$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa File: 1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa (raw, json) Hash identifier: pMU3HxyfJ804cIo710IUwgc6ATdBG9JfIyK8b1NaXeI= Subject key identifier: 8A:9C:0E:34:89:11:8E:F5:7F:4E:70:AB:C9:0F:07:63:F1:31:93:F2 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F432858494BDBF78D634CF16A13AA6B40 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa Signing time: Mon 24 Mar 2025 17:02:39 +0000 ROA not before: Mon 24 Mar 2025 17:02:39 +0000 ROA not after: Sun 22 Jun 2025 17:02:39 +0000 asID: 21947 IP address blocks: 2001:1940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:db:f7:8d:63:4c:f1:6a:13:aa:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Mar 24 17:02:39 2025 GMT Not After : Jun 22 17:02:39 2025 GMT Subject: CN=e83a2c8b-0a60-43f6-a3c3-5c3c8e3c6cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:54:a5:06:29:1f:c3:6f:fe:5a:68:94:92: c4:20:8c:ca:ed:fd:68:f9:46:cb:42:48:13:5b:ae: ef:c4:4f:d3:3f:0f:46:f8:57:13:b1:58:5e:c9:14: 96:09:56:3b:eb:3c:bf:69:e9:9a:33:5c:f9:25:cc: 47:eb:4f:85:5f:40:58:f5:8d:97:aa:56:01:d0:f1: dc:81:3e:30:64:dc:1a:8d:f5:8d:dd:78:36:52:93: 65:0a:12:9f:88:ab:51:da:dd:c7:b4:a0:b4:7f:df: 9c:5c:29:92:86:38:9a:c6:b3:8b:d1:69:62:a5:c5: c5:ac:5c:4b:ac:fc:ac:29:4d:76:dd:8d:37:2c:12: 4c:a1:33:a8:de:e0:8b:5e:83:e1:e9:0e:ac:61:30: ad:7c:0f:87:ae:15:d0:ff:1b:b0:ab:99:29:31:fb: 7b:78:50:cb:ff:e8:b2:22:24:13:9b:93:9d:a4:94: 86:6c:86:91:25:c4:38:79:2f:eb:7a:d2:21:16:a0: a3:18:5a:c2:7b:24:bf:93:24:b4:40:9f:ad:a9:f2: ba:46:40:51:dc:7b:74:8f:9d:8a:5a:2b:19:b2:12: 2a:a1:f1:46:0a:04:5a:03:ab:5c:d7:1e:d8:e5:a6: 09:59:06:72:bf:c7:25:64:03:ed:5f:ed:a9:6b:75: 20:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9C:0E:34:89:11:8E:F5:7F:4E:70:AB:C9:0F:07:63:F1:31:93:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv6: 2001:1940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6c:f1:11:83:96:37:26:26:2c:83:b8:04:a7:32:93:30:c8: 14:56:0e:d9:dd:9c:0e:bf:8f:99:3f:9c:8c:4e:0b:9d:70:f8: 1b:d1:91:4f:41:f2:9e:ee:59:f9:4b:35:0c:bc:a1:4b:ac:6b: 45:29:00:82:72:fd:e8:3c:a7:22:b5:c1:4b:6d:33:38:03:97: 25:4b:6f:a6:43:7e:9e:a3:82:0a:f4:74:0a:08:9e:4d:b6:d8: 41:3f:c3:8b:5d:90:ae:b8:71:9c:eb:70:d6:f4:b3:1e:28:59: 7f:9e:e7:32:a2:5a:fe:33:f9:00:2f:b8:88:ca:bb:97:f8:1d: 7d:a2:b5:9a:e6:90:f6:a4:09:47:f2:79:54:6d:d7:c2:b1:2b: 7d:fe:7b:69:10:b5:4f:ca:c1:4d:33:a4:14:b5:b5:fa:77:f0: d4:92:f3:45:93:ad:11:39:5e:cb:a8:d7:e9:a3:5b:94:c7:d8: a7:44:0e:5f:52:5b:f7:27:b1:87:cc:c5:74:92:69:a9:a4:91: ce:60:f1:39:2d:1c:9a:d5:2a:74:12:b1:d9:37:c4:ed:2c:c1: fd:d6:74:68:6f:22:e1:3a:7d:2b:2a:cd:5b:4f:93:c9:ad:ed: 22:50:6a:1d:71:99:86:6a:c2:d7:23:65:b0:92:a7:b7:50:ea: 7e:5f:fb:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElL2/eNY0zxahOqa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDMyNDE3MDIzOVoXDTI1MDYyMjE3MDIzOVowLzEtMCsGA1UEAxMk ZTgzYTJjOGItMGE2MC00M2Y2LWEzYzMtNWMzYzhlM2M2Y2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUpUpQYpH8Nv/lpolJLEIIzK7f1o+UbLQkgT W67vxE/TPw9G+FcTsVheyRSWCVY76zy/aemaM1z5JcxH60+FX0BY9Y2XqlYB0PHc gT4wZNwajfWN3Xg2UpNlChKfiKtR2t3HtKC0f9+cXCmShjiaxrOL0WlipcXFrFxL rPysKU123Y03LBJMoTOo3uCLXoPh6Q6sYTCtfA+HrhXQ/xuwq5kpMft7eFDL/+iy IiQTm5OdpJSGbIaRJcQ4eS/retIhFqCjGFrCeyS/kyS0QJ+tqfK6RkBR3Ht0j52K WisZshIqofFGCgRaA6tc1x7Y5aYJWQZyv8clZAPtX+2pa3UgqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIqcDjSJEY71f05wq8kPB2PxMZPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvMWFjYjQ1ZTYtYTIwYy0z YzhiLTk3ZDItOTE5MGQwYmQ3NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAAbPERg5Y3JiYsg7gEpzKTMMgUVg7Z3ZwOv4+ZP5yMTgudcPgb0ZFP QfKe7ln5SzUMvKFLrGtFKQCCcv3oPKcitcFLbTM4A5clS2+mQ36eo4IK9HQKCJ5N tthBP8OLXZCuuHGc63DW9LMeKFl/nucyolr+M/kAL7iIyruX+B19orWa5pD2pAlH 8nlUbdfCsSt9/ntpELVPysFNM6QUtbX6d/DUkvNFk60ROV7LqNfpo1uUx9inRA5f Ulv3J7GHzMV0kmmppJHOYPE5LRya1Sp0ErHZN8TtLMH91nRobyLhOn0rKs1bT5PJ re0iUGodcZmGasLXI2Wwkqe3UOp+X/sL -----END CERTIFICATE-----Generated at Sat Apr 5 22:27:03 2025 by rpki-client