$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa File: 40979e81-e4d5-3b9e-aa17-d47ae9979638.roa (raw, json) Hash identifier: pqkKkf+aUN/GURzjvJl1MGY1aAEpL3ZnbqR8+E+P9Q0= Subject key identifier: 37:6C:CD:3D:A1:F6:66:BE:FB:A8:27:54:1D:9B:78:42:4B:03:A7:86 Certificate issuer: /CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Certificate serial: 010D0C9F43285849B57A09D434270A2186C90310 Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 16509 IP address blocks: 2606:9680:20c0::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:09:d4:34:27:0a:21:86:c9:03:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=56223574-f9ea-4b93-b045-9d23a7d49011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:8a:53:55:3d:c0:84:2c:dd:8e:ea:41:e5: 64:a6:8c:c4:d9:03:be:ce:31:91:0d:30:1d:50:ca: 82:af:92:2c:b0:ec:e0:df:d6:00:70:ef:0e:bc:0f: e1:8e:23:a8:2c:c5:2f:39:e3:3e:b8:28:f3:41:93: 2b:75:85:64:26:35:d2:b1:fa:34:60:66:f3:88:c9: d7:3e:fe:e2:94:e2:8c:a9:65:b2:52:58:5c:3c:c6: f7:67:d5:d0:94:6c:f2:9f:19:08:66:b9:75:e0:f7: 2f:19:ad:4f:ac:82:0a:6e:71:56:47:48:52:79:59: 17:d0:3d:07:f3:c5:61:9a:a7:29:27:f6:e8:9e:aa: 8d:a9:d8:85:51:52:fa:9b:b1:01:f7:80:9d:2e:80: 9e:16:81:5d:55:86:69:09:3a:a9:38:00:19:a7:24: ea:4f:c5:c6:90:71:a1:c7:cc:e2:d7:e5:4c:83:ff: 5b:56:0d:c1:8d:d8:a5:b2:56:fc:0a:ef:92:6d:3a: d7:03:40:ea:d4:1c:cb:de:5e:8a:e4:ca:1c:fd:cd: ba:33:92:4b:7e:09:92:14:1e:99:ba:e1:77:95:e8: 87:46:b9:eb:b8:b6:6c:78:e1:fb:aa:6b:0f:da:c0: ce:53:3d:17:4b:12:fc:24:ee:91:84:9b:db:5a:57: 24:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6C:CD:3D:A1:F6:66:BE:FB:A8:27:54:1D:9B:78:42:4B:03:A7:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl X509v3 Authority Key Identifier: keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer sbgp-ipAddrBlock: critical IPv6: 2606:9680:20c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:92:6e:0d:11:3c:1e:41:57:3e:de:37:af:4f:62:02:1d:af: ff:4d:4b:cd:1b:ff:f5:3c:cc:df:29:6f:c5:c9:67:9b:67:39: 99:6d:43:9b:54:79:6c:00:97:fa:e4:d9:f8:63:29:b4:93:61: d8:12:52:08:57:5d:b8:6f:eb:8d:13:20:90:e0:b0:6b:63:8f: ec:0d:a1:45:4a:a0:da:48:ed:d8:e0:9e:34:f8:ee:00:c7:a1: 4f:f0:8e:a5:c9:ed:a6:da:fe:b8:a3:84:2a:67:13:7c:28:70: b9:c1:62:79:98:f7:19:86:21:3b:35:0b:97:f2:fe:17:87:33: 2c:a5:e3:8a:b1:5a:27:55:fa:5d:92:44:3c:d5:25:48:d4:af: 69:1f:7e:03:81:1b:64:ba:f8:e5:b6:16:25:84:f6:b1:de:87: 6f:0b:4a:0b:05:f4:c6:57:66:35:aa:4f:8b:61:93:08:74:d9: 3c:53:ce:92:25:1a:48:4a:7c:3d:0f:9d:ae:74:76:f7:ed:43: b8:8a:0e:0a:80:e2:60:55:5f:e2:8d:74:56:24:5f:f8:5c:b2: 58:40:19:24:25:d4:7b:b2:10:85:cb:6c:f2:ed:58:54:6b:29: 39:08:e9:ba:a0:7b:44:c4:27:bd:1a:e6:d5:70:eb:83:c4:83: bb:e9:db:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm1egnUNCcKIYbJAxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli Njc2MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk NTYyMjM1NzQtZjllYS00YjkzLWIwNDUtOWQyM2E3ZDQ5MDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsiKU1U9wIQs3Y7qQeVkpozE2QO+zjGRDTAd UMqCr5IssOzg39YAcO8OvA/hjiOoLMUvOeM+uCjzQZMrdYVkJjXSsfo0YGbziMnX Pv7ilOKMqWWyUlhcPMb3Z9XQlGzynxkIZrl14PcvGa1PrIIKbnFWR0hSeVkX0D0H 88VhmqcpJ/bonqqNqdiFUVL6m7EB94CdLoCeFoFdVYZpCTqpOAAZpyTqT8XGkHGh x8zi1+VMg/9bVg3Bjdilslb8Cu+SbTrXA0Dq1BzL3l6K5Moc/c26M5JLfgmSFB6Z uuF3leiHRrnruLZseOH7qmsP2sDOUz0XSxL8JO6RhJvbWlckTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDdszT2h9ma++6gnVB2beEJLA6eGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5 MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvNDA5NzllODEtZTRkNS0z YjllLWFhMTctZDQ3YWU5OTc5NjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3 ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5 YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy Y2ZjOWI2NzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgaWgCDA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKWSbg0RPB5BVz7eN69PYgIdr/9NS80b//U8zN8pb8XJZ5tnOZlt Q5tUeWwAl/rk2fhjKbSTYdgSUghXXbhv640TIJDgsGtjj+wNoUVKoNpI7djgnjT4 7gDHoU/wjqXJ7aba/rijhCpnE3wocLnBYnmY9xmGITs1C5fy/heHMyyl44qxWidV +l2SRDzVJUjUr2kffgOBG2S6+OW2FiWE9rHeh28LSgsF9MZXZjWqT4thkwh02TxT zpIlGkhKfD0Pna50dvftQ7iKDgqA4mBVX+KNdFYkX/hcslhAGSQl1HuyEIXLbPLt WFRrKTkI6bqge0TEJ70a5tVw64PEg7vp2w8= -----END CERTIFICATE-----Generated at Sun May 11 10:23:14 2025 by rpki-client