$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a2cca32f-d310-3d5c-9deb-b89b4d9253ca.roa File: a2cca32f-d310-3d5c-9deb-b89b4d9253ca.roa (raw, json) Hash identifier: e6aPClKrFVgEP6HOLyTgOVfSuJbt9DssuaPZF9WlJ+U= Subject key identifier: E8:B0:20:DF:A1:C8:42:94:E0:89:81:68:02:6A:53:B1:B9:73:BF:1F Certificate issuer: /CN=13fecd24-0da7-4140-9636-71a72de851ec Certificate serial: 010D0C9F4328584988CF3279305490907E99A380 Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a2cca32f-d310-3d5c-9deb-b89b4d9253ca.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 14618 IP address blocks: 2604:d0c0:ae00::/40 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:32:79:30:54:90:90:7e:99:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=34d687b9-5c44-403c-a795-aef8259070e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b0:b0:39:3d:16:3c:f2:d6:05:48:ef:d9:ed: 2f:ea:3a:21:bb:69:fc:32:01:4a:9c:06:c0:af:c1: 23:78:61:0e:ad:0a:fa:91:be:74:6a:5d:79:bf:2c: 9f:ba:36:b5:01:78:13:2a:4f:43:2b:f6:9f:84:8c: b2:c5:fd:ab:2d:ee:9d:c2:ee:cb:dd:07:62:5c:b1: b0:e4:0c:67:a5:54:95:03:ea:b6:03:e9:7f:02:23: 7b:60:e5:cb:a2:b8:9d:56:bc:be:af:98:3e:e6:a8: 74:0e:a0:a8:64:4d:0a:05:0c:f6:ba:b3:c8:f5:13: 95:d1:58:d7:2e:d3:b0:02:6a:98:44:e4:28:10:f4: ee:f6:fc:73:b7:37:59:63:52:e2:a4:d3:ab:41:74: 7c:b7:4a:9d:db:cc:2a:9e:7e:67:e3:b5:27:e6:64: a9:31:4c:ee:62:78:4c:3d:87:5f:2b:b2:f6:cf:e9: 08:dd:80:3d:76:76:36:74:21:d9:ef:2f:4e:da:5e: 08:1a:30:0b:01:6d:8d:3c:0c:69:e3:22:e8:ae:b6: 87:a3:02:e0:23:05:92:76:f6:61:11:34:ea:66:36: e5:9d:cd:da:4b:b8:08:08:8e:5c:79:81:bf:2a:41: 75:bc:01:82:ec:06:20:89:c4:f3:fc:a8:2d:40:f6: 55:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B0:20:DF:A1:C8:42:94:E0:89:81:68:02:6A:53:B1:B9:73:BF:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a2cca32f-d310-3d5c-9deb-b89b4d9253ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl X509v3 Authority Key Identifier: keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer sbgp-ipAddrBlock: critical IPv6: 2604:d0c0:ae00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:e5:0d:88:66:37:49:de:e8:85:e1:f1:9e:a2:8b:26:da:a3: ee:e4:b2:c4:e9:1e:1d:9b:90:07:b5:dc:74:c7:a0:90:3f:df: a2:ea:4e:2e:c8:34:be:88:8d:9b:2c:b5:29:45:ca:68:41:97: c2:83:bf:de:87:a0:1c:07:fb:65:fd:d2:51:f1:72:b0:e0:99: 4b:cc:d8:86:12:b3:11:46:1b:95:f5:4f:44:78:fd:c0:ff:92: cc:99:0a:3b:49:77:10:f5:22:26:93:fc:44:f3:4c:91:ce:f6: 02:e6:13:9c:a5:b3:37:7c:93:06:56:d8:00:91:a2:04:3d:87: 8f:15:2a:e4:15:7d:33:04:1c:dc:e8:d3:92:6e:0e:fe:0a:58: 5a:1d:9a:b2:bc:f6:eb:f5:de:33:e1:de:98:29:76:15:bc:96: 78:3e:22:ad:d1:b1:ae:11:0d:bb:9e:be:c1:18:f2:06:b2:bb: 3a:e7:e5:36:ec:82:cf:a1:0c:56:44:39:26:3c:a7:5f:30:ee: 32:9e:db:6d:1e:bd:83:a6:27:8d:5e:e7:7f:0b:91:0c:77:a7: af:f0:f3:40:a2:ac:ff:bd:fa:4d:e4:2b:1e:bb:16:01:69:14: b7:b7:42:e0:c8:7a:25:8e:db:b6:7c:97:3c:67:26:4d:b9:59: 09:d9:d0:52 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmIzzJ5MFSQkH6Zo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmZWNkMjQtMGRhNy00MTQwLTk2MzYtNzFhNzJkZTg1 MWVjMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MzRkNjg3YjktNWM0NC00MDNjLWE3OTUtYWVmODI1OTA3MGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLCwOT0WPPLWBUjv2e0v6johu2n8MgFKnAbA r8EjeGEOrQr6kb50al15vyyfuja1AXgTKk9DK/afhIyyxf2rLe6dwu7L3QdiXLGw 5AxnpVSVA+q2A+l/AiN7YOXLoridVry+r5g+5qh0DqCoZE0KBQz2urPI9ROV0VjX LtOwAmqYROQoEPTu9vxztzdZY1LipNOrQXR8t0qd28wqnn5n47Un5mSpMUzuYnhM PYdfK7L2z+kI3YA9dnY2dCHZ7y9O2l4IGjALAW2NPAxp4yLorraHowLgIwWSdvZh ETTqZjblnc3aS7gICI5ceYG/KkF1vAGC7AYgicTz/KgtQPZVJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOiwIN+hyEKU4ImBaAJqU7G5c78fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xM2Zl Y2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRlODUxZWMvYTJjY2EzMmYtZDMxMC0z ZDVjLTlkZWItYjg5YjRkOTI1M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTNmZWNkMjQtMGRhNy00MTQwLTk2 MzYtNzFhNzJkZTg1MWVjLzEzZmVjZDI0LTBkYTctNDE0MC05NjM2LTcxYTcyZGU4 NTFlYy5jcmwwHwYDVR0jBBgwFoAUcfsH7Jbduh5RSiTnSMg1VDbRFH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xM2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3 MmRlODUxZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTQwK4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAn+UNiGY3Sd7oheHxnqKLJtqj7uSyxOkeHZuQB7XcdMegkD/foupO Lsg0voiNmyy1KUXKaEGXwoO/3oegHAf7Zf3SUfFysOCZS8zYhhKzEUYblfVPRHj9 wP+SzJkKO0l3EPUiJpP8RPNMkc72AuYTnKWzN3yTBlbYAJGiBD2HjxUq5BV9MwQc 3OjTkm4O/gpYWh2asrz26/XeM+HemCl2FbyWeD4irdGxrhENu56+wRjyBrK7Oufl NuyCz6EMVkQ5JjynXzDuMp7bbR69g6YnjV7nfwuRDHenr/DzQKKs/736TeQrHrsW AWkUt7dC4Mh6JY7btnyXPGcmTblZCdnQUg== -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:16 2025 by rpki-client