$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa File: 9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa (raw, json) Hash identifier: Fo8/I83VxvVgFsNR56CspgTZhxJATiy0jZP80qWRL2o= Subject key identifier: 5C:68:73:45:57:AE:9D:AE:8E:51:9A:B7:D9:A1:24:5D:C0:0E:71:06 Certificate issuer: /CN=0cf53e58-6557-450f-832c-9baa5c99cca4 Certificate serial: 010D0C9F432858491246B536CF10D8DAD68A0520 Authority key identifier: 9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 2607:f250:e000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b5:36:cf:10:d8:da:d6:8a:05:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cf53e58-6557-450f-832c-9baa5c99cca4 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=aeb9d3f9-aeaa-426d-a0ed-247beb789d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:71:3d:85:f2:bc:78:33:c5:e3:27:08:bb:2c: 7f:91:1e:0c:cf:b4:a5:6e:41:c2:5b:0f:4b:b2:bc: f9:d3:d8:27:0e:1a:81:bc:1e:6c:c4:d7:5b:48:84: 18:9a:a7:80:d1:21:66:02:4f:53:2d:e5:36:89:ef: 70:89:e1:1a:22:a4:17:c7:3c:68:d5:07:75:d0:50: 20:d1:4b:16:81:f6:17:ee:12:d9:74:73:7e:be:cc: 71:06:2f:44:98:6d:cd:a7:d9:50:c1:32:9c:08:0e: cd:52:a1:72:58:6d:bd:3d:10:be:9a:be:3d:5f:09: 95:b3:af:23:99:1e:f1:f4:3a:8a:00:b8:ad:01:88: bb:d2:3e:ed:2f:3e:f4:4a:2c:ee:af:13:c1:3d:4b: 9b:20:8e:21:4f:c7:79:13:d0:7e:9c:17:86:a5:98: 47:5a:7d:bf:be:74:16:e9:cc:67:18:5f:6f:be:08: 3e:7a:ea:41:8e:ee:36:26:94:cd:06:2e:a1:31:0b: 28:40:b7:fa:d1:b0:b8:6a:b3:5a:21:8e:09:54:a9: 09:6e:03:80:7b:45:b7:da:a9:f7:60:89:7b:5c:73: 19:59:79:a7:99:a4:04:5f:d0:e0:7f:d1:42:b0:8c: 01:49:99:32:20:b4:20:9f:28:ad:8b:60:90:1d:f6: 73:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:68:73:45:57:AE:9D:AE:8E:51:9A:B7:D9:A1:24:5D:C0:0E:71:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl X509v3 Authority Key Identifier: keyid:9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer sbgp-ipAddrBlock: critical IPv6: 2607:f250:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:26:69:ce:bd:6b:1c:36:56:a2:32:78:72:08:ad:36:75:33: 99:9b:71:c7:e7:cd:04:3d:f7:c6:9e:65:99:d3:aa:e7:79:cb: cd:45:56:b7:11:89:2d:ca:09:e5:83:2b:d4:8a:2e:9a:8e:69: e1:16:bc:25:95:af:82:8d:a9:73:e7:40:43:46:aa:fb:bd:7c: ab:3b:38:db:31:59:4d:6a:69:83:4d:38:3c:b2:ea:78:e9:2a: a5:a1:7c:b1:52:d9:47:24:22:46:41:09:51:8d:bb:74:b1:ac: 91:06:7c:64:1b:19:7d:e5:8c:62:34:ea:16:64:ea:20:9b:e0: ee:f1:1d:34:57:21:0b:cb:a3:9c:f2:17:41:d8:b8:78:10:30: 1b:9f:3e:e0:07:24:79:a8:2c:b8:5d:01:b5:95:38:1f:25:55: 76:7a:bd:fc:d6:b9:c2:ff:aa:35:bd:7a:82:e3:59:07:b2:c9: 29:58:a2:50:ef:22:a7:b0:7e:d2:14:28:b9:85:9c:1e:48:80: b7:65:60:5d:a3:a9:7b:47:5b:8a:a1:9a:39:be:ea:7f:0e:50: dc:66:59:85:fd:95:3d:b5:59:1e:f3:f1:93:a4:34:0b:2d:9c: ad:52:17:16:af:ce:4f:16:11:e5:3c:d5:aa:e1:e0:14:cf:72: c7:2b:0e:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRrU2zxDY2taKBSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNmNTNlNTgtNjU1Ny00NTBmLTgzMmMtOWJhYTVjOTlj Y2E0MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YWViOWQzZjktYWVhYS00MjZkLWEwZWQtMjQ3YmViNzg5ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3E9hfK8eDPF4ycIuyx/kR4Mz7SlbkHCWw9L srz509gnDhqBvB5sxNdbSIQYmqeA0SFmAk9TLeU2ie9wieEaIqQXxzxo1Qd10FAg 0UsWgfYX7hLZdHN+vsxxBi9EmG3Np9lQwTKcCA7NUqFyWG29PRC+mr49XwmVs68j mR7x9DqKALitAYi70j7tLz70SizurxPBPUubII4hT8d5E9B+nBeGpZhHWn2/vnQW 6cxnGF9vvgg+eupBju42JpTNBi6hMQsoQLf60bC4arNaIY4JVKkJbgOAe0W32qn3 YIl7XHMZWXmnmaQEX9Dgf9FCsIwBSZkyILQgnyiti2CQHfZzpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFxoc0VXrp2ujlGat9mhJF3ADnEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wY2Y1 M2U1OC02NTU3LTQ1MGYtODMyYy05YmFhNWM5OWNjYTQvOWUyY2Q1M2ItYjk3Yy0z NzdhLWI0MTQtYjhiNjA3ZmM0ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGNmNTNlNTgtNjU1Ny00NTBmLTgz MmMtOWJhYTVjOTljY2E0LzBjZjUzZTU4LTY1NTctNDUwZi04MzJjLTliYWE1Yzk5 Y2NhNC5jcmwwHwYDVR0jBBgwFoAUnRJ7s+PD9GS84TJg7TWHXef6R1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wY2Y1M2U1OC02NTU3LTQ1MGYtODMyYy05YmFh NWM5OWNjYTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfyUOAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYmac69axw2VqIyeHIIrTZ1M5mbccfnzQQ998aeZZnTqud5y81F VrcRiS3KCeWDK9SKLpqOaeEWvCWVr4KNqXPnQENGqvu9fKs7ONsxWU1qaYNNODyy 6njpKqWhfLFS2UckIkZBCVGNu3SxrJEGfGQbGX3ljGI06hZk6iCb4O7xHTRXIQvL o5zyF0HYuHgQMBufPuAHJHmoLLhdAbWVOB8lVXZ6vfzWucL/qjW9eoLjWQeyySlY olDvIqewftIUKLmFnB5IgLdlYF2jqXtHW4qhmjm+6n8OUNxmWYX9lT21WR7z8ZOk NAstnK1SFxavzk8WEeU81arh4BTPcscrDt4= -----END CERTIFICATE-----Generated at Fri Apr 4 23:34:11 2025 by rpki-client