$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa File: 40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa (raw, json) Hash identifier: k14E4tnW1fkfEBq8PcXHTXMBVt+y/WpAStkNmZKyozw= Subject key identifier: 8E:30:A3:41:B0:B7:70:E8:F7:E0:4C:41:60:1A:53:EF:90:46:37:11 Certificate issuer: /CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Certificate serial: 010D0C9F43285848E59BB957BF8BB94226FE0E98 Authority key identifier: 76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 22594 IP address blocks: 2620:5b:4000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b9:57:bf:8b:b9:42:26:fe:0e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=efb03d7e-be01-4988-9efb-c126bf0adcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a3:66:6b:f9:f6:ae:8c:3a:ca:62:a0:f8:68: ae:7e:b9:16:4c:9f:61:e0:0d:24:9f:04:59:c3:12: 7b:10:b2:ba:be:43:ce:7b:ff:4e:13:df:95:d5:bb: 8a:6c:2d:87:fd:08:1b:90:26:f3:e9:b6:16:49:2f: 03:c5:e8:ad:7d:28:6e:f8:34:d5:4b:9a:69:c5:e8: dc:d7:7d:f5:04:e4:af:9b:58:30:ff:5b:92:b5:5e: 53:b2:e4:2e:20:9c:31:0c:51:2b:19:4c:68:68:98: 26:27:7a:f5:fb:ec:e5:20:8c:40:db:d3:11:db:04: 0e:27:03:72:a9:8d:f4:72:bc:2d:cc:75:fc:88:30: 7f:06:74:b3:05:39:ef:9e:30:08:28:c7:c2:aa:02: ca:db:00:85:0c:ac:6b:b5:16:47:1c:af:8c:cf:1f: a2:58:d3:fb:f7:8f:50:29:53:fc:d7:3d:7a:a0:47: 67:f1:6b:66:f2:a3:44:b5:98:46:3f:42:58:f6:6a: ad:1f:fd:00:fb:f9:0c:c7:8f:74:00:37:b2:e8:13: 32:3e:92:4a:bd:e2:fa:bd:1b:72:01:1a:c6:78:59: 5a:d7:bd:08:67:94:59:51:00:c9:d6:8c:79:b3:25: 1b:32:b5:30:2a:e4:1b:1e:af:68:37:bd:9c:c0:20: 58:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:30:A3:41:B0:B7:70:E8:F7:E0:4C:41:60:1A:53:EF:90:46:37:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl X509v3 Authority Key Identifier: keyid:76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer sbgp-ipAddrBlock: critical IPv6: 2620:5b:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1f:9e:ff:33:40:d2:e7:85:34:69:19:35:40:12:89:ff:0d: 82:22:aa:d0:9e:07:00:f5:e1:79:e7:d2:b3:d2:ed:da:4f:f6: 39:06:0e:23:36:ba:47:39:3b:04:80:cc:37:ae:19:52:9a:2b: 72:e8:ff:7c:47:16:a5:3f:a3:8b:96:7e:0c:26:74:bf:88:c2: 6b:d6:73:5d:7f:f2:17:db:d3:17:b2:7a:26:16:b3:16:85:17: 55:33:1c:11:ff:a7:e1:a3:e5:50:d2:83:95:92:4b:35:cc:38: 69:18:17:41:bb:e4:53:0c:3f:cc:97:d0:ea:a7:0c:af:e3:bb: 87:91:ce:c6:f8:bf:2d:d5:60:9e:32:81:f9:98:bb:fd:9e:c7: 5e:4e:e7:4a:07:ba:af:b0:44:e4:de:bb:e2:08:29:dd:93:49: 77:3f:11:1a:62:a5:fc:96:d5:d4:7e:db:08:6f:c2:fc:e0:e5: 3a:c5:10:d8:4a:ce:ab:d8:3f:13:02:4d:cd:4b:bf:83:21:68: a5:2c:d4:29:f4:35:87:ab:b4:0a:b1:30:f0:c8:4f:92:d6:17: 53:68:ac:bd:d7:bf:44:ef:2a:74:5b:5b:1b:92:43:c3:d2:93: ca:b4:71:04:7d:92:46:dc:c6:6f:0f:46:58:d3:fd:17:18:3d: 32:b3:67:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjlm7lXv4u5Qib+DpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y1YjllZjYtM2I3Yy00ODVlLTk4MDQtZTNhZDY1YzU0 ZjY0MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZWZiMDNkN2UtYmUwMS00OTg4LTllZmItYzEyNmJmMGFkY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6Nma/n2row6ymKg+GiufrkWTJ9h4A0knwRZ wxJ7ELK6vkPOe/9OE9+V1buKbC2H/QgbkCbz6bYWSS8DxeitfShu+DTVS5ppxejc 1331BOSvm1gw/1uStV5TsuQuIJwxDFErGUxoaJgmJ3r1++zlIIxA29MR2wQOJwNy qY30crwtzHX8iDB/BnSzBTnvnjAIKMfCqgLK2wCFDKxrtRZHHK+Mzx+iWNP7949Q KVP81z16oEdn8Wtm8qNEtZhGP0JY9mqtH/0A+/kMx490ADey6BMyPpJKveL6vRty ARrGeFla170IZ5RZUQDJ1ox5syUbMrUwKuQbHq9oN72cwCBY1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI4wo0Gwt3Do9+BMQWAaU++QRjcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjVi OWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2FkNjVjNTRmNjQvNDA4MTQwMjUtNTY3NS0z Y2IzLWIzY2UtODBiM2NiY2RkNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2Y1YjllZjYtM2I3Yy00ODVlLTk4 MDQtZTNhZDY1YzU0ZjY0L2NmNWI5ZWY2LTNiN2MtNDg1ZS05ODA0LWUzYWQ2NWM1 NGY2NC5jcmwwHwYDVR0jBBgwFoAUdvnWgBZmurAcw/kqHHB5yEPCtFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjViOWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2Fk NjVjNTRmNjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAW0AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYfnv8zQNLnhTRpGTVAEon/DYIiqtCeBwD14Xnn0rPS7dpP9jkG DiM2ukc5OwSAzDeuGVKaK3Lo/3xHFqU/o4uWfgwmdL+IwmvWc11/8hfb0xeyeiYW sxaFF1UzHBH/p+Gj5VDSg5WSSzXMOGkYF0G75FMMP8yX0OqnDK/ju4eRzsb4vy3V YJ4ygfmYu/2ex15O50oHuq+wROTeu+IIKd2TSXc/ERpipfyW1dR+2whvwvzg5TrF ENhKzqvYPxMCTc1Lv4MhaKUs1Cn0NYertAqxMPDIT5LWF1NorL3Xv0TvKnRbWxuS Q8PSk8q0cQR9kkbcxm8PRljT/RcYPTKzZ3o= -----END CERTIFICATE-----Generated at Sat Apr 5 21:46:57 2025 by rpki-client