$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/0a9b9a7d-cc6e-330d-8f94-31f64faa76f4.roa File: 0a9b9a7d-cc6e-330d-8f94-31f64faa76f4.roa (raw, json) Hash identifier: kk8SLK1R0r+Ge2biQOs8Ry14ahppFM+fFpWgYAetMTs= Subject key identifier: DA:68:64:13:C5:9A:06:83:FC:37:E0:AB:5C:A2:B3:2E:13:71:E0:87 Certificate issuer: /CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa Certificate serial: 010D0C9F432858498769BCF151816B2100EE7DE0 Authority key identifier: DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/0a9b9a7d-cc6e-330d-8f94-31f64faa76f4.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:354a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:bc:f1:51:81:6b:21:00:ee:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=bd1a316c-c7b6-4630-b13f-329d6bf3f87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f7:c0:de:d2:0b:75:eb:ae:0a:b1:48:f0:82: 5c:23:29:ea:e9:7b:2c:24:16:b9:21:36:01:8f:ca: b4:56:ab:d1:16:20:06:bb:ae:f4:34:bc:2e:7b:d9: e6:d8:a7:ba:27:48:2f:ab:d4:ab:11:2f:9c:53:f5: dc:ae:18:70:28:13:63:c6:d0:07:68:d7:a1:c8:19: 07:67:19:92:3b:ca:1c:ff:e9:16:4b:32:d5:a6:90: a4:6c:f1:42:e6:3c:48:d4:39:0c:5a:07:9d:72:f4: 98:92:fa:60:75:46:3c:b9:1a:19:8f:39:64:31:1e: 5d:84:9f:27:85:f6:55:60:bc:b2:24:49:01:0a:41: 54:72:30:0e:9b:1b:2b:1b:1d:bb:e2:1d:68:c2:71: bf:a2:35:db:19:d9:13:7a:93:09:00:14:63:6e:8b: 91:a0:e5:ff:ff:52:46:a4:de:60:30:4a:39:e7:c7: 44:6d:56:14:10:e9:48:ce:6a:f8:08:da:2d:56:89: 9a:5f:a5:c8:ab:2b:16:a6:7d:04:fa:bd:29:32:de: a4:50:14:a4:7c:27:48:fc:37:d4:ae:c5:34:bd:f6: b5:06:8c:5f:d8:65:b4:b7:79:16:ae:44:a1:97:fe: 62:ca:a8:03:a2:59:2c:36:3b:4b:aa:bb:34:4c:51: dd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:68:64:13:C5:9A:06:83:FC:37:E0:AB:5C:A2:B3:2E:13:71:E0:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/0a9b9a7d-cc6e-330d-8f94-31f64faa76f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl X509v3 Authority Key Identifier: keyid:DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer sbgp-ipAddrBlock: critical IPv6: 2604:354a::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:08:8d:0f:e5:8f:f5:87:49:50:0d:5c:c4:08:aa:27:59:b0: 41:c9:83:d9:de:18:a1:3b:6c:f9:b4:d7:b2:d7:24:57:36:88: 0a:2a:31:fc:87:70:b1:01:9e:a1:78:65:14:05:ae:ee:dd:63: ae:29:63:63:3a:72:41:b4:6b:40:c7:85:97:78:1e:6d:77:61: 4a:82:d0:2c:1c:9e:e3:6c:3e:40:02:9e:4b:50:ca:72:fe:4b: 7e:1d:e7:74:ac:75:61:31:08:af:ba:fa:f9:6a:74:6e:d1:90: 7d:ad:8c:aa:3f:a3:80:bc:e7:02:e6:6e:e2:b1:d4:02:34:cf: ec:db:6f:9b:d9:69:4f:e7:9e:1d:e8:46:7a:2f:38:8a:eb:af: 0c:c8:44:6b:2b:07:7d:ca:a8:33:94:ec:96:90:9f:4f:5c:74: ac:02:b0:9d:07:be:30:36:6b:ba:d1:d0:a6:2a:f0:2a:4c:0c: b3:6d:dd:d3:7d:8a:64:b1:aa:1c:92:04:4a:7a:15:b1:0d:42: 19:29:af:9b:ad:17:81:f1:3f:2b:dd:6d:f1:de:98:80:cb:b1: 2f:da:cc:44:a8:60:e2:7f:9c:a6:1e:7a:93:a4:07:31:07:b3: 83:47:fd:e1:05:57:88:50:93:71:54:be:4d:31:e8:83:4f:1e: 14:b9:2e:50 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHabzxUYFrIQDufeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JlNWEyMDEtNzRkMy00NzU5LThkNjUtMTIwYTlhYmM4 ZWFhMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YmQxYTMxNmMtYzdiNi00NjMwLWIxM2YtMzI5ZDZiZjNmODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvfA3tILdeuuCrFI8IJcIynq6XssJBa5ITYB j8q0VqvRFiAGu670NLwue9nm2Ke6J0gvq9SrES+cU/XcrhhwKBNjxtAHaNehyBkH ZxmSO8oc/+kWSzLVppCkbPFC5jxI1DkMWgedcvSYkvpgdUY8uRoZjzlkMR5dhJ8n hfZVYLyyJEkBCkFUcjAOmxsrGx274h1ownG/ojXbGdkTepMJABRjbouRoOX//1JG pN5gMEo558dEbVYUEOlIzmr4CNotVomaX6XIqysWpn0E+r0pMt6kUBSkfCdI/DfU rsU0vfa1Boxf2GW0t3kWrkShl/5iyqgDolksNjtLqrs0TFHd4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNpoZBPFmgaD/Dfgq1yisy4TceCHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYmU1 YTIwMS03NGQzLTQ3NTktOGQ2NS0xMjBhOWFiYzhlYWEvMGE5YjlhN2QtY2M2ZS0z MzBkLThmOTQtMzFmNjRmYWE3NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2JlNWEyMDEtNzRkMy00NzU5LThk NjUtMTIwYTlhYmM4ZWFhL2NiZTVhMjAxLTc0ZDMtNDc1OS04ZDY1LTEyMGE5YWJj OGVhYS5jcmwwHwYDVR0jBBgwFoAU384m6KEHITO/EZyqU5TTCL4UVXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYmU1YTIwMS03NGQzLTQ3NTktOGQ2NS0xMjBh OWFiYzhlYWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQ1SjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPCI0P5Y/1h0lQDVzECKonWbBByYPZ3hihO2z5tNey1yRXNogKKjH8 h3CxAZ6heGUUBa7u3WOuKWNjOnJBtGtAx4WXeB5td2FKgtAsHJ7jbD5AAp5LUMpy /kt+Hed0rHVhMQivuvr5anRu0ZB9rYyqP6OAvOcC5m7isdQCNM/s22+b2WlP554d 6EZ6LziK668MyERrKwd9yqgzlOyWkJ9PXHSsArCdB74wNmu60dCmKvAqTAyzbd3T fYpksaockgRKehWxDUIZKa+brReB8T8r3W3x3piAy7Ev2sxEqGDif5ymHnqTpAcx B7ODR/3hBVeIUJNxVL5NMeiDTx4UuS5Q -----END CERTIFICATE-----Generated at Tue May 6 03:06:00 2025 by rpki-client