$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa File: 9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa (raw, json) Hash identifier: PSFhiv1cN23rNAoUJyVfSacF09vSX9zs/Lb2qs1rpJo= Subject key identifier: 68:4B:94:BD:16:8B:87:19:37:E8:E1:1C:BD:64:77:2B:05:70:62:11 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F43285848748B1F675F8DA770F8C0A200 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa Signing time: Mon 06 Jan 2025 14:00:52 +0000 ROA not before: Mon 06 Jan 2025 14:00:52 +0000 ROA not after: Sun 06 Apr 2025 13:00:52 +0000 asID: 11290 IP address blocks: 2604:4d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:8b:1f:67:5f:8d:a7:70:f8:c0:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 6 14:00:52 2025 GMT Not After : Apr 6 13:00:52 2025 GMT Subject: CN=7620d91d-0c1b-4e38-9e54-22236c09e976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d8:02:4b:0c:13:c7:73:ed:cd:b8:65:fc:71: 58:8d:17:c4:60:72:6b:d6:e0:27:3e:82:82:ae:83: b3:76:48:71:ea:b5:b9:4c:4c:c2:73:75:e1:22:e1: e7:ce:41:3d:97:69:00:98:2a:85:ff:d0:b3:5f:d3: 1c:00:b3:59:6d:06:74:12:cf:88:89:24:b9:cb:2a: d6:fc:17:c5:45:29:8b:42:c3:cd:d5:30:59:cb:9c: a3:0f:2c:b1:33:e8:2e:25:1b:86:5e:c8:6f:12:dd: 7d:8f:d3:2e:bd:15:f6:0a:cd:6b:9a:34:7c:58:7a: 35:1b:cc:79:b0:5c:fa:f5:25:2f:5e:f2:9e:9e:63: 30:3a:33:2b:91:6d:80:f6:3a:15:30:9b:1d:8e:9c: 3b:04:6c:15:47:4a:a5:e2:85:19:3d:2f:e8:36:21: 73:85:87:ab:a1:bd:83:fc:d5:64:f9:64:5c:b3:ce: b4:a4:f3:3a:19:87:e4:4c:b4:f8:6e:28:7b:5b:b3: 1d:88:99:30:0c:da:a4:87:1f:dd:77:82:c6:3a:e2: b4:d3:64:94:0f:27:b3:7f:04:1b:1c:ca:97:be:85: fc:3a:84:70:7e:6a:7b:d5:76:fd:d4:a9:6c:01:05: ae:c8:8d:fe:2e:7d:06:4e:86:33:d3:10:14:61:b5: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4B:94:BD:16:8B:87:19:37:E8:E1:1C:BD:64:77:2B:05:70:62:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv6: 2604:4d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:c6:9c:4e:16:df:03:33:d2:8c:2a:ac:49:63:31:e1:81:0a: 55:4c:8c:86:8d:37:b8:21:2d:a3:bc:38:64:94:21:6e:f5:6c: 75:5c:72:b4:6e:0e:58:29:76:79:b9:c9:d7:78:8a:0f:1a:cf: d7:85:6e:06:2d:bb:1a:74:4d:7d:5f:b8:1b:f4:ae:21:c8:66: b9:ca:9b:93:88:71:23:12:f5:6b:35:c2:1d:8b:93:d1:88:ab: 8b:6a:4a:12:2c:3b:cb:5f:82:a8:0c:21:39:62:24:ee:47:38: 8a:0a:26:82:30:80:82:66:2f:8f:e9:9d:7a:c7:e7:26:7b:46: 8c:08:67:6e:7b:07:8e:c5:e3:64:a3:52:53:a4:8c:c3:21:a8: 05:52:70:34:78:b9:97:f2:01:c1:f2:d3:61:67:d7:a9:76:91: b1:3c:d3:b5:f0:ab:05:83:ba:dd:21:a7:9f:8a:5d:07:6f:de: 28:62:67:87:34:c4:b9:58:98:9e:6a:f1:4c:69:30:8d:ce:a5: 70:54:c2:20:a9:ea:3d:04:34:b9:0d:d6:72:c4:7d:42:f6:2f: 66:0d:6c:70:59:cb:40:b5:1f:03:df:b7:dd:2d:9d:da:c8:0c: d2:fd:70:63:25:24:f0:39:c9:de:99:60:e6:05:2a:21:80:fc: 52:2f:af:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEh0ix9nX42ncPjAogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk NzYyMGQ5MWQtMGMxYi00ZTM4LTllNTQtMjIyMzZjMDllOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69gCSwwTx3Ptzbhl/HFYjRfEYHJr1uAnPoKC roOzdkhx6rW5TEzCc3XhIuHnzkE9l2kAmCqF/9CzX9McALNZbQZ0Es+IiSS5yyrW /BfFRSmLQsPN1TBZy5yjDyyxM+guJRuGXshvEt19j9MuvRX2Cs1rmjR8WHo1G8x5 sFz69SUvXvKenmMwOjMrkW2A9joVMJsdjpw7BGwVR0ql4oUZPS/oNiFzhYerob2D /NVk+WRcs860pPM6GYfkTLT4bih7W7MdiJkwDNqkhx/dd4LGOuK002SUDyezfwQb HMqXvoX8OoRwfmp71Xb91KlsAQWuyI3+Ln0GToYz0xAUYbXCYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGhLlL0Wi4cZN+jhHL1kdysFcGIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvOTc5NGZmOGQtMWVmYS0z NzY1LTlkNjktOGMzMWFlNmEyZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRNgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBMxpxOFt8DM9KMKqxJYzHhgQpVTIyGjTe4IS2jvDhklCFu9Wx1XHK0 bg5YKXZ5ucnXeIoPGs/XhW4GLbsadE19X7gb9K4hyGa5ypuTiHEjEvVrNcIdi5PR iKuLakoSLDvLX4KoDCE5YiTuRziKCiaCMICCZi+P6Z16x+cme0aMCGdueweOxeNk o1JTpIzDIagFUnA0eLmX8gHB8tNhZ9epdpGxPNO18KsFg7rdIaefil0Hb94oYmeH NMS5WJieavFMaTCNzqVwVMIgqeo9BDS5DdZyxH1C9i9mDWxwWctAtR8D37fdLZ3a yAzS/XBjJSTwOcnemWDmBSohgPxSL6+K -----END CERTIFICATE-----Generated at Fri Mar 14 11:19:36 2025 by rpki-client