$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa File: 9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa (raw, json) Hash identifier: fvcDdl3A4qIMOzM0f2IOzphkCk6YBR+LCOjqSrB9/Q8= Subject key identifier: EE:7F:33:16:D1:C2:37:02:64:BC:29:6A:EF:44:DE:4D:66:9E:16:70 Certificate issuer: /CN=cba86acd-9af7-450a-ac5c-6c872671a7a3 Certificate serial: 010D0C9F43285848CDE10C945EFDE2D3B3847500 Authority key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 36222 IP address blocks: 2604:d9c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:0c:94:5e:fd:e2:d3:b3:84:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=290b6f25-b465-4851-bc03-6cc34307ccab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:e4:33:30:14:61:d0:0b:bf:80:84:6b:62: 98:21:3d:f0:dc:3a:74:71:38:f1:d1:75:3b:31:51: b3:ce:95:1d:c0:38:91:bb:c1:8d:c1:6b:06:63:41: 21:f7:be:ab:cd:e6:e6:8f:7e:ee:06:ce:77:31:ab: 6f:8c:88:41:51:5c:b9:f4:c7:e5:45:c0:37:1b:54: 51:1a:ca:ca:03:09:2a:b2:bd:fb:5f:53:74:0d:aa: ae:da:95:9d:a6:7f:b6:65:9d:3b:d9:8a:04:e8:bc: fe:6b:08:0a:be:db:de:80:cd:10:bc:0b:69:f6:73: e4:42:df:f6:8a:d9:19:9f:e3:da:90:1c:71:7a:1e: 63:f5:d0:61:44:0a:f8:83:03:da:bc:e2:26:14:93: 0a:42:3e:20:76:ce:b1:fb:9c:cf:8c:97:f7:e3:0c: 9e:43:8c:99:f0:1c:a7:21:5f:da:2f:24:7c:d7:00: af:b1:d6:6e:2b:74:cb:cc:58:20:68:ce:14:a7:34: 99:bf:b4:d1:14:77:a6:f6:f7:f4:0d:d4:9e:8a:1f: be:b8:5e:3a:8d:38:80:b6:04:fa:6c:4d:84:5e:ae: c2:ee:fc:92:f7:b5:2a:e2:5e:ec:ca:d1:8b:bb:2c: ae:71:6e:77:00:c1:7f:0b:4c:b2:b6:19:d3:38:93: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7F:33:16:D1:C2:37:02:64:BC:29:6A:EF:44:DE:4D:66:9E:16:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl X509v3 Authority Key Identifier: keyid:AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer sbgp-ipAddrBlock: critical IPv6: 2604:d9c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:0f:7f:95:b2:98:9d:27:0a:15:a6:8e:6d:9e:59:1f:09:2e: f0:e7:53:18:f4:3e:e3:6e:30:c5:ba:0e:ec:19:71:b1:bd:61: 50:50:29:0a:38:ea:88:79:44:7d:b5:45:7b:34:e7:c5:f7:cb: 71:b6:73:39:b0:f5:04:d5:16:a2:05:30:30:d0:ba:7a:7c:5f: 79:71:18:50:c9:b8:22:63:ca:53:7d:b8:f9:6c:23:9c:81:74: 6d:88:28:ec:13:0e:ee:23:40:49:f1:b4:26:26:92:34:6b:ff: 3f:c2:b6:b7:43:37:14:ab:f1:da:1a:f5:1a:0e:d4:6e:67:c0: 10:4c:a3:08:63:e4:2c:7e:26:f3:ad:df:b7:42:7b:17:a8:48: a3:4d:78:44:10:5c:55:b6:90:20:85:4f:05:0a:f5:32:f5:75: be:34:b7:fe:05:b9:97:f8:d1:db:b2:fc:90:15:03:43:38:e0: 36:0f:6c:6b:62:37:57:f0:e7:68:93:ea:f6:0b:6c:b0:98:95: 20:9b:98:56:79:a4:e8:72:0f:60:71:f3:c7:1f:fc:f6:17:d9: b0:fa:23:4d:0e:7e:33:de:72:1d:0d:98:9b:f4:5a:fe:12:03: b0:5e:ad:a6:b4:41:b4:88:dc:3a:45:7f:71:a0:d2:9d:3a:5c: f8:a7:f8:f9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QyUXv3i07OEdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JhODZhY2QtOWFmNy00NTBhLWFjNWMtNmM4NzI2NzFh N2EzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MjkwYjZmMjUtYjQ2NS00ODUxLWJjMDMtNmNjMzQzMDdjY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSXkMzAUYdALv4CEa2KYIT3w3Dp0cTjx0XU7 MVGzzpUdwDiRu8GNwWsGY0Eh976rzebmj37uBs53MatvjIhBUVy59MflRcA3G1RR GsrKAwkqsr37X1N0Daqu2pWdpn+2ZZ072YoE6Lz+awgKvtvegM0QvAtp9nPkQt/2 itkZn+PakBxxeh5j9dBhRAr4gwPavOImFJMKQj4gds6x+5zPjJf34wyeQ4yZ8Byn IV/aLyR81wCvsdZuK3TLzFggaM4UpzSZv7TRFHem9vf0DdSeih++uF46jTiAtgT6 bE2EXq7C7vyS97Uq4l7sytGLuyyucW53AMF/C0yythnTOJO+TQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO5/MxbRwjcCZLwpau9E3k1mnhZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYmE4 NmFjZC05YWY3LTQ1MGEtYWM1Yy02Yzg3MjY3MWE3YTMvOTM4M2M1ZmEtNjZiYS0z ZTIwLThkMmYtMzQwOWUyOTFjZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2JhODZhY2QtOWFmNy00NTBhLWFj NWMtNmM4NzI2NzFhN2EzL2NiYTg2YWNkLTlhZjctNDUwYS1hYzVjLTZjODcyNjcx YTdhMy5jcmwwHwYDVR0jBBgwFoAUrjSM2vaXuh9jjWu2Z60noyVvHiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYmE4NmFjZC05YWY3LTQ1MGEtYWM1Yy02Yzg3 MjY3MWE3YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTZwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJD3+VspidJwoVpo5tnlkfCS7w51MY9D7jbjDFug7sGXGxvWFQUCkK OOqIeUR9tUV7NOfF98txtnM5sPUE1RaiBTAw0Lp6fF95cRhQybgiY8pTfbj5bCOc gXRtiCjsEw7uI0BJ8bQmJpI0a/8/wra3QzcUq/HaGvUaDtRuZ8AQTKMIY+Qsfibz rd+3QnsXqEijTXhEEFxVtpAghU8FCvUy9XW+NLf+BbmX+NHbsvyQFQNDOOA2D2xr YjdX8Odok+r2C2ywmJUgm5hWeaTocg9gcfPHH/z2F9mw+iNNDn4z3nIdDZib9Fr+ EgOwXq2mtEG0iNw6RX9xoNKdOlz4p/j5 -----END CERTIFICATE-----Generated at Sun Apr 6 04:34:53 2025 by rpki-client