$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa File: 9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa (raw, json) Hash identifier: gT4L6cW7W39KHpvw5At+1cjJ1vDlDlMcUF0ldA0dyI0= Subject key identifier: CD:3A:E7:EA:44:81:2D:D0:81:D4:AD:5B:AD:D1:70:1A:FF:20:1E:72 Certificate issuer: /CN=7afae497-a3f6-4f52-abeb-632cca8db94a Certificate serial: 010D0C9F43285849BB0F73F82B15B29E5425C200 Authority key identifier: 4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 2606:40c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:73:f8:2b:15:b2:9e:54:25:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7afae497-a3f6-4f52-abeb-632cca8db94a Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=1ce3207a-457a-4da3-8ce7-b82664039e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:74:9b:b7:2f:77:af:a0:97:c0:9c:56:01:18: ea:fe:ac:e7:e3:d8:bd:81:3d:57:82:66:4f:16:ac: 7b:23:e1:6e:74:73:38:d3:8f:01:c5:2a:91:e8:5f: ef:3b:12:34:e7:d0:d4:62:87:44:67:d2:43:67:d7: 6a:25:ae:41:28:6e:e7:5f:ac:c2:5d:c9:a8:7f:26: 08:f4:68:10:2e:8c:23:0a:7b:98:8e:61:ea:d8:13: 3e:73:f4:5e:6d:83:95:cb:2c:fa:2c:c4:b1:ac:8b: 50:b0:ee:38:41:8d:a9:e8:d0:1e:d4:2d:de:7f:5f: 38:d3:a5:74:4a:f1:ee:46:3e:45:1d:8f:43:b4:e8: 9c:29:ba:04:f9:41:79:a7:71:bb:38:3d:61:6f:ce: 73:f7:2f:af:1b:6b:66:1f:a2:79:cc:5b:14:ff:ea: fa:94:ad:d4:66:65:91:0f:b5:04:35:ef:dd:f0:95: b4:c8:fa:0a:67:1d:bf:e5:47:d4:87:e8:8f:82:6a: f4:d6:66:03:92:44:67:10:a9:94:6a:45:1a:05:a8: ad:95:80:bb:fe:34:69:39:da:91:c6:4f:8f:e5:6f: 3f:3d:de:06:ab:84:b7:97:0e:00:41:6b:79:cb:af: 23:4f:9c:15:7a:20:c8:60:3a:ec:16:84:36:33:f5: 71:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3A:E7:EA:44:81:2D:D0:81:D4:AD:5B:AD:D1:70:1A:FF:20:1E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.crl X509v3 Authority Key Identifier: keyid:4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer sbgp-ipAddrBlock: critical IPv6: 2606:40c0::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:8d:ab:59:e3:bd:7d:82:cc:57:54:53:a7:51:2f:1b:a5:49: 21:81:e4:b0:fe:d7:ee:de:41:7d:52:71:0a:fb:9c:1a:13:90: ce:fd:bd:7d:b1:45:a4:94:ee:db:44:71:09:ea:8b:1f:a2:e3: 61:3c:19:2b:71:49:70:d6:67:a8:5f:d0:72:fe:bd:c2:ee:06: 4e:5d:23:8a:80:5c:9f:bf:1d:1f:d7:10:3f:d4:01:e0:cc:e6: fe:e5:b3:72:07:a8:51:fa:da:d7:e9:ff:48:74:58:89:d3:bc: d8:0e:37:d2:e1:cb:6a:2e:34:4c:e4:ff:e8:88:6d:98:51:bb: c7:fc:bb:e9:31:d2:94:d7:9b:96:b0:e6:8f:16:0a:20:ba:48: 5c:06:91:af:7f:68:13:fd:50:1e:da:cb:2a:6d:37:de:67:7b: 7f:a2:3d:e2:fb:fb:8f:3c:31:c3:4c:a3:a4:02:bb:e9:20:9c: 67:3a:0a:d8:1e:67:96:a8:7c:fe:23:32:b9:b6:a3:cd:e1:aa: 38:92:bb:cc:4e:0c:5c:f8:f3:6c:62:28:29:56:ac:1e:ef:3d: 04:98:81:44:11:39:ce:26:d2:8c:33:7c:be:d3:7a:6f:f3:fb: 9c:a1:09:63:c1:c2:04:a6:41:13:f1:91:b4:cc:97:5b:bd:37: ce:31:56:40 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm7D3P4KxWynlQlwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FmYWU0OTctYTNmNi00ZjUyLWFiZWItNjMyY2NhOGRi OTRhMB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk MWNlMzIwN2EtNDU3YS00ZGEzLThjZTctYjgyNjY0MDM5ZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHSbty93r6CXwJxWARjq/qzn49i9gT1XgmZP Fqx7I+FudHM4048BxSqR6F/vOxI059DUYodEZ9JDZ9dqJa5BKG7nX6zCXcmofyYI 9GgQLowjCnuYjmHq2BM+c/RebYOVyyz6LMSxrItQsO44QY2p6NAe1C3ef18406V0 SvHuRj5FHY9DtOicKboE+UF5p3G7OD1hb85z9y+vG2tmH6J5zFsU/+r6lK3UZmWR D7UENe/d8JW0yPoKZx2/5UfUh+iPgmr01mYDkkRnEKmUakUaBaitlYC7/jRpOdqR xk+P5W8/Pd4Gq4S3lw4AQWt5y68jT5wVeiDIYDrsFoQ2M/VxXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM065+pEgS3QgdStW63RcBr/IB5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YWZh ZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJjY2E4ZGI5NGEvOTkxNmMwZjMtZGNiOS0z ZDZiLWIxZDEtYmQ3M2M4NDJiZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2FmYWU0OTctYTNmNi00ZjUyLWFi ZWItNjMyY2NhOGRiOTRhLzdhZmFlNDk3LWEzZjYtNGY1Mi1hYmViLTYzMmNjYThk Yjk0YS5jcmwwHwYDVR0jBBgwFoAUTIK9Kz+UIIP/5GhOY7dkVcLLeaQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YWZhZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJj Y2E4ZGI5NGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgZAwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAojatZ4719gsxXVFOnUS8bpUkhgeSw/tfu3kF9UnEK+5waE5DO/b19 sUWklO7bRHEJ6osfouNhPBkrcUlw1meoX9By/r3C7gZOXSOKgFyfvx0f1xA/1AHg zOb+5bNyB6hR+trX6f9IdFiJ07zYDjfS4ctqLjRM5P/oiG2YUbvH/LvpMdKU15uW sOaPFgogukhcBpGvf2gT/VAe2ssqbTfeZ3t/oj3i+/uPPDHDTKOkArvpIJxnOgrY HmeWqHz+IzK5tqPN4ao4krvMTgxc+PNsYigpVqwe7z0EmIFEETnOJtKMM3y+03pv 8/ucoQljwcIEpkET8ZG0zJdbvTfOMVZA -----END CERTIFICATE-----Generated at Wed May 7 11:41:22 2025 by rpki-client