$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/19cefa01-5aa3-3c92-af6e-8b84b5ab306e.roa File: 19cefa01-5aa3-3c92-af6e-8b84b5ab306e.roa (raw, json) Hash identifier: maGzHpCAgZinxcfssRIvLA/xpihveChRzBCIF+opAEg= Subject key identifier: E5:ED:7F:9D:DE:93:E9:80:E6:F9:B8:69:9A:C3:D3:B4:95:8B:83:58 Certificate issuer: /CN=65b40bd5-5bac-4926-93a3-fd16c7c31445 Certificate serial: 010D0C9F432858495ABEE16122D601C0FC347D00 Authority key identifier: 37:DC:87:18:3B:B3:7C:17:41:53:1C:63:6B:18:62:08:05:1E:52:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/19cefa01-5aa3-3c92-af6e-8b84b5ab306e.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 32712 IP address blocks: 2607:8840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/65b40bd5-5bac-4926-93a3-fd16c7c31445.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/65b40bd5-5bac-4926-93a3-fd16c7c31445.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e1:61:22:d6:01:c0:fc:34:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b40bd5-5bac-4926-93a3-fd16c7c31445 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=11d4cc44-7890-44a7-973e-e9cceecbd3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:ee:7f:3b:a3:e5:d3:28:4c:22:9e:93:14: 03:0d:5f:1d:29:21:ae:26:f4:2d:1a:16:85:48:62: 61:c4:71:de:9c:2d:cc:e6:0a:9a:44:5b:8c:47:aa: 6e:9b:c1:f9:71:d5:5d:f8:3c:35:bd:10:b3:e6:ce: 55:89:fa:fe:7e:54:d2:ba:d3:eb:3f:d9:02:4d:d5: 44:35:a7:27:48:89:63:06:b6:5a:2c:d2:89:84:cd: ac:98:c7:01:17:59:73:fa:7d:ba:56:45:68:06:52: 16:21:61:9f:67:7e:f3:37:b1:d2:be:ea:69:75:5a: 0f:40:58:bc:af:9e:9f:55:9a:8a:04:fb:8e:a2:7f: 80:93:26:4e:bd:11:c0:06:ec:4a:22:07:10:30:e8: 5f:c7:19:9e:8b:8d:25:11:49:e2:20:46:b3:ba:d8: 0c:e4:48:31:31:12:89:e4:09:9d:1b:ed:a5:ba:71: 65:f9:06:e9:7b:fb:76:93:8d:67:3a:34:95:3b:c1: e1:ce:49:87:73:b7:b6:2c:20:aa:a5:58:82:98:09: 00:a5:a2:a6:cf:d4:9f:c8:68:b1:f1:c4:fc:6c:b9: 05:77:b7:0e:72:c2:2d:14:a6:d9:a9:70:97:91:50: a4:6f:13:09:a0:32:fd:fd:ec:00:da:90:27:27:c7: 2f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:ED:7F:9D:DE:93:E9:80:E6:F9:B8:69:9A:C3:D3:B4:95:8B:83:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/19cefa01-5aa3-3c92-af6e-8b84b5ab306e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/65b40bd5-5bac-4926-93a3-fd16c7c31445.crl X509v3 Authority Key Identifier: keyid:37:DC:87:18:3B:B3:7C:17:41:53:1C:63:6B:18:62:08:05:1E:52:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445.cer sbgp-ipAddrBlock: critical IPv6: 2607:8840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:2c:2d:05:b6:47:8f:db:5c:ee:4f:b2:4f:db:c2:a1:bc:c3: 50:63:84:21:b0:af:9b:9e:ee:0d:76:66:9e:7c:d0:9b:5c:71: 03:07:5d:a5:36:c9:d0:7f:a0:bd:b8:5e:c2:50:ff:34:8e:76: bf:4e:84:7f:6d:19:11:cf:dd:b5:22:dc:ee:0f:08:26:d6:32: ef:0d:1a:11:ea:4d:08:7b:4a:cc:dc:3d:a3:a9:f1:da:44:f8: 41:5d:04:79:75:94:11:4b:29:6c:8e:db:ec:63:74:77:24:88: db:84:0c:e5:48:1f:5e:e1:fe:f2:94:87:ec:9c:b1:10:87:f0: a0:be:39:25:ed:a6:df:78:7a:0c:a5:c2:97:fc:28:71:91:43: f6:07:10:fa:4b:89:60:98:ae:ef:b0:69:14:27:af:6a:50:e3: 88:97:6d:39:1a:84:d7:78:a7:96:f9:44:7e:2b:e2:10:7a:11: 91:3e:ae:c7:c0:ed:fd:08:16:f5:e8:1c:a5:8b:0a:57:da:31: 65:4d:0b:7d:e7:e7:75:b5:79:63:8b:05:33:14:72:8b:96:38: 3e:7b:95:70:6f:c3:40:fe:f4:03:4c:1d:5a:77:e9:04:8b:d0: 48:70:10:1a:e3:36:f9:13:05:cc:9e:1b:9d:96:0b:98:05:ec: 34:19:bb:ae -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElavuFhItYBwPw0fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjViNDBiZDUtNWJhYy00OTI2LTkzYTMtZmQxNmM3YzMx NDQ1MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MTFkNGNjNDQtNzg5MC00NGE3LTk3M2UtZTljY2VlY2JkM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri7ufzuj5dMoTCKekxQDDV8dKSGuJvQtGhaF SGJhxHHenC3M5gqaRFuMR6pum8H5cdVd+Dw1vRCz5s5Vifr+flTSutPrP9kCTdVE NacnSIljBrZaLNKJhM2smMcBF1lz+n26VkVoBlIWIWGfZ37zN7HSvuppdVoPQFi8 r56fVZqKBPuOon+AkyZOvRHABuxKIgcQMOhfxxmei40lEUniIEazutgM5EgxMRKJ 5AmdG+2lunFl+Qbpe/t2k41nOjSVO8HhzkmHc7e2LCCqpViCmAkApaKmz9SfyGix 8cT8bLkFd7cOcsItFKbZqXCXkVCkbxMJoDL9/ewA2pAnJ8cv/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOXtf53ek+mA5vm4aZrD07SVi4NYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NWI0 MGJkNS01YmFjLTQ5MjYtOTNhMy1mZDE2YzdjMzE0NDUvMTljZWZhMDEtNWFhMy0z YzkyLWFmNmUtOGI4NGI1YWIzMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjViNDBiZDUtNWJhYy00OTI2LTkz YTMtZmQxNmM3YzMxNDQ1LzY1YjQwYmQ1LTViYWMtNDkyNi05M2EzLWZkMTZjN2Mz MTQ0NS5jcmwwHwYDVR0jBBgwFoAUN9yHGDuzfBdBUxxjaxhiCAUeUrQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NWI0MGJkNS01YmFjLTQ5MjYtOTNhMy1mZDE2 YzdjMzE0NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeIQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAZLC0FtkeP21zuT7JP28KhvMNQY4QhsK+bnu4NdmaefNCbXHEDB12l NsnQf6C9uF7CUP80jna/ToR/bRkRz921ItzuDwgm1jLvDRoR6k0Ie0rM3D2jqfHa RPhBXQR5dZQRSylsjtvsY3R3JIjbhAzlSB9e4f7ylIfsnLEQh/Cgvjkl7abfeHoM pcKX/ChxkUP2BxD6S4lgmK7vsGkUJ69qUOOIl205GoTXeKeW+UR+K+IQehGRPq7H wO39CBb16ByliwpX2jFlTQt95+d1tXljiwUzFHKLljg+e5Vwb8NA/vQDTB1ad+kE i9BIcBAa4zb5EwXMnhudlguYBew0Gbuu -----END CERTIFICATE-----Generated at Fri Apr 4 22:52:04 2025 by rpki-client