$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/49fb0d9a-4a7a-3a97-8872-0aa8f5966daf.roa File: 49fb0d9a-4a7a-3a97-8872-0aa8f5966daf.roa (raw, json) Hash identifier: bsYUCvtSfSTNqqfgwz5OkY1K1poVvyfYS0sJJyU8Lss= Subject key identifier: 36:CF:C5:87:11:C9:DA:B1:08:9C:9E:9C:47:14:EB:D5:33:2F:03:B6 Certificate issuer: /CN=2e689c55-8453-486f-8b88-f433fba67f55 Certificate serial: 010D0C9F432858496CE44DFA22DFE037489B8B00 Authority key identifier: CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/49fb0d9a-4a7a-3a97-8872-0aa8f5966daf.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 26216 IP address blocks: 2607:2b40::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:4d:fa:22:df:e0:37:48:9b:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e689c55-8453-486f-8b88-f433fba67f55 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=fd662aa8-7406-4822-81e5-77ceed81bfa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:78:94:3a:ff:70:eb:e5:c0:de:09:91:3b:b7: 52:ad:1f:fa:f7:cc:07:41:1f:50:f1:8a:32:49:fd: b6:57:9d:2b:40:74:ea:25:52:36:59:28:51:a5:8b: a5:69:73:8d:76:40:50:04:84:33:86:55:2e:4a:37: ff:30:05:ce:cf:77:9e:4a:e6:16:19:f2:7d:fd:8e: d9:17:8a:52:e1:12:90:41:1f:a6:93:ac:48:28:21: 72:5c:39:df:fb:dd:0c:a0:be:68:e7:f4:66:b5:bf: 5e:80:79:04:90:c7:e6:b2:0f:e0:d0:7f:81:a9:9c: 57:98:62:a6:5a:1a:d3:0c:5b:f2:22:1f:89:72:de: 20:0a:e6:65:8c:40:dd:30:2d:5e:48:30:76:e7:ae: 4f:94:dd:cf:68:8f:5b:73:44:b0:35:5b:65:1d:3d: 05:f8:e3:1c:d9:7c:95:d5:1a:9f:ab:68:3e:e8:25: 04:e7:9c:b5:ed:a9:6d:1c:8a:4d:10:20:54:f7:88: 5e:88:6d:1d:e1:42:6b:91:16:81:14:7b:c0:d9:73: 94:d2:36:16:65:0a:37:35:2a:6f:d0:9b:5c:eb:26: 95:b0:f3:a3:77:6f:5e:e4:dc:50:04:bb:ce:7a:51: b6:ff:f2:87:f6:b2:89:a7:6e:71:02:73:12:b5:29: 1d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CF:C5:87:11:C9:DA:B1:08:9C:9E:9C:47:14:EB:D5:33:2F:03:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/49fb0d9a-4a7a-3a97-8872-0aa8f5966daf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.crl X509v3 Authority Key Identifier: keyid:CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer sbgp-ipAddrBlock: critical IPv6: 2607:2b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:2a:4f:19:66:ec:4a:23:1d:ef:9a:e5:4d:ef:9e:9f:6a:2a: b6:70:25:17:e0:eb:2d:12:1c:98:b0:0f:ed:9c:25:ec:df:43: eb:11:31:93:26:93:29:c1:4f:87:26:77:b4:f0:08:c1:34:7b: da:97:ce:06:6e:1d:96:ec:23:e8:d0:2d:e2:06:42:be:2f:a1: 91:83:aa:88:4e:fd:5a:f8:f1:c7:7f:00:fb:d7:94:13:8d:2f: af:94:18:7a:31:f6:6f:68:ec:6c:df:13:45:c8:07:78:47:f3: 53:0f:67:10:11:64:99:a0:25:7b:5c:aa:6f:43:bd:c5:ff:9b: b7:5b:72:9e:aa:ad:20:f2:b2:16:d3:17:e5:e1:e1:14:89:35: b6:12:f6:7d:ba:d1:4b:9d:28:d9:27:83:5b:18:2e:de:81:27: b2:36:4c:89:b9:bd:42:32:b4:5c:82:dd:2f:c2:36:f8:3e:67: b9:c2:45:75:56:0c:5c:af:f9:c3:eb:6c:88:36:8e:3d:60:cc: 75:bc:36:c5:0a:fa:48:9d:dd:d2:c3:ba:fc:c3:29:df:eb:89: 13:2b:c5:d3:38:55:95:e7:22:90:9c:a8:6f:53:f2:e1:cc:a3: 07:11:82:61:8c:d2:93:18:13:3d:92:23:92:f7:f4:0f:57:40: 9a:ce:ae:67 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEls5E36It/gN0ibiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2ODljNTUtODQ1My00ODZmLThiODgtZjQzM2ZiYTY3 ZjU1MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ZmQ2NjJhYTgtNzQwNi00ODIyLTgxZTUtNzdjZWVkODFiZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHiUOv9w6+XA3gmRO7dSrR/698wHQR9Q8Yoy Sf22V50rQHTqJVI2WShRpYulaXONdkBQBIQzhlUuSjf/MAXOz3eeSuYWGfJ9/Y7Z F4pS4RKQQR+mk6xIKCFyXDnf+90MoL5o5/Rmtb9egHkEkMfmsg/g0H+BqZxXmGKm WhrTDFvyIh+Jct4gCuZljEDdMC1eSDB2565PlN3PaI9bc0SwNVtlHT0F+OMc2XyV 1Rqfq2g+6CUE55y17altHIpNECBU94heiG0d4UJrkRaBFHvA2XOU0jYWZQo3NSpv 0Jtc6yaVsPOjd29e5NxQBLvOelG2//KH9rKJp25xAnMStSkd8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDbPxYcRydqxCJyenEcU69UzLwO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZTY4 OWM1NS04NDUzLTQ4NmYtOGI4OC1mNDMzZmJhNjdmNTUvNDlmYjBkOWEtNGE3YS0z YTk3LTg4NzItMGFhOGY1OTY2ZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmU2ODljNTUtODQ1My00ODZmLThi ODgtZjQzM2ZiYTY3ZjU1LzJlNjg5YzU1LTg0NTMtNDg2Zi04Yjg4LWY0MzNmYmE2 N2Y1NS5jcmwwHwYDVR0jBBgwFoAUyi2Ow8wphcSLJa7g69UtiXJzMi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZTY4OWM1NS04NDUzLTQ4NmYtOGI4OC1mNDMz ZmJhNjdmNTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcrQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBbKk8ZZuxKIx3vmuVN756faiq2cCUX4OstEhyYsA/tnCXs30PrETGT JpMpwU+HJne08AjBNHval84Gbh2W7CPo0C3iBkK+L6GRg6qITv1a+PHHfwD715QT jS+vlBh6MfZvaOxs3xNFyAd4R/NTD2cQEWSZoCV7XKpvQ73F/5u3W3Keqq0g8rIW 0xfl4eEUiTW2EvZ9utFLnSjZJ4NbGC7egSeyNkyJub1CMrRcgt0vwjb4Pme5wkV1 Vgxcr/nD62yINo49YMx1vDbFCvpInd3Sw7r8wynf64kTK8XTOFWV5yKQnKhvU/Lh zKMHEYJhjNKTGBM9kiOS9/QPV0Cazq5n -----END CERTIFICATE-----Generated at Fri Apr 11 22:54:19 2025 by rpki-client