$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/2b9b90f2-ecbe-3cd9-8c7a-c655ef841328.roa File: 2b9b90f2-ecbe-3cd9-8c7a-c655ef841328.roa (raw, json) Hash identifier: JxMzSoCIyCgqqkPe6Lvs82Bym+4zCXTRTUJ+FaGie4g= Subject key identifier: CA:C6:B8:AC:6B:3F:07:2B:C6:32:82:E3:E0:B2:7B:AA:C4:E7:3D:BC Certificate issuer: /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99 Certificate serial: 010D0C9F432858491941901ED73C93F4B028E3E0 Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/2b9b90f2-ecbe-3cd9-8c7a-c655ef841328.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2607:9f40:35::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:90:1e:d7:3c:93:f4:b0:28:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=487344a9-bece-45c7-9c6a-aef7276dece8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ef:0d:4e:3f:67:0e:7e:e8:87:7b:4a:0c:17: 78:b4:56:76:f3:70:d3:0a:f1:31:4a:56:d6:d3:f8: 16:bc:8b:26:f9:8f:10:20:35:e7:a7:da:59:a3:a8: 7c:17:fd:81:85:32:c6:3a:ab:be:e9:40:d0:5a:18: dc:70:6c:59:98:08:1e:e2:29:b0:d1:3a:98:f3:e4: 04:e0:77:01:5b:b5:36:14:73:45:81:0b:9c:af:d7: 8e:df:29:0f:44:a7:e1:eb:d0:b3:c4:28:00:38:24: 15:c8:e6:be:67:e2:df:4c:73:f4:15:99:4c:cf:93: 89:c4:5b:07:1e:b7:96:5a:d1:00:58:6c:44:c2:83: 5d:9c:56:fd:7b:b8:c2:e2:f4:47:0c:d1:13:0b:0c: 1d:c3:ab:5b:07:00:ff:f8:6b:0f:cb:be:96:04:2e: 40:62:1d:94:33:34:06:54:c4:a4:e4:9a:66:ef:6b: 8a:fd:4c:69:4f:d8:fb:25:04:6c:73:dd:31:32:ec: 4f:db:7e:a0:65:39:02:b4:fb:1b:fb:c6:99:e3:6f: 67:b6:91:ee:53:2c:65:ed:46:5a:15:12:bd:e3:36: d0:1f:40:07:2b:5d:63:a8:02:91:b7:24:19:ca:7c: 88:26:a0:a1:a8:b0:bb:18:02:4f:14:47:3d:b3:3b: fb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C6:B8:AC:6B:3F:07:2B:C6:32:82:E3:E0:B2:7B:AA:C4:E7:3D:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/2b9b90f2-ecbe-3cd9-8c7a-c655ef841328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl X509v3 Authority Key Identifier: keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer sbgp-ipAddrBlock: critical IPv6: 2607:9f40:35::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:7e:73:62:e4:e6:ce:f9:01:5a:70:36:61:58:0f:41:b9:a4: fe:16:4c:74:c2:2b:8d:a8:84:17:70:41:1f:da:99:fa:c8:e5: 17:19:17:9c:17:3b:3b:7e:ed:a2:d1:b5:49:13:1d:9d:be:67: e1:d8:bc:7d:dc:06:e7:b4:f9:1a:cc:6e:52:cc:4c:35:7f:d2: 1f:05:29:36:42:ba:28:f9:29:73:e8:b9:1e:36:31:96:4d:f9: 36:c2:6c:96:b8:45:81:5a:eb:5c:33:ab:76:63:54:f2:42:81: a3:4f:41:25:bf:aa:57:59:30:ef:64:78:fd:f3:15:4e:52:1b: e1:65:b2:54:16:2b:7b:39:be:ad:d0:b9:34:32:47:f1:12:70: 38:84:30:f1:6b:3e:c3:c2:38:b1:e4:af:2b:76:28:4e:e4:99: 8e:d6:27:4b:64:37:07:94:63:5e:1f:8f:f4:cb:8b:f6:cc:59: 7f:5a:a0:71:ae:14:44:4e:6c:19:66:ba:e5:4f:cb:d4:32:d1: 2f:7b:64:a6:f1:72:11:74:12:5e:e5:43:de:74:a1:7b:f4:19: b6:13:9c:a4:44:07:a7:6f:e0:12:7a:9f:de:2e:20:1e:ed:04: a6:68:e7:55:f5:68:78:4e:f7:18:df:ef:65:c6:42:0e:dd:41: bc:76:d6:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkZQZAe1zyT9LAo4+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JiZWU5YjEtMWIzMy00OTUxLWE2MTctZWNiODBkOWJh ZDk5MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NDg3MzQ0YTktYmVjZS00NWM3LTljNmEtYWVmNzI3NmRlY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO8NTj9nDn7oh3tKDBd4tFZ283DTCvExSlbW 0/gWvIsm+Y8QIDXnp9pZo6h8F/2BhTLGOqu+6UDQWhjccGxZmAge4imw0TqY8+QE 4HcBW7U2FHNFgQucr9eO3ykPRKfh69CzxCgAOCQVyOa+Z+LfTHP0FZlMz5OJxFsH HreWWtEAWGxEwoNdnFb9e7jC4vRHDNETCwwdw6tbBwD/+GsPy76WBC5AYh2UMzQG VMSk5Jpm72uK/UxpT9j7JQRsc90xMuxP236gZTkCtPsb+8aZ429ntpHuUyxl7UZa FRK94zbQH0AHK11jqAKRtyQZynyIJqChqLC7GAJPFEc9szv78wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMrGuKxrPwcrxjKC4+Cye6rE5z28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YmJl ZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4MGQ5YmFkOTkvMmI5YjkwZjItZWNiZS0z Y2Q5LThjN2EtYzY1NWVmODQxMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2JiZWU5YjEtMWIzMy00OTUxLWE2 MTctZWNiODBkOWJhZDk5LzdiYmVlOWIxLTFiMzMtNDk1MS1hNjE3LWVjYjgwZDli YWQ5OS5jcmwwHwYDVR0jBBgwFoAUKSL34vJ0kytfzKQDs/xSZeeGwpowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83YmJlZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4 MGQ5YmFkOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgefQAA1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKN+c2Lk5s75AVpwNmFYD0G5pP4WTHTCK42ohBdwQR/amfrI5RcZ F5wXOzt+7aLRtUkTHZ2+Z+HYvH3cBue0+RrMblLMTDV/0h8FKTZCuij5KXPouR42 MZZN+TbCbJa4RYFa61wzq3ZjVPJCgaNPQSW/qldZMO9keP3zFU5SG+FlslQWK3s5 vq3QuTQyR/EScDiEMPFrPsPCOLHkryt2KE7kmY7WJ0tkNweUY14fj/TLi/bMWX9a oHGuFERObBlmuuVPy9Qy0S97ZKbxchF0El7lQ950oXv0GbYTnKREB6dv4BJ6n94u IB7tBKZo51X1aHhO9xjf72XGQg7dQbx21iw= -----END CERTIFICATE-----Generated at Fri Mar 14 08:24:19 2025 by rpki-client