$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa File: 71105327-84d5-3f6a-bcc8-fff7f32ab982.roa (raw, json) Hash identifier: wMZpaai9F2bEvEpeq88Ty33Olqe8Iyq7LNFB439w8Mo= Subject key identifier: 16:C0:AE:95:1A:4F:D5:3D:A2:D5:49:FD:51:AC:45:34:14:CE:54:80 Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Certificate serial: 010D0C9F4328584961B999CA586DEADAE628D680 Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 15147 IP address blocks: 2600:400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:99:ca:58:6d:ea:da:e6:28:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=1f225cd4-5aec-45a6-bd10-e6b25bd1bf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7c:ae:57:e5:22:77:dc:ef:1e:02:e2:02:8d: 55:14:2b:d2:5d:64:a7:bf:13:7d:a9:41:fc:97:fb: 4e:13:17:71:d8:ad:89:bc:ad:69:ac:b4:18:d5:48: 8a:5d:c7:5f:a0:98:09:0a:06:2c:58:53:9e:eb:48: c0:a7:a0:61:cc:5b:56:c5:de:a2:d6:b9:eb:2e:de: 4a:d3:ef:dd:42:ee:d5:04:9f:9f:42:23:b6:7f:68: b8:19:88:35:8b:c0:49:7d:fa:5b:f5:b5:79:69:87: ad:56:ed:64:a2:71:b0:4f:5a:74:67:4d:db:9c:f4: 10:5c:a2:d6:a9:b1:7c:12:a4:ff:e2:ae:7f:36:95: a2:71:12:83:d5:d5:c6:ee:75:2d:72:34:79:64:8c: f2:1c:e0:3f:90:df:f0:b9:d6:ae:6d:4a:40:9a:93: 94:19:93:e7:7d:5c:2e:7a:60:28:e8:bf:8b:95:39: 28:24:da:27:b6:b4:82:ef:17:9f:88:5a:40:92:88: b0:ff:d1:83:2b:dd:04:4b:97:fd:12:21:16:b6:f2: e3:f8:7c:f9:c1:5b:1f:66:08:ec:77:8e:70:6f:41: b4:6e:ed:5a:65:08:b2:83:51:2b:df:a2:6b:0c:d7: 5e:d1:86:46:8b:b2:80:db:1f:b6:9a:09:ec:e6:f8: b2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C0:AE:95:1A:4F:D5:3D:A2:D5:49:FD:51:AC:45:34:14:CE:54:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl X509v3 Authority Key Identifier: keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer sbgp-ipAddrBlock: critical IPv6: 2600:400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:7a:d6:a7:f7:4f:24:8b:e0:f9:c3:6f:75:d9:3d:c6:4d:d9: 9d:37:16:9f:07:0b:79:32:78:89:c3:94:94:1a:60:5b:99:3f: 2e:19:ab:02:02:16:f0:fb:89:7d:b8:d3:90:e5:a5:30:af:a0: e6:82:49:77:52:0f:78:6b:e7:df:e5:32:e1:9b:34:9b:e2:2f: a7:c7:9e:a7:f1:7f:53:4a:9a:13:8e:1f:25:80:38:bc:3f:f0: e9:3c:98:58:19:21:50:6b:49:d6:dc:bd:6c:aa:7e:f4:22:d2: 58:83:a6:d4:2d:d8:14:6a:58:8a:92:d1:1a:5f:d1:3d:2e:68: 61:be:fc:54:4a:5d:e0:57:97:5a:84:ca:45:be:6c:c8:55:e8: bd:13:16:9a:4f:fc:81:47:96:7b:73:65:54:5e:fe:3e:bc:ba: 55:dc:6c:66:7e:de:0e:cf:2e:6d:aa:d5:87:48:0a:44:d6:59: 9e:eb:b2:27:28:4d:bd:5d:42:af:e1:cc:40:a1:56:62:d8:37: 35:1c:10:55:b3:73:6e:c1:59:ab:9d:a6:5a:51:ce:39:bf:2f: 36:7e:ff:aa:21:25:6e:12:62:93:ac:8a:81:67:c2:22:10:08: d5:6c:29:d1:9e:85:14:ef:1a:71:99:23:09:66:a9:bc:db:60: 2d:ea:38:f5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElhuZnKWG3q2uYo1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4 OTk2MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MWYyMjVjZDQtNWFlYy00NWE2LWJkMTAtZTZiMjViZDFiZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXyuV+Uid9zvHgLiAo1VFCvSXWSnvxN9qUH8 l/tOExdx2K2JvK1prLQY1UiKXcdfoJgJCgYsWFOe60jAp6BhzFtWxd6i1rnrLt5K 0+/dQu7VBJ+fQiO2f2i4GYg1i8BJffpb9bV5aYetVu1konGwT1p0Z03bnPQQXKLW qbF8EqT/4q5/NpWicRKD1dXG7nUtcjR5ZIzyHOA/kN/wudaubUpAmpOUGZPnfVwu emAo6L+LlTkoJNontrSC7xefiFpAkoiw/9GDK90ES5f9EiEWtvLj+Hz5wVsfZgjs d45wb0G0bu1aZQiyg1Er36JrDNde0YZGi7KA2x+2mgns5viyHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBbArpUaT9U9otVJ/VGsRTQUzlSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvNzExMDUzMjctODRkNS0z ZjZhLWJjYzgtZmZmN2YzMmFiOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy ZTA3ZDg5OTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgAEADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYetan908ki+D5w2912T3GTdmdNxafBwt5MniJw5SUGmBbmT8uGasC Ahbw+4l9uNOQ5aUwr6Dmgkl3Ug94a+ff5TLhmzSb4i+nx56n8X9TSpoTjh8lgDi8 P/DpPJhYGSFQa0nW3L1sqn70ItJYg6bULdgUaliKktEaX9E9LmhhvvxUSl3gV5da hMpFvmzIVei9ExaaT/yBR5Z7c2VUXv4+vLpV3Gxmft4Ozy5tqtWHSApE1lme67In KE29XUKv4cxAoVZi2Dc1HBBVs3NuwVmrnaZaUc45vy82fv+qISVuEmKTrIqBZ8Ii EAjVbCnRnoUU7xpxmSMJZqm822At6jj1 -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:32 2025 by rpki-client