$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/3a40369b-9e90-3db3-b866-f8235d484158.roa File: 3a40369b-9e90-3db3-b866-f8235d484158.roa (raw, json) Hash identifier: ijCeYWU7D+DDIPcLxL85tiyZHDrKBMyxAGU8m+/1Ho4= Subject key identifier: 83:90:53:B0:03:08:89:4F:0F:36:8A:0F:9B:1F:86:D2:B5:AF:F1:75 Certificate issuer: /CN=1d65e3c3-96e5-425b-b926-48d278136d48 Certificate serial: 010D0C9F43285848E59BB5C6567259DC53628840 Authority key identifier: B6:29:12:87:2E:85:A6:50:6E:26:47:85:35:5D:A8:64:59:CC:81:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/3a40369b-9e90-3db3-b866-f8235d484158.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 10821 IP address blocks: 2604:7040::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/1d65e3c3-96e5-425b-b926-48d278136d48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/1d65e3c3-96e5-425b-b926-48d278136d48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b5:c6:56:72:59:dc:53:62:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d65e3c3-96e5-425b-b926-48d278136d48 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=a7a3da98-cbca-42b6-802f-9c84344388db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7f:a0:27:75:54:a1:cc:74:99:23:4f:6b:ef: 0a:b0:14:41:5f:57:51:19:39:e5:7c:48:3c:b4:1f: 7c:21:04:41:b8:60:b6:ab:c6:77:ee:e8:0c:46:c5: 38:5e:d2:e2:f0:9b:1d:ef:ab:b0:cd:0f:4e:30:11: e5:ef:70:23:ed:ea:19:4b:f0:ef:72:9f:66:dc:90: e8:d9:9f:1b:6a:65:c0:f2:e5:6c:d3:20:7a:de:41: ac:7a:4f:9d:57:66:1c:f1:31:c2:f9:98:cc:c2:86: 9e:63:10:d7:1b:53:59:d6:3f:cd:21:7a:8c:99:a5: e4:92:12:ff:7b:09:88:c0:d5:64:e4:df:14:82:d3: 0f:8c:e1:78:b7:35:a1:33:fc:00:42:69:4f:ce:21: 8d:08:10:a3:28:a3:05:5e:f7:d4:d1:4c:3a:b0:b0: ce:b3:2d:4e:4b:6d:45:83:67:ed:37:4b:8d:4c:a1: 28:65:0c:dd:09:eb:ae:14:68:bf:d4:83:06:76:e8: 5e:4a:e6:9e:f6:30:77:3a:33:d0:45:33:ef:0d:95: 2f:57:28:8e:70:e2:72:d5:0e:f9:d0:67:84:d1:fb: 34:6c:3e:7f:91:0a:cb:13:35:5f:19:66:6e:54:d3: ea:80:74:6f:af:a6:8f:ea:12:23:06:28:43:5a:d6: cd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:90:53:B0:03:08:89:4F:0F:36:8A:0F:9B:1F:86:D2:B5:AF:F1:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/3a40369b-9e90-3db3-b866-f8235d484158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/1d65e3c3-96e5-425b-b926-48d278136d48.crl X509v3 Authority Key Identifier: keyid:B6:29:12:87:2E:85:A6:50:6E:26:47:85:35:5D:A8:64:59:CC:81:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48.cer sbgp-ipAddrBlock: critical IPv6: 2604:7040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:fe:f1:a8:b6:c4:28:89:22:33:e7:b5:77:8a:07:4e:4d:5f: 94:5e:5d:b2:50:14:43:c9:ce:6c:e2:de:01:27:f3:e6:c2:da: 94:7b:07:02:c4:57:0a:a2:20:2a:80:08:1c:d8:f2:79:d4:07: 7c:09:7a:e8:b1:77:18:6f:c7:9d:f0:b0:95:00:9b:e9:d3:01: 45:ea:3c:bf:ba:fe:55:ae:8c:18:ec:c0:76:f6:a6:5c:f5:62: f7:06:25:0b:11:e2:b0:d2:29:ee:a3:b8:52:6c:63:20:1e:72: 4a:5e:b2:ba:be:d8:41:a2:4e:b9:e0:5b:6b:c6:66:ce:7a:1a: 66:53:87:64:1c:8c:b3:10:90:84:1b:7e:17:49:0a:71:f5:e5: 5a:93:23:38:1e:d0:d8:e7:69:dc:7e:47:dd:80:0a:12:66:dd: f9:30:d8:07:93:ff:06:a1:e2:37:4d:e1:2d:2e:78:b7:3e:e6: ec:4b:0e:c3:80:dd:69:94:6b:6c:32:ab:95:b0:40:5e:c8:cd: 74:2c:dc:25:5a:01:5a:09:a3:1d:20:0e:49:aa:ee:eb:10:82: c2:85:48:aa:64:e9:62:e9:c0:a6:34:9a:2c:fa:b0:33:91:b2: 05:07:74:fb:09:4f:78:c4:d7:6e:3e:47:81:8f:96:50:fd:da: 26:34:dd:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjlm7XGVnJZ3FNiiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2NWUzYzMtOTZlNS00MjViLWI5MjYtNDhkMjc4MTM2 ZDQ4MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YTdhM2RhOTgtY2JjYS00MmI2LTgwMmYtOWM4NDM0NDM4OGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX+gJ3VUocx0mSNPa+8KsBRBX1dRGTnlfEg8 tB98IQRBuGC2q8Z37ugMRsU4XtLi8Jsd76uwzQ9OMBHl73Aj7eoZS/Dvcp9m3JDo 2Z8bamXA8uVs0yB63kGsek+dV2Yc8THC+ZjMwoaeYxDXG1NZ1j/NIXqMmaXkkhL/ ewmIwNVk5N8UgtMPjOF4tzWhM/wAQmlPziGNCBCjKKMFXvfU0Uw6sLDOsy1OS21F g2ftN0uNTKEoZQzdCeuuFGi/1IMGduheSuae9jB3OjPQRTPvDZUvVyiOcOJy1Q75 0GeE0fs0bD5/kQrLEzVfGWZuVNPqgHRvr6aP6hIjBihDWtbNhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIOQU7ADCIlPDzaKD5sfhtK1r/F1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZDY1 ZTNjMy05NmU1LTQyNWItYjkyNi00OGQyNzgxMzZkNDgvM2E0MDM2OWItOWU5MC0z ZGIzLWI4NjYtZjgyMzVkNDg0MTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWQ2NWUzYzMtOTZlNS00MjViLWI5 MjYtNDhkMjc4MTM2ZDQ4LzFkNjVlM2MzLTk2ZTUtNDI1Yi1iOTI2LTQ4ZDI3ODEz NmQ0OC5jcmwwHwYDVR0jBBgwFoAUtikShy6FplBuJkeFNV2oZFnMgXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZDY1ZTNjMy05NmU1LTQyNWItYjkyNi00OGQy NzgxMzZkNDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRwQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCH/vGotsQoiSIz57V3igdOTV+UXl2yUBRDyc5s4t4BJ/PmwtqUewcC xFcKoiAqgAgc2PJ51Ad8CXrosXcYb8ed8LCVAJvp0wFF6jy/uv5VrowY7MB29qZc 9WL3BiULEeKw0inuo7hSbGMgHnJKXrK6vthBok654FtrxmbOehpmU4dkHIyzEJCE G34XSQpx9eVakyM4HtDY52ncfkfdgAoSZt35MNgHk/8GoeI3TeEtLni3PubsSw7D gN1plGtsMquVsEBeyM10LNwlWgFaCaMdIA5Jqu7rEILChUiqZOli6cCmNJos+rAz kbIFB3T7CU94xNduPkeBj5ZQ/domNN0e -----END CERTIFICATE-----Generated at Fri Apr 4 16:07:01 2025 by rpki-client