$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa File: a43a41c8-9815-3189-85dc-d60e1985a8f9.roa (raw, json) Hash identifier: 4nlSyRPrETyHa3T4qUNwT9iL0K4svxL+zn2m6T4D4wI= Subject key identifier: 1C:E1:24:52:53:5C:13:60:AF:28:1C:39:E3:AD:18:0B:A5:C8:90:3F Certificate issuer: /CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Certificate serial: 010D0C9F43285848E59BCE3150C9BF5F5B7FBB80 Authority key identifier: CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16430 IP address blocks: 2620:f4:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:ce:31:50:c9:bf:5f:5b:7f:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=f3682132-883f-45c5-8654-c3e8727e170b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:23:67:38:66:21:4c:84:47:1c:2f:9a:a7:7c: 36:18:9f:39:56:f0:72:c5:4c:6a:02:ce:56:e6:c7: 22:7c:44:ae:f3:f8:ba:31:b4:df:09:27:01:6b:2b: a2:b2:a9:be:2e:06:30:35:6e:ca:e9:c3:2e:02:62: b2:3d:e6:ba:34:d9:50:43:6d:43:d6:87:67:c5:d3: 74:62:4f:ef:0c:9d:cb:e0:42:31:2c:3e:90:aa:b6: fb:45:f5:94:a5:95:d5:65:18:0b:45:3d:2e:17:c1: 18:95:40:f0:ff:a9:97:24:d2:8b:f4:ce:f7:d4:86: 46:7e:33:96:97:10:04:bc:75:2f:61:b1:60:c3:fc: 7c:99:05:bb:6c:40:57:79:48:bd:c5:61:c1:f2:8d: 27:30:ad:9f:85:17:e0:f0:34:1b:21:9f:b0:19:24: f3:a4:6e:f7:73:aa:2c:f8:0a:c2:ce:da:e7:4c:95: 14:86:43:d4:5d:0c:98:fa:9b:b6:f1:df:5a:36:ac: 49:84:21:71:6b:0d:42:1d:c8:c3:ac:b5:e9:c0:8e: 86:f7:3e:0f:ac:f3:f8:c7:95:2b:51:5d:9b:57:45: f1:9a:73:48:4a:b9:14:e9:6d:1e:f7:0c:3d:82:14: 83:24:99:3a:84:25:85:d7:6f:6b:80:7f:c1:92:93: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E1:24:52:53:5C:13:60:AF:28:1C:39:E3:AD:18:0B:A5:C8:90:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl X509v3 Authority Key Identifier: keyid:CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer sbgp-ipAddrBlock: critical IPv6: 2620:f4:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a0:92:24:9f:d7:3f:64:0b:f8:83:a5:c3:7b:c4:2d:3f:1f: 3b:5a:13:e3:23:13:ee:91:df:ab:fb:5f:82:f8:1c:6e:fe:da: 50:b3:0c:ab:39:64:b8:34:d0:cc:4b:1b:49:04:bc:52:f4:1b: b8:09:f0:0e:51:c5:48:4f:d6:a3:b1:4f:92:59:81:41:2a:2a: 17:7e:23:7f:4a:1b:9f:ad:a9:da:7b:b2:a8:8a:b6:2b:9e:dd: ae:22:55:1b:ef:1a:82:f7:4d:1e:f1:91:0a:8a:0b:c5:7e:34: 0c:a2:be:08:56:5d:65:d1:b8:af:0b:90:4d:ba:61:df:90:5b: 2c:27:61:0e:8b:51:0c:ad:37:24:9e:ad:e7:11:8a:db:a4:60: dc:f5:34:54:ce:2a:88:71:30:00:6a:40:d5:1e:dc:b3:a7:c9: a3:a4:2b:05:db:1f:81:b9:97:8a:5e:7b:75:fb:68:6c:62:15: 41:81:cf:cb:af:74:fe:36:dd:74:cc:64:98:ae:e4:b1:0e:50: b9:51:6a:9d:c6:0b:76:3a:7c:cd:b3:19:45:53:60:82:3a:34: 79:ea:a6:1a:ac:fc:1e:78:87:7d:56:54:aa:04:04:7e:24:67: e9:04:3a:36:fd:97:2a:d7:3c:ac:0c:32:15:de:c2:8f:ba:10: 6b:e0:85:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjlm84xUMm/X1t/u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU3OTcxYjUtODgyZi00OGNjLWIxMjMtYjg0ZDdiOWI4 YzViMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZjM2ODIxMzItODgzZi00NWM1LTg2NTQtYzNlODcyN2UxNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiNnOGYhTIRHHC+ap3w2GJ85VvByxUxqAs5W 5scifESu8/i6MbTfCScBayuisqm+LgYwNW7K6cMuAmKyPea6NNlQQ21D1odnxdN0 Yk/vDJ3L4EIxLD6Qqrb7RfWUpZXVZRgLRT0uF8EYlUDw/6mXJNKL9M731IZGfjOW lxAEvHUvYbFgw/x8mQW7bEBXeUi9xWHB8o0nMK2fhRfg8DQbIZ+wGSTzpG73c6os +ArCztrnTJUUhkPUXQyY+pu28d9aNqxJhCFxaw1CHcjDrLXpwI6G9z4PrPP4x5Ur UV2bV0XxmnNISrkU6W0e9ww9ghSDJJk6hCWF129rgH/BkpNdjQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBzhJFJTXBNgrygcOeOtGAulyJA/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5 NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRkN2I5YjhjNWIvYTQzYTQxYzgtOTgxNS0z MTg5LTg1ZGMtZDYwZTE5ODVhOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmU3OTcxYjUtODgyZi00OGNjLWIx MjMtYjg0ZDdiOWI4YzViL2ZlNzk3MWI1LTg4MmYtNDhjYy1iMTIzLWI4NGQ3Yjli OGM1Yi5jcmwwHwYDVR0jBBgwFoAUy5bUIW8WkMzqeX0Tn+eTv/wdqUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRk N2I5YjhjNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiAA9EAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKaCSJJ/XP2QL+IOlw3vELT8fO1oT4yMT7pHfq/tfgvgcbv7aULMM qzlkuDTQzEsbSQS8UvQbuAnwDlHFSE/Wo7FPklmBQSoqF34jf0obn62p2nuyqIq2 K57driJVG+8agvdNHvGRCooLxX40DKK+CFZdZdG4rwuQTbph35BbLCdhDotRDK03 JJ6t5xGK26Rg3PU0VM4qiHEwAGpA1R7cs6fJo6QrBdsfgbmXil57dftobGIVQYHP y690/jbddMxkmK7ksQ5QuVFqncYLdjp8zbMZRVNggjo0eeqmGqz8HniHfVZUqgQE fiRn6QQ6Nv2XKtc8rAwyFd7Cj7oQa+CFFA== -----END CERTIFICATE-----Generated at Sun Apr 6 20:13:54 2025 by rpki-client