$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa File: 2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa (raw, json) Hash identifier: ArRDsOF0I8I2trhTOUIhI+WfceGN8syVFnPMOOu1wQc= Subject key identifier: A8:A4:F3:F8:D1:36:08:DF:A9:E6:15:91:F9:BD:71:01:15:B6:8C:83 Certificate issuer: /CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667 Certificate serial: 010D0C9F43285849AD1A0D730BA6072A9F950210 Authority key identifier: FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 397702 IP address blocks: 2607:46c0:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:0d:73:0b:a6:07:2a:9f:95:02:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=a41f9852-b79b-4838-ab83-c5f6d306b7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:10:c8:81:c4:61:ff:4f:8b:b6:9c:7e:3a:a0: 1c:83:a6:1c:1b:7c:70:fd:cc:1d:83:0c:fc:17:88: 25:77:95:0a:bd:6a:d8:ba:40:db:52:02:39:c8:24: 81:23:86:48:10:07:1f:b6:9a:ff:37:94:1f:53:c1: 4b:41:4a:ba:98:ef:96:4a:10:2b:41:d6:12:16:23: 6f:a5:fb:e1:06:7f:7f:25:66:7a:6e:6c:14:8d:4f: cc:6c:17:ae:19:c8:de:9b:7d:8c:cd:8e:95:18:74: 38:fb:fd:87:c5:e1:8d:de:77:c0:3f:9e:61:c4:89: 22:44:96:26:e4:ea:fa:6c:19:9d:ab:e8:37:84:43: ea:5b:4b:67:56:59:ee:d5:d7:7d:26:ab:6a:c2:b6: 63:55:b7:05:c3:49:8c:d0:05:5d:f9:56:85:02:18: 3f:8f:a9:d8:49:64:6d:f3:1b:c7:15:8a:41:02:c2: 3e:0c:e6:06:39:da:9c:b2:d6:57:36:d3:e8:d2:2b: 18:63:82:36:58:66:1f:86:e4:bf:dc:b1:d7:0a:18: 6d:2e:8c:33:6a:d7:d3:67:78:48:60:41:22:86:a2: ab:56:75:d2:f3:a1:58:ab:9a:16:f3:41:11:42:aa: 8b:c8:bf:3b:38:02:bc:9f:98:e3:94:48:07:68:89: dc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A4:F3:F8:D1:36:08:DF:A9:E6:15:91:F9:BD:71:01:15:B6:8C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl X509v3 Authority Key Identifier: keyid:FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer sbgp-ipAddrBlock: critical IPv6: 2607:46c0:dead::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:5c:98:45:ac:df:b2:ff:b0:e5:99:4d:ce:ce:5e:1a:5a:15: c8:a6:4a:76:2c:8c:8c:1a:f2:f6:f9:45:8d:3f:92:67:1d:14: 19:38:e2:a9:00:d8:85:e6:35:7e:bf:37:a7:4a:5b:c4:c2:d5: 3c:53:97:8c:3e:70:bb:e9:0c:90:e5:9a:ff:65:69:48:25:fd: 7b:d5:75:d2:d4:41:54:f8:ea:a4:93:96:be:57:ea:29:f6:d6: 48:c8:f5:53:5a:4c:c6:53:cb:6c:89:17:98:92:1d:f9:4f:ed: d0:48:df:98:fc:c1:19:95:b2:00:ec:6c:45:02:b9:6c:30:45: db:d9:0a:24:d2:a0:c7:e6:b7:59:c2:ab:2f:71:d0:a0:db:b6: e7:4a:ca:e4:e9:6d:8b:7e:de:fc:04:d3:3c:44:68:45:41:d0: e4:1d:96:06:23:dd:76:4d:c7:36:ab:12:26:db:d5:82:0e:15: 1a:35:49:9a:a8:42:03:81:c2:13:7f:45:ee:be:3a:4c:ba:b7: 13:8c:fe:1d:21:e0:5c:ec:ef:a2:f5:31:5b:70:49:ac:97:f4: c1:c7:84:46:93:22:b4:c2:20:64:92:3c:f1:8e:71:bd:4b:b4: a4:09:7f:35:4d:f2:ca:f0:05:bb:b5:ef:38:61:95:5d:8f:0c: 72:f9:44:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmtGg1zC6YHKp+VAhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4YmViN2EtNmE5OS00N2FkLWE4ZTctNTBiYjRkMjRi NjY3MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YTQxZjk4NTItYjc5Yi00ODM4LWFiODMtYzVmNmQzMDZiN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixDIgcRh/0+Ltpx+OqAcg6YcG3xw/cwdgwz8 F4gld5UKvWrYukDbUgI5yCSBI4ZIEAcftpr/N5QfU8FLQUq6mO+WShArQdYSFiNv pfvhBn9/JWZ6bmwUjU/MbBeuGcjem32MzY6VGHQ4+/2HxeGN3nfAP55hxIkiRJYm 5Or6bBmdq+g3hEPqW0tnVlnu1dd9JqtqwrZjVbcFw0mM0AVd+VaFAhg/j6nYSWRt 8xvHFYpBAsI+DOYGOdqcstZXNtPo0isYY4I2WGYfhuS/3LHXChhtLowzatfTZ3hI YEEihqKrVnXS86FYq5oW80ERQqqLyL87OAK8n5jjlEgHaInciwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKik8/jRNgjfqeYVkfm9cQEVtoyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMzhi ZWI3YS02YTk5LTQ3YWQtYThlNy01MGJiNGQyNGI2NjcvMmYxMTA0ZGItZDJhMC0z ZDIzLWFjZGQtZDFhNmExMDg4YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTM4YmViN2EtNmE5OS00N2FkLWE4 ZTctNTBiYjRkMjRiNjY3LzEzOGJlYjdhLTZhOTktNDdhZC1hOGU3LTUwYmI0ZDI0 YjY2Ny5jcmwwHwYDVR0jBBgwFoAU/lnyjqs0eoqn1285r9OaMkb7l2EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMzhiZWI3YS02YTk5LTQ3YWQtYThlNy01MGJi NGQyNGI2NjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdGwN6t MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNcmEWs37L/sOWZTc7OXhpaFcimSnYsjIwa8vb5RY0/kmcdFBk4 4qkA2IXmNX6/N6dKW8TC1TxTl4w+cLvpDJDlmv9laUgl/XvVddLUQVT46qSTlr5X 6in21kjI9VNaTMZTy2yJF5iSHflP7dBI35j8wRmVsgDsbEUCuWwwRdvZCiTSoMfm t1nCqy9x0KDbtudKyuTpbYt+3vwE0zxEaEVB0OQdlgYj3XZNxzarEibb1YIOFRo1 SZqoQgOBwhN/Re6+Oky6txOM/h0h4Fzs76L1MVtwSayX9MHHhEaTIrTCIGSSPPGO cb1LtKQJfzVN8srwBbu17zhhlV2PDHL5RIQ= -----END CERTIFICATE-----Generated at Mon May 5 10:50:26 2025 by rpki-client