$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a5f5cf71-c16b-30c7-b9c8-ca639295b465.roa File: a5f5cf71-c16b-30c7-b9c8-ca639295b465.roa (raw, json) Hash identifier: hQGKByvEx+vjh8kSjQG4NPm6q0ARfKxHZXccs4Jp/iU= Subject key identifier: B0:78:F7:0F:B6:89:1A:5E:BA:09:22:0F:1C:D1:36:DD:60:28:89:22 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584968B4213D145EDE7E66A8B940 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a5f5cf71-c16b-30c7-b9c8-ca639295b465.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 8987 IP address blocks: 2605:4300:2c20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:21:3d:14:5e:de:7e:66:a8:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=422332d3-56c0-463e-9742-499234ae82bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:1b:41:99:2e:0e:d4:80:17:5c:1f:9c:9f: 99:02:66:d7:33:a3:92:da:80:d6:76:30:ab:f6:3f: 59:ea:6d:3a:58:63:36:9c:68:9b:e8:56:bf:31:a7: cb:4a:8d:68:19:ba:86:ed:00:a3:43:7e:82:ea:bb: 5b:f3:7a:d5:42:f1:e2:a5:99:25:ca:09:fc:df:91: 71:28:13:56:98:33:d4:72:29:82:6b:1e:29:89:bf: c2:83:05:47:6a:44:87:51:75:1a:76:e1:4a:0a:32: 65:06:53:a7:d2:b8:63:2d:ca:e3:ed:d9:4d:80:da: 46:b3:d7:80:a7:6d:f8:a8:9e:b4:10:55:42:d6:c3: a1:65:f3:a9:9a:6e:11:cc:0b:d2:72:58:6f:6e:b0: 1f:88:64:60:59:a1:d0:8e:dc:74:a7:17:ce:6e:7e: fc:22:ab:f0:57:4e:a6:e8:bd:4b:94:0d:d9:42:e6: 42:83:95:ab:35:7d:71:85:57:5e:60:a6:72:31:54: 4e:a0:9c:84:fb:1a:1a:73:89:b7:60:02:ce:f8:44: d2:b1:60:f6:56:fd:54:3f:d6:45:de:7e:e2:5f:a8: 61:58:95:38:b8:1a:27:fb:b6:da:1d:88:b1:b7:f3: ae:42:06:d0:78:92:c4:31:e5:0a:a1:98:50:47:7d: 41:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:78:F7:0F:B6:89:1A:5E:BA:09:22:0F:1C:D1:36:DD:60:28:89:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a5f5cf71-c16b-30c7-b9c8-ca639295b465.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a3:a1:4c:a9:79:a4:b6:0d:70:9c:de:38:98:99:d6:cf:03: 0d:51:72:9e:a5:0d:fa:9e:93:6e:7e:0e:5f:44:47:ef:49:d2: 65:29:8b:a6:45:71:22:ed:b2:5b:84:e8:ed:a8:a2:4a:ce:d6: 45:1f:ea:0f:5f:75:38:c5:0f:91:74:2c:e3:04:1f:f0:20:a1: 29:b2:4b:64:4b:87:b7:c9:0d:9c:0f:87:32:0d:90:9b:b2:a0: 97:05:12:0f:75:86:72:f3:6c:d2:34:de:5c:da:77:0c:77:67: cc:99:13:18:37:c1:af:64:de:cb:b2:49:12:2d:90:83:80:10: 2d:3b:79:a5:6e:21:d7:d8:73:4a:54:c4:18:97:4d:e4:6e:0a: 0b:62:43:1b:8a:14:58:81:be:92:df:9a:48:d1:b6:c9:d2:6f: 0e:4d:f1:e1:55:c7:6b:0c:4a:2b:9f:1e:77:f2:d7:79:2f:6a: 7a:3f:56:b6:dd:f2:d3:f3:32:68:ba:d6:da:ef:7e:ab:ec:3f: 7e:23:9d:3a:94:0d:2d:5d:37:c7:05:b0:0c:1c:13:4f:28:37: af:18:30:e8:d5:30:56:ec:ef:42:2b:96:5b:54:b0:b8:96:31: cf:48:df:b0:66:25:0a:99:c9:5c:35:d0:4a:46:07:a6:6f:b4: 05:45:ad:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElotCE9FF7efmaouUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk NDIyMzMyZDMtNTZjMC00NjNlLTk3NDItNDk5MjM0YWU4MmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/AbQZkuDtSAF1wfnJ+ZAmbXM6OS2oDWdjCr 9j9Z6m06WGM2nGib6Fa/MafLSo1oGbqG7QCjQ36C6rtb83rVQvHipZklygn835Fx KBNWmDPUcimCax4pib/CgwVHakSHUXUaduFKCjJlBlOn0rhjLcrj7dlNgNpGs9eA p234qJ60EFVC1sOhZfOpmm4RzAvSclhvbrAfiGRgWaHQjtx0pxfObn78IqvwV06m 6L1LlA3ZQuZCg5WrNX1xhVdeYKZyMVROoJyE+xoac4m3YALO+ETSsWD2Vv1UP9ZF 3n7iX6hhWJU4uBon+7baHYixt/OuQgbQeJLEMeUKoZhQR31ByQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLB49w+2iRpeugkiDxzRNt1gKIkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTVmNWNmNzEtYzE2Yi0z MGM3LWI5YzgtY2E2MzkyOTViNDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADujoUypeaS2DXCc3jiYmdbPAw1Rcp6lDfqek25+Dl9ER+9J0mUp i6ZFcSLtsluE6O2ookrO1kUf6g9fdTjFD5F0LOMEH/AgoSmyS2RLh7fJDZwPhzIN kJuyoJcFEg91hnLzbNI03lzadwx3Z8yZExg3wa9k3suySRItkIOAEC07eaVuIdfY c0pUxBiXTeRuCgtiQxuKFFiBvpLfmkjRtsnSbw5N8eFVx2sMSiufHnfy13kvano/ Vrbd8tPzMmi61trvfqvsP34jnTqUDS1dN8cFsAwcE08oN68YMOjVMFbs70IrlltU sLiWMc9I37BmJQqZyVw10EpGB6ZvtAVFrdo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:24 2025 by rpki-client