$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/a40940b5-4c79-35c2-a19a-0630624bc4c8.roa File: a40940b5-4c79-35c2-a19a-0630624bc4c8.roa (raw, json) Hash identifier: 0tcYfYkZASaN4nTbpOiHdx4089H6Lc6dN9YMeALFFjc= Subject key identifier: 70:06:95:F7:C0:D1:4E:73:89:4F:1C:58:05:8A:83:72:43:EB:47:10 Certificate issuer: /CN=0942cd1e-1350-41d5-a14e-51bddb52c336 Certificate serial: 010D0C9F43285848A307181B9BC0B29922D87820 Authority key identifier: 5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/a40940b5-4c79-35c2-a19a-0630624bc4c8.roa Signing time: Thu 23 Jan 2025 05:37:57 +0000 ROA not before: Thu 23 Jan 2025 05:37:57 +0000 ROA not after: Wed 23 Apr 2025 04:37:57 +0000 asID: 26157 IP address blocks: 2602:2ba:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:07:18:1b:9b:c0:b2:99:22:d8:78:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0942cd1e-1350-41d5-a14e-51bddb52c336 Validity Not Before: Jan 23 05:37:57 2025 GMT Not After : Apr 23 04:37:57 2025 GMT Subject: CN=de8d913e-b3f1-4bbd-9138-87f5295805f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:c3:1d:83:09:7a:66:67:4d:e1:a4:47:09: 14:a3:16:50:4f:64:c1:fc:d5:37:38:24:23:24:7a: 52:b8:3b:97:90:55:e1:74:84:b3:20:3d:6b:13:47: e9:83:e6:2f:3d:13:4a:58:d1:a5:0c:34:55:ac:97: 66:b9:f0:2a:3b:28:12:35:5c:41:68:e3:3c:e1:90: f7:a8:aa:eb:f8:82:d6:1f:74:e5:75:db:6d:1f:f4: 9e:83:8c:a7:bc:50:b6:d5:43:92:38:ea:86:cd:c0: 56:9e:8b:31:ee:39:65:91:93:54:ed:cd:aa:7d:7d: c6:22:65:03:b4:56:86:85:b7:db:a1:11:9f:35:d9: 14:2f:a5:2e:8f:76:6e:bc:2f:11:00:a2:95:93:8a: 82:95:30:2c:b2:00:5f:a7:d3:34:c4:53:d6:b5:86: ee:60:a8:fa:90:cd:86:c5:ec:0b:90:ed:18:db:b9: c9:e6:3b:85:74:29:94:a9:de:30:a1:d1:46:46:6a: d1:58:40:51:79:99:db:57:24:7c:f4:6d:ff:bd:88: e6:bd:0d:11:71:2e:f5:8b:cb:b9:ee:39:2e:72:91: 9c:ba:ce:cf:82:d6:28:82:29:e1:02:3c:6f:df:5c: 85:51:15:fb:42:ec:90:a4:00:d9:ab:a3:c3:9d:7d: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:06:95:F7:C0:D1:4E:73:89:4F:1C:58:05:8A:83:72:43:EB:47:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/a40940b5-4c79-35c2-a19a-0630624bc4c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl X509v3 Authority Key Identifier: keyid:5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer sbgp-ipAddrBlock: critical IPv6: 2602:2ba:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:68:00:ea:03:16:11:d8:98:d4:59:66:6a:c5:70:24:4b:ff: d3:ac:82:1c:2b:fc:94:2f:90:c5:d7:47:bc:52:80:77:1b:6e: d0:c7:6c:bf:4d:70:ac:f8:ba:96:ab:e6:aa:45:d5:b1:81:7a: 89:39:0f:f3:61:be:0e:09:31:bf:c2:c8:32:80:e3:7c:e3:2e: 7b:6e:a4:88:e6:62:44:14:07:62:ba:9b:d0:b7:a5:38:ea:73: 75:96:73:2d:a5:c3:f7:88:b5:b6:1b:03:df:dd:11:59:3d:92: a9:bc:e8:69:54:de:f4:0b:46:4b:db:9f:79:50:78:62:64:83: e7:fe:46:3e:fe:a2:1a:52:dc:b6:c2:be:e4:eb:60:bd:ab:8a: 78:04:57:92:42:c1:f2:13:f0:b6:bd:07:c6:23:c9:e6:d7:12: a9:bb:79:d3:ce:02:7f:43:97:90:0f:0b:89:fb:4c:fe:e8:bf: 37:33:fc:b6:23:d7:b5:37:82:fe:08:e2:4f:86:be:f4:9d:37: 84:63:e6:6c:9c:9b:c2:4c:39:0e:30:7f:6f:d7:9f:0a:10:6d: 44:61:e1:aa:85:68:8c:b5:8c:a5:39:03:b5:65:76:a8:d7:55: 56:78:dd:e5:4e:cb:14:38:3a:42:34:32:bb:73:6d:c7:e9:52: f9:33:04:ed -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEijBxgbm8CymSLYeCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0MmNkMWUtMTM1MC00MWQ1LWExNGUtNTFiZGRiNTJj MzM2MB4XDTI1MDEyMzA1Mzc1N1oXDTI1MDQyMzA0Mzc1N1owLzEtMCsGA1UEAxMk ZGU4ZDkxM2UtYjNmMS00YmJkLTkxMzgtODdmNTI5NTgwNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs7DHYMJemZnTeGkRwkUoxZQT2TB/NU3OCQj JHpSuDuXkFXhdISzID1rE0fpg+YvPRNKWNGlDDRVrJdmufAqOygSNVxBaOM84ZD3 qKrr+ILWH3TlddttH/Seg4ynvFC21UOSOOqGzcBWnosx7jllkZNU7c2qfX3GImUD tFaGhbfboRGfNdkUL6Uuj3ZuvC8RAKKVk4qClTAssgBfp9M0xFPWtYbuYKj6kM2G xewLkO0Y27nJ5juFdCmUqd4wodFGRmrRWEBReZnbVyR89G3/vYjmvQ0RcS71i8u5 7jkucpGcus7PgtYoginhAjxv31yFURX7QuyQpADZq6PDnX0KwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHAGlffA0U5ziU8cWAWKg3JD60cQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wOTQy Y2QxZS0xMzUwLTQxZDUtYTE0ZS01MWJkZGI1MmMzMzYvYTQwOTQwYjUtNGM3OS0z NWMyLWExOWEtMDYzMDYyNGJjNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDk0MmNkMWUtMTM1MC00MWQ1LWEx NGUtNTFiZGRiNTJjMzM2LzA5NDJjZDFlLTEzNTAtNDFkNS1hMTRlLTUxYmRkYjUy YzMzNi5jcmwwHwYDVR0jBBgwFoAUWsdYmsqiyRvuds1T1i6jaRsQMkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wOTQyY2QxZS0xMzUwLTQxZDUtYTE0ZS01MWJk ZGI1MmMzMzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgICugEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAEmgA6gMWEdiY1FlmasVwJEv/06yCHCv8lC+QxddHvFKAdxtu0Mds v01wrPi6lqvmqkXVsYF6iTkP82G+Dgkxv8LIMoDjfOMue26kiOZiRBQHYrqb0Lel OOpzdZZzLaXD94i1thsD390RWT2SqbzoaVTe9AtGS9ufeVB4YmSD5/5GPv6iGlLc tsK+5OtgvauKeARXkkLB8hPwtr0HxiPJ5tcSqbt5084Cf0OXkA8LiftM/ui/NzP8 tiPXtTeC/gjiT4a+9J03hGPmbJybwkw5DjB/b9efChBtRGHhqoVojLWMpTkDtWV2 qNdVVnjd5U7LFDg6QjQyu3Ntx+lS+TME7Q== -----END CERTIFICATE-----Generated at Sat Apr 5 12:17:44 2025 by rpki-client