$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa File: cfc0aa13-2df9-3952-848a-2c1df7879358.roa (raw, json) Hash identifier: KCsfK8CEU/PGipX3o6AS68BixRZK4YBzqfv+U0UuVls= Subject key identifier: 2D:D3:D3:FF:72:59:08:B5:C6:95:6D:2F:AA:10:6B:E7:91:BF:2A:D4 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584949FE9286A10F90FDED1C7500 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 393885 IP address blocks: 2604:4a00:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:92:86:a1:0f:90:fd:ed:1c:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=744d06d2-8470-41ed-8bef-aa33d343b11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:24:00:41:13:6d:1a:6d:6f:aa:4b:1a:95:fd: f9:a4:d6:76:ff:81:81:13:9d:b8:91:2c:be:96:3a: 90:15:82:dc:eb:98:83:4b:5d:14:ff:b9:2d:6f:5e: 84:df:c7:0e:42:6a:cd:4e:09:d3:82:29:4b:89:c9: b3:e8:12:29:00:ee:8c:93:a8:58:dc:ec:c4:19:ce: 99:fc:86:73:4a:8a:76:3c:46:c4:1e:47:51:06:65: 88:79:34:5c:2b:ea:b3:18:73:41:85:74:29:39:bd: e9:9b:b0:3c:1c:59:1e:78:aa:f9:95:a3:4d:f0:ab: 10:3b:e6:b9:ef:0e:54:4b:c8:1a:1d:e3:1a:8b:86: c0:62:79:8c:2c:80:f1:e3:47:cf:92:da:45:b0:cf: ad:15:28:74:2b:10:38:da:05:4d:1d:29:f2:b3:e4: 07:18:ee:2a:26:1d:f2:ee:92:e9:ca:84:4b:8a:71: 55:e6:b7:d6:10:4a:07:cd:59:df:e9:0b:7b:e2:b9: 1d:20:41:13:03:2d:83:b2:47:19:23:ab:e1:20:ca: a7:a2:b2:50:83:bf:3c:00:4a:6b:5e:a8:fb:6d:80: af:b7:7d:73:a6:fc:54:0f:d8:3d:9f:94:33:a7:26: 97:88:8f:41:43:f9:ac:64:e7:57:fc:26:dc:58:85: 73:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D3:D3:FF:72:59:08:B5:C6:95:6D:2F:AA:10:6B:E7:91:BF:2A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a00:f000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:f5:db:04:1d:5d:0b:b9:46:79:b7:52:f6:9f:2a:20:da:25: 12:b7:4e:e5:95:97:53:2d:a4:ff:c6:f5:28:1a:c2:59:91:09: 68:91:63:f4:2d:8e:27:6c:20:19:6d:1e:17:36:ea:eb:86:db: b5:24:42:6f:a7:4d:3a:08:5a:16:57:4f:73:df:85:e6:62:6a: 92:c2:bd:90:b3:03:12:5e:72:57:a7:df:7a:fe:08:fb:a3:ce: 87:28:7e:2c:75:3c:ba:cb:c3:f3:bc:2e:f4:ea:76:6b:50:f7: 76:50:ea:f1:59:c3:58:5a:76:7c:43:b8:9a:6a:49:1e:1e:b8: 00:e3:bd:3d:10:8f:f2:e5:1d:34:e0:97:83:05:ac:d7:38:25: 1e:43:03:d0:96:93:7c:4e:fa:98:a3:b0:02:5e:c6:c6:87:69: 43:3b:fa:1b:1a:74:db:75:f2:18:68:0e:3a:20:e2:5b:01:58: 45:be:8a:22:61:17:49:f3:1c:ab:6e:a0:24:a9:59:04:29:1e: 24:50:c1:b6:18:d5:17:bf:07:13:a9:67:92:34:cb:cc:80:ca: 3f:98:9e:b7:e4:cf:4a:46:ef:fa:23:d3:c2:1b:5d:6f:81:2c: 85:02:8a:cb:aa:d9:4b:43:98:04:f5:ea:73:0d:5e:14:f4:38: ed:a1:6d:5b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElJ/pKGoQ+Q/e0cdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk NzQ0ZDA2ZDItODQ3MC00MWVkLThiZWYtYWEzM2QzNDNiMTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyQAQRNtGm1vqksalf35pNZ2/4GBE524kSy+ ljqQFYLc65iDS10U/7ktb16E38cOQmrNTgnTgilLicmz6BIpAO6Mk6hY3OzEGc6Z /IZzSop2PEbEHkdRBmWIeTRcK+qzGHNBhXQpOb3pm7A8HFkeeKr5laNN8KsQO+a5 7w5US8gaHeMai4bAYnmMLIDx40fPktpFsM+tFSh0KxA42gVNHSnys+QHGO4qJh3y 7pLpyoRLinFV5rfWEEoHzVnf6Qt74rkdIEETAy2DskcZI6vhIMqnorJQg788AEpr Xqj7bYCvt31zpvxUD9g9n5QzpyaXiI9BQ/msZOdX/CbcWIVzFwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC3T0/9yWQi1xpVtL6oQa+eRvyrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvY2ZjMGFhMTMtMmRmOS0z OTUyLTg0OGEtMmMxZGY3ODc5MzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKAPAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAxfXbBB1dC7lGebdS9p8qINolErdO5ZWXUy2k/8b1KBrCWZEJaJFj 9C2OJ2wgGW0eFzbq64bbtSRCb6dNOghaFldPc9+F5mJqksK9kLMDEl5yV6ffev4I +6POhyh+LHU8usvD87wu9Op2a1D3dlDq8VnDWFp2fEO4mmpJHh64AOO9PRCP8uUd NOCXgwWs1zglHkMD0JaTfE76mKOwAl7GxodpQzv6Gxp023XyGGgOOiDiWwFYRb6K ImEXSfMcq26gJKlZBCkeJFDBthjVF78HE6lnkjTLzIDKP5iet+TPSkbv+iPTwhtd b4EshQKKy6rZS0OYBPXqcw1eFPQ47aFtWw== -----END CERTIFICATE-----Generated at Sat Apr 12 10:10:41 2025 by rpki-client