$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa File: 2e7fedc6-4231-3453-9c5a-bd24e5304959.roa (raw, json) Hash identifier: FjvZRF39QDsj+dmdqUUWXuCiJuj/6YCZ9jp5MX3tdko= Subject key identifier: C4:0D:B9:23:1C:6B:B9:FA:42:FF:FF:C2:89:9C:1D:65:CF:39:8D:DE Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584909E6A326058AB8EEB4E30C80 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 64269 IP address blocks: 2604:28c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a3:26:05:8a:b8:ee:b4:e3:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=80268278-e202-462b-8256-2e55ed176630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:1a:ad:7d:fe:b3:ab:60:0b:27:07:ce:03: f9:92:07:39:71:70:cc:ff:60:cb:00:2a:71:84:ba: 21:3e:1f:0f:dc:85:4b:13:6f:fa:c1:5f:00:42:42: ed:30:7a:3a:6b:eb:1d:a7:f1:91:62:2f:14:33:a9: d0:02:29:7f:4f:be:fd:8a:43:14:3b:98:4d:83:24: 79:7f:be:28:b1:5e:19:4c:33:8a:ec:9a:1e:bd:a3: bf:f2:00:f7:7e:c4:86:e2:b3:39:37:50:21:3c:d3: 84:c4:c8:4b:cf:40:27:0b:83:6c:9b:84:82:eb:e1: d8:90:6d:4e:c7:c2:20:0f:a3:9b:b7:b1:c4:ff:17: d5:54:f4:11:b1:48:a6:78:d2:02:be:4b:f2:00:92: 60:8b:bb:1a:1e:68:17:f8:69:51:cf:3c:42:8d:bf: 37:98:35:3f:32:3a:cf:da:d4:45:7a:3c:a9:8a:7b: f9:ad:82:1b:2b:52:ff:e4:e6:d3:bd:73:d3:e4:f9: 77:4c:f3:39:95:bf:9e:f9:ac:61:d3:e1:31:32:60: 2e:24:60:c0:1e:29:dd:32:42:b4:7a:2d:d1:94:16: fb:ec:22:8a:c8:f9:3f:65:28:80:26:8e:04:f7:8e: b6:99:35:d7:47:d2:1d:0c:b3:c2:28:a2:fe:3b:61: 92:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0D:B9:23:1C:6B:B9:FA:42:FF:FF:C2:89:9C:1D:65:CF:39:8D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv6: 2604:28c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a4:15:d7:90:d8:cf:96:f6:a7:77:e5:55:9c:07:87:eb:36: 8d:26:11:82:2a:42:51:97:65:2e:70:e5:af:54:0f:c7:24:9d: 04:83:22:3d:2d:a7:0a:1d:36:19:26:ab:70:b4:7b:5a:34:18: 13:a8:81:b8:d2:28:4e:0a:36:cf:b5:58:ba:7a:f6:49:a3:af: 66:7c:43:cc:95:58:5c:44:34:03:49:e4:bf:87:b9:a1:7c:be: 31:78:cf:8e:d4:af:bc:83:13:6f:64:1a:b2:98:06:44:a2:d4: 06:a4:da:2c:c1:a4:16:14:64:97:f2:a9:07:68:81:c1:02:61: 23:7a:3e:41:43:f4:50:0a:05:8b:28:7e:fe:0e:94:9f:51:f3: 59:da:6c:74:23:3d:ab:bb:15:ce:9e:b5:18:66:23:51:a3:84: 2a:82:75:f1:d7:e0:0d:27:be:b2:88:62:86:7d:c9:65:2a:aa: f5:83:f6:95:18:9a:37:e5:ef:b2:4d:49:2c:c5:f3:9d:64:04: 51:50:1e:dc:3e:f1:df:30:91:dc:e0:82:9f:1f:81:c3:70:3f: 17:cd:42:35:3c:da:25:79:6d:bb:3d:fb:3b:54:c8:f6:c2:ea: c0:8d:09:ec:21:ec:e5:10:fa:c1:1d:e1:da:32:12:9d:a0:cd: c6:43:78:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkJ5qMmBYq47rTjDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk ODAyNjgyNzgtZTIwMi00NjJiLTgyNTYtMmU1NWVkMTc2NjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaAarX3+s6tgCycHzgP5kgc5cXDM/2DLACpx hLohPh8P3IVLE2/6wV8AQkLtMHo6a+sdp/GRYi8UM6nQAil/T779ikMUO5hNgyR5 f74osV4ZTDOK7JoevaO/8gD3fsSG4rM5N1AhPNOExMhLz0AnC4Nsm4SC6+HYkG1O x8IgD6Obt7HE/xfVVPQRsUimeNICvkvyAJJgi7saHmgX+GlRzzxCjb83mDU/MjrP 2tRFejypinv5rYIbK1L/5ObTvXPT5Pl3TPM5lb+e+axh0+ExMmAuJGDAHindMkK0 ei3RlBb77CKKyPk/ZSiAJo4E9462mTXXR9IdDLPCKKL+O2GS8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMQNuSMca7n6Qv//womcHWXPOY3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvMmU3ZmVkYzYtNDIzMS0z NDUzLTljNWEtYmQyNGU1MzA0OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTpBXXkNjPlvand+VVnAeH6zaNJhGCKkJRl2UucOWvVA/HJJ0EgyI9 LacKHTYZJqtwtHtaNBgTqIG40ihOCjbPtVi6evZJo69mfEPMlVhcRDQDSeS/h7mh fL4xeM+O1K+8gxNvZBqymAZEotQGpNoswaQWFGSX8qkHaIHBAmEjej5BQ/RQCgWL KH7+DpSfUfNZ2mx0Iz2ruxXOnrUYZiNRo4QqgnXx1+ANJ76yiGKGfcllKqr1g/aV GJo35e+yTUksxfOdZARRUB7cPvHfMJHc4IKfH4HDcD8XzUI1PNoleW27Pfs7VMj2 wurAjQnsIezlEPrBHeHaMhKdoM3GQ3hR -----END CERTIFICATE-----Generated at Tue May 13 00:13:58 2025 by rpki-client