$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d9d50e0c-e315-3a3a-af07-d97371184c8b.roa File: d9d50e0c-e315-3a3a-af07-d97371184c8b.roa (raw, json) Hash identifier: 0CaKVmUOU0ShmrP9VAnoRIqLsPBMxDEv0oKnjJmhGB0= Subject key identifier: 1A:3E:B1:87:D5:AF:B7:52:3F:5D:38:F1:C5:D6:AD:97:7F:1C:5E:AE Certificate issuer: /CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15 Certificate serial: 010D0C9F4328584976A991102DCE7AD9E7B8BE00 Authority key identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d9d50e0c-e315-3a3a-af07-d97371184c8b.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 14702 IP address blocks: 2620:0:2b80::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:91:10:2d:ce:7a:d9:e7:b8:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=a6e63c02-1890-414d-adae-1c6970d19b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:67:80:60:69:e8:bd:d8:32:a3:01:43:cc: ef:7d:01:aa:32:c0:74:6d:9f:b4:43:1d:16:c6:61: 4b:8c:8d:d0:fa:61:a9:98:fc:2e:fb:26:cc:46:d2: a1:83:05:c6:2e:5a:08:55:c3:c6:ee:86:66:04:6a: 55:16:66:36:6f:cf:5a:cf:81:af:19:e0:c3:07:6c: 8c:6d:34:ba:c9:94:58:cd:77:df:c3:e3:89:b2:ed: 9d:d0:85:38:9a:3b:5d:aa:b0:ce:80:10:7c:5b:de: 3c:18:ae:59:66:35:e0:c4:a2:bf:8c:44:e4:42:33: db:c8:e8:1a:ab:aa:0f:f2:56:13:30:5a:c1:57:27: f5:c2:bf:4d:42:8b:71:b9:fc:ab:c1:53:9a:ea:81: 68:26:dc:09:5a:e6:c6:15:8e:48:ad:59:23:1a:67: e7:dc:61:3d:a8:2c:e3:73:fa:38:1e:01:b4:af:67: 4e:00:c2:ef:18:1c:90:39:5a:9f:61:a0:7e:60:24: 83:ac:b9:c7:45:04:c7:df:fd:f9:12:00:51:8d:62: 6b:2d:3d:31:90:ae:64:9f:be:b2:25:e6:a6:b6:66: 53:ef:68:e3:ab:5d:fd:93:65:74:4a:76:82:0c:02: 28:69:cf:55:a2:38:33:72:81:7c:e3:df:27:c0:79: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3E:B1:87:D5:AF:B7:52:3F:5D:38:F1:C5:D6:AD:97:7F:1C:5E:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d9d50e0c-e315-3a3a-af07-d97371184c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl X509v3 Authority Key Identifier: keyid:F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:2b80::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:e2:6e:91:23:dd:95:8f:d7:be:69:f2:ba:64:a3:06:f3:46: 5c:ae:c5:b3:a7:a0:8e:ec:a2:3e:ba:8d:38:fd:c1:31:eb:34: bd:e8:60:1c:a5:cf:59:65:fe:19:69:f6:dd:7a:8f:d1:e4:76: 7a:d6:59:4e:ed:87:88:e4:58:41:de:70:6e:11:d6:45:32:03: c6:d8:a4:dd:2f:59:82:ac:9f:ac:9f:2a:6a:dc:75:de:30:35: c7:b5:31:f5:bd:a9:d5:0a:7a:30:c6:44:4f:80:b4:ef:85:05: b0:23:2c:5a:c1:de:82:e2:fa:ab:04:4d:d0:da:ab:d7:aa:9d: f7:dc:c8:f0:be:74:b4:14:a6:80:67:95:4f:6d:57:0a:29:e7: 32:07:e2:09:85:4a:ed:de:22:5d:67:84:11:14:98:d0:e1:da: 76:56:56:ed:11:b9:13:6c:b0:ff:bd:fd:a9:c7:af:41:73:95: f8:47:38:2e:07:9e:95:41:79:73:6f:9e:88:88:b4:79:37:c8: 99:9e:c8:61:6c:83:68:4d:2c:1e:5c:38:f0:c3:e6:7e:04:7a: 24:4d:37:0e:2e:37:1d:6c:80:29:83:67:d7:41:97:c9:e6:c9: e8:8b:e9:99:06:80:ed:a9:bc:55:45:fe:f0:75:5d:6e:ea:e3: dc:56:77:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl2qZEQLc562ee4vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI4YjIwY2EtMmExZS00NzQyLWI2M2MtNGIzYjFkMTUx ZjE1MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk YTZlNjNjMDItMTg5MC00MTRkLWFkYWUtMWM2OTcwZDE5YjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkFngGBp6L3YMqMBQ8zvfQGqMsB0bZ+0Qx0W xmFLjI3Q+mGpmPwu+ybMRtKhgwXGLloIVcPG7oZmBGpVFmY2b89az4GvGeDDB2yM bTS6yZRYzXffw+OJsu2d0IU4mjtdqrDOgBB8W948GK5ZZjXgxKK/jETkQjPbyOga q6oP8lYTMFrBVyf1wr9NQotxufyrwVOa6oFoJtwJWubGFY5IrVkjGmfn3GE9qCzj c/o4HgG0r2dOAMLvGByQOVqfYaB+YCSDrLnHRQTH3/35EgBRjWJrLT0xkK5kn76y JeamtmZT72jjq139k2V0SnaCDAIoac9VojgzcoF8498nwHl5YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBo+sYfVr7dSP1048cXWrZd/HF6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjhi MjBjYS0yYTFlLTQ3NDItYjYzYy00YjNiMWQxNTFmMTUvZDlkNTBlMGMtZTMxNS0z YTNhLWFmMDctZDk3MzcxMTg0YzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGI4YjIwY2EtMmExZS00NzQyLWI2 M2MtNGIzYjFkMTUxZjE1LzBiOGIyMGNhLTJhMWUtNDc0Mi1iNjNjLTRiM2IxZDE1 MWYxNS5jcmwwHwYDVR0jBBgwFoAU8/9YqkABXh3QXRC3eKj4ZdKdQgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjhiMjBjYS0yYTFlLTQ3NDItYjYzYy00YjNi MWQxNTFmMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAACuA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKfibpEj3ZWP175p8rpkowbzRlyuxbOnoI7soj66jTj9wTHrNL3o YBylz1ll/hlp9t16j9HkdnrWWU7th4jkWEHecG4R1kUyA8bYpN0vWYKsn6yfKmrc dd4wNce1MfW9qdUKejDGRE+AtO+FBbAjLFrB3oLi+qsETdDaq9eqnffcyPC+dLQU poBnlU9tVwop5zIH4gmFSu3eIl1nhBEUmNDh2nZWVu0RuRNssP+9/anHr0FzlfhH OC4HnpVBeXNvnoiItHk3yJmeyGFsg2hNLB5cOPDD5n4EeiRNNw4uNx1sgCmDZ9dB l8nmyeiL6ZkGgO2pvFVF/vB1XW7q49xWd5o= -----END CERTIFICATE-----Generated at Tue Apr 29 09:28:22 2025 by rpki-client