$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa File: d829b003-3d7f-36c9-a287-f6e66f824c8d.roa (raw, json) Hash identifier: PY5XiKpQzU6dfZbOHosFbcudggxLR17EdW2PxBnhDws= Subject key identifier: FF:3B:90:0B:1F:1E:73:09:04:7F:55:D2:E2:1C:9E:E0:DB:D0:65:F5 Certificate issuer: /CN=1c5b9809-1c38-4760-b9bf-096829114292 Certificate serial: 010D0C9F432858496E498C6EFF8A8BD5AC350800 Authority key identifier: D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 32524 IP address blocks: 2604:dc80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:8c:6e:ff:8a:8b:d5:ac:35:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5b9809-1c38-4760-b9bf-096829114292 Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=327f073a-c9c1-4986-835b-db40e0105a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:89:25:e3:3d:37:63:fb:2a:d1:a7:26:60: 1b:e2:52:31:19:fc:5e:df:c0:29:8d:05:8c:c1:ed: bb:54:55:e1:b2:de:0d:d7:86:93:ec:44:d7:63:6a: 36:8b:fd:74:eb:85:5c:8e:11:67:25:e7:fa:e0:ad: 8b:27:0d:e2:f8:70:dd:28:17:b8:ae:2d:7b:0e:67: f3:be:52:5a:c8:04:a1:5b:43:0e:a3:4c:d8:f1:1e: d5:88:8a:cf:1a:a2:42:cc:36:50:eb:85:2f:a7:5d: 37:16:da:ec:c7:fa:89:8a:ce:98:a1:81:7f:eb:e4: b5:6b:25:46:34:6a:63:0d:61:94:fe:25:53:65:de: 31:26:70:23:ae:1b:bb:35:e3:e4:68:6e:97:5e:42: 55:a8:a2:bd:9c:b3:5d:3b:ea:52:69:63:79:86:a4: 98:2d:b7:ac:88:da:02:92:df:d1:d0:36:34:2c:39: 0f:1a:84:ac:3c:98:c4:1f:d4:cf:91:7e:aa:e4:a8: 43:a8:f7:8d:3b:aa:59:3a:3e:07:91:4d:ab:71:b8: bf:4d:84:57:dc:47:21:9b:4e:70:ca:88:53:dc:f1: a0:6e:9d:56:a1:2e:72:ee:16:88:52:dc:16:34:7c: 19:9d:96:17:42:91:18:fa:df:f4:c8:d2:b7:40:00: a7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3B:90:0B:1F:1E:73:09:04:7F:55:D2:E2:1C:9E:E0:DB:D0:65:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl X509v3 Authority Key Identifier: keyid:D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer sbgp-ipAddrBlock: critical IPv6: 2604:dc80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b3:c4:eb:12:48:72:1b:80:92:d2:dd:cb:d7:36:78:d4:70: af:59:19:af:da:4e:57:96:a5:18:89:f3:1f:86:85:59:aa:1c: 46:be:dd:c5:78:b7:31:05:a1:78:46:7f:51:bd:35:73:95:de: 4c:16:32:4e:5e:63:8b:11:79:da:bd:8d:cb:52:54:9f:94:7e: b3:1f:84:7d:15:f5:06:f9:25:20:88:e4:ca:0d:40:bd:e6:eb: 31:02:34:22:d8:04:1e:fe:6b:2e:48:d8:39:9f:2e:77:03:03: cc:83:07:5d:61:06:54:8a:6b:51:7a:5b:f0:e1:fa:77:3c:fc: b0:d0:59:5e:3e:d9:33:ce:7b:56:87:5f:5e:1f:9f:14:0c:cb: 66:bb:5b:f2:d8:e2:dc:d8:19:7c:95:0d:0f:42:71:fa:98:b7: 24:c5:85:a8:f9:1f:a5:d9:a4:98:bc:b3:81:6a:8d:c7:b6:53: ae:74:8d:93:25:eb:29:be:ba:ac:3e:d4:d8:5a:2a:89:83:65: 79:ff:db:2a:fa:10:fb:af:24:73:00:f9:5a:ec:2b:59:0a:9b: da:fb:25:8a:86:44:b6:54:18:f9:83:27:6d:5a:9a:d7:50:ae: a5:94:02:33:6b:85:5f:c9:9c:c9:7c:f8:22:92:58:9d:98:2d: d0:07:43:ae -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEluSYxu/4qL1aw1CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1Yjk4MDktMWMzOC00NzYwLWI5YmYtMDk2ODI5MTE0 MjkyMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk MzI3ZjA3M2EtYzljMS00OTg2LTgzNWItZGI0MGUwMTA1YTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt2JJeM9N2P7KtGnJmAb4lIxGfxe38ApjQWM we27VFXhst4N14aT7ETXY2o2i/1064VcjhFnJef64K2LJw3i+HDdKBe4ri17Dmfz vlJayAShW0MOo0zY8R7ViIrPGqJCzDZQ64Uvp103Ftrsx/qJis6YoYF/6+S1ayVG NGpjDWGU/iVTZd4xJnAjrhu7NePkaG6XXkJVqKK9nLNdO+pSaWN5hqSYLbesiNoC kt/R0DY0LDkPGoSsPJjEH9TPkX6q5KhDqPeNO6pZOj4HkU2rcbi/TYRX3Echm05w yohT3PGgbp1WoS5y7haIUtwWNHwZnZYXQpEY+t/0yNK3QACnUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP87kAsfHnMJBH9V0uIcnuDb0GX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzVi OTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4MjkxMTQyOTIvZDgyOWIwMDMtM2Q3Zi0z NmM5LWEyODctZjZlNjZmODI0YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM1Yjk4MDktMWMzOC00NzYwLWI5 YmYtMDk2ODI5MTE0MjkyLzFjNWI5ODA5LTFjMzgtNDc2MC1iOWJmLTA5NjgyOTEx NDI5Mi5jcmwwHwYDVR0jBBgwFoAU1kMeXupQ239/1TsSP3yaBeXcSekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzViOTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4 MjkxMTQyOTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTcgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4s8TrEkhyG4CS0t3L1zZ41HCvWRmv2k5XlqUYifMfhoVZqhxGvt3F eLcxBaF4Rn9RvTVzld5MFjJOXmOLEXnavY3LUlSflH6zH4R9FfUG+SUgiOTKDUC9 5usxAjQi2AQe/msuSNg5ny53AwPMgwddYQZUimtRelvw4fp3PPyw0FlePtkzzntW h19eH58UDMtmu1vy2OLc2Bl8lQ0PQnH6mLckxYWo+R+l2aSYvLOBao3HtlOudI2T JespvrqsPtTYWiqJg2V5/9sq+hD7ryRzAPla7CtZCpva+yWKhkS2VBj5gydtWprX UK6llAIza4VfyZzJfPgiklidmC3QB0Ou -----END CERTIFICATE-----Generated at Sat Apr 12 02:03:31 2025 by rpki-client