$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa File: a46317f9-5181-35a7-ab20-00bacf68bf4e.roa (raw, json) Hash identifier: /hN+mna/WGbWaC5/KXb6uZAeXlR7wS3fj6MHbA6HM50= Subject key identifier: 64:5E:24:FF:C3:BB:6D:AE:46:69:3C:16:77:BF:1B:68:8A:C4:4E:E4 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858496CE45D30098D29CB53537980 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 6391 IP address blocks: 2605:8c80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:5d:30:09:8d:29:cb:53:53:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=4296e837-7ede-417b-ba20-748ad06a3f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:d5:58:ce:9f:23:6b:1c:3f:15:b6:1b:79: 81:73:c2:2f:e0:ca:ef:2c:40:83:43:40:91:dc:ff: 89:57:44:1f:ee:1e:7d:e8:8f:78:ab:15:41:9e:e4: 6f:55:98:dc:dd:6a:cb:f4:df:d3:9b:fc:f9:b4:17: 25:f5:29:20:dc:73:e5:ba:9e:c4:3f:c9:fb:89:da: ef:e7:3e:29:14:b5:29:ab:86:23:7c:5d:d8:fb:4a: 39:fd:32:a4:f8:30:05:13:08:8b:bb:87:3c:eb:29: d3:1c:30:fe:fd:b3:4b:00:71:57:e1:a6:3a:94:43: b3:86:43:7c:69:88:e1:e1:1f:13:36:f0:e7:9a:6e: bb:78:46:fb:d9:1b:9d:87:50:2b:6a:fa:b9:a0:47: c9:10:2f:3e:0f:12:1b:19:29:4b:53:3f:91:92:d1: fe:43:7a:da:91:d7:22:08:36:bf:c0:74:d8:a6:e8: 82:21:67:98:f9:7f:92:05:11:cf:65:ad:dc:c6:5e: 19:b1:3c:95:3d:62:7f:a7:4d:e7:4a:07:79:a7:34: 2d:32:8b:2e:bb:30:1f:ca:e9:1f:1f:85:92:30:d8: d6:b3:35:71:da:22:18:19:8e:42:fd:de:60:e5:e6: a3:d3:cd:da:d0:72:cc:8d:f8:c9:8f:20:b1:54:e2: 29:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5E:24:FF:C3:BB:6D:AE:46:69:3C:16:77:BF:1B:68:8A:C4:4E:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv6: 2605:8c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:96:8e:88:fc:29:9d:71:25:e3:b7:8e:f2:a5:1a:cb:69:04: 85:7a:8c:23:e9:bf:f5:e5:4e:db:b3:d0:94:60:44:c5:ea:61: e2:2a:05:7f:27:ea:f0:e6:b5:41:99:00:69:fa:d3:ee:5c:4f: 69:94:44:26:19:76:43:e2:53:0b:3c:34:f4:44:dd:a3:3f:7d: 7d:b3:a5:72:8f:6b:a7:0e:92:fb:78:70:59:5b:cd:78:67:b2: 9f:0b:b4:d9:f2:25:ce:4e:c4:56:d3:f3:5e:84:a4:e3:88:b4: a6:51:db:cd:cb:27:91:97:2c:c0:47:62:d7:91:35:0e:f1:05: 3c:c2:1e:90:00:cb:a8:f4:87:45:37:5f:af:a4:56:9c:e1:5c: 9c:42:f1:f7:91:e0:8a:93:95:3e:ba:5b:bf:4e:b2:5d:f3:86: 7f:6b:53:bf:3a:65:8b:59:29:24:5a:1b:ce:53:0a:82:62:e5: ae:9f:1a:44:e7:e3:19:f3:57:1d:53:6d:64:de:66:cc:d5:3d: 95:b2:c9:88:89:0d:41:de:04:22:c0:3d:0b:a2:71:b0:ba:d3: ba:2f:6a:84:75:0f:b1:ba:a5:52:37:7f:f1:a3:5b:80:48:ce: da:1f:b6:ec:b6:ab:e1:c7:eb:28:48:c1:8a:24:f9:95:d2:ec: 76:94:30:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEls5F0wCY0py1NTeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NDI5NmU4MzctN2VkZS00MTdiLWJhMjAtNzQ4YWQwNmEzZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEzVWM6fI2scPxW2G3mBc8Iv4MrvLECDQ0CR 3P+JV0Qf7h596I94qxVBnuRvVZjc3WrL9N/Tm/z5tBcl9Skg3HPlup7EP8n7idrv 5z4pFLUpq4YjfF3Y+0o5/TKk+DAFEwiLu4c86ynTHDD+/bNLAHFX4aY6lEOzhkN8 aYjh4R8TNvDnmm67eEb72Rudh1Aravq5oEfJEC8+DxIbGSlLUz+RktH+Q3rakdci CDa/wHTYpuiCIWeY+X+SBRHPZa3cxl4ZsTyVPWJ/p03nSgd5pzQtMosuuzAfyukf H4WSMNjWszVx2iIYGY5C/d5g5eaj083a0HLMjfjJjyCxVOIpIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGReJP/Du22uRmk8Fne/G2iKxE7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTQ2MzE3ZjktNTE4MS0z NWE3LWFiMjAtMDBiYWNmNjhiZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWMgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrlo6I/CmdcSXjt47ypRrLaQSFeowj6b/15U7bs9CUYETF6mHiKgV/ J+rw5rVBmQBp+tPuXE9plEQmGXZD4lMLPDT0RN2jP319s6Vyj2unDpL7eHBZW814 Z7KfC7TZ8iXOTsRW0/NehKTjiLSmUdvNyyeRlyzAR2LXkTUO8QU8wh6QAMuo9IdF N1+vpFac4VycQvH3keCKk5U+ulu/TrJd84Z/a1O/OmWLWSkkWhvOUwqCYuWunxpE 5+MZ81cdU21k3mbM1T2VssmIiQ1B3gQiwD0LonGwutO6L2qEdQ+xuqVSN3/xo1uA SM7aH7bstqvhx+soSMGKJPmV0ux2lDBu -----END CERTIFICATE-----Generated at Tue Apr 29 16:37:07 2025 by rpki-client