$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa File: a43a41c8-9815-3189-85dc-d60e1985a8f9.roa (raw, json) Hash identifier: VTBr1qQ7rlqBLUewBvknkiCseO+0s7JMiQ8/NajJ49I= Subject key identifier: 6F:37:96:C8:FF:B8:D3:18:13:82:6C:E4:27:B6:1A:F4:C7:8B:1A:20 Certificate issuer: /CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Certificate serial: 010D0C9F43285849C4D4C619D1A62E289DDD3D60 Authority key identifier: CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 16430 IP address blocks: 2620:f4:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c6:19:d1:a6:2e:28:9d:dd:3d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=4639d218-1b85-4334-9b34-e634687e629b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b0:ba:36:2c:1d:3c:ff:89:d0:dc:2e:96:6d: 64:4d:dc:72:a5:cc:3b:f1:e4:8a:ed:62:02:95:1c: b9:1a:32:d7:5d:84:0e:7a:78:00:83:53:9c:5a:6f: a3:4c:7e:22:4f:8d:1a:ef:df:a5:d6:6e:f7:97:0b: 75:05:73:46:6f:5d:90:5c:e9:2d:99:ab:6a:d5:64: 79:8b:54:26:0a:ab:8c:6b:97:b2:bc:11:f9:05:ab: 0b:46:df:43:ac:88:5a:f3:2d:b4:8a:ae:0d:ba:7f: 7b:ce:5f:25:4b:7a:1b:5a:13:76:87:ce:f4:2b:6b: 88:64:95:63:27:fa:26:f4:02:c0:48:10:3f:30:eb: d5:f0:74:be:71:f3:ef:01:2a:d9:1b:03:af:d8:2a: c3:26:7d:0e:0b:2a:0d:f7:e8:0d:3f:ad:3b:4e:0f: bb:f7:bf:57:a3:1b:e5:f4:4a:cf:ed:76:17:53:05: bd:b8:8e:40:99:6f:79:2b:e7:d1:ef:07:18:a1:7e: ab:34:fb:8d:6c:2a:13:d5:16:90:a9:9f:05:23:5e: 93:93:11:63:08:d7:7b:2c:98:6b:b1:d7:bc:38:07: 5f:81:89:1b:41:15:7f:d0:fc:49:48:b5:cd:5e:21: c3:d1:d1:e5:fe:51:5a:ef:6a:6c:98:7e:57:bc:95: fa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:37:96:C8:FF:B8:D3:18:13:82:6C:E4:27:B6:1A:F4:C7:8B:1A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl X509v3 Authority Key Identifier: keyid:CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer sbgp-ipAddrBlock: critical IPv6: 2620:f4:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:99:a1:62:38:76:fc:13:6c:f0:34:33:2f:6d:76:b0:42:a1: f2:c3:07:95:1d:0e:e7:c9:7c:25:cb:0c:2a:3b:75:f6:ce:34: d9:a5:73:e5:06:33:88:91:75:79:52:2b:39:40:5e:83:b6:31: d0:ef:26:32:25:c8:56:11:a5:23:05:e2:e1:aa:47:2c:af:02: f5:8d:85:a5:2c:6f:c9:41:a3:03:ea:5a:50:7a:25:2a:89:3b: 1b:07:a0:52:c0:33:1d:b4:c2:86:45:0b:86:8e:56:2c:3b:8c: 75:cc:81:24:5d:b3:ed:61:c1:24:a9:c7:f1:03:8d:67:4e:5d: 7f:e4:66:c7:56:d5:1f:38:88:81:6f:9c:f9:45:ca:29:fb:a7: 33:8d:6e:21:e9:c9:2e:ea:61:23:a8:b4:7a:d2:5a:76:58:a0: 3a:c0:a7:43:2b:dc:99:86:1c:99:b6:ff:3b:eb:85:e5:e4:28: ab:ba:fa:ea:d7:66:14:a7:ed:a1:df:4d:76:ee:e9:ea:2c:da: ad:c8:b7:fc:51:fb:04:d6:ff:4c:fe:e2:a1:4c:4a:5f:fa:98: 24:47:6f:30:32:93:08:9a:21:89:36:92:ee:b6:c5:dc:41:11: fb:00:5c:dd:f4:1a:8d:78:3e:76:d6:53:1e:89:24:9a:a3:b7: 22:36:ab:d6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnE1MYZ0aYuKJ3dPWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU3OTcxYjUtODgyZi00OGNjLWIxMjMtYjg0ZDdiOWI4 YzViMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NDYzOWQyMTgtMWI4NS00MzM0LTliMzQtZTYzNDY4N2U2MjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrC6NiwdPP+J0Nwulm1kTdxypcw78eSK7WIC lRy5GjLXXYQOengAg1OcWm+jTH4iT40a79+l1m73lwt1BXNGb12QXOktmatq1WR5 i1QmCquMa5eyvBH5BasLRt9DrIha8y20iq4Nun97zl8lS3obWhN2h870K2uIZJVj J/om9ALASBA/MOvV8HS+cfPvASrZGwOv2CrDJn0OCyoN9+gNP607Tg+7979Xoxvl 9ErP7XYXUwW9uI5AmW95K+fR7wcYoX6rNPuNbCoT1RaQqZ8FI16TkxFjCNd7LJhr sde8OAdfgYkbQRV/0PxJSLXNXiHD0dHl/lFa72psmH5XvJX6+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFG83lsj/uNMYE4Js5Ce2GvTHixogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5 NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRkN2I5YjhjNWIvYTQzYTQxYzgtOTgxNS0z MTg5LTg1ZGMtZDYwZTE5ODVhOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmU3OTcxYjUtODgyZi00OGNjLWIx MjMtYjg0ZDdiOWI4YzViL2ZlNzk3MWI1LTg4MmYtNDhjYy1iMTIzLWI4NGQ3Yjli OGM1Yi5jcmwwHwYDVR0jBBgwFoAUy5bUIW8WkMzqeX0Tn+eTv/wdqUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRk N2I5YjhjNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiAA9EAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAL5mhYjh2/BNs8DQzL212sEKh8sMHlR0O58l8JcsMKjt19s402aVz 5QYziJF1eVIrOUBeg7Yx0O8mMiXIVhGlIwXi4apHLK8C9Y2FpSxvyUGjA+paUHol Kok7GwegUsAzHbTChkULho5WLDuMdcyBJF2z7WHBJKnH8QONZ05df+Rmx1bVHziI gW+c+UXKKfunM41uIenJLuphI6i0etJadligOsCnQyvcmYYcmbb/O+uF5eQoq7r6 6tdmFKftod9Ndu7p6izarci3/FH7BNb/TP7ioUxKX/qYJEdvMDKTCJohiTaS7rbF 3EER+wBc3fQajXg+dtZTHokkmqO3Ijar1g== -----END CERTIFICATE-----Generated at Thu May 8 18:17:50 2025 by rpki-client