$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa File: 43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa (raw, json) Hash identifier: ym6REdUzDh6XcNY+lMuatOYI8zwsuqv5LVvPW1HcEZk= Subject key identifier: 49:9D:8F:74:9B:66:B8:C5:DA:1B:3A:F5:86:4F:1B:33:0E:DA:1A:A7 Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F432858493ED3CAEB341B269548070D40 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 88 IP address blocks: 2604:4540:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:ca:eb:34:1b:26:95:48:07:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=aaef8023-9342-4078-8a9d-ef17a797774c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9f:75:1a:e7:93:b8:df:f0:26:c3:05:38:21: 10:27:47:61:42:c0:54:4e:ae:cb:06:65:6d:ea:e0: 45:51:10:15:e7:05:3f:b0:4f:03:19:d0:dd:50:da: 46:b1:d1:59:1d:49:9e:a1:6d:f9:b5:27:16:49:31: 8c:91:a3:90:40:7e:80:e1:32:a9:b1:1c:a6:67:9b: ba:40:53:3f:ac:51:a6:f6:4d:f3:e1:4b:7e:b6:2d: 83:5e:86:65:38:5e:4f:6e:64:5c:75:c1:3f:a0:cd: d8:84:76:93:ba:26:cf:6a:4d:fb:c2:47:8c:ea:86: 37:9a:a7:18:96:2a:62:b5:f6:15:b0:7f:66:2f:a2: 19:f5:81:3a:6f:fe:f9:3d:3d:80:44:49:0b:9f:d8: 02:68:ce:77:11:e1:f0:b8:0f:3f:e3:b1:85:fc:da: b8:b4:3f:28:60:03:7d:26:94:4f:b8:30:33:94:e8: 38:1b:f3:f9:87:5b:4f:0c:ee:ed:24:7d:aa:a4:2e: f8:56:b6:b6:9b:b7:fa:6d:05:ad:84:be:1e:d5:7b: b1:5a:d3:10:d3:4d:03:9b:41:4f:be:70:2d:71:4f: 7c:cb:15:7d:fd:00:5b:0c:06:bc:fb:76:86:81:35: 35:f7:bb:9f:3a:9f:76:2d:17:e6:fb:8b:2e:58:8f: ce:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9D:8F:74:9B:66:B8:C5:DA:1B:3A:F5:86:4F:1B:33:0E:DA:1A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2604:4540:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:6c:76:7a:e4:18:82:dc:6d:14:13:4a:5d:f6:43:1b:0c:5e: 96:1e:83:5f:22:69:8a:f5:71:7b:15:59:bf:65:8c:17:1e:b0: 12:7b:7f:d5:ea:0a:bb:7e:58:0e:c6:44:0b:70:54:8e:b0:fb: 5a:b9:36:c4:a2:73:4d:19:f1:1e:c4:de:17:10:65:66:0a:b0: d3:c7:c4:5c:bb:95:24:b4:77:13:c1:30:44:ea:f3:84:3d:20: f5:39:31:2a:9d:7c:04:2b:19:15:b3:66:0e:92:e3:91:44:95: e6:66:34:76:0e:d1:28:ba:72:23:22:b4:63:88:cb:30:83:12: b5:d4:02:36:93:91:82:39:03:d6:27:d1:76:65:3d:c5:31:0f: a2:f1:31:44:05:65:57:64:57:99:ce:1d:12:b3:dd:26:ac:e1: 7d:a2:61:64:b0:0e:c3:7c:eb:62:b2:1e:06:f5:07:bc:12:bf: e8:e0:55:0f:f0:e2:ff:d6:a7:b7:4b:6a:b6:a0:21:c7:6d:9c: 14:03:e1:96:bc:9d:2b:b9:a8:09:f8:95:6a:61:ff:3f:30:c7: ed:ea:ca:4b:84:e5:b5:b3:b9:cf:61:d4:97:85:94:70:88:0b: e4:4f:5e:ea:a7:c9:6d:9b:a9:6b:a8:30:0f:0d:84:4f:b4:a2: 0d:39:1b:09 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEk+08rrNBsmlUgHDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk YWFlZjgwMjMtOTM0Mi00MDc4LThhOWQtZWYxN2E3OTc3NzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ91GueTuN/wJsMFOCEQJ0dhQsBUTq7LBmVt 6uBFURAV5wU/sE8DGdDdUNpGsdFZHUmeoW35tScWSTGMkaOQQH6A4TKpsRymZ5u6 QFM/rFGm9k3z4Ut+ti2DXoZlOF5PbmRcdcE/oM3YhHaTuibPak37wkeM6oY3mqcY lipitfYVsH9mL6IZ9YE6b/75PT2AREkLn9gCaM53EeHwuA8/47GF/Nq4tD8oYAN9 JpRPuDAzlOg4G/P5h1tPDO7tJH2qpC74Vra2m7f6bQWthL4e1XuxWtMQ000Dm0FP vnAtcU98yxV9/QBbDAa8+3aGgTU197ufOp92LRfm+4suWI/OMQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEmdj3SbZrjF2hs69YZPGzMO2hqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvNDNhMTg5YzQtOTA0NC0z NDEwLWE2OTAtZjNiZjlkMGRmYmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRFQBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAs2x2euQYgtxtFBNKXfZDGwxelh6DXyJpivVxexVZv2WMFx6wEnt/ 1eoKu35YDsZEC3BUjrD7Wrk2xKJzTRnxHsTeFxBlZgqw08fEXLuVJLR3E8EwROrz hD0g9TkxKp18BCsZFbNmDpLjkUSV5mY0dg7RKLpyIyK0Y4jLMIMStdQCNpORgjkD 1ifRdmU9xTEPovExRAVlV2RXmc4dErPdJqzhfaJhZLAOw3zrYrIeBvUHvBK/6OBV D/Di/9ant0tqtqAhx22cFAPhlrydK7moCfiVamH/PzDH7erKS4TltbO5z2HUl4WU cIgL5E9e6qfJbZupa6gwDw2ET7SiDTkbCQ== -----END CERTIFICATE-----Generated at Thu Apr 17 17:55:27 2025 by rpki-client