$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/1d9c16d9-cfc5-37cb-b88f-b78329bd7a17.roa File: 1d9c16d9-cfc5-37cb-b88f-b78329bd7a17.roa (raw, json) Hash identifier: wNAefEysyUdA986E4T9iJqy1ac8JgUvJgAhGE8ShW34= Subject key identifier: 6B:31:DF:5D:E4:1F:B4:CE:C6:31:DB:C0:59:6D:BE:DB:73:64:B5:72 Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Certificate serial: 010D0C9F432858491ED6EA3DCCB47D45374F9880 Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/1d9c16d9-cfc5-37cb-b88f-b78329bd7a17.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 981 IP address blocks: 2605:ac40:30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ea:3d:cc:b4:7d:45:37:4f:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=febf199b-dc13-48b5-8c14-d386a83d0922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:63:2d:bb:74:43:f5:db:c0:2b:58:74:2f: 43:dc:49:8d:39:61:6c:e4:43:c8:d0:1d:cf:db:ed: 0d:d6:6e:66:21:2c:f4:79:8a:9f:81:7f:dd:9c:2e: 1c:62:9b:c0:05:b6:f2:82:4a:10:90:56:16:be:29: 42:2d:03:52:4e:83:12:1b:81:ba:28:c8:17:e3:6f: b6:10:c3:3d:81:1a:e5:77:6f:d4:f0:04:ab:25:f5: 4c:57:bc:cc:7b:f2:da:3b:13:eb:cd:db:1d:4e:9b: 18:0a:e0:12:b0:4b:27:42:14:f6:bd:3b:74:a0:a1: 0c:12:e0:61:75:52:d1:0d:39:30:d8:2a:af:40:40: 90:e2:28:b0:de:1e:39:d8:8b:b5:4a:0b:9b:aa:8b: 48:3d:93:f7:95:ec:88:01:9e:76:92:52:b0:53:5c: cf:a1:d5:fe:14:f0:9b:81:1a:b8:07:9c:5a:a6:b1: bc:34:78:c0:7d:03:6d:6a:15:40:a1:9f:e6:2a:44: 9f:1a:3d:70:99:d2:6f:28:57:63:16:68:82:7a:5d: de:34:36:46:a7:79:8e:8d:3b:e2:9b:12:9f:48:78: 03:de:be:76:6a:01:cb:5e:80:d3:02:57:c4:76:14: 6a:ed:49:f8:50:ad:cc:4b:f6:3a:ec:ee:e5:53:6e: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:31:DF:5D:E4:1F:B4:CE:C6:31:DB:C0:59:6D:BE:DB:73:64:B5:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/1d9c16d9-cfc5-37cb-b88f-b78329bd7a17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl X509v3 Authority Key Identifier: keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer sbgp-ipAddrBlock: critical IPv6: 2605:ac40:30::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f2:98:e9:f0:eb:02:e1:2c:23:d5:57:49:bf:89:3c:4a:b0: 5a:61:fb:10:84:ce:ae:b2:99:d2:61:df:85:62:c7:d6:ef:6d: bb:03:76:4a:94:f7:6e:e9:85:5c:69:9d:0d:81:68:a2:c7:a7: 0c:9f:42:3d:95:30:4f:09:36:ac:3d:8b:5d:77:e6:30:1a:60: e0:fe:ce:a2:e7:2e:08:f0:a9:d9:e2:3e:6b:35:12:dd:a9:50: db:95:c5:a8:f9:77:13:a8:45:ad:56:33:53:c2:fc:75:27:57: dd:2c:80:07:53:47:25:cb:12:56:76:be:d0:43:a2:45:d6:bd: c9:af:92:c3:fb:a9:1b:98:e7:18:76:3f:c2:55:40:7f:e5:fd: aa:15:e3:39:55:bd:54:77:77:e0:5d:5f:6f:d8:fa:b1:19:2b: 1c:6e:44:76:d3:2d:c7:56:6e:7b:99:2c:f3:a1:32:91:2d:d2: 6f:b3:5d:cb:43:0c:47:e0:91:19:e9:6b:05:10:b3:55:d6:b0: 2f:09:29:24:48:77:17:7b:68:77:16:35:fd:e1:02:b5:a8:a2: f9:8b:bd:6c:56:2a:36:7f:80:eb:9f:37:3b:ba:88:9f:50:8b: 8a:b7:50:f9:ec:54:ba:af:33:ef:f4:9f:fe:2b:99:c1:4e:8f: a5:76:2d:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEke1uo9zLR9RTdPmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm YTMxMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZmViZjE5OWItZGMxMy00OGI1LThjMTQtZDM4NmE4M2QwOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGZjLbt0Q/XbwCtYdC9D3EmNOWFs5EPI0B3P 2+0N1m5mISz0eYqfgX/dnC4cYpvABbbygkoQkFYWvilCLQNSToMSG4G6KMgX42+2 EMM9gRrld2/U8ASrJfVMV7zMe/LaOxPrzdsdTpsYCuASsEsnQhT2vTt0oKEMEuBh dVLRDTkw2CqvQECQ4iiw3h452Iu1SgubqotIPZP3leyIAZ52klKwU1zPodX+FPCb gRq4B5xaprG8NHjAfQNtahVAoZ/mKkSfGj1wmdJvKFdjFmiCel3eNDZGp3mOjTvi mxKfSHgD3r52agHLXoDTAlfEdhRq7Un4UK3MS/Y67O7lU27eFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGsx313kH7TOxjHbwFltvttzZLVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvMWQ5YzE2ZDktY2ZjNS0z N2NiLWI4OGYtYjc4MzI5YmQ3YTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4 ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3 NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQAAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD/ymOnw6wLhLCPVV0m/iTxKsFph+xCEzq6ymdJh34Vix9bvbbsD dkqU927phVxpnQ2BaKLHpwyfQj2VME8JNqw9i1135jAaYOD+zqLnLgjwqdniPms1 Et2pUNuVxaj5dxOoRa1WM1PC/HUnV90sgAdTRyXLElZ2vtBDokXWvcmvksP7qRuY 5xh2P8JVQH/l/aoV4zlVvVR3d+BdX2/Y+rEZKxxuRHbTLcdWbnuZLPOhMpEt0m+z XctDDEfgkRnpawUQs1XWsC8JKSRIdxd7aHcWNf3hArWoovmLvWxWKjZ/gOufNzu6 iJ9Qi4q3UPnsVLqvM+/0n/4rmcFOj6V2LQI= -----END CERTIFICATE-----Generated at Sat May 10 00:52:40 2025 by rpki-client