$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c09f9854-59ce-3ae2-8c97-6fa145a90ac4.roa File: c09f9854-59ce-3ae2-8c97-6fa145a90ac4.roa (raw, json) Hash identifier: Qpsx+bLgKyREaW50akF/p+6i2MgQ6IBXIelFsvcXP58= Subject key identifier: 0D:71:1B:0A:C1:B1:EC:5F:F2:CB:6B:C6:BC:24:20:82:03:07:27:86 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F7CC5381167C462EBF200 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c09f9854-59ce-3ae2-8c97-6fa145a90ac4.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 33363 IP address blocks: 2605:a401:849e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:7c:c5:38:11:67:c4:62:eb:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=156b843f-8108-419a-9086-6c4508474f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:de:d5:ab:75:0f:99:3b:2d:35:de:d2:8f:63: 63:80:30:c1:23:47:64:4a:1f:04:4b:9f:95:78:a1: 31:fd:35:ed:c9:1f:dc:c9:39:45:6d:ca:60:48:d4: 1a:b4:e4:cf:2e:0b:ff:af:08:d8:e0:d2:05:cf:90: be:37:3a:1c:18:6b:2b:72:2e:22:9c:54:04:07:8e: 18:5c:dc:a9:82:d2:d7:17:92:47:69:ca:47:64:f6: 6d:d1:67:54:47:6a:3c:52:63:51:9b:71:15:61:61: dc:d2:79:9f:d0:ac:66:c2:d4:e7:8f:f5:6f:d6:ea: 16:86:43:9b:33:e9:5c:97:78:02:ff:06:b1:85:f3: f4:19:1f:2c:e0:b4:61:d4:a1:e8:c7:32:4b:ea:a6: 58:e2:c7:8d:07:9c:83:7a:a2:fb:7a:96:08:b7:f1: 1f:97:5e:48:6f:7b:8f:a4:0a:af:98:aa:ec:e4:8a: 3d:04:20:66:1d:97:9a:e0:b2:6b:a9:d4:d5:60:87: 52:8c:53:aa:34:74:d8:86:99:22:5d:5d:79:20:73: 46:dc:7a:7a:4c:36:47:55:95:54:45:81:12:ec:36: 9a:fe:bf:68:77:c3:7e:03:58:0c:b3:c6:6f:03:75: 00:6c:64:66:73:a4:a4:70:ac:55:1a:32:d2:10:7c: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:71:1B:0A:C1:B1:EC:5F:F2:CB:6B:C6:BC:24:20:82:03:07:27:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c09f9854-59ce-3ae2-8c97-6fa145a90ac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:849e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0a:08:b8:5c:ec:ae:57:60:ec:c2:6e:a9:e5:bb:a4:1a:d6: cb:2c:3c:ad:ad:1d:d8:e5:bc:e1:8f:fd:f0:80:88:7c:d6:46: dc:57:0b:b5:57:51:a9:6b:a1:0e:62:88:7c:8c:bb:0b:b0:78: 4d:1c:6f:e6:61:15:38:98:dd:c8:29:dc:41:61:c3:1c:34:6d: 71:82:3a:e7:dc:c0:fd:cd:88:4f:b0:ac:49:28:2e:42:bc:11: b5:cf:1b:48:4c:99:c6:75:49:49:68:54:4f:b4:fb:a1:40:71: 41:f2:3f:4b:83:e6:87:a8:11:9d:39:73:7b:22:bd:16:b1:bb: a4:84:b3:76:cb:ce:74:77:87:d9:27:84:a5:a5:a1:34:33:bb: 88:92:ba:d1:9a:38:92:11:ca:5f:73:86:68:14:7e:c3:1b:75: 9e:0d:a3:55:43:17:22:aa:90:9c:65:4d:db:0e:c6:95:22:0c: f0:30:af:7c:2c:d4:81:05:7a:49:e2:f5:6c:81:b6:9a:6b:f4: 00:0d:ec:dd:cb:b9:3e:be:02:de:0f:da:69:1a:ef:f5:b5:17: ea:49:82:b9:72:4f:1e:91:fc:3e:c4:f7:03:82:8d:8f:1b:05: 28:d9:7d:8b:dd:16:17:19:ac:b8:91:b8:2f:72:b7:fa:ba:bd: 4c:4d:17:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P3zFOBFnxGLr8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MTU2Yjg0M2YtODEwOC00MTlhLTkwODYtNmM0NTA4NDc0ZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt7Vq3UPmTstNd7Sj2NjgDDBI0dkSh8ES5+V eKEx/TXtyR/cyTlFbcpgSNQatOTPLgv/rwjY4NIFz5C+NzocGGsrci4inFQEB44Y XNypgtLXF5JHacpHZPZt0WdUR2o8UmNRm3EVYWHc0nmf0KxmwtTnj/Vv1uoWhkOb M+lcl3gC/waxhfP0GR8s4LRh1KHoxzJL6qZY4seNB5yDeqL7epYIt/Efl15Ib3uP pAqvmKrs5Io9BCBmHZea4LJrqdTVYIdSjFOqNHTYhpkiXV15IHNG3Hp6TDZHVZVU RYES7Daa/r9od8N+A1gMs8ZvA3UAbGRmc6SkcKxVGjLSEHx22QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA1xGwrBsexf8strxrwkIIIDByeGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzA5Zjk4NTQtNTljZS0z YWUyLThjOTctNmZhMTQ1YTkwYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYSe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIgKCLhc7K5XYOzCbqnlu6Qa1sssPK2tHdjlvOGP/fCAiHzWRtxX C7VXUalroQ5iiHyMuwuweE0cb+ZhFTiY3cgp3EFhwxw0bXGCOufcwP3NiE+wrEko LkK8EbXPG0hMmcZ1SUloVE+0+6FAcUHyP0uD5oeoEZ05c3sivRaxu6SEs3bLznR3 h9knhKWloTQzu4iSutGaOJIRyl9zhmgUfsMbdZ4No1VDFyKqkJxlTdsOxpUiDPAw r3ws1IEFekni9WyBtppr9AAN7N3LuT6+At4P2mka7/W1F+pJgrlyTx6R/D7E9wOC jY8bBSjZfYvdFhcZrLiRuC9yt/q6vUxNF8c= -----END CERTIFICATE-----Generated at Tue May 6 18:57:49 2025 by rpki-client