$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9e126e2e-8a60-3127-b61c-462f3b3fd1c2.roa File: 9e126e2e-8a60-3127-b61c-462f3b3fd1c2.roa (raw, json) Hash identifier: TFZd7gC2JZZtZpmP4iDRfkAbmDY1sfLSYsTf+gTeS3E= Subject key identifier: 38:A9:75:CA:81:C8:1A:10:F0:00:63:9D:D0:C3:DB:A9:2C:2E:40:88 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F43285849806F1D8832AF6771C86FC980 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9e126e2e-8a60-3127-b61c-462f3b3fd1c2.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 395403 IP address blocks: 2620:4d:4030::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:1d:88:32:af:67:71:c8:6f:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=9b95ee9a-534a-42e6-9667-55b0a0d4b4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:95:15:3a:a3:74:68:4b:49:10:18:53:3e:77: b3:41:54:ea:a3:75:1b:da:69:7c:71:68:ed:d3:b5: 49:9b:00:36:b4:9e:d0:64:02:9e:3d:81:66:f0:14: 02:d5:b1:f1:b7:85:d6:f8:54:15:b8:24:d9:bc:25: ed:ae:f7:3a:43:95:f0:56:20:1a:ac:26:9b:82:b9: f6:15:31:b0:b9:58:ac:8d:25:e8:78:e5:00:f3:51: 50:f5:43:83:c3:27:19:1e:c5:34:16:44:8b:d5:13: 78:07:5e:30:ce:72:c0:94:db:d7:0f:3b:aa:8e:42: 61:f0:bb:c1:72:31:77:97:83:e1:41:0c:4a:ba:0e: 6b:8e:16:fe:e6:38:e6:b1:0f:a3:3e:2a:5f:3a:be: f1:83:79:d7:89:92:ef:a0:d2:b5:0f:91:31:83:e5: b1:d9:55:19:d6:7e:2c:1e:ed:bd:d6:c5:ed:7e:a1: 11:98:ed:27:ef:68:60:f0:30:4b:cd:43:41:a9:a2: 6c:94:c8:9f:ac:d9:9f:81:58:d4:50:c1:57:0b:83: 8e:8c:d0:c0:76:01:5b:00:43:31:ec:d4:ef:93:c4: 99:d4:19:c0:05:a2:9d:81:4a:c8:3f:84:62:8e:e8: 78:63:f5:1a:31:4d:8a:c0:f1:59:71:33:22:d5:dc: d2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A9:75:CA:81:C8:1A:10:F0:00:63:9D:D0:C3:DB:A9:2C:2E:40:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9e126e2e-8a60-3127-b61c-462f3b3fd1c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:4030::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:46:d0:60:37:2d:fb:1b:32:fd:fd:89:8f:10:17:d8:2e:5d: 07:5d:84:ae:97:7b:5e:0f:ef:4c:4c:ff:5e:e9:b3:69:8d:7a: e5:54:6b:91:2e:f4:ce:01:d9:14:01:ef:4f:07:4d:77:1a:82: 53:ca:ec:98:5b:ac:05:1f:d4:c8:3f:80:b3:3d:3f:bf:00:5d: 0e:7d:27:7c:4b:b6:53:01:45:53:e5:f5:a8:48:8a:30:33:6a: 24:4d:a8:30:40:a1:57:ac:1d:8c:f7:6c:98:87:eb:7d:5e:a9: a0:31:be:e1:dd:30:2c:c4:f3:4f:37:25:90:e3:de:a2:a8:67: aa:82:6d:a2:15:0b:82:05:be:88:dd:98:5c:b8:e4:f8:88:f9: 26:8d:e4:c8:18:01:23:ac:a0:15:ca:35:63:e5:63:64:f9:30: ef:49:7f:bb:f4:03:20:b5:3b:f2:53:7e:15:36:60:ae:7a:7f: b6:1e:72:46:e5:59:5f:fa:20:3f:be:5a:da:f4:f9:2d:20:d1: 26:f7:89:f1:d7:01:e0:4f:3f:16:42:99:06:d0:85:4c:33:ed: 94:83:32:f5:4d:88:91:9f:37:5a:d1:66:4e:e3:0a:5b:35:f3: d5:ba:f1:5b:e4:37:2a:6a:73:5a:da:10:93:cd:0d:ef:59:62: e7:35:ac:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAbx2IMq9ncchvyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk OWI5NWVlOWEtNTM0YS00MmU2LTk2NjctNTViMGEwZDRiNGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJUVOqN0aEtJEBhTPnezQVTqo3Ub2ml8cWjt 07VJmwA2tJ7QZAKePYFm8BQC1bHxt4XW+FQVuCTZvCXtrvc6Q5XwViAarCabgrn2 FTGwuVisjSXoeOUA81FQ9UODwycZHsU0FkSL1RN4B14wznLAlNvXDzuqjkJh8LvB cjF3l4PhQQxKug5rjhb+5jjmsQ+jPipfOr7xg3nXiZLvoNK1D5Exg+Wx2VUZ1n4s Hu291sXtfqERmO0n72hg8DBLzUNBqaJslMifrNmfgVjUUMFXC4OOjNDAdgFbAEMx 7NTvk8SZ1BnABaKdgUrIP4Rijuh4Y/UaMU2KwPFZcTMi1dzSrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDipdcqByBoQ8ABjndDD26ksLkCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvOWUxMjZlMmUtOGE2MC0z MTI3LWI2MWMtNDYyZjNiM2ZkMWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAATUAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAlG0GA3LfsbMv39iY8QF9guXQddhK6Xe14P70xM/17ps2mNeuVU a5Eu9M4B2RQB708HTXcaglPK7JhbrAUf1Mg/gLM9P78AXQ59J3xLtlMBRVPl9ahI ijAzaiRNqDBAoVesHYz3bJiH631eqaAxvuHdMCzE8083JZDj3qKoZ6qCbaIVC4IF vojdmFy45PiI+SaN5MgYASOsoBXKNWPlY2T5MO9Jf7v0AyC1O/JTfhU2YK56f7Ye ckblWV/6ID++Wtr0+S0g0Sb3ifHXAeBPPxZCmQbQhUwz7ZSDMvVNiJGfN1rRZk7j Cls189W68VvkNypqc1raEJPNDe9ZYuc1rEE= -----END CERTIFICATE-----Generated at Sun Apr 27 16:38:06 2025 by rpki-client