$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa File: a0664a04-65f3-3769-8cf8-3417add96a9b.roa (raw, json) Hash identifier: KElCmb2pPnR+PAF7jAqvVmbkRXm7EPuGlcKnUgaTWeU= Subject key identifier: 1C:46:10:0F:48:72:83:83:E5:D4:7B:83:89:70:40:AF:32:47:AF:49 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584976A98F5801A45F2AE08BBE80 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 14500 IP address blocks: 2607:72c0:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:8f:58:01:a4:5f:2a:e0:8b:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=f932a720-477e-4f64-b62a-0b569896580f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3b:59:9f:26:cf:ee:7a:65:87:ff:03:2f:34: ff:73:6f:a1:71:17:46:29:8d:57:98:a3:d3:b7:43: 80:d9:00:45:c8:d3:7d:3f:5d:47:63:8a:d1:b4:a5: a6:8d:e0:2a:f3:90:05:46:89:92:f3:29:2e:c5:27: 0a:16:57:76:df:51:a1:db:e7:e8:a5:8e:13:fa:70: 07:37:e1:13:85:ec:19:d9:47:c0:be:ca:20:30:dc: f6:82:4b:28:26:4f:52:ee:e9:20:39:4e:98:c4:d4: 91:8b:39:b2:8d:c0:ba:f0:fe:a0:f2:1b:ad:63:9a: 25:35:cb:0f:aa:2d:d1:4e:e8:83:ac:96:c0:2e:02: 03:79:55:f9:d9:91:60:90:3a:11:68:32:b7:4c:50: 13:cd:5d:67:27:46:64:88:af:3f:c8:08:60:48:60: 7f:30:93:6e:c6:94:0e:b6:45:54:7c:74:7f:cb:3f: 7c:54:84:e5:69:f8:d0:21:22:ed:c2:a7:99:b8:91: 87:3b:9c:67:3b:f2:96:b3:36:91:6f:60:bf:79:8c: 09:c7:2f:88:58:00:e7:7b:08:fb:d8:72:5b:7a:2e: 69:50:74:56:82:80:a1:18:29:84:fc:d4:5b:f9:f0: 6f:ec:10:18:cd:42:ea:c0:ac:ad:55:4a:a1:8d:1e: 9b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:46:10:0F:48:72:83:83:E5:D4:7B:83:89:70:40:AF:32:47:AF:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv6: 2607:72c0:200::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:24:4d:99:ae:23:91:38:0d:97:33:38:57:f4:cd:a0:7d:ef: d5:a2:9a:6a:de:f3:01:6a:2d:19:d4:94:53:cb:72:c9:b5:64: 10:12:3f:e6:5c:95:0f:e6:4a:6b:8e:bf:d4:13:88:c6:62:25: eb:5a:6e:d1:a3:b9:1e:9c:8d:48:90:4f:ff:79:bd:ca:d6:73: b8:9d:c4:70:b7:6c:83:e0:b8:f2:8b:1e:29:fe:b5:f0:de:a2: 8b:44:51:82:0d:e3:3c:9d:7c:59:21:69:2d:06:15:2b:45:a3: ce:dd:af:c1:c0:e7:62:0d:ba:fa:97:7c:64:81:35:bf:1b:09: c9:e4:26:de:8e:87:29:cf:64:4b:91:a4:96:66:54:c2:cf:a3: 2b:e6:de:f9:1d:98:6a:ab:8d:ae:b3:3f:09:e4:23:b1:30:b4: 98:29:69:8c:f4:b9:56:a2:a8:49:33:c6:57:04:7a:58:eb:68: 60:6f:2a:94:0c:9c:23:01:5e:8b:71:50:6a:35:0a:53:3a:18: 50:b8:d8:c6:12:94:0f:a6:ff:9d:f6:2e:d7:f8:6b:f8:b5:02: bc:1b:0c:ae:7b:ca:c2:ff:8a:ff:dd:d1:f5:33:49:4e:b1:2b: ff:6e:5c:37:13:8e:65:bf:8f:40:69:69:b8:a1:84:86:3a:ac: 2c:e4:4f:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl2qY9YAaRfKuCLvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk ZjkzMmE3MjAtNDc3ZS00ZjY0LWI2MmEtMGI1Njk4OTY1ODBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjtZnybP7nplh/8DLzT/c2+hcRdGKY1XmKPT t0OA2QBFyNN9P11HY4rRtKWmjeAq85AFRomS8ykuxScKFld231Gh2+fopY4T+nAH N+EThewZ2UfAvsogMNz2gksoJk9S7ukgOU6YxNSRizmyjcC68P6g8hutY5olNcsP qi3RTuiDrJbALgIDeVX52ZFgkDoRaDK3TFATzV1nJ0ZkiK8/yAhgSGB/MJNuxpQO tkVUfHR/yz98VITlafjQISLtwqeZuJGHO5xnO/KWszaRb2C/eYwJxy+IWADnewj7 2HJbei5pUHRWgoChGCmE/NRb+fBv7BAYzULqwKytVUqhjR6bFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBxGEA9IcoOD5dR7g4lwQK8yR69JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvYTA2NjRhMDQtNjVmMy0z NzY5LThjZjgtMzQxN2FkZDk2YTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdywAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAokTZmuI5E4DZczOFf0zaB979Wimmre8wFqLRnUlFPLcsm1ZBAS P+ZclQ/mSmuOv9QTiMZiJetabtGjuR6cjUiQT/95vcrWc7idxHC3bIPguPKLHin+ tfDeootEUYIN4zydfFkhaS0GFStFo87dr8HA52INuvqXfGSBNb8bCcnkJt6OhynP ZEuRpJZmVMLPoyvm3vkdmGqrja6zPwnkI7EwtJgpaYz0uVaiqEkzxlcEeljraGBv KpQMnCMBXotxUGo1ClM6GFC42MYSlA+m/532Ltf4a/i1ArwbDK57ysL/iv/d0fUz SU6xK/9uXDcTjmW/j0BpabihhIY6rCzkTzY= -----END CERTIFICATE-----Generated at Sat Apr 12 15:07:07 2025 by rpki-client