$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7fada44e-ab60-3ed5-b0e0-767e589309f8.roa File: 7fada44e-ab60-3ed5-b0e0-767e589309f8.roa (raw, json) Hash identifier: zqJfZZ0cB65U0tnJuKAhtHaAtGLRY5g/GNoEbS4hj70= Subject key identifier: E1:F9:A9:18:A6:8B:EB:00:7C:6B:0A:E3:60:49:6D:60:6A:6D:77:A0 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F43285848D7A6514F9D6A93313975D4C0 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7fada44e-ab60-3ed5-b0e0-767e589309f8.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 32771 IP address blocks: 2620:111:800e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:51:4f:9d:6a:93:31:39:75:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=393b847c-ec52-4ac9-8230-c04090309d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:df:0c:0d:a1:f5:af:fe:4d:5e:b4:96:dc: 25:65:e9:c5:38:d3:66:17:00:e5:70:1d:9c:3f:ec: 83:93:71:46:26:be:0d:d7:1a:01:e8:43:01:b7:8c: 95:23:81:5b:5a:30:2e:60:42:a4:8b:2c:0d:81:f9: 56:56:f9:be:6d:1c:d3:99:67:a0:fd:7f:ff:6c:d1: 68:7d:a4:8b:bf:24:7d:bc:03:73:2a:08:05:a4:05: 60:be:41:ae:47:9c:da:c1:5a:33:80:0b:31:25:62: 34:72:33:89:36:49:ec:75:8d:33:8a:ac:24:7d:33: 75:a1:a0:dc:8b:7f:8b:cb:11:cc:d6:bc:72:f4:c6: 80:70:4a:45:35:a3:7c:c1:8c:df:19:dd:e0:a2:04: bf:86:75:1c:94:29:22:ef:9c:91:5b:34:ba:44:87: 2c:74:bb:29:d5:e3:a4:66:62:e2:09:9a:a7:c4:d6: af:46:2f:21:e3:60:d1:d1:07:a1:23:8e:7d:f2:b7: 8d:a5:f9:84:94:42:39:c9:9c:b5:37:0b:75:ee:d0: fa:6b:8f:ac:f8:58:90:e8:9a:d1:94:2a:99:eb:0f: 7b:01:f4:89:8a:0b:cc:32:98:90:45:86:b0:00:a0: 2e:47:76:ed:e2:4a:1e:f5:36:e4:38:37:00:55:54: 09:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F9:A9:18:A6:8B:EB:00:7C:6B:0A:E3:60:49:6D:60:6A:6D:77:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7fada44e-ab60-3ed5-b0e0-767e589309f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:800e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:da:8c:af:58:51:19:c7:9a:23:2c:a0:8e:ec:64:31:83:ba: 86:08:98:fc:95:a3:f2:dc:e8:4c:c8:0e:cd:e8:8d:91:30:74: c6:3d:74:ef:4f:5a:94:d3:02:c1:9e:8b:a2:ee:25:42:26:50: 5d:b4:99:5b:78:10:6a:b0:4d:58:20:7b:48:0d:1d:04:ab:92: 58:06:c6:83:3c:6f:eb:be:d9:ea:fc:3b:62:ee:f4:9b:65:84: d0:85:8a:56:96:aa:4d:12:08:06:8d:6b:a4:98:bc:7b:0d:9b: ae:45:32:8a:7a:4d:7d:0a:21:49:ae:94:a9:79:c8:a3:c5:ba: 92:6f:fe:70:a6:fc:15:12:48:86:53:fe:20:12:d8:30:97:c0: cc:1a:98:c9:3f:af:b9:3c:45:0f:c7:26:b2:57:7e:af:a1:c8: 9e:16:d3:20:e6:b1:b3:a9:58:d0:e3:b7:f0:9e:fe:37:50:44: ea:b1:af:42:2c:a4:0b:dc:41:48:ac:6f:c1:5c:05:92:e6:9f: a0:1c:d8:56:6f:42:cf:69:74:6a:52:99:24:e9:39:87:1a:00: e4:24:0f:07:79:ed:a0:95:85:ff:03:3e:a4:f5:ae:8d:29:68: 09:6f:77:27:27:40:76:2c:34:d7:98:cd:e1:2b:fc:cf:18:40: 68:fa:3f:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjXplFPnWqTMTl11MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk MzkzYjg0N2MtZWM1Mi00YWM5LTgyMzAtYzA0MDkwMzA5ZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2XfDA2h9a/+TV60ltwlZenFONNmFwDlcB2c P+yDk3FGJr4N1xoB6EMBt4yVI4FbWjAuYEKkiywNgflWVvm+bRzTmWeg/X//bNFo faSLvyR9vANzKggFpAVgvkGuR5zawVozgAsxJWI0cjOJNknsdY0ziqwkfTN1oaDc i3+LyxHM1rxy9MaAcEpFNaN8wYzfGd3gogS/hnUclCki75yRWzS6RIcsdLsp1eOk ZmLiCZqnxNavRi8h42DR0QehI4598reNpfmElEI5yZy1Nwt17tD6a4+s+FiQ6JrR lCqZ6w97AfSJigvMMpiQRYawAKAuR3bt4koe9TbkODcAVVQJIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOH5qRimi+sAfGsK42BJbWBqbXegMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvN2ZhZGE0NGUtYWI2MC0z ZWQ1LWIwZTAtNzY3ZTU4OTMwOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFnajK9YURnHmiMsoI7sZDGDuoYImPyVo/Lc6EzIDs3ojZEwdMY9 dO9PWpTTAsGei6LuJUImUF20mVt4EGqwTVgge0gNHQSrklgGxoM8b+u+2er8O2Lu 9JtlhNCFilaWqk0SCAaNa6SYvHsNm65FMop6TX0KIUmulKl5yKPFupJv/nCm/BUS SIZT/iAS2DCXwMwamMk/r7k8RQ/HJrJXfq+hyJ4W0yDmsbOpWNDjt/Ce/jdQROqx r0IspAvcQUisb8FcBZLmn6Ac2FZvQs9pdGpSmSTpOYcaAOQkDwd57aCVhf8DPqT1 ro0paAlvdycnQHYsNNeYzeEr/M8YQGj6P1w= -----END CERTIFICATE-----Generated at Mon Apr 28 08:34:11 2025 by rpki-client