:83:a1:9f:0d:39:2e:56: c0:36:e0:04:78:b6:95:83:dc:e6:a8:be:44:0f:a7: 77:12:a2:d2:5c:17:fc:7c:55:a6:7e:ad:44:0a:0d: d0:48:ef:4b:b9:c8:b6:30:1c:02:f8:aa:25:03:d8: 12:82:5f:40:6c:34:a9:23:de:20:ce:da:11:e9:75: 0e:4b:3a:33:74:4a:bd:9f:a8:85:a1:6d:b9:c6:0d: 66:d4:8b:0c:e2:64:09:f9:81:6e:7a:1b:14:67:40: dc:54:ac:43:0c:72:ae:0c:10:b2:6e:e7:04:5d:85: 25:26:51:70:94:84:3d:71:3c:5d:9c:45:c0:85:7a: 02:4c:d0:d6:5d:24:ee:aa:22:8f:4d:2d:0c:f3:96: 18:a5:64:e8:b8:0b:37:54:7f:0f:cd:47:9a:76:9f: 4d:99:a7:dc:c1:12:0f:f4:61:cb:24:24:51:1b:3e: 58:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:30:AF:02:8A:76:F8:01:9A:1A:33:64:65:CF:76:5D:87:2A:29:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/720e130f-8be5-36ae-92b6-a0a5025a0ca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:9c0::/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:55:b4:d0:b4:94:58:32:d6:5d:98:dc:6b:9d:49:c8:36:44: 32:3e:6b:77:ea:a6:47:ca:96:49:76:04:ee:1d:c3:8c:05:f4: 2d:ed:a4:f5:fc:80:77:21:35:8c:92:2f:62:7a:ea:11:b2:3a: 0d:e9:07:7a:eb:ee:6b:19:1c:5d:ce:b6:a5:74:ae:09:34:88: 05:fc:9c:42:ad:7b:c5:4c:b7:8e:b7:5c:72:45:13:08:c7:8d: d0:2b:fd:26:01:f6:4a:e4:3a:8f:ca:39:9f:24:47:a9:a0:6e: 8b:89:78:0b:b5:b6:5d:17:3b:5c:14:9b:79:d5:4d:89:0d:ed: 39:6d:ed:36:c8:c0:f6:5b:25:f6:be:ca:2f:26:db:08:95:75: 78:b4:13:67:d1:96:e9:41:07:06:a9:e3:2e:b1:96:a5:46:62: 34:83:5e:4d:be:f6:3d:b5:95:ab:62:23:38:ce:3e:49:ec:3b: 0f:d2:51:67:b3:59:38:13:2a:7c:79:ab:d0:95:8c:ef:31:36: f8:d4:4c:a0:0e:62:a3:3c:84:c0:73:3c:09:3f:f5:08:9b:8c: e8:03:62:6b:51:27:7b:23:81:4a:3a:07:98:37:5d:91:9e:fd: e4:c2:f7:c3:35:5b:18:8f:6a:2a:85:88:ff:6f:59:05:72:5d: bc:b5:31:db -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEix9jbDMpSQ17MYjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk NmVhYzU2M2QtOGIzNi00NzgwLTljYWYtM2RmODAzZGI2OTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU8WA4b08FFn4a56eJjG5YZbIpuy/0D+68pZ 1N3NYGpUP+C8uenNlvNY1TMbDVtm17t5sP91O0DPQD6KqGx970itdQOJOk6c2JoD xPLhhf93Q4Ohnw05LlbANuAEeLaVg9zmqL5ED6d3EqLSXBf8fFWmfq1ECg3QSO9L uci2MBwC+KolA9gSgl9AbDSpI94gztoR6XUOSzozdEq9n6iFoW25xg1m1IsM4mQJ +YFuehsUZ0DcVKxDDHKuDBCybucEXYUlJlFwlIQ9cTxdnEXAhXoCTNDWXSTuqiKP TS0M85YYpWTouAs3VH8PzUeadp9NmafcwRIP9GHLJCRRGz5YRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOkwrwKKdvgBmhozZGXPdl2HKil4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzIwZTEzMGYtOGJlNS0z NmFlLTkyYjYtYTBhNTAyNWEwY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUGJgEJwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDFVbTQtJRYMtZdmNxrnUnINkQyPmt36qZHypZJdgTuHcOMBfQt7aT1 /IB3ITWMki9ieuoRsjoN6Qd66+5rGRxdzraldK4JNIgF/JxCrXvFTLeOt1xyRRMI x43QK/0mAfZK5DqPyjmfJEepoG6LiXgLtbZdFztcFJt51U2JDe05be02yMD2WyX2 vsovJtsIlXV4tBNn0ZbpQQcGqeMusZalRmI0g15NvvY9tZWrYiM4zj5J7DsP0lFn s1k4Eyp8eavQlYzvMTb41EygDmKjPITAczwJP/UIm4zoA2JrUSd7I4FKOgeYN12R nv3kwvfDNVsYj2oqhYj/b1kFcl28tTHb -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:43 2025 by rpki-client