$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa File: ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa (raw, json) Hash identifier: K6WFZo58TBNtmolTcBlQIBHQiY5XXMUxeN6FsuBimGo= Subject key identifier: 67:6D:D8:36:37:F9:0B:6F:9C:DB:7E:54:F7:32:53:D6:6B:5A:3C:C8 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F432858493C09222A5C7FC8F76DA6C180 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 62856 IP address blocks: 2620:130:f000::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:22:2a:5c:7f:c8:f7:6d:a6:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=ab3c1e06-bffc-4e36-b936-4e38c4903090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1e:28:b4:24:5f:c7:2a:5e:76:f5:74:46:d8: e8:db:c4:68:ae:97:7d:d0:2e:58:f9:33:53:78:41: 25:99:c9:6e:93:27:e9:60:15:06:87:81:62:cb:1d: c6:1b:1a:b7:09:8c:5a:d4:a3:8d:14:2f:28:e7:5f: 56:88:48:3b:51:68:b6:14:cf:f5:cf:00:c9:1f:8d: 9a:42:2f:1f:00:b1:89:ec:83:99:07:d6:4d:a8:a2: af:41:ee:d1:60:1d:52:3b:0b:33:47:3d:d8:24:a4: f9:a8:cd:e5:77:37:bd:d2:97:bb:c1:cf:3a:86:0b: 42:46:41:29:5b:6d:eb:e6:ee:c8:4f:70:1f:92:e3: df:f3:9c:3b:fd:bb:4b:e1:69:aa:df:53:a3:04:ea: 4f:89:05:77:9e:ef:dc:dd:08:0c:95:20:f7:92:b3: 88:f5:70:78:67:cd:a8:1f:cd:3c:32:b2:45:d3:7b: 29:5c:4b:92:2b:d2:2f:72:63:5a:52:fa:55:c4:8a: 14:64:c1:78:c7:ab:89:9a:3a:66:17:30:0e:c8:fa: 36:b5:7a:21:85:c1:ac:ce:5f:5c:ac:10:63:c7:24: 39:ed:91:dd:40:ee:a3:8e:94:22:d4:ae:9e:49:cf: 7e:bb:55:28:ea:98:28:93:55:ed:36:c5:31:2c:84: 9b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6D:D8:36:37:F9:0B:6F:9C:DB:7E:54:F7:32:53:D6:6B:5A:3C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv6: 2620:130:f000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:85:89:d2:36:c6:3d:b8:82:7c:a1:56:2b:7d:63:08:c6:74: 2a:de:ed:e8:69:01:52:16:2d:d4:e4:cf:bc:07:05:6b:d0:0d: 5a:95:83:34:52:66:72:14:9e:04:b0:ce:63:db:94:12:a9:ac: c5:5c:15:c5:02:33:b8:b9:9d:15:dc:b1:27:8e:13:22:9c:0d: 56:26:ec:21:75:9f:72:a9:a8:88:33:10:01:d4:26:9d:47:ff: 02:37:e8:72:0c:d8:a4:3a:62:ba:01:54:e6:02:50:9b:3c:d5: a4:b3:c2:d6:f5:4a:df:64:c4:d4:a2:72:12:45:da:c4:f9:18: 33:43:4e:60:b7:c8:47:97:28:eb:05:ae:5c:a2:bb:54:07:c2: c3:d1:ef:3c:e7:20:32:8a:29:cf:de:7f:4f:75:fa:cc:94:69: 42:ff:02:5b:77:3b:66:b7:29:93:8f:64:14:99:4a:9d:ca:87: cb:98:f9:4f:8e:b0:17:7e:64:46:b4:fd:62:6c:81:38:bf:17: 3b:b5:31:7c:e1:51:e0:74:cf:e7:8a:60:5e:67:5b:1a:f9:4e: 9b:46:4e:a8:61:6f:e7:93:da:f2:51:17:62:3a:25:03:11:68: 52:b0:c1:b9:d9:3f:3e:97:f5:4a:3c:60:84:50:92:d1:e9:47: f2:f3:bd:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk8CSIqXH/I922mwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk YWIzYzFlMDYtYmZmYy00ZTM2LWI5MzYtNGUzOGM0OTAzMDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB4otCRfxypedvV0Rtjo28Rorpd90C5Y+TNT eEElmclukyfpYBUGh4Fiyx3GGxq3CYxa1KONFC8o519WiEg7UWi2FM/1zwDJH42a Qi8fALGJ7IOZB9ZNqKKvQe7RYB1SOwszRz3YJKT5qM3ldze90pe7wc86hgtCRkEp W23r5u7IT3AfkuPf85w7/btL4Wmq31OjBOpPiQV3nu/c3QgMlSD3krOI9XB4Z82o H808MrJF03spXEuSK9IvcmNaUvpVxIoUZMF4x6uJmjpmFzAOyPo2tXohhcGszl9c rBBjxyQ57ZHdQO6jjpQi1K6eSc9+u1Uo6pgok1XtNsUxLISb0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGdt2DY3+QtvnNt+VPcyU9ZrWjzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvYWQ4YjQwZTUtZjNmNC0z MmI2LWI2ZDktZWFmNDViMTM3MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABMPAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACiFidI2xj24gnyhVit9YwjGdCre7ehpAVIWLdTkz7wHBWvQDVqV gzRSZnIUngSwzmPblBKprMVcFcUCM7i5nRXcsSeOEyKcDVYm7CF1n3KpqIgzEAHU Jp1H/wI36HIM2KQ6YroBVOYCUJs81aSzwtb1St9kxNSichJF2sT5GDNDTmC3yEeX KOsFrlyiu1QHwsPR7zznIDKKKc/ef091+syUaUL/Alt3O2a3KZOPZBSZSp3Kh8uY +U+OsBd+ZEa0/WJsgTi/Fzu1MXzhUeB0z+eKYF5nWxr5TptGTqhhb+eT2vJRF2I6 JQMRaFKwwbnZPz6X9Uo8YIRQktHpR/LzvTA= -----END CERTIFICATE-----Generated at Mon Apr 28 10:25:01 2025 by rpki-client