$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa File: 17688313-b672-388e-bef1-cd24e224ed7e.roa (raw, json) Hash identifier: N7cUdd7kCaf9EcxFlj5Pdb0fGBKwZdaXrJZ2MkAHAuk= Subject key identifier: E9:F9:C1:E3:76:49:5D:51:EE:04:F1:51:14:C7:53:9E:17:A0:26:06 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F43285849BDDA225249DD23A352ADDE10 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 21519 IP address blocks: 2607:4640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:22:52:49:dd:23:a3:52:ad:de:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=35a3a7fe-f4e4-4ea9-97ee-00c8ecaf23f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:de:23:de:2d:be:04:63:22:25:58:8d:1a:e1: dc:40:35:71:ae:28:52:8b:6b:f5:af:dc:e0:22:6f: 9a:a8:df:98:cc:0c:89:cf:32:56:02:e6:68:de:aa: 87:d7:50:77:cb:de:72:d6:11:a5:50:cc:00:0d:d2: 26:24:9a:c8:e8:1a:30:38:76:52:cc:48:b7:84:03: f2:45:0d:6f:39:92:bc:ba:70:84:1b:c5:5e:7c:47: b5:17:2c:b9:33:2e:fe:e7:ef:15:ad:61:83:32:e8: 78:c4:4a:1d:03:85:00:d0:9d:ce:c3:2a:21:da:6e: 73:62:cb:cd:3e:8f:82:ca:19:04:cc:b2:36:95:57: 18:44:ed:9f:38:81:e0:70:66:97:64:c2:5f:37:76: 08:9f:12:59:a2:d5:0f:12:a5:e3:8f:e2:cd:f4:6b: 8b:c1:c5:9c:9b:59:74:7c:16:8f:81:51:2d:1f:dc: 73:6f:43:cb:e1:9f:01:bd:83:f8:be:f4:6f:d0:73: 73:89:ca:00:a0:21:42:40:d3:77:6d:8c:10:7f:2a: fe:16:ef:5a:bb:e0:63:e3:57:d8:a9:44:fa:8c:b7: 91:96:81:50:db:eb:74:47:d5:ba:52:4b:fb:a9:26: 4a:25:e5:15:41:3d:0b:86:e8:7c:03:3a:bd:41:3e: 8b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F9:C1:E3:76:49:5D:51:EE:04:F1:51:14:C7:53:9E:17:A0:26:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:73:f6:3b:c6:52:8c:67:24:d6:df:34:6f:30:f8:fd:9c:b4: ab:7f:84:04:6f:23:78:3b:10:9f:0b:1f:75:85:f4:dc:71:89: f8:69:a7:5e:30:28:f5:fc:32:4e:7d:32:ab:73:0e:4b:59:3f: f6:92:f8:88:1b:ec:88:35:96:d3:0f:f9:35:ed:7e:f3:ac:f5: 94:4c:a1:b8:93:9d:ff:d4:79:5c:91:92:df:06:d9:af:43:d2: 56:93:0a:b2:75:b6:93:17:ca:85:da:c5:bc:c3:a0:d0:fe:a1: 18:e2:37:32:1e:c1:69:bd:5d:c5:81:24:92:cf:8b:00:8d:85: 4e:d6:1b:33:d9:ce:70:1c:4c:d8:eb:65:67:23:2a:56:2b:d6: 0a:25:81:ae:ad:95:78:cf:16:82:e6:ec:57:3b:d0:e5:2b:42: a2:ba:04:48:f8:90:29:8b:0f:33:dd:c5:36:3d:46:c1:a2:95: 21:4c:92:34:77:41:9a:c4:84:a1:65:b9:b2:b9:57:ec:88:63: ca:5c:64:48:e7:63:a8:fe:88:fb:83:83:a5:ca:4b:2e:ce:d3: 04:43:a6:1a:b3:e7:40:5a:ef:ea:e2:59:ef:8a:79:46:02:0a: 1b:47:a4:c5:b1:3e:40:8f:b3:8c:25:31:8c:df:35:73:2f:0a: 85:b9:19:72 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm92iJSSd0jo1Kt3hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MzVhM2E3ZmUtZjRlNC00ZWE5LTk3ZWUtMDBjOGVjYWYyM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N4j3i2+BGMiJViNGuHcQDVxrihSi2v1r9zg Im+aqN+YzAyJzzJWAuZo3qqH11B3y95y1hGlUMwADdImJJrI6BowOHZSzEi3hAPy RQ1vOZK8unCEG8VefEe1Fyy5My7+5+8VrWGDMuh4xEodA4UA0J3Owyoh2m5zYsvN Po+CyhkEzLI2lVcYRO2fOIHgcGaXZMJfN3YInxJZotUPEqXjj+LN9GuLwcWcm1l0 fBaPgVEtH9xzb0PL4Z8BvYP4vvRv0HNzicoAoCFCQNN3bYwQfyr+Fu9au+Bj41fY qUT6jLeRloFQ2+t0R9W6Ukv7qSZKJeUVQT0Lhuh8Azq9QT6LYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOn5weN2SV1R7gTxURTHU54XoCYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvMTc2ODgzMTMtYjY3Mi0z ODhlLWJlZjEtY2QyNGUyMjRlZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdGQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBVc/Y7xlKMZyTW3zRvMPj9nLSrf4QEbyN4OxCfCx91hfTccYn4aade MCj1/DJOfTKrcw5LWT/2kviIG+yINZbTD/k17X7zrPWUTKG4k53/1HlckZLfBtmv Q9JWkwqydbaTF8qF2sW8w6DQ/qEY4jcyHsFpvV3FgSSSz4sAjYVO1hsz2c5wHEzY 62VnIypWK9YKJYGurZV4zxaC5uxXO9DlK0KiugRI+JApiw8z3cU2PUbBopUhTJI0 d0GaxIShZbmyuVfsiGPKXGRI52Oo/oj7g4OlyksuztMEQ6Yas+dAWu/q4lnvinlG AgobR6TFsT5Aj7OMJTGM3zVzLwqFuRly -----END CERTIFICATE-----Generated at Sun May 11 06:04:25 2025 by rpki-client