$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa File: ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa (raw, json) Hash identifier: XzEddIg7FHGDPOqQMCJztg+CE5Ci3hq6ToYI5lCPWH8= Subject key identifier: 99:A3:1D:EB:1B:25:2D:34:30:92:0C:EC:01:C1:CC:4E:BA:07:D4:63 Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Certificate serial: 010D0C9F432858491246C8C4901A3644A2ACD170 Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 2607:d540:fc0::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c8:c4:90:1a:36:44:a2:ac:d1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=aaa20c54-369a-4feb-8213-ea211ea4a6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:6c:f2:8c:ba:8a:96:2f:ab:d8:ac:b4:63: 77:40:b9:d0:30:7a:b6:8f:5b:7c:9b:dc:c1:8a:d6: bb:fa:70:b2:b9:ef:74:0c:ee:16:cb:1f:da:70:b9: 78:cd:48:b4:0a:c6:78:19:df:b2:29:60:fb:3e:d7: c9:d3:fa:ba:83:18:1f:dd:6f:ea:8c:35:71:c7:a1: 20:3f:7a:04:b6:8b:99:22:f1:ad:ec:22:20:ab:13: 7b:a0:90:1e:e4:ee:0d:1f:96:4a:a0:b6:9c:3b:28: 45:c6:06:48:a8:72:0f:e8:f9:49:05:4c:ae:cc:a7: 82:c1:50:8f:3a:37:92:79:3d:46:76:aa:26:06:4d: 08:18:6f:f9:d2:64:49:08:94:ec:3f:5e:88:d3:fb: 35:c5:de:66:c7:08:ca:9f:e1:fe:e2:a4:f2:3f:7e: 1f:b3:ef:33:87:59:41:08:f8:ad:44:4e:25:36:cd: 3a:f4:85:e0:15:2d:21:13:73:57:62:03:ad:f0:46: 58:79:69:9d:d2:05:9c:8c:e2:71:84:29:4b:a9:d1: 1b:97:4f:6d:c0:51:01:b7:43:78:04:b8:e0:41:ac: 93:9a:82:dd:6d:c7:fc:a7:d7:ed:81:1d:d7:01:e9: ac:4b:25:a0:eb:a5:f9:81:db:3f:74:00:48:a0:06: 43:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A3:1D:EB:1B:25:2D:34:30:92:0C:EC:01:C1:CC:4E:BA:07:D4:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl X509v3 Authority Key Identifier: keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer sbgp-ipAddrBlock: critical IPv6: 2607:d540:fc0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:67:a6:7c:66:0f:ad:4a:25:fe:48:af:4b:81:ca:66:be:cd: 52:7e:c2:62:8c:45:6f:6d:cd:ed:96:ed:8c:9c:13:27:e2:50: 14:f9:3e:6b:38:1d:64:b5:da:a6:13:a5:56:d8:f2:34:3c:65: c5:0e:ac:88:45:47:dd:53:d0:b7:94:23:08:33:f3:87:46:8f: e4:32:e5:5c:02:46:10:0a:70:ce:fc:33:a8:56:47:60:16:94: 74:f8:20:96:7d:79:86:eb:d0:98:23:4d:18:d3:f3:c8:da:61: 6f:ef:32:79:77:93:0c:93:47:63:43:cd:0d:7d:e7:5a:e0:95: b6:5f:b3:6d:8d:15:ac:cd:d5:40:e8:20:38:60:5f:58:1f:a0: 11:f5:e0:31:6a:04:bc:9c:c9:8b:59:03:c3:fa:ca:e1:2b:19: 1e:a8:fa:24:12:53:15:dd:d0:6d:89:27:1c:94:b5:46:27:5e: d1:4c:22:e8:63:a7:56:7a:a6:04:07:55:c8:16:13:69:49:31: 12:62:29:28:55:a1:90:46:ab:52:28:46:dc:44:ed:e6:8c:8c: 5c:85:d8:d4:9f:b7:05:54:b0:d1:c3:2a:3a:57:99:e2:00:6d: d6:53:92:0d:60:f9:d9:66:21:4a:f4:58:94:90:44:fe:55:b0: e4:c3:d8:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRsjEkBo2RKKs0XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ4MGRhYTUtNzlkYy00YzJhLTg4NzktMjQ4YTNmM2Uz MzljMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YWFhMjBjNTQtMzY5YS00ZmViLTgyMTMtZWEyMTFlYTRhNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6xs8oy6ipYvq9istGN3QLnQMHq2j1t8m9zB ita7+nCyue90DO4Wyx/acLl4zUi0CsZ4Gd+yKWD7PtfJ0/q6gxgf3W/qjDVxx6Eg P3oEtouZIvGt7CIgqxN7oJAe5O4NH5ZKoLacOyhFxgZIqHIP6PlJBUyuzKeCwVCP OjeSeT1GdqomBk0IGG/50mRJCJTsP16I0/s1xd5mxwjKn+H+4qTyP34fs+8zh1lB CPitRE4lNs069IXgFS0hE3NXYgOt8EZYeWmd0gWcjOJxhClLqdEbl09twFEBt0N4 BLjgQayTmoLdbcf8p9ftgR3XAemsSyWg66X5gds/dABIoAZDZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJmjHesbJS00MJIM7AHBzE66B9RjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgw ZGFhNS03OWRjLTRjMmEtODg3OS0yNDhhM2YzZTMzOWMvY2VhZjViNmMtNzY1OS0z YWZhLWIzNWEtMDExZmQxZDdhYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGQ4MGRhYTUtNzlkYy00YzJhLTg4 NzktMjQ4YTNmM2UzMzljLzRkODBkYWE1LTc5ZGMtNGMyYS04ODc5LTI0OGEzZjNl MzM5Yy5jcmwwHwYDVR0jBBgwFoAURSS0Po4TMO3Vlg05oMUNPZbAVvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgwZGFhNS03OWRjLTRjMmEtODg3OS0yNDhh M2YzZTMzOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgfVQA/A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFNnpnxmD61KJf5Ir0uByma+zVJ+wmKMRW9tze2W7YycEyfiUBT5 Pms4HWS12qYTpVbY8jQ8ZcUOrIhFR91T0LeUIwgz84dGj+Qy5VwCRhAKcM78M6hW R2AWlHT4IJZ9eYbr0JgjTRjT88jaYW/vMnl3kwyTR2NDzQ1951rglbZfs22NFazN 1UDoIDhgX1gfoBH14DFqBLycyYtZA8P6yuErGR6o+iQSUxXd0G2JJxyUtUYnXtFM Iuhjp1Z6pgQHVcgWE2lJMRJiKShVoZBGq1IoRtxE7eaMjFyF2NSftwVUsNHDKjpX meIAbdZTkg1g+dlmIUr0WJSQRP5VsOTD2G0= -----END CERTIFICATE-----Generated at Fri Apr 4 23:29:09 2025 by rpki-client