$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa File: 705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa (raw, json) Hash identifier: dnYN6r4JzUF7C/AGdx0i18y0zXbHeCRXeM3Nw3ntinw= Subject key identifier: 24:00:B5:DA:BC:C0:CE:7A:E9:D4:DD:4C:25:4C:39:5F:E0:B8:33:6F Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F432858490E16CACE945BAFC33FBDD200 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 23467 IP address blocks: 2602:816:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:ca:ce:94:5b:af:c3:3f:bd:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=d2341638-aa7c-497c-86b2-88f6683f0f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0d:31:0d:82:f6:fa:79:26:48:4d:17:ee:24: cc:3e:bd:b9:1a:b0:61:06:28:b9:a7:bf:95:a1:87: 20:01:bc:01:f4:30:d8:e4:e9:a9:57:1e:8f:75:78: 8b:a1:46:a4:c4:23:9e:8f:cd:44:92:5a:40:28:f0: 23:1a:55:5e:38:19:51:08:5a:e7:aa:81:79:3b:ef: 47:40:a7:b2:48:59:fe:7e:27:3a:47:19:a6:14:18: 1e:6a:f0:fa:55:1b:89:dd:70:3a:76:3a:c9:db:14: fa:19:c7:0d:08:40:9b:a0:4d:76:fc:61:b6:ea:93: 72:7e:83:ff:90:cd:36:c0:f1:50:fd:a8:d2:74:3d: 9a:71:e2:6c:71:55:88:5a:b5:a0:46:b0:fe:e6:50: 41:aa:b3:c5:c2:23:c3:20:18:64:ff:88:79:61:3c: cb:ee:07:2a:dd:52:1b:36:b6:b5:66:3a:75:d2:71: e4:f0:8d:a6:2a:ac:47:d9:6c:fd:91:e9:77:c1:17: 11:1b:46:e5:8e:f3:d9:d8:7d:f2:d9:db:d4:3f:62: 62:cd:e4:6d:a5:20:b5:e2:81:88:f4:61:c9:07:3d: a8:99:65:b9:34:2c:5c:f2:0e:76:98:ac:e7:8b:ed: 8a:ec:c5:98:a4:26:a7:04:2c:f3:5a:4b:c1:bf:2e: dd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:B5:DA:BC:C0:CE:7A:E9:D4:DD:4C:25:4C:39:5F:E0:B8:33:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:99:90:2f:03:57:d7:d6:2a:e0:f7:35:ef:3d:66:15:5c:f1: ae:03:50:00:f7:93:81:3d:86:d5:75:03:0a:6d:db:99:e4:cc: 92:9b:3c:10:93:53:26:4a:bf:d7:bb:7c:d6:99:d7:0c:fe:13: 46:9b:25:7e:e6:19:cb:19:09:91:f4:1d:bd:e1:33:47:a7:76: 8a:27:7e:2a:a4:3b:25:2e:b2:07:32:24:d7:2d:9a:6b:14:1f: 3c:7b:05:6e:ee:6f:27:eb:ad:ad:a1:44:bb:8e:a5:0c:83:9f: fc:8a:3f:49:1d:e8:84:9b:31:17:0d:c4:ea:9c:f5:47:65:68: a1:88:d3:c6:17:cf:60:c6:f2:9e:bc:e2:32:6d:4c:8d:c7:4f: 07:03:8d:db:31:2b:07:5e:eb:0a:4d:88:dc:48:d1:9c:2e:9f: 9f:7c:90:55:fb:c7:93:6a:e7:2d:76:81:f7:37:d2:2e:81:73: 76:00:2a:ed:6f:19:22:d5:71:03:2a:3d:f3:3b:42:65:f3:b6: f8:03:bb:c3:d0:b2:eb:7f:df:6f:5c:6f:51:a3:6e:cd:9e:5c: 2b:1d:07:8f:23:cd:5b:16:fa:1c:b5:ec:f8:c1:1f:30:e2:1d: 1a:85:a8:17:1a:7d:06:37:9a:b9:d3:c2:f0:4b:41:4a:71:f7: f1:fe:96:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkOFsrOlFuvwz+90gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDIzNDE2MzgtYWE3Yy00OTdjLTg2YjItODhmNjY4M2YwZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q0xDYL2+nkmSE0X7iTMPr25GrBhBii5p7+V oYcgAbwB9DDY5OmpVx6PdXiLoUakxCOej81EklpAKPAjGlVeOBlRCFrnqoF5O+9H QKeySFn+fic6RxmmFBgeavD6VRuJ3XA6djrJ2xT6GccNCECboE12/GG26pNyfoP/ kM02wPFQ/ajSdD2aceJscVWIWrWgRrD+5lBBqrPFwiPDIBhk/4h5YTzL7gcq3VIb Nra1Zjp10nHk8I2mKqxH2Wz9kel3wRcRG0bljvPZ2H3y2dvUP2JizeRtpSC14oGI 9GHJBz2omWW5NCxc8g52mKzni+2K7MWYpCanBCzzWkvBvy7dhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQAtdq8wM566dTdTCVMOV/guDNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNzA1YTNlZWMtYzY1Yi0z ZDAxLWJkNDEtZjEyZjhiOWZlMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFlAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGuZkC8DV9fWKuD3Ne89ZhVc8a4DUAD3k4E9htV1Awpt25nkzJKb PBCTUyZKv9e7fNaZ1wz+E0abJX7mGcsZCZH0Hb3hM0endoonfiqkOyUusgcyJNct mmsUHzx7BW7ubyfrra2hRLuOpQyDn/yKP0kd6ISbMRcNxOqc9UdlaKGI08YXz2DG 8p684jJtTI3HTwcDjdsxKwde6wpNiNxI0Zwun598kFX7x5Nq5y12gfc30i6Bc3YA Ku1vGSLVcQMqPfM7QmXztvgDu8PQsut/329cb1Gjbs2eXCsdB48jzVsW+hy17PjB HzDiHRqFqBcafQY3mrnTwvBLQUpx9/H+lsw= -----END CERTIFICATE-----Generated at Sun Apr 27 03:13:43 2025 by rpki-client