$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa File: 9fa98f84-5902-38d4-b16f-becadb732860.roa (raw, json) Hash identifier: 2jILNZ067vt76mYHNzVWu03RoTni9bUQDU+C+mMAB0I= Subject key identifier: 06:17:B4:23:DA:75:EA:81:3B:E8:B3:0C:76:8C:AE:45:42:F1:57:54 Certificate issuer: /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Certificate serial: 010D0C9F432858494B64059AAFDECF38F5EE79C0 Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 14866 IP address blocks: 2604:4280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:05:9a:af:de:cf:38:f5:ee:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=dc02af7b-1919-4817-8760-1cd978223be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:35:45:88:7f:40:37:b4:74:cb:1b:7e:d1: ba:85:56:17:aa:d8:c7:55:b1:d5:02:11:40:ca:87: 5d:47:1c:80:d9:13:d5:6a:c5:96:03:ce:cc:8e:4b: 42:68:30:31:b5:f7:96:43:98:78:e9:e8:47:66:42: b7:55:87:bd:31:8c:45:23:9f:e4:d2:90:87:fa:af: 10:99:58:d3:2c:e5:1e:5e:7a:f0:cf:51:34:d6:d2: 2a:83:d1:6c:6c:f7:b3:1e:3a:87:ac:cb:b6:96:24: 95:ea:12:b2:d4:fe:12:66:be:ba:bd:ce:df:51:67: 14:86:ff:82:21:4c:3c:bf:78:19:db:48:fb:3c:d6: 3c:7d:49:d3:96:6a:d9:1d:1c:79:f9:5d:0c:f5:d7: 62:56:28:8b:14:a0:65:b5:f9:6c:8f:fc:d6:31:4e: 88:3c:c0:61:7d:32:09:5d:4c:83:2b:e3:25:57:04: c5:4f:4e:1f:a8:ff:6f:f8:a7:70:3a:7a:e0:d6:67: a3:a6:9e:82:e6:d8:82:85:3f:69:75:26:0b:1f:f5: 98:93:4f:86:ea:e2:6f:f5:62:0b:66:37:ba:fa:d1: e8:11:a8:a4:65:65:9c:c7:df:1f:97:f2:0a:28:54: 88:a4:bf:52:80:6d:90:2e:95:ac:e2:54:fc:0e:23: bd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:17:B4:23:DA:75:EA:81:3B:E8:B3:0C:76:8C:AE:45:42:F1:57:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl X509v3 Authority Key Identifier: keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer sbgp-ipAddrBlock: critical IPv6: 2604:4280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:49:1c:f6:dd:89:6b:ac:a2:af:96:7f:48:12:65:f6:c3:28: c9:4e:dd:25:01:20:bf:43:97:0a:cc:8d:c0:a6:87:c5:ed:40: d8:d0:8c:28:da:3d:df:a4:34:bf:22:d3:1a:bd:60:c2:bd:09: 0a:af:7c:dc:66:87:e5:44:5f:c8:ce:c8:be:12:af:ff:41:14: 80:17:0e:a7:b9:cb:be:79:5e:ba:d1:9c:27:e7:a1:0d:92:ea: c0:66:a0:c1:f7:30:50:51:a4:9a:06:04:6c:b1:2e:02:e5:60: ed:c3:f5:5d:91:d6:4f:37:20:a0:fe:11:9c:e0:fb:a2:f7:75: d0:18:d2:88:26:4c:76:0e:ef:79:10:af:b1:04:3d:e6:12:45: d5:4e:09:1c:9c:a0:2d:e0:cc:f5:a4:1d:59:92:20:53:88:ea: 50:47:ec:e0:20:f0:51:11:1b:cb:ea:f9:29:4e:bf:63:3b:68: 82:d2:c6:d0:ad:eb:c0:b8:90:61:24:61:8f:f6:53:20:26:8a: b1:70:a4:75:7a:9b:05:7c:ee:2b:7e:03:3c:da:e9:b5:06:b1: bb:00:c5:f9:f4:0c:90:98:30:fa:f6:16:20:84:2a:8b:e1:24: 93:05:82:7d:27:82:96:05:4d:f1:21:81:d9:9f:d4:ad:23:9b: bb:d5:31:b7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZAWar97POPXuecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdhMzJjZGYtYWY0YS00N2Q1LTg2ZGMtZTljZGNmNjhj MjU5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZGMwMmFmN2ItMTkxOS00ODE3LTg3NjAtMWNkOTc4MjIzYmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCw1RYh/QDe0dMsbftG6hVYXqtjHVbHVAhFA yoddRxyA2RPVasWWA87MjktCaDAxtfeWQ5h46ehHZkK3VYe9MYxFI5/k0pCH+q8Q mVjTLOUeXnrwz1E01tIqg9FsbPezHjqHrMu2liSV6hKy1P4SZr66vc7fUWcUhv+C IUw8v3gZ20j7PNY8fUnTlmrZHRx5+V0M9ddiViiLFKBltflsj/zWMU6IPMBhfTIJ XUyDK+MlVwTFT04fqP9v+KdwOnrg1mejpp6C5tiChT9pdSYLH/WYk0+G6uJv9WIL Zje6+tHoEaikZWWcx98fl/IKKFSIpL9SgG2QLpWs4lT8DiO9BwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAYXtCPadeqBO+izDHaMrkVC8VdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mN2Ez MmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNkY2Y2OGMyNTkvOWZhOThmODQtNTkwMi0z OGQ0LWIxNmYtYmVjYWRiNzMyODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjdhMzJjZGYtYWY0YS00N2Q1LTg2 ZGMtZTljZGNmNjhjMjU5L2Y3YTMyY2RmLWFmNGEtNDdkNS04NmRjLWU5Y2RjZjY4 YzI1OS5jcmwwHwYDVR0jBBgwFoAUns2WOXoXY3LPoEdHHjUTuHN2FuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mN2EzMmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNk Y2Y2OGMyNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRCgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC7SRz23YlrrKKvln9IEmX2wyjJTt0lASC/Q5cKzI3ApofF7UDY0Iwo 2j3fpDS/ItMavWDCvQkKr3zcZoflRF/Izsi+Eq//QRSAFw6nucu+eV660Zwn56EN kurAZqDB9zBQUaSaBgRssS4C5WDtw/VdkdZPNyCg/hGc4Pui93XQGNKIJkx2Du95 EK+xBD3mEkXVTgkcnKAt4Mz1pB1ZkiBTiOpQR+zgIPBRERvL6vkpTr9jO2iC0sbQ revAuJBhJGGP9lMgJoqxcKR1epsFfO4rfgM82um1BrG7AMX59AyQmDD69hYghCqL 4SSTBYJ9J4KWBU3xIYHZn9StI5u71TG3 -----END CERTIFICATE-----Generated at Fri Apr 4 16:02:36 2025 by rpki-client