$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa File: c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa (raw, json) Hash identifier: tL/eB6EWSgB8CWkk2Bh3xCIdJgjUQ8ZFwtiPNWSkCRs= Subject key identifier: D3:CC:4F:44:06:4A:61:81:55:F1:04:4A:C3:F1:87:37:F4:2A:E8:7C Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Certificate serial: 010D0C9F432858491ED6E6762612F42D8392F0C0 Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 981 IP address blocks: 2605:ac40:40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e6:76:26:12:f4:2d:83:92:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=f95ccede-eb55-4e8c-8f6b-92a45a131a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e9:4c:ff:e3:95:bc:1e:eb:ea:ce:0f:b7:df: e7:d8:60:80:71:ae:0b:6d:4e:2a:bc:95:26:d4:34: 72:26:35:b3:4f:3e:d5:97:4d:64:ad:ff:36:52:97: 4b:91:e8:27:03:f0:73:82:2f:50:00:82:d6:b6:eb: 2c:08:8d:8e:ae:6a:1a:4c:fd:f9:c5:33:de:b9:ba: 9c:86:90:6f:29:40:03:2b:07:d9:f2:d4:92:58:a2: a8:34:5d:7b:03:0f:58:10:8d:2e:a9:70:d5:d4:54: 9b:48:f4:42:1f:15:8d:f2:48:65:00:40:3a:81:e9: 61:08:c7:7e:c9:45:0a:09:95:b8:46:3d:27:ab:a1: 7b:0c:91:4b:74:65:6e:44:c4:c3:8a:55:a3:6a:e5: 66:95:8f:65:7b:52:07:a9:c7:82:86:57:92:49:dd: 62:65:08:80:bb:f7:80:3c:28:ce:7d:b6:8e:bf:d4: c3:16:12:21:c2:df:6f:27:71:ee:fc:61:cd:bd:df: 82:f9:12:dc:c7:f3:58:1a:70:48:7e:99:b6:b4:32: 00:85:41:7d:11:dd:14:bc:e3:5c:d8:61:1f:5e:5d: 4e:b5:aa:a8:61:f4:76:25:49:99:dd:97:5c:92:75: c9:c3:e7:24:19:1c:b9:e0:b0:85:ac:3b:b3:63:ed: 21:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CC:4F:44:06:4A:61:81:55:F1:04:4A:C3:F1:87:37:F4:2A:E8:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl X509v3 Authority Key Identifier: keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer sbgp-ipAddrBlock: critical IPv6: 2605:ac40:40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4e:3b:85:a0:68:a0:7c:64:15:3d:c7:bc:84:6f:a1:4e:5a: 6e:50:af:71:72:66:c3:2c:dd:15:d2:01:a3:92:5f:20:00:94: 2f:36:ad:cc:0e:cd:bf:b6:d8:37:9a:15:39:18:6e:92:85:9f: 88:b4:29:68:46:c5:b4:1f:2d:02:4e:3a:71:69:31:75:8a:4f: 34:41:15:52:7d:81:85:65:f4:a4:e8:0c:07:db:74:d4:de:0f: 1d:6d:23:83:16:d5:62:87:5e:f2:f6:5c:27:ad:6c:ae:7d:3d: ad:c5:54:54:7f:e2:b0:04:81:e9:df:24:f2:8a:72:52:e4:f5: 62:2b:8c:5d:c3:4c:e1:81:61:0b:8f:88:a8:e6:14:f6:51:43: 87:f3:a1:de:ef:46:7d:e4:42:84:bd:2f:15:fd:e5:e9:aa:93: 43:99:cf:09:7c:dd:79:c8:b3:26:a0:d2:b4:32:c6:26:d8:d3: dd:86:31:da:08:21:1b:53:91:dc:e2:a7:0f:6f:39:68:31:e6: a1:f6:bf:7b:bd:ed:62:de:55:e1:94:63:8f:c1:0d:62:0d:fb: ae:bc:1a:f9:07:97:79:80:00:69:c9:ad:a3:68:3b:62:29:0c: b5:0a:0f:55:ea:f3:9d:30:96:f7:05:a1:51:23:4c:98:fa:10: 74:53:8e:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEke1uZ2JhL0LYOS8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm YTMxMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk Zjk1Y2NlZGUtZWI1NS00ZThjLThmNmItOTJhNDVhMTMxYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjelM/+OVvB7r6s4Pt9/n2GCAca4LbU4qvJUm 1DRyJjWzTz7Vl01krf82UpdLkegnA/Bzgi9QAILWtussCI2OrmoaTP35xTPeubqc hpBvKUADKwfZ8tSSWKKoNF17Aw9YEI0uqXDV1FSbSPRCHxWN8khlAEA6gelhCMd+ yUUKCZW4Rj0nq6F7DJFLdGVuRMTDilWjauVmlY9le1IHqceChleSSd1iZQiAu/eA PCjOfbaOv9TDFhIhwt9vJ3Hu/GHNvd+C+RLcx/NYGnBIfpm2tDIAhUF9Ed0UvONc 2GEfXl1OtaqoYfR2JUmZ3ZdcknXJw+ckGRy54LCFrDuzY+0hVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNPMT0QGSmGBVfEESsPxhzf0Kuh8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvYzZiOTlhNzgtMjlhNi0z NjJiLTgxN2YtNTdkZDUzYjJlM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4 ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3 NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFxOO4WgaKB8ZBU9x7yEb6FOWm5Qr3FyZsMs3RXSAaOSXyAAlC82 rcwOzb+22DeaFTkYbpKFn4i0KWhGxbQfLQJOOnFpMXWKTzRBFVJ9gYVl9KToDAfb dNTeDx1tI4MW1WKHXvL2XCetbK59Pa3FVFR/4rAEgenfJPKKclLk9WIrjF3DTOGB YQuPiKjmFPZRQ4fzod7vRn3kQoS9LxX95emqk0OZzwl83XnIsyag0rQyxibY092G MdoIIRtTkdzipw9vOWgx5qH2v3u97WLeVeGUY4/BDWIN+668GvkHl3mAAGnJraNo O2IpDLUKD1Xq850wlvcFoVEjTJj6EHRTjiQ= -----END CERTIFICATE-----Generated at Sat May 10 05:38:49 2025 by rpki-client