$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/3d1824af-5e0a-30b8-9547-2f81c0164b04.roa File: 3d1824af-5e0a-30b8-9547-2f81c0164b04.roa (raw, json) Hash identifier: rjLEGICfWIx6Yr6fhl/ywmbmnNiBa3FN1fK7eIdcwTQ= Subject key identifier: 5D:2E:95:0D:09:38:67:ED:DF:95:0D:99:F2:53:A8:B5:E4:C6:08:97 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584949FE9242D697D35845422C00 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/3d1824af-5e0a-30b8-9547-2f81c0164b04.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 393885 IP address blocks: 2604:4a00:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:92:42:d6:97:d3:58:45:42:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=b16071f1-1238-412f-8312-a2c16360061b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:e0:cd:1f:c5:6f:df:98:fc:ca:12:bd:26: ba:dc:6e:78:24:9d:c8:c8:1e:fb:07:7a:f6:c1:3e: 57:ba:8d:6c:bc:e8:40:12:9b:80:b4:ae:b5:95:61: 13:84:c5:22:1d:cd:c7:b4:a3:b8:f5:f6:93:a2:f9: 04:c3:4f:ff:bf:ee:69:0c:e3:c5:6b:76:6b:6c:06: 60:d0:c3:47:b3:62:e9:5f:48:69:23:16:dc:a8:4b: 52:da:84:8b:f9:cb:30:26:98:d9:6b:30:93:04:33: cd:c4:3d:f7:fa:03:27:a1:c7:5b:24:97:89:1c:ab: 32:c4:11:d1:67:5c:a8:79:03:c3:dd:03:da:44:b2: 35:26:9c:23:e3:25:20:25:7b:72:80:0f:3c:7d:28: 6a:4d:cb:27:4d:69:17:4a:19:bd:e3:5a:c7:9b:47: d6:d7:6e:4e:84:39:a7:51:8e:e4:53:ae:bd:46:54: de:63:9d:8e:c6:e5:62:c8:5f:fd:e0:e5:74:70:61: 49:ef:ce:91:4b:73:50:2f:bb:db:f4:d2:9c:b4:1c: ca:96:a2:18:f9:a4:ba:28:95:20:d9:ff:cd:da:95: e0:42:1d:d0:f6:06:01:73:57:80:28:ad:fc:33:d9: 54:fb:76:b7:cf:74:cd:df:e9:55:f9:73:ad:eb:7d: a6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2E:95:0D:09:38:67:ED:DF:95:0D:99:F2:53:A8:B5:E4:C6:08:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/3d1824af-5e0a-30b8-9547-2f81c0164b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a00:c000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:9b:82:9b:1c:da:a3:83:71:85:79:11:76:bb:c2:af:da:ea: be:3f:e3:be:72:2a:41:c7:b5:0a:92:7f:df:92:2c:9d:a9:95: 24:b5:b2:48:7e:a0:db:20:01:9f:1d:ce:8a:e3:08:d5:d5:c6: 7b:c4:fc:4e:1b:ed:32:37:3c:dd:0b:f8:bf:ce:85:dc:54:09: e4:46:1e:2a:25:59:36:8d:4f:13:4c:92:47:44:0a:d4:81:43: 31:2a:0f:b0:2f:78:a7:1e:72:3d:68:eb:07:91:89:ec:d0:78: 9c:cf:3d:80:5f:ab:b9:3d:7b:68:e1:8c:54:cb:c6:be:6e:53: 82:da:9e:73:81:a3:8e:38:d2:b8:d7:2a:b9:f5:cc:a3:56:83: 89:5b:1d:b6:8d:d0:a5:ee:b8:06:97:91:17:ff:21:d2:a6:7a: 13:6f:06:33:ac:ee:da:20:02:ce:01:c0:fb:6b:66:da:8d:5c: fa:04:02:85:87:fb:43:80:7e:26:fa:7f:fb:a3:c2:cd:ab:07: 11:72:16:69:4d:09:7e:bd:8b:db:8b:a0:62:46:bf:c2:e8:b4: ee:ef:92:0c:03:01:82:c8:32:1c:2b:eb:e3:9b:0d:53:43:b8: 22:04:b3:6b:3d:68:53:a5:08:01:5a:cc:5f:9f:a0:93:bd:0f: b4:35:fe:43 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElJ/pJC1pfTWEVCLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk YjE2MDcxZjEtMTIzOC00MTJmLTgzMTItYTJjMTYzNjAwNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q7gzR/Fb9+Y/MoSvSa63G54JJ3IyB77B3r2 wT5Xuo1svOhAEpuAtK61lWEThMUiHc3HtKO49faTovkEw0//v+5pDOPFa3ZrbAZg 0MNHs2LpX0hpIxbcqEtS2oSL+cswJpjZazCTBDPNxD33+gMnocdbJJeJHKsyxBHR Z1yoeQPD3QPaRLI1Jpwj4yUgJXtygA88fShqTcsnTWkXShm941rHm0fW125OhDmn UY7kU669RlTeY52OxuViyF/94OV0cGFJ786RS3NQL7vb9NKctBzKlqIY+aS6KJUg 2f/N2pXgQh3Q9gYBc1eAKK38M9lU+3a3z3TN3+lV+XOt632mwQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF0ulQ0JOGft35UNmfJTqLXkxgiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvM2QxODI0YWYtNWUwYS0z MGI4LTk1NDctMmY4MWMwMTY0YjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKAMAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkJuCmxzao4NxhXkRdrvCr9rqvj/jvnIqQce1CpJ/35IsnamVJLWy SH6g2yABnx3OiuMI1dXGe8T8ThvtMjc83Qv4v86F3FQJ5EYeKiVZNo1PE0ySR0QK 1IFDMSoPsC94px5yPWjrB5GJ7NB4nM89gF+ruT17aOGMVMvGvm5Tgtqec4GjjjjS uNcqufXMo1aDiVsdto3Qpe64BpeRF/8h0qZ6E28GM6zu2iACzgHA+2tm2o1c+gQC hYf7Q4B+Jvp/+6PCzasHEXIWaU0Jfr2L24ugYka/wui07u+SDAMBgsgyHCvr45sN U0O4IgSzaz1oU6UIAVrMX5+gk70PtDX+Qw== -----END CERTIFICATE-----Generated at Sat Apr 19 14:02:05 2025 by rpki-client