$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa File: 701df298-19b8-383b-a438-a2b9a42d4aa8.roa (raw, json) Hash identifier: gQvqPaNLkB0vFEZJrHKJGgfuQQjPyXGjUiXBgzh8g6o= Subject key identifier: 61:9C:45:85:AE:A4:BB:20:48:29:7F:3A:88:52:CD:00:DE:A7:C3:0F Certificate issuer: /CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81 Certificate serial: 010D0C9F432858498E6479F5997EB4DC45B850D0 Authority key identifier: CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 62668 IP address blocks: 2605:c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:79:f5:99:7e:b4:dc:45:b8:50:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=a3200f52-b8c2-4e34-b967-d92acf221ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:87:61:7f:aa:87:88:e4:2a:74:7d:f4:15: bc:a4:aa:90:88:43:7a:dc:97:89:03:c0:45:1b:d6: 16:93:12:19:76:83:e3:57:70:6e:1b:61:e3:0f:e1: 7d:2b:c2:89:fc:e3:2d:af:53:95:a5:2d:b8:92:9e: df:32:e7:d3:1b:3e:e7:71:ae:03:44:8f:64:cd:69: 26:12:e6:4d:51:f9:80:d3:21:9f:44:b8:8f:8a:e1: a4:6f:86:27:c4:5f:e6:c4:3a:e8:ac:33:0c:f0:36: 1f:d3:32:01:54:4a:b7:e1:93:e9:39:e2:83:d0:a8: 20:cc:b8:5f:c4:44:9c:35:77:05:f1:92:e4:21:40: 32:95:a9:66:de:74:59:b0:7d:30:97:ab:06:fb:ab: 69:c9:9b:e9:79:a9:21:b4:60:f7:4d:e4:b7:1a:64: c2:42:95:f1:aa:6d:27:91:3e:fb:35:f3:79:a2:bd: 88:a6:27:75:2d:ac:76:e1:b7:38:1a:09:32:97:e2: 60:b5:7f:e6:38:13:e5:b6:5c:db:e1:d9:0d:4a:04: 1c:7a:f4:e9:12:08:d7:9b:bb:d6:6a:0a:63:b1:07: c3:57:18:66:f2:08:dc:b9:98:05:03:f8:df:e5:24: 71:38:0e:3e:54:e8:9d:bd:03:27:fe:6b:f2:59:bf: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9C:45:85:AE:A4:BB:20:48:29:7F:3A:88:52:CD:00:DE:A7:C3:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl X509v3 Authority Key Identifier: keyid:CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer sbgp-ipAddrBlock: critical IPv6: 2605:c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:fb:d2:8b:4d:5c:c8:cc:ee:13:b9:14:99:e9:8c:e4:b1:cd: e1:08:0e:4f:6a:07:26:18:f0:b6:a8:2a:26:08:d1:7f:92:f7: 0e:6a:49:63:46:b4:88:64:44:02:45:a2:97:3f:4e:a5:96:2d: 7d:64:4c:d7:b2:7d:d9:ff:1c:bc:49:d0:30:8c:0b:8e:8b:eb: bf:d7:aa:d9:1d:f2:6a:32:e6:7e:35:20:60:2e:d1:01:2f:aa: 71:b7:c0:47:49:f4:f6:41:6c:d4:50:63:9a:71:65:df:d2:08: fc:aa:dd:ad:0b:d1:6f:85:9e:11:4a:39:df:14:5c:f0:26:09: 37:e8:c4:b1:35:fb:6b:70:7a:fd:48:da:ba:4e:b3:8f:e2:ce: a6:bc:b8:1e:d3:5d:80:92:39:af:16:da:d5:27:8b:bb:14:53: fe:cb:1c:63:60:d3:7f:02:1c:73:6e:f1:bc:84:dc:a6:c3:20: 0b:5a:3f:b5:94:46:eb:77:c9:74:82:91:d1:7b:99:09:59:27: 1a:5d:d7:93:d0:f0:3d:0d:b9:a8:0c:67:3c:98:c1:ba:e2:6c: 43:73:fd:e0:2d:7e:cc:8a:0c:e1:33:16:54:c6:3d:0f:f3:21: f1:13:9b:c3:91:cd:12:54:25:ea:8b:29:b1:4a:e2:fe:88:f6: 93:76:f2:99 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmOZHn1mX603EW4UNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg1NTkyYjktOGU3Yi00Y2NiLTg3ZGMtZTFkZTJlOThi ZDgxMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk YTMyMDBmNTItYjhjMi00ZTM0LWI5NjctZDkyYWNmMjIxY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp6HYX+qh4jkKnR99BW8pKqQiEN63JeJA8BF G9YWkxIZdoPjV3BuG2HjD+F9K8KJ/OMtr1OVpS24kp7fMufTGz7nca4DRI9kzWkm EuZNUfmA0yGfRLiPiuGkb4YnxF/mxDrorDMM8DYf0zIBVEq34ZPpOeKD0KggzLhf xEScNXcF8ZLkIUAylalm3nRZsH0wl6sG+6tpyZvpeakhtGD3TeS3GmTCQpXxqm0n kT77NfN5or2Ipid1Lax24bc4Ggkyl+JgtX/mOBPltlzb4dkNSgQcevTpEgjXm7vW agpjsQfDVxhm8gjcuZgFA/jf5SRxOA4+VOidvQMn/mvyWb8QZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGGcRYWupLsgSCl/OohSzQDep8MPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODU1 OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRlMmU5OGJkODEvNzAxZGYyOTgtMTliOC0z ODNiLWE0MzgtYTJiOWE0MmQ0YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTg1NTkyYjktOGU3Yi00Y2NiLTg3 ZGMtZTFkZTJlOThiZDgxLzk4NTU5MmI5LThlN2ItNGNjYi04N2RjLWUxZGUyZTk4 YmQ4MS5jcmwwHwYDVR0jBBgwFoAUy0A2wcrf/oqJS/RLPYQLTYZ/2xYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODU1OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRl MmU5OGJkODEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUMQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCW+9KLTVzIzO4TuRSZ6Yzksc3hCA5PagcmGPC2qComCNF/kvcOaklj RrSIZEQCRaKXP06lli19ZEzXsn3Z/xy8SdAwjAuOi+u/16rZHfJqMuZ+NSBgLtEB L6pxt8BHSfT2QWzUUGOacWXf0gj8qt2tC9FvhZ4RSjnfFFzwJgk36MSxNftrcHr9 SNq6TrOP4s6mvLge012AkjmvFtrVJ4u7FFP+yxxjYNN/AhxzbvG8hNymwyALWj+1 lEbrd8l0gpHRe5kJWScaXdeT0PA9DbmoDGc8mMG64mxDc/3gLX7MigzhMxZUxj0P 8yHxE5vDkc0SVCXqiymxSuL+iPaTdvKZ -----END CERTIFICATE-----Generated at Sat May 10 06:17:34 2025 by rpki-client