$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/c730344e-7e34-3542-b771-2ccda9e850ac.roa File: c730344e-7e34-3542-b771-2ccda9e850ac.roa (raw, json) Hash identifier: 3AvlPzu+8RJqRdieWxkUnEBrMpGtiyHXV0MlqEfoZZg= Subject key identifier: F7:7F:E1:DF:1B:71:40:F8:56:78:F9:8B:AF:4B:99:EF:66:3D:E3:54 Certificate issuer: /CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd Certificate serial: 010D0C9F43285849BC74A7B7A3E1B93B997C5680 Authority key identifier: 53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/c730344e-7e34-3542-b771-2ccda9e850ac.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 11821 IP address blocks: 2604:5d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:a7:b7:a3:e1:b9:3b:99:7c:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=3ebbd89b-2929-41da-a96c-35d05345033c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d6:3c:50:b0:08:b5:eb:cf:45:5f:a9:0b:75: a8:31:b5:84:c1:c0:17:3c:81:b9:e1:9d:c0:93:1c: 87:b1:5c:bc:00:dc:4a:5f:be:0c:ed:11:ff:61:79: 06:46:e0:6e:74:18:92:40:1a:de:54:53:fb:e4:8d: c0:d0:89:da:07:76:e6:06:7a:b5:e1:da:81:96:2a: 4b:26:06:81:ff:83:ae:11:ac:bf:15:53:c1:f3:19: a7:68:dd:d3:5c:66:34:27:83:94:10:36:c0:90:95: ea:d1:41:e7:45:ce:8c:fb:75:69:5d:79:c8:1f:c3: 31:07:2b:81:93:4a:f9:7d:01:87:cf:a4:4c:0f:93: 80:20:d6:fa:5d:72:d0:bf:de:c2:74:66:5b:bd:3d: 37:63:00:e4:b1:83:d4:2e:cb:16:2a:13:c9:f1:be: 8c:0f:c2:98:7e:4c:73:2e:66:a4:97:01:06:47:2b: a5:2b:87:dd:6b:35:25:1d:8e:c5:b9:06:f5:2d:72: 82:1c:bd:23:0b:a8:4a:ea:26:dd:6a:f1:4f:68:c1: 09:f1:e0:3a:fc:49:02:e5:76:0b:7e:75:04:84:c2: 72:e6:a8:c4:f4:60:32:e8:96:fb:08:2a:6a:e0:af: 7f:4b:7f:fc:3e:f6:1f:07:48:25:9d:18:3d:63:06: 12:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7F:E1:DF:1B:71:40:F8:56:78:F9:8B:AF:4B:99:EF:66:3D:E3:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/c730344e-7e34-3542-b771-2ccda9e850ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl X509v3 Authority Key Identifier: keyid:53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer sbgp-ipAddrBlock: critical IPv6: 2604:5d40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:21:6f:a7:71:ff:23:fb:c7:d2:dc:05:1e:68:b2:46:a5:3e: 25:93:34:49:53:ea:07:39:77:d1:ae:37:23:3d:f9:81:b2:fe: c0:be:9b:df:45:ae:6b:bb:a0:46:f1:88:1f:a1:42:a5:e7:0e: 45:b2:ac:4b:c3:ee:b0:3f:39:44:d2:d3:b3:8b:e2:4c:28:c5: 5d:b6:4e:2c:ab:32:0b:93:07:98:a0:5a:4b:37:cb:c3:0f:4b: 92:2d:4a:fb:ba:0d:1d:6b:23:b7:a6:d5:eb:71:d5:a2:10:95: 40:bb:d7:0c:23:ec:14:54:58:38:97:54:51:0b:72:99:74:b8: c3:b5:2d:61:fe:61:9a:d0:88:2d:a3:a2:76:b7:c1:30:1e:b5: 17:af:fa:8c:df:3c:6a:29:6b:e4:a7:d9:f2:cb:df:3a:41:cd: f4:40:2d:7a:55:b0:8f:e5:ac:52:8f:e2:56:21:05:01:64:ab: 46:f9:9a:5f:1f:fd:2d:bb:ca:90:29:0d:af:6b:10:f5:f4:f3: c3:02:5b:5a:b0:1f:7e:3c:0e:9f:ce:fc:ea:16:66:34:48:8b: 76:f8:bd:3b:17:e5:e5:d5:31:87:50:89:fb:50:56:1b:d1:2b: 7e:31:52:f7:73:8d:8c:a3:47:c7:fa:1f:5b:0f:32:ff:21:e9: 05:8a:3a:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm8dKe3o+G5O5l8VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMwNTljNGUtOWNiOC00NWNlLWE3MWMtYzNhNGNmMzc5 ZWRkMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk M2ViYmQ4OWItMjkyOS00MWRhLWE5NmMtMzVkMDUzNDUwMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdY8ULAItevPRV+pC3WoMbWEwcAXPIG54Z3A kxyHsVy8ANxKX74M7RH/YXkGRuBudBiSQBreVFP75I3A0InaB3bmBnq14dqBlipL JgaB/4OuEay/FVPB8xmnaN3TXGY0J4OUEDbAkJXq0UHnRc6M+3VpXXnIH8MxByuB k0r5fQGHz6RMD5OAINb6XXLQv97CdGZbvT03YwDksYPULssWKhPJ8b6MD8KYfkxz LmaklwEGRyulK4fdazUlHY7FuQb1LXKCHL0jC6hK6ibdavFPaMEJ8eA6/EkC5XYL fnUEhMJy5qjE9GAy6Jb7CCpq4K9/S3/8PvYfB0glnRg9YwYS5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPd/4d8bcUD4Vnj5i69Lme9mPeNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYzA1 OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0Y2YzNzllZGQvYzczMDM0NGUtN2UzNC0z NTQyLWI3NzEtMmNjZGE5ZTg1MGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmMwNTljNGUtOWNiOC00NWNlLWE3 MWMtYzNhNGNmMzc5ZWRkLzJjMDU5YzRlLTljYjgtNDVjZS1hNzFjLWMzYTRjZjM3 OWVkZC5jcmwwHwYDVR0jBBgwFoAUU+z9lABv9PFrpVjIbhm02wYcX1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYzA1OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0 Y2YzNzllZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRdQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFIW+ncf8j+8fS3AUeaLJGpT4lkzRJU+oHOXfRrjcjPfmBsv7Avpvf Ra5ru6BG8YgfoUKl5w5FsqxLw+6wPzlE0tOzi+JMKMVdtk4sqzILkweYoFpLN8vD D0uSLUr7ug0dayO3ptXrcdWiEJVAu9cMI+wUVFg4l1RRC3KZdLjDtS1h/mGa0Igt o6J2t8EwHrUXr/qM3zxqKWvkp9nyy986Qc30QC16VbCP5axSj+JWIQUBZKtG+Zpf H/0tu8qQKQ2vaxD19PPDAltasB9+PA6fzvzqFmY0SIt2+L07F+Xl1TGHUIn7UFYb 0St+MVL3c42Mo0fH+h9bDzL/IekFijqq -----END CERTIFICATE-----Generated at Thu May 8 22:04:40 2025 by rpki-client