$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cdffeb5c-4d06-3139-bad6-1e533cf899d1.roa File: cdffeb5c-4d06-3139-bad6-1e533cf899d1.roa (raw, json) Hash identifier: BXoo0QWhTCafrnUS0B7Ih9MA7PCywpCTPhFBHVz6NxA= Subject key identifier: 8C:E7:DB:6E:81:58:07:C6:53:97:D7:77:E4:00:9E:A1:4B:F2:CB:C0 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858499829C96CC690D616000D4080 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cdffeb5c-4d06-3139-bad6-1e533cf899d1.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 11055 IP address blocks: 2001:48f8:f320::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c9:6c:c6:90:d6:16:00:0d:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=f7e68336-a511-4d40-aba6-59f7d25a1206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:0e:77:d9:7f:8c:65:10:9d:df:cd:4c:8b: 93:b8:3f:58:5e:d9:41:a7:ad:13:b4:a4:20:01:53: a9:6f:63:25:f6:04:e5:21:dc:0c:35:7c:0b:f3:4a: 4d:d0:67:c3:21:3b:ce:6d:7f:7f:25:24:0f:07:03: c0:9f:81:28:ee:8d:08:28:2f:6c:4c:a2:dd:64:a8: 10:d8:64:9e:19:d4:a4:95:1e:03:92:f2:bd:a7:b6: 09:80:f7:28:bf:3a:9a:0e:2f:3d:9f:64:62:95:b1: dd:2c:e3:48:36:42:ec:b1:ad:1b:a9:ff:d1:d8:d8: 26:e4:01:31:8b:bd:2d:71:0b:51:e1:38:6e:a5:c6: 85:5e:fe:54:f7:c5:8b:3d:f8:ee:37:46:0c:3f:66: 21:2b:2d:1d:b7:99:6c:ca:ed:b8:fa:53:ae:d5:e1: 45:94:be:07:c5:a1:7f:09:d8:78:25:a8:74:09:3a: 73:2e:7c:cb:fb:99:a5:cb:03:76:7a:db:ca:c8:9e: f7:40:6f:b4:4d:c6:3e:b2:2a:5a:8a:2d:1f:14:ad: 71:00:be:3a:14:08:8c:d4:ed:55:c1:88:b9:72:65: 47:7b:b1:74:5e:13:cf:ab:da:15:cc:9d:d9:d7:0c: 5e:d4:fb:e2:c4:fc:68:5a:3d:26:6e:27:2a:c8:03: 61:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E7:DB:6E:81:58:07:C6:53:97:D7:77:E4:00:9E:A1:4B:F2:CB:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cdffeb5c-4d06-3139-bad6-1e533cf899d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv6: 2001:48f8:f320::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b3:89:02:e7:7b:f5:6d:99:47:d2:87:1a:cf:25:c6:38:ca: 79:e2:d2:4c:9f:4d:5e:b2:1a:fc:b0:8e:db:c8:94:b2:d9:29: 63:bb:2a:50:9f:c3:eb:b4:fa:4f:48:6d:e9:71:92:7b:c8:73: 8e:0a:50:c2:2b:4d:c5:2c:69:96:0d:c6:bc:48:2d:18:35:1a: f3:5a:4d:31:24:d8:24:ff:c9:68:ac:51:74:e8:f9:ef:46:b1: de:57:f1:76:d1:d7:33:38:a8:c2:de:7f:ae:97:66:c9:0f:8f: b3:ff:f6:d9:bc:6a:48:a7:88:f8:d6:9e:85:ff:6d:69:5a:4b: a5:10:23:64:a3:92:99:ee:96:9e:c4:12:60:fe:b8:b2:73:22: 82:d9:cd:fc:92:71:13:57:fe:ba:f3:8b:5d:2c:ae:81:23:c0: f2:0f:1e:56:4f:85:27:1b:b6:c0:a5:9a:82:65:f6:b0:4a:d4: 9b:82:ee:16:6c:f7:f5:e1:45:99:81:81:ea:54:8c:16:07:17: 5f:d5:47:97:82:75:64:60:96:66:b1:dc:7f:60:96:6f:7b:a8: fc:f3:0a:5b:1f:80:bf:72:86:93:8c:12:d1:5f:48:03:40:4b: 8f:40:ca:c8:04:06:1b:f0:a6:bd:2c:40:b8:62:94:c9:cb:29: a0:74:48:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmYKclsxpDWFgANQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZjdlNjgzMzYtYTUxMS00ZDQwLWFiYTYtNTlmN2QyNWExMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL0Od9l/jGUQnd/NTIuTuD9YXtlBp60TtKQg AVOpb2Ml9gTlIdwMNXwL80pN0GfDITvObX9/JSQPBwPAn4Eo7o0IKC9sTKLdZKgQ 2GSeGdSklR4DkvK9p7YJgPcovzqaDi89n2RilbHdLONINkLssa0bqf/R2Ngm5AEx i70tcQtR4ThupcaFXv5U98WLPfjuN0YMP2YhKy0dt5lsyu24+lOu1eFFlL4HxaF/ Cdh4Jah0CTpzLnzL+5mlywN2etvKyJ73QG+0TcY+sipaii0fFK1xAL46FAiM1O1V wYi5cmVHe7F0XhPPq9oVzJ3Z1wxe1PvixPxoWj0mbicqyANhZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIzn226BWAfGU5fXd+QAnqFL8svAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvY2RmZmViNWMtNGQwNi0z MTM5LWJhZDYtMWU1MzNjZjg5OWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFI+PMg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGeziQLne/VtmUfShxrPJcY4ynni0kyfTV6yGvywjtvIlLLZKWO7 KlCfw+u0+k9IbelxknvIc44KUMIrTcUsaZYNxrxILRg1GvNaTTEk2CT/yWisUXTo +e9Gsd5X8XbR1zM4qMLef66XZskPj7P/9tm8akiniPjWnoX/bWlaS6UQI2Sjkpnu lp7EEmD+uLJzIoLZzfyScRNX/rrzi10sroEjwPIPHlZPhScbtsClmoJl9rBK1JuC 7hZs9/XhRZmBgepUjBYHF1/VR5eCdWRglmax3H9glm97qPzzClsfgL9yhpOMEtFf SANAS49AysgEBhvwpr0sQLhilMnLKaB0SFg= -----END CERTIFICATE-----Generated at Mon May 12 23:51:24 2025 by rpki-client