$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/3e07209e-7971-3527-927a-54e54b174470.roa File: 3e07209e-7971-3527-927a-54e54b174470.roa (raw, json) Hash identifier: VFLtpaOOS0H9J4BoRTqzka9cMvoRh0m2VRlmTWVHhu8= Subject key identifier: CA:1D:8A:DE:0C:8D:B1:B4:FE:10:79:23:36:96:E9:0D:52:6F:3E:E3 Certificate issuer: /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8 Certificate serial: 010D0C9F43285848ADC60C8DED812CC945A8AB80 Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/3e07209e-7971-3527-927a-54e54b174470.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 26677 IP address blocks: 2607:fd78::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:0c:8d:ed:81:2c:c9:45:a8:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=25304b78-b9b4-4bf7-b82d-4508815b0c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d2:5d:c3:d8:42:39:9b:9c:27:b4:f0:d9:e7: 18:4f:e4:8c:bc:34:a6:3e:1e:57:7a:c0:bc:8e:a4: 01:a1:d2:e0:19:cd:4a:23:8c:61:bd:c6:45:e5:b6: e5:2e:94:2f:26:ba:f0:f5:c9:17:b3:ac:c1:95:20: 78:df:82:8f:f9:6d:6d:a3:13:4e:7a:41:8c:09:e9: 95:99:11:b7:a0:3d:48:fb:53:d4:65:a2:5f:7d:d8: 40:45:fb:b5:da:79:74:f4:b5:2a:7f:44:ce:1a:c4: e0:23:b5:1b:89:14:02:ec:ee:00:6d:68:7d:5f:b1: 5c:93:a5:e7:4f:79:53:52:76:22:96:2c:4d:e3:eb: f7:83:04:60:7f:c7:df:64:df:b2:17:21:52:06:74: 7b:9a:10:09:95:da:ab:b2:07:49:04:e2:7e:0f:7f: 37:7f:7a:89:b2:e4:4e:02:97:49:97:fd:06:9d:af: 63:77:ae:d1:cf:be:02:7d:55:9b:75:d8:47:04:c6: ec:37:d5:58:fc:0b:57:6d:14:72:33:2e:a4:81:4e: 30:95:ef:29:1b:0b:5d:31:0d:b9:d1:99:49:45:eb: dc:95:22:9e:ed:7c:e2:19:f3:e7:55:cc:db:20:71: 66:ee:67:00:ed:c5:fc:e7:5e:c9:b3:0a:11:97:81: 6e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1D:8A:DE:0C:8D:B1:B4:FE:10:79:23:36:96:E9:0D:52:6F:3E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/3e07209e-7971-3527-927a-54e54b174470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl X509v3 Authority Key Identifier: keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer sbgp-ipAddrBlock: critical IPv6: 2607:fd78::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:03:06:e4:7c:77:cf:a4:61:9c:5f:17:9c:d6:6f:27:36:92: 9c:7c:f9:aa:97:65:12:5a:e3:28:47:25:b7:9b:fe:96:ca:f8: a8:a4:f3:c0:d1:c0:fa:31:bd:27:14:8c:a0:84:19:f9:95:84: 21:39:34:78:6c:ae:07:d1:05:54:7c:8a:f5:50:9c:85:e4:14: 6b:d6:78:1d:14:b0:87:9b:81:eb:56:ec:15:87:fa:14:3c:ee: 98:73:1a:0e:27:83:95:41:13:74:4f:7a:3e:2f:8b:49:4d:2e: 7f:b0:4a:42:6d:29:cd:18:ce:b1:53:dc:8c:21:84:2e:67:56: 9c:60:ad:bf:ad:1d:3c:7a:55:1b:68:85:47:04:11:7d:0d:a8: c7:bc:d6:27:bd:03:e4:1c:60:df:3c:6b:da:ca:a4:0d:62:b4: e2:f8:61:c9:da:47:a7:09:72:c4:78:ef:3c:64:dd:fa:f8:f8: 4c:5f:c0:1f:e5:63:30:5a:61:f5:00:39:62:d8:60:8b:21:94: 27:46:71:2c:0f:06:b7:7a:40:69:fb:a4:9f:b7:fa:87:7f:ff: a4:5c:b5:e1:12:99:0c:7c:0a:84:63:7c:1c:09:2a:26:23:e5: 00:ee:69:0f:77:37:97:99:a3:9b:4f:1c:de:ac:fc:c0:3d:76: 01:bd:63:dc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEitxgyN7YEsyUWoq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkNmQ5YzItZDM4MC00ZjFmLThmNmMtZWJjMmU1MDNj NGE4MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk MjUzMDRiNzgtYjliNC00YmY3LWI4MmQtNDUwODgxNWIwYzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitJdw9hCOZucJ7Tw2ecYT+SMvDSmPh5XesC8 jqQBodLgGc1KI4xhvcZF5bblLpQvJrrw9ckXs6zBlSB434KP+W1toxNOekGMCemV mRG3oD1I+1PUZaJffdhARfu12nl09LUqf0TOGsTgI7UbiRQC7O4AbWh9X7Fck6Xn T3lTUnYilixN4+v3gwRgf8ffZN+yFyFSBnR7mhAJldqrsgdJBOJ+D383f3qJsuRO ApdJl/0Gna9jd67Rz74CfVWbddhHBMbsN9VY/AtXbRRyMy6kgU4wle8pGwtdMQ25 0ZlJRevclSKe7XziGfPnVczbIHFm7mcA7cX8517JswoRl4FuswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFModit4MjbG0/hB5IzaW6Q1Sbz7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2 ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMyZTUwM2M0YTgvM2UwNzIwOWUtNzk3MS0z NTI3LTkyN2EtNTRlNTRiMTc0NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWFkNmQ5YzItZDM4MC00ZjFmLThm NmMtZWJjMmU1MDNjNGE4LzVhZDZkOWMyLWQzODAtNGYxZi04ZjZjLWViYzJlNTAz YzRhOC5jcmwwHwYDVR0jBBgwFoAUkp+5FQB62pVW0xWBc41CAhzKOocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMy ZTUwM2M0YTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf9eDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGAwbkfHfPpGGcXxec1m8nNpKcfPmql2USWuMoRyW3m/6WyviopPPA 0cD6Mb0nFIyghBn5lYQhOTR4bK4H0QVUfIr1UJyF5BRr1ngdFLCHm4HrVuwVh/oU PO6YcxoOJ4OVQRN0T3o+L4tJTS5/sEpCbSnNGM6xU9yMIYQuZ1acYK2/rR08elUb aIVHBBF9DajHvNYnvQPkHGDfPGvayqQNYrTi+GHJ2kenCXLEeO88ZN36+PhMX8Af 5WMwWmH1ADli2GCLIZQnRnEsDwa3ekBp+6Sft/qHf/+kXLXhEpkMfAqEY3wcCSom I+UA7mkPdzeXmaObTxzerPzAPXYBvWPc -----END CERTIFICATE-----Generated at Sat Apr 12 15:37:44 2025 by rpki-client