$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf86eeaa-f8ad-307c-bda0-6154abe0e9f0.roa File: bf86eeaa-f8ad-307c-bda0-6154abe0e9f0.roa (raw, json) Hash identifier: vX3D7iea4vhZ0/Ges0A81SNuEzQXEGomy4YimAETRDo= Subject key identifier: CC:71:F4:20:2D:3A:49:0C:A0:49:9E:2B:9D:1A:0E:9D:9A:46:CA:F0 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20AF3D43B2F489D374ED180 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf86eeaa-f8ad-307c-bda0-6154abe0e9f0.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20001 IP address blocks: 2607:f428:9410::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:f3:d4:3b:2f:48:9d:37:4e:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=9982e744-c9de-405d-8687-1b37ce7ffa77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:71:47:da:13:ff:1d:6f:e7:4a:ff:87:5a: 4e:2d:09:2b:8b:8f:f5:d6:7a:7b:39:07:4a:49:5b: 7c:8a:c2:33:cb:42:72:34:c8:55:e2:ca:de:04:4d: be:5a:20:55:34:0e:fa:cd:81:44:5b:e7:cd:f8:7b: 49:4a:65:d7:6f:5d:45:ca:0e:6c:fa:a9:64:bf:50: 23:f4:ef:77:66:fb:35:94:17:34:90:3a:78:7e:c2: 2e:e9:73:ba:c3:75:11:c7:04:e9:c7:36:d7:fd:c1: bf:68:38:34:80:c7:00:a7:ee:99:f7:e2:e2:4e:8c: aa:7c:d4:8c:ec:b4:db:34:8a:c0:d7:35:98:89:1c: 1b:49:bc:f4:94:2e:b7:28:37:d5:34:80:e3:8f:c8: d3:2c:e8:c7:f3:73:1e:2d:75:6d:f3:9c:66:bd:ff: 6b:81:9a:89:c8:25:00:2f:7d:37:ac:7b:09:b6:60: 8f:47:f2:5e:ce:25:9b:24:aa:0a:3d:74:23:10:6f: 75:57:9a:63:24:54:44:39:49:5a:d2:82:ea:11:2a: 84:0d:68:6c:d7:ce:b7:e8:31:df:43:d1:75:3a:09: b0:bb:c5:43:83:00:e1:37:c1:18:dd:81:39:a4:74: 56:d4:cc:d1:1a:00:31:9e:f0:5c:08:57:15:fd:11: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:71:F4:20:2D:3A:49:0C:A0:49:9E:2B:9D:1A:0E:9D:9A:46:CA:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf86eeaa-f8ad-307c-bda0-6154abe0e9f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f428:9410::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ee:83:8c:16:71:8e:d2:d8:40:0f:16:c1:2e:bd:6d:45:0c: c3:7f:14:7a:7f:f5:7c:cb:3b:48:3c:7d:b4:57:91:a2:2f:fc: d0:28:a7:da:c3:e0:c6:b3:2c:8f:98:a4:fb:0e:67:01:93:bf: 24:dd:56:87:46:59:64:8e:5c:29:a9:1a:42:24:c8:b6:f9:8a: 7b:3b:5b:da:3f:42:73:fa:52:df:4d:93:92:d5:a1:1f:bb:47: c4:47:5f:ef:1b:43:59:51:66:d4:79:4d:55:50:3a:3c:63:b8: e5:70:f9:17:6d:19:45:67:9e:c2:75:f3:27:1f:a2:14:51:73: d1:56:88:92:58:f8:e3:92:cd:c7:19:4d:bf:5f:0e:bc:3c:a4: a2:fa:60:15:55:ad:41:c5:e6:2e:e5:9a:77:26:a1:3d:a0:e4: 3a:7c:e1:f8:ae:72:77:66:d8:d0:13:f4:59:f2:54:79:d7:d3: 51:7b:a7:8e:bc:73:82:b3:02:dd:eb:0c:50:43:1f:5f:40:24: d1:64:68:d8:b9:04:94:d1:f1:0a:cf:2d:7e:27:27:7c:32:8a: b7:47:b6:07:24:76:b3:72:a8:d2:f1:99:1a:df:3a:f1:9a:98: 35:82:1a:2b:1f:eb:bd:9c:8d:86:2c:70:2d:6e:eb:91:a3:d7: fd:98:7b:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnCCvPUOy9InTdO0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk OTk4MmU3NDQtYzlkZS00MDVkLTg2ODctMWIzN2NlN2ZmYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+5xR9oT/x1v50r/h1pOLQkri4/11np7OQdK SVt8isIzy0JyNMhV4sreBE2+WiBVNA76zYFEW+fN+HtJSmXXb11Fyg5s+qlkv1Aj 9O93Zvs1lBc0kDp4fsIu6XO6w3URxwTpxzbX/cG/aDg0gMcAp+6Z9+LiToyqfNSM 7LTbNIrA1zWYiRwbSbz0lC63KDfVNIDjj8jTLOjH83MeLXVt85xmvf9rgZqJyCUA L303rHsJtmCPR/JeziWbJKoKPXQjEG91V5pjJFREOUla0oLqESqEDWhs18636DHf Q9F1Ogmwu8VDgwDhN8EY3YE5pHRW1MzRGgAxnvBcCFcV/RHdtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMxx9CAtOkkMoEmeK50aDp2aRsrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmY4NmVlYWEtZjhhZC0z MDdjLWJkYTAtNjE1NGFiZTBlOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgf0KJQQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKXug4wWcY7S2EAPFsEuvW1FDMN/FHp/9XzLO0g8fbRXkaIv/NAo p9rD4MazLI+YpPsOZwGTvyTdVodGWWSOXCmpGkIkyLb5ins7W9o/QnP6Ut9Nk5LV oR+7R8RHX+8bQ1lRZtR5TVVQOjxjuOVw+RdtGUVnnsJ18ycfohRRc9FWiJJY+OOS zccZTb9fDrw8pKL6YBVVrUHF5i7lmncmoT2g5Dp84fiucndm2NAT9FnyVHnX01F7 p468c4KzAt3rDFBDH19AJNFkaNi5BJTR8QrPLX4nJ3wyirdHtgckdrNyqNLxmRrf OvGamDWCGisf672cjYYscC1u65Gj1/2Ye4g= -----END CERTIFICATE-----Generated at Sat May 10 09:53:57 2025 by rpki-client