$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/cfb31b8f-a5fb-37f7-a161-9c9f636180c7.roa File: cfb31b8f-a5fb-37f7-a161-9c9f636180c7.roa (raw, json) Hash identifier: 9vlQlbBH4dzvkMNEWOJFAtiBLpeUU+URAyr1AfAXMjs= Subject key identifier: 37:F6:35:38:D1:DB:55:D8:72:BA:31:24:70:73:DB:1A:57:D9:A7:F3 Certificate issuer: /CN=9df142df-6de2-47dc-be4f-bf09bdec0551 Certificate serial: 010D0C9F43285849605419916E6752E12DA40140 Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/cfb31b8f-a5fb-37f7-a161-9c9f636180c7.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 19229 IP address blocks: 2604:97c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:19:91:6e:67:52:e1:2d:a4:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=d59aa650-cb41-4321-890d-b5dab17b4774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:73:c5:87:50:dc:fe:55:70:7b:3a:85:a2:7b: 53:7e:50:a7:6e:6c:62:cd:08:d5:86:ea:9d:cd:2c: 9f:99:a8:86:c8:7f:6a:42:cd:8f:7d:fc:50:26:df: be:22:1c:65:4e:04:22:cc:a3:c3:37:1f:25:34:cd: 0c:54:2e:b5:cc:25:e1:3a:e4:13:4b:8d:4f:9b:24: 96:99:f9:dd:bf:c2:be:07:48:9d:e7:f7:e2:bc:00: 29:aa:95:d2:8c:98:0d:b6:a8:95:f9:7a:f3:c9:17: ab:9f:ef:70:ca:79:0d:89:e7:79:d5:26:a2:6a:f8: b3:32:ad:8a:12:6c:2d:97:f7:ed:3c:05:c5:0f:83: ce:85:d5:6c:ff:a1:8c:99:fa:d7:00:34:4a:2a:77: f2:5e:50:61:a3:d0:e8:a4:f7:72:d1:58:5c:4b:90: 4a:4e:65:c5:ec:89:51:0f:65:b1:fb:79:ff:1a:6c: 2b:2e:50:d9:9a:c7:ba:f8:47:aa:ba:7d:82:72:d4: 90:6d:6a:ba:d2:6d:13:f1:1d:9e:4b:ca:0c:89:34: 9f:f2:b3:d3:7e:04:77:c6:90:4a:cd:76:32:71:59: ee:68:ba:d8:68:71:5c:2c:00:a4:30:39:f5:7e:f7: 8f:64:fd:37:d9:dd:95:93:96:60:1c:56:95:45:86: c1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F6:35:38:D1:DB:55:D8:72:BA:31:24:70:73:DB:1A:57:D9:A7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/cfb31b8f-a5fb-37f7-a161-9c9f636180c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl X509v3 Authority Key Identifier: keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer sbgp-ipAddrBlock: critical IPv6: 2604:97c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:35:42:61:c7:6c:57:31:95:03:d4:7d:59:e5:91:ba:37:29: 18:b8:11:2d:f7:48:df:18:34:97:41:1a:aa:cd:3a:8f:4b:5a: 10:9a:19:80:d8:ba:35:df:83:6b:f9:e0:c4:8f:ee:1c:99:ab: 47:09:c2:f7:5a:75:4f:e8:3b:d3:d1:85:d6:5a:fb:9f:18:d1: 69:05:a8:06:6b:78:9d:aa:5b:ea:62:03:42:d1:b8:76:8b:cb: 63:16:8b:b6:e8:81:c7:50:8c:65:3e:49:c6:18:e6:08:29:83: 44:1d:fe:f2:55:7e:70:98:f0:a7:40:8d:ce:b9:67:1c:4e:b6: 1c:04:1a:f4:4f:10:ef:7e:0e:7b:cd:0d:fc:bf:11:b0:31:ab: c2:06:44:d0:8b:cd:7d:de:eb:d8:97:8f:0e:87:17:43:4d:c3: 47:8a:dd:60:6c:c6:83:e0:e6:89:c3:b3:4f:71:65:cd:67:94: c0:2a:34:d1:e7:79:17:a7:fd:8c:92:0f:c7:d3:22:e9:50:fb: 75:0d:79:cb:ba:7c:ba:cf:b9:d7:01:20:48:eb:3a:a6:90:92: ff:f9:7c:1b:97:05:12:d1:03:c5:dd:a1:0d:10:3b:60:28:c2: 97:86:12:a1:35:84:1d:25:d4:a1:e0:4b:fb:e5:9d:52:0d:bb: 9d:91:c5:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElgVBmRbmdS4S2kAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRmMTQyZGYtNmRlMi00N2RjLWJlNGYtYmYwOWJkZWMw NTUxMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk ZDU5YWE2NTAtY2I0MS00MzIxLTg5MGQtYjVkYWIxN2I0Nzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnPFh1Dc/lVwezqFontTflCnbmxizQjVhuqd zSyfmaiGyH9qQs2PffxQJt++IhxlTgQizKPDNx8lNM0MVC61zCXhOuQTS41PmySW mfndv8K+B0id5/fivAApqpXSjJgNtqiV+XrzyRern+9wynkNied51SaiavizMq2K Emwtl/ftPAXFD4POhdVs/6GMmfrXADRKKnfyXlBho9DopPdy0VhcS5BKTmXF7IlR D2Wx+3n/GmwrLlDZmse6+Eequn2CctSQbWq60m0T8R2eS8oMiTSf8rPTfgR3xpBK zXYycVnuaLrYaHFcLACkMDn1fvePZP032d2Vk5ZgHFaVRYbBqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDf2NTjR21XYcroxJHBz2xpX2afzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYx NDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5YmRlYzA1NTEvY2ZiMzFiOGYtYTVmYi0z N2Y3LWExNjEtOWM5ZjYzNjE4MGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWRmMTQyZGYtNmRlMi00N2RjLWJl NGYtYmYwOWJkZWMwNTUxLzlkZjE0MmRmLTZkZTItNDdkYy1iZTRmLWJmMDliZGVj MDU1MS5jcmwwHwYDVR0jBBgwFoAU9p1ZPdpWapm9hqkVZ8a+YNfZvIcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYxNDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5 YmRlYzA1NTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSXwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDUNUJhx2xXMZUD1H1Z5ZG6NykYuBEt90jfGDSXQRqqzTqPS1oQmhmA 2Lo134Nr+eDEj+4cmatHCcL3WnVP6DvT0YXWWvufGNFpBagGa3idqlvqYgNC0bh2 i8tjFou26IHHUIxlPknGGOYIKYNEHf7yVX5wmPCnQI3OuWccTrYcBBr0TxDvfg57 zQ38vxGwMavCBkTQi8193uvYl48OhxdDTcNHit1gbMaD4OaJw7NPcWXNZ5TAKjTR 53kXp/2Mkg/H0yLpUPt1DXnLuny6z7nXASBI6zqmkJL/+XwblwUS0QPF3aENEDtg KMKXhhKhNYQdJdSh4Ev75Z1SDbudkcUv -----END CERTIFICATE-----Generated at Sat Apr 5 12:10:12 2025 by rpki-client