$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ca319931-3e9e-36ca-88d5-33100a73ab4f.roa File: ca319931-3e9e-36ca-88d5-33100a73ab4f.roa (raw, json) Hash identifier: bOrrGDfZqj2ZvBNzq5kyXAKpMAePD14Nmofo3a9xDc8= Subject key identifier: 34:DB:11:B7:F9:67:86:76:82:45:E4:15:DD:DD:9E:0D:02:26:57:A9 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858494E2EBAF2DAF26F90C432BD00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ca319931-3e9e-36ca-88d5-33100a73ab4f.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 11055 IP address blocks: 2605:4a80:ef40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:ba:f2:da:f2:6f:90:c4:32:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=586b54f9-6d84-42d7-9f64-f435b055fe09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:35:4d:e3:00:bc:ea:45:f9:bd:47:11:05: 2d:9f:10:f9:81:f9:f7:12:89:7d:01:35:4d:d1:c9: 58:94:f1:4d:42:f5:fe:f1:00:29:91:03:da:7d:f9: 1f:a0:75:af:bf:14:bc:ec:fa:a6:f7:43:fc:85:47: 9c:f2:4d:df:83:a4:1e:05:00:3d:61:2c:dc:aa:7a: b6:52:e1:3c:48:c4:c7:ee:5a:86:69:7a:f7:b9:cb: af:c7:79:b7:e7:1b:25:e4:ba:a2:80:07:b0:8f:e1: 0d:c2:6e:77:0e:4c:aa:7f:10:c5:64:71:29:d1:be: 8b:21:1b:c9:82:27:ea:b3:86:1c:b8:76:49:ae:9c: e6:cd:1b:ec:df:e4:62:24:fd:79:c1:61:9f:85:64: c7:3a:df:ee:31:d9:ef:16:9f:84:b4:08:1b:ca:bc: 13:e4:b8:d1:99:58:1b:96:38:5c:89:38:4d:f5:3c: f0:98:b6:a5:ee:f8:58:c3:92:b6:52:75:53:0f:d3: 95:df:c1:87:5e:6f:19:21:25:c7:a0:ee:c9:80:b6: de:86:2b:f0:e6:64:2f:26:3b:ca:0a:9b:bf:29:0c: d9:b7:61:9d:2c:7e:2f:cb:87:1d:c6:76:3c:59:96: 2e:24:d1:22:ec:80:b2:9b:c0:ec:92:46:ae:15:70: 9f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DB:11:B7:F9:67:86:76:82:45:E4:15:DD:DD:9E:0D:02:26:57:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ca319931-3e9e-36ca-88d5-33100a73ab4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv6: 2605:4a80:ef40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:c6:6f:23:fa:31:5a:55:63:97:45:d2:db:80:49:df:14:12: 92:37:9d:5b:41:53:29:85:15:90:7e:b7:2d:bb:86:da:ab:4f: d6:96:db:b6:4a:c0:17:2a:35:34:96:c7:df:3f:d1:7c:20:f8: 63:4c:fe:0b:14:2b:6a:30:be:9f:05:82:29:1b:df:30:1b:ea: 7d:9f:32:54:6d:a2:11:4c:83:f4:92:8c:7b:7a:70:4f:7b:ad: 4b:60:99:78:f6:c6:12:d7:19:16:44:e1:00:88:5e:c8:c6:5a: dc:45:4a:cf:c1:13:d6:ef:a0:e4:ec:77:3a:68:44:07:1a:13: b0:6b:79:c6:e9:6b:20:83:02:63:90:8c:8f:f6:3e:65:ed:f7: 87:e8:8d:75:e5:10:d7:1f:34:18:8c:33:fd:0c:d0:34:31:12: 62:41:77:eb:92:1d:24:24:42:8b:63:3e:56:eb:43:8e:32:93: 85:fc:d2:4b:01:06:a7:c7:a9:95:a0:9b:fd:fa:28:aa:ad:a9: ca:7f:a6:4d:0a:eb:10:14:48:31:56:91:1d:0e:15:3a:6b:c0: 74:f2:65:4a:40:fb:db:62:f4:a8:1f:f2:aa:af:7d:b3:80:c9: d8:63:0e:fa:eb:cb:a7:e2:e0:85:c6:9f:d4:53:c4:64:a6:a9: e5:1e:62:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElOLrry2vJvkMQyvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NTg2YjU0ZjktNmQ4NC00MmQ3LTlmNjQtZjQzNWIwNTVmZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8s1TeMAvOpF+b1HEQUtnxD5gfn3Eol9ATVN 0clYlPFNQvX+8QApkQPaffkfoHWvvxS87Pqm90P8hUec8k3fg6QeBQA9YSzcqnq2 UuE8SMTH7lqGaXr3ucuvx3m35xsl5LqigAewj+ENwm53DkyqfxDFZHEp0b6LIRvJ gifqs4YcuHZJrpzmzRvs3+RiJP15wWGfhWTHOt/uMdnvFp+EtAgbyrwT5LjRmVgb ljhciThN9TzwmLal7vhYw5K2UnVTD9OV38GHXm8ZISXHoO7JgLbehivw5mQvJjvK Cpu/KQzZt2GdLH4vy4cdxnY8WZYuJNEi7ICym8DskkauFXCfqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDTbEbf5Z4Z2gkXkFd3dng0CJlepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvY2EzMTk5MzEtM2U5ZS0z NmNhLTg4ZDUtMzMxMDBhNzNhYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgVKgO9A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEzGbyP6MVpVY5dF0tuASd8UEpI3nVtBUymFFZB+ty27htqrT9aW 27ZKwBcqNTSWx98/0Xwg+GNM/gsUK2owvp8Fgikb3zAb6n2fMlRtohFMg/SSjHt6 cE97rUtgmXj2xhLXGRZE4QCIXsjGWtxFSs/BE9bvoOTsdzpoRAcaE7BrecbpayCD AmOQjI/2PmXt94fojXXlENcfNBiMM/0M0DQxEmJBd+uSHSQkQotjPlbrQ44yk4X8 0ksBBqfHqZWgm/36KKqtqcp/pk0K6xAUSDFWkR0OFTprwHTyZUpA+9ti9Kgf8qqv fbOAydhjDvrry6fi4IXGn9RTxGSmqeUeYpo= -----END CERTIFICATE-----Generated at Tue May 13 02:25:07 2025 by rpki-client