$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa File: 4443ea3e-5515-393f-9b6c-71ed5816326b.roa (raw, json) Hash identifier: Dcbytbt5RsAMc9uHbc+UOoFw8/NYXaVWYwXWlgZLnKE= Subject key identifier: CC:98:B6:5F:48:03:66:2E:B1:AB:E6:E8:B8:46:95:70:96:69:98:90 Certificate issuer: /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Certificate serial: 010D0C9F43285848D0ABA7E8D1B23ED479A00DC0 Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 394449 IP address blocks: 2604:3dc0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:a7:e8:d1:b2:3e:d4:79:a0:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=24f1e0d6-60c2-4a32-af16-a40034f69e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:54:68:8f:71:63:ed:50:cb:3f:9b:dd:6a:b2: fe:dd:28:7e:a0:75:98:75:c3:bf:a6:ad:68:68:75: 90:ce:d5:cc:83:ff:0c:ab:bd:fe:8c:47:8c:65:df: 0a:68:a9:e2:c3:fe:95:9b:ea:69:69:4e:25:51:8b: 3e:9a:67:02:d4:2b:4d:1f:3e:02:6d:68:b1:d1:24: 43:9e:cc:03:c9:49:2d:62:af:f8:7f:9b:68:f2:96: da:17:f5:10:5e:80:d8:7f:70:ec:1f:0d:e7:6d:be: ef:75:6c:5d:a7:f1:82:08:70:be:53:bb:92:d3:35: b7:c6:62:98:e4:ff:91:3a:0b:d0:c9:dc:d2:2f:bf: 7e:4a:0c:83:50:d5:f5:d7:09:1a:5c:20:b0:e3:5b: 5b:bf:0e:bf:3f:c3:31:4c:24:e8:fc:6f:dd:d7:09: e2:78:66:ca:18:e7:4c:3d:22:11:86:8a:65:d2:c2: 26:4d:43:e9:e9:7d:6c:5d:6c:4a:46:86:0d:50:6a: 38:4c:6b:1e:7a:3d:8c:81:33:6a:36:4b:c3:8e:ea: ba:92:6a:5a:eb:1c:e8:91:6e:dc:e2:9c:9a:ee:da: 7e:7d:a7:15:4b:c0:94:b3:f1:bc:9d:fd:f8:58:ff: 5f:6b:11:f0:b7:fc:6c:3c:0f:3b:3a:ec:6f:24:e7: 39:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:98:B6:5F:48:03:66:2E:B1:AB:E6:E8:B8:46:95:70:96:69:98:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl X509v3 Authority Key Identifier: keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer sbgp-ipAddrBlock: critical IPv6: 2604:3dc0:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8e:c8:16:63:6a:17:50:f3:85:50:55:3d:63:7c:18:17:41: 83:7e:0d:e1:e7:01:75:b3:ff:2d:3a:10:8f:a2:60:17:15:2a: 1d:84:d3:a0:73:f9:af:49:77:5f:b0:93:d2:9b:a0:31:b7:65: 1d:23:7e:01:e4:58:d5:43:3e:52:40:b9:40:32:d0:ca:25:56: 42:5a:cf:24:5f:15:0b:7e:2e:32:0b:6a:27:ea:64:13:d5:a7: 04:74:8d:1a:6f:b5:90:e3:ad:94:f7:53:08:5c:33:7e:6f:16: 96:55:ec:58:3d:66:a3:ea:f9:4f:84:d2:c5:7d:f9:69:e1:13: 86:48:a0:ff:86:c6:80:17:8e:c4:79:b4:d0:c3:34:a1:65:4a: 49:83:e6:66:d6:cd:4c:30:c8:35:03:42:bc:a5:d9:be:00:c7: 6e:d9:43:2d:f2:e0:6d:3f:8e:09:8a:40:e2:d5:78:27:6b:1e: d8:cf:41:c9:a3:f7:31:4b:f0:01:5b:54:ee:ec:5a:42:be:de: 9c:d5:c6:96:d6:a3:a5:c5:63:0f:ff:28:fb:80:76:85:d1:2d: fb:80:56:91:76:0c:20:ae:1f:d1:27:49:52:75:4c:81:29:ca: 31:dd:df:5a:cc:b3:cb:e5:2c:32:63:82:a5:b0:30:ee:cb:3f: 7b:3e:fe:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjQq6fo0bI+1HmgDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMx OTc5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk MjRmMWUwZDYtNjBjMi00YTMyLWFmMTYtYTQwMDM0ZjY5ZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1Roj3Fj7VDLP5vdarL+3Sh+oHWYdcO/pq1o aHWQztXMg/8Mq73+jEeMZd8KaKniw/6Vm+ppaU4lUYs+mmcC1CtNHz4CbWix0SRD nswDyUktYq/4f5to8pbaF/UQXoDYf3DsHw3nbb7vdWxdp/GCCHC+U7uS0zW3xmKY 5P+ROgvQydzSL79+SgyDUNX11wkaXCCw41tbvw6/P8MxTCTo/G/d1wnieGbKGOdM PSIRhopl0sImTUPp6X1sXWxKRoYNUGo4TGseej2MgTNqNkvDjuq6kmpa6xzokW7c 4pya7tp+facVS8CUs/G8nf34WP9faxHwt/xsPA87OuxvJOc5QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMyYtl9IA2Yusavm6LhGlXCWaZiQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3 ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvNDQ0M2VhM2UtNTUxNS0z OTNmLTliNmMtNzFlZDU4MTYzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGU4N2Q4M2YtYjUwYy00YTY1LTlk OWEtYzI4NDU4ZmMxOTc5LzRlODdkODNmLWI1MGMtNGE2NS05ZDlhLWMyODQ1OGZj MTk3OS5jcmwwHwYDVR0jBBgwFoAUGggBUYL46DBD52qzRc1UcqS0zfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0 NThmYzE5NzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQ9wAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFqOyBZjahdQ84VQVT1jfBgXQYN+DeHnAXWz/y06EI+iYBcVKh2E 06Bz+a9Jd1+wk9KboDG3ZR0jfgHkWNVDPlJAuUAy0MolVkJazyRfFQt+LjILaifq ZBPVpwR0jRpvtZDjrZT3UwhcM35vFpZV7Fg9ZqPq+U+E0sV9+WnhE4ZIoP+GxoAX jsR5tNDDNKFlSkmD5mbWzUwwyDUDQryl2b4Ax27ZQy3y4G0/jgmKQOLVeCdrHtjP Qcmj9zFL8AFbVO7sWkK+3pzVxpbWo6XFYw//KPuAdoXRLfuAVpF2DCCuH9EnSVJ1 TIEpyjHd31rMs8vlLDJjgqWwMO7LP3s+/qs= -----END CERTIFICATE-----Generated at Wed Apr 30 02:50:37 2025 by rpki-client