$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa File: d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa (raw, json) Hash identifier: E8LmqZ2CTruXRkyaUw9aDi9ykIBfNmq352qby1WtEhs= Subject key identifier: E8:EC:7A:ED:96:17:76:64:5E:1E:20:27:CD:63:3B:38:3B:F5:97:5A Certificate issuer: /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Certificate serial: 010D0C9F4328584902EC1914231C365D6A43E140 Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 25899 IP address blocks: 2607:400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:19:14:23:1c:36:5d:6a:43:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=bb5223ec-2381-48b3-a8b5-cf1274092c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a1:0e:2a:5f:3a:fa:35:4c:c6:d0:78:d0:f9: ac:3f:28:0f:ec:06:fc:b8:d4:7a:b1:e5:74:ef:11: 36:38:97:b5:78:04:35:88:38:4b:70:6e:90:8b:da: 70:ee:42:90:7f:f1:3a:13:87:28:53:ca:2b:97:df: b4:8a:e2:0e:7c:d1:5b:3a:b3:b5:36:0e:29:fd:5f: 7d:88:60:98:49:34:98:01:d4:14:16:5d:37:3c:cf: 74:6d:ba:73:f7:22:e9:df:68:f1:b6:ea:3a:3d:21: 57:37:4a:96:97:84:c5:30:48:ab:12:40:a0:07:c6: 01:56:74:eb:41:ca:73:a3:e1:33:a3:0b:a8:c9:a9: 14:14:65:84:4c:5a:c3:eb:44:c9:42:97:2a:23:27: e7:4d:77:69:f2:33:22:a1:14:d3:a1:e1:1b:4d:99: 0a:81:52:8a:fa:5c:19:a0:a3:37:9f:fa:af:9f:17: 53:2d:4a:2f:f3:23:88:5e:fa:28:e3:99:11:a8:a3: 74:3b:20:b5:35:6c:38:ef:c1:80:19:a9:3c:79:dd: 0c:b5:6b:2e:74:ad:bf:f4:d0:2d:43:e9:ec:69:b6: fa:18:c4:ff:5d:c1:e9:e3:a2:52:c2:88:da:e5:bf: f2:45:f0:26:a8:a7:85:e8:a3:94:c7:1b:f8:36:85: b5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EC:7A:ED:96:17:76:64:5E:1E:20:27:CD:63:3B:38:3B:F5:97:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl X509v3 Authority Key Identifier: keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer sbgp-ipAddrBlock: critical IPv6: 2607:400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e3:1d:15:18:ce:ca:0f:13:44:90:5d:bb:85:de:89:63:19: 52:99:7f:9d:44:1c:c6:bf:bd:26:61:23:6b:36:26:2e:52:97: 37:54:1c:cb:c5:6d:e2:b9:e0:29:bb:2d:19:93:f4:7b:8b:42: 5c:b7:0e:b8:33:b1:ce:89:f4:0a:93:0f:c3:da:6a:0f:55:3c: 89:08:43:2c:ae:f5:60:dd:48:38:ba:d4:4a:8f:e8:c9:4b:a5: 97:48:b7:a4:63:57:e2:c3:97:bf:35:73:d7:96:76:69:30:f0: 6f:a6:63:ce:df:6c:70:35:94:97:01:b1:48:c4:4a:e9:61:ce: d4:ea:70:b7:f1:b2:4e:be:c6:e5:68:d2:b6:56:8d:2e:b9:9c: 57:f5:59:ee:72:ca:d1:10:06:86:9e:75:52:e6:70:c0:4f:65: d6:fe:b4:bc:49:13:28:3a:dc:c4:f5:17:e6:97:cb:9f:a2:7a: 84:ea:ca:d2:18:f1:2f:48:6d:12:05:4a:bb:4e:d7:ae:db:9f: f8:17:e3:60:18:e9:8c:f5:44:93:22:27:f9:81:95:55:4c:17: c0:ca:5b:5e:df:c2:1b:4a:4f:5a:00:fc:95:30:3a:a3:cd:3d: a9:7c:fe:c5:6a:03:82:ac:7d:f9:e8:0f:3d:67:0c:56:5a:a9: 8c:8b:a7:ba -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkC7BkUIxw2XWpD4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz ZmY0MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YmI1MjIzZWMtMjM4MS00OGIzLWE4YjUtY2YxMjc0MDkyYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KEOKl86+jVMxtB40PmsPygP7Ab8uNR6seV0 7xE2OJe1eAQ1iDhLcG6Qi9pw7kKQf/E6E4coU8orl9+0iuIOfNFbOrO1Ng4p/V99 iGCYSTSYAdQUFl03PM90bbpz9yLp32jxtuo6PSFXN0qWl4TFMEirEkCgB8YBVnTr Qcpzo+EzowuoyakUFGWETFrD60TJQpcqIyfnTXdp8jMioRTToeEbTZkKgVKK+lwZ oKM3n/qvnxdTLUov8yOIXvoo45kRqKN0OyC1NWw478GAGak8ed0MtWsudK2/9NAt Q+nsabb6GMT/XcHp46JSwoja5b/yRfAmqKeF6KOUxxv4NoW1QQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOjseu2WF3ZkXh4gJ81jOzg79ZdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3 MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvZDhlZTBkNDktYzY5Ny0z YTcwLTljZmUtNzhiNDVhZjZmM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx MzVhZTNmZjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcEADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAl4x0VGM7KDxNEkF27hd6JYxlSmX+dRBzGv70mYSNrNiYuUpc3VBzL xW3iueApuy0Zk/R7i0Jctw64M7HOifQKkw/D2moPVTyJCEMsrvVg3Ug4utRKj+jJ S6WXSLekY1fiw5e/NXPXlnZpMPBvpmPO32xwNZSXAbFIxErpYc7U6nC38bJOvsbl aNK2Vo0uuZxX9VnucsrREAaGnnVS5nDAT2XW/rS8SRMoOtzE9Rfml8ufonqE6srS GPEvSG0SBUq7Tteu25/4F+NgGOmM9USTIif5gZVVTBfAylte38IbSk9aAPyVMDqj zT2pfP7FagOCrH356A89ZwxWWqmMi6e6 -----END CERTIFICATE-----Generated at Sat Apr 12 13:29:39 2025 by rpki-client