$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa File: d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa (raw, json) Hash identifier: qPZKa9bW5hAyyk+1si83orl+xYfpZtGi7JwsnEIb4pI= Subject key identifier: 40:18:EC:34:85:F9:0E:C5:F2:98:CA:02:39:B2:2E:AE:41:4C:C5:B1 Certificate issuer: /CN=3878fd50-eae1-4b38-a142-8eff8910579b Certificate serial: 010D0C9F43285849998F3C4A1ACDB56AFDBBC540 Authority key identifier: 40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 14807 IP address blocks: 2607:b7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3c:4a:1a:cd:b5:6a:fd:bb:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3878fd50-eae1-4b38-a142-8eff8910579b Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=5457573f-0702-4ed9-94eb-580035c0e411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:29:4e:3b:84:95:3e:21:59:da:5d:36:e4: 19:80:41:2b:c8:ec:f1:fd:39:ef:00:d1:07:5c:a1: e3:e8:34:c8:70:5c:4d:a5:da:80:c5:82:d0:83:4f: 8d:0f:59:00:34:2a:32:04:91:3a:ee:39:e8:45:2a: d1:57:ce:19:bc:ab:7d:f6:70:f7:07:6f:00:6c:ff: 58:40:2a:5c:86:dd:30:b9:65:33:89:dc:e8:ac:9c: ad:b7:df:e0:fe:8a:7d:a8:21:1b:f9:2c:17:aa:ad: f5:71:95:ea:8c:d9:a3:aa:41:db:6b:8a:52:b9:29: e2:2b:85:c0:16:ea:15:45:b0:0e:c6:a7:53:8c:e7: 9b:be:72:d2:33:7a:11:03:ab:46:6d:e4:56:ab:c9: 96:15:2e:3f:29:fd:8b:32:b6:65:43:0e:b2:00:51: e7:e3:e6:c8:f1:53:95:ab:cd:70:a3:b2:e5:48:70: 60:95:84:64:59:5b:3d:42:d8:e6:d2:68:77:59:bb: 2d:2c:27:f3:15:40:f6:14:f8:b2:06:51:a9:a1:2a: cd:15:47:d0:61:41:58:4b:e0:2d:35:ab:62:2f:4f: a7:7f:40:c3:a9:f8:28:10:3a:f8:07:52:99:78:f2: c7:8e:55:6d:32:4f:21:35:00:dd:dc:c1:50:a4:e7: 60:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:18:EC:34:85:F9:0E:C5:F2:98:CA:02:39:B2:2E:AE:41:4C:C5:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl X509v3 Authority Key Identifier: keyid:40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer sbgp-ipAddrBlock: critical IPv6: 2607:b7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c1:5d:f0:aa:9f:2e:fa:82:37:05:43:e8:26:48:0a:e9:4a: 8d:5a:2e:c1:61:c8:ef:33:03:89:a3:46:9d:be:ab:14:3c:b6: 75:9a:20:9d:6c:f5:93:03:b9:27:06:27:6d:e7:19:fc:9b:13: 5c:36:be:76:2e:d7:58:9b:0d:a5:5c:ea:c1:fc:04:ef:9d:f2: 46:bf:ae:82:cc:bf:75:f3:34:04:44:30:92:f4:a4:aa:87:06: c6:c3:0e:c9:14:ee:7e:99:88:aa:83:7c:9b:4f:2d:b0:46:6d: 7f:24:02:42:04:2a:18:b4:28:bb:a6:ab:42:55:81:2f:a8:78: 0a:1f:95:9e:0e:8a:9b:68:4b:f4:31:ff:2c:96:70:a2:54:a2: 27:7d:51:3f:8d:11:04:de:8a:12:67:b9:17:d4:8d:9c:f1:1b: 1a:16:29:8e:a2:12:7e:8e:a1:5a:73:70:cd:ea:26:00:9d:fa: 85:92:bf:a7:27:fb:22:7f:43:08:e2:95:f1:14:09:46:81:1e: 67:a6:9a:65:cb:7c:4c:89:d3:f1:3d:39:84:65:3b:40:57:ed: 3d:1e:3d:2a:ca:a6:78:62:5f:64:39:eb:f2:3e:ec:b9:77:59: e8:b5:7a:c2:84:2e:c6:33:9e:9a:d6:56:bd:f2:c0:33:06:a3: 56:a0:79:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmZjzxKGs21av27xUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg3OGZkNTAtZWFlMS00YjM4LWExNDItOGVmZjg5MTA1 NzliMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk NTQ1NzU3M2YtMDcwMi00ZWQ5LTk0ZWItNTgwMDM1YzBlNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluApTjuElT4hWdpdNuQZgEEryOzx/TnvANEH XKHj6DTIcFxNpdqAxYLQg0+ND1kANCoyBJE67jnoRSrRV84ZvKt99nD3B28AbP9Y QCpcht0wuWUzidzorJytt9/g/op9qCEb+SwXqq31cZXqjNmjqkHba4pSuSniK4XA FuoVRbAOxqdTjOebvnLSM3oRA6tGbeRWq8mWFS4/Kf2LMrZlQw6yAFHn4+bI8VOV q81wo7LlSHBglYRkWVs9Qtjm0mh3WbstLCfzFUD2FPiyBlGpoSrNFUfQYUFYS+At NatiL0+nf0DDqfgoEDr4B1KZePLHjlVtMk8hNQDd3MFQpOdgjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEAY7DSF+Q7F8pjKAjmyLq5BTMWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zODc4 ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZmODkxMDU3OWIvZDg4ZjE5ZGYtNzdmNS0z ZGM1LWE0OGEtOWIxNGM1YzllNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzg3OGZkNTAtZWFlMS00YjM4LWEx NDItOGVmZjg5MTA1NzliLzM4NzhmZDUwLWVhZTEtNGIzOC1hMTQyLThlZmY4OTEw NTc5Yi5jcmwwHwYDVR0jBBgwFoAUQMXDZ1KqbdY9NOCuMynjdcOGqMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zODc4ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZm ODkxMDU3OWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge3wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBywV3wqp8u+oI3BUPoJkgK6UqNWi7BYcjvMwOJo0advqsUPLZ1miCd bPWTA7knBidt5xn8mxNcNr52LtdYmw2lXOrB/ATvnfJGv66CzL918zQERDCS9KSq hwbGww7JFO5+mYiqg3ybTy2wRm1/JAJCBCoYtCi7pqtCVYEvqHgKH5WeDoqbaEv0 Mf8slnCiVKInfVE/jREE3ooSZ7kX1I2c8RsaFimOohJ+jqFac3DN6iYAnfqFkr+n J/sif0MI4pXxFAlGgR5nppply3xMidPxPTmEZTtAV+09Hj0qyqZ4Yl9kOevyPuy5 d1notXrChC7GM56a1la98sAzBqNWoHmG -----END CERTIFICATE-----Generated at Wed May 7 08:14:33 2025 by rpki-client