$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b963cfff-2b37-32ea-a36a-9d23d77965fd.roa File: b963cfff-2b37-32ea-a36a-9d23d77965fd.roa (raw, json) Hash identifier: ZuobeqQvgfmxXb6Zcu5ibajtjJQcwymxWc3pdPSQ/Tg= Subject key identifier: 7C:28:A3:84:0A:95:F9:47:58:DC:1A:27:04:7E:EF:9A:B1:63:3E:20 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F43285849A4BB7929A2432FDD2D48E432 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b963cfff-2b37-32ea-a36a-9d23d77965fd.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2620:120:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:79:29:a2:43:2f:dd:2d:48:e4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0cf3ed5e-c566-4488-abd3-58976a3b3662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:6e:f8:ce:9f:bb:05:a5:e6:c2:aa:94:45: 53:c9:af:05:dc:89:92:96:f0:80:32:95:bd:79:d2: f8:3f:75:5f:54:1c:eb:55:e6:aa:bc:44:4f:a8:0e: 57:78:05:a2:eb:9e:1f:b4:a8:26:34:33:0e:33:43: bb:4a:17:71:c2:4f:9e:82:92:fa:a6:51:fc:62:30: ba:af:96:d3:13:5a:13:ce:f4:45:ee:05:31:25:a4: 13:47:b2:0f:f0:c9:06:34:55:38:18:e4:9f:d4:fe: 15:55:61:d4:0f:1a:a7:a2:a4:15:15:c6:7a:f9:0a: e9:2a:4a:02:f4:8e:2a:90:21:a9:54:95:07:20:c4: c7:58:f5:13:46:07:b7:e6:fd:b8:0b:ee:67:93:13: 4a:d5:f2:f6:5a:be:0e:c9:81:c8:2a:34:24:77:fe: 9a:86:40:34:c8:92:dd:e3:f7:83:e2:e7:56:3b:0a: 14:8e:b9:29:41:39:c0:e9:c3:7e:c8:f8:b2:a0:39: 6e:15:97:95:17:4a:2c:80:a8:92:c6:08:bb:91:39: ce:6e:32:6c:e8:2f:ea:5f:b9:b5:f6:0b:c7:18:f7: a8:28:c5:45:4e:c4:4b:a9:b8:4b:27:b2:db:7d:b3: bb:9c:ed:58:dd:ef:bb:e3:0d:7e:fb:50:52:2a:6f: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:28:A3:84:0A:95:F9:47:58:DC:1A:27:04:7E:EF:9A:B1:63:3E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b963cfff-2b37-32ea-a36a-9d23d77965fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv6: 2620:120:e000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:9c:ba:b0:6a:85:1e:25:d7:c6:2b:9b:30:32:e5:08:b0:86: 0b:f4:08:6b:63:b8:6e:77:48:bc:fd:c1:9f:55:53:40:67:94: 6f:1a:9f:5d:2f:90:f0:26:65:50:19:6d:00:e7:74:6b:e6:da: 8c:ed:57:a0:28:4b:fd:cf:95:fe:a7:c2:fe:1c:cc:e8:1d:3e: ad:72:e8:27:61:a1:e0:73:f2:ec:06:87:81:fa:c7:b9:af:84: ad:00:71:fd:8f:c6:4d:e4:04:ee:8e:d1:fa:40:4e:c0:91:d7: 1e:28:4c:bc:9a:43:1e:9a:40:40:b5:77:40:10:99:ec:4d:7a: c9:b1:1c:ba:29:aa:4f:e3:59:b6:38:37:27:c3:44:c9:d1:41: c6:28:df:aa:0c:cf:ce:b8:ab:09:7c:c1:d1:b5:be:86:83:e9: 1f:37:fe:ae:c3:f6:af:d9:54:c7:d7:61:c8:1d:bb:43:21:26: 82:06:ad:88:84:59:64:c2:25:a6:1c:19:14:63:5e:e1:6c:9b: ac:de:73:11:1d:61:da:81:06:e3:f2:2c:e1:5f:17:8e:0a:9e: 87:ad:bf:9b:26:83:6f:af:39:80:78:b9:bc:fc:17:05:d5:ce: e4:76:b4:a3:eb:6b:72:dd:2f:74:09:36:87:1d:1d:f7:56:8b: 9d:2c:43:76 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmku3kpokMv3S1I5DIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGNmM2VkNWUtYzU2Ni00NDg4LWFiZDMtNTg5NzZhM2IzNjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVhu+M6fuwWl5sKqlEVTya8F3ImSlvCAMpW9 edL4P3VfVBzrVeaqvERPqA5XeAWi654ftKgmNDMOM0O7Shdxwk+egpL6plH8YjC6 r5bTE1oTzvRF7gUxJaQTR7IP8MkGNFU4GOSf1P4VVWHUDxqnoqQVFcZ6+QrpKkoC 9I4qkCGpVJUHIMTHWPUTRge35v24C+5nkxNK1fL2Wr4OyYHIKjQkd/6ahkA0yJLd 4/eD4udWOwoUjrkpQTnA6cN+yPiyoDluFZeVF0osgKiSxgi7kTnObjJs6C/qX7m1 9gvHGPeoKMVFTsRLqbhLJ7LbfbO7nO1Y3e+74w1++1BSKm/9swIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHwoo4QKlflHWNwaJwR+75qxYz4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYjk2M2NmZmYtMmIzNy0z MmVhLWEzNmEtOWQyM2Q3Nzk2NWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABIOAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcJy6sGqFHiXXxiubMDLlCLCGC/QIa2O4bndIvP3Bn1VTQGeUbxqf XS+Q8CZlUBltAOd0a+bajO1XoChL/c+V/qfC/hzM6B0+rXLoJ2Gh4HPy7AaHgfrH ua+ErQBx/Y/GTeQE7o7R+kBOwJHXHihMvJpDHppAQLV3QBCZ7E16ybEcuimqT+NZ tjg3J8NEydFBxijfqgzPzrirCXzB0bW+hoPpHzf+rsP2r9lUx9dhyB27QyEmggat iIRZZMIlphwZFGNe4WybrN5zER1h2oEG4/Is4V8Xjgqeh62/myaDb685gHi5vPwX BdXO5Ha0o+trct0vdAk2hx0d91aLnSxDdg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:58:09 2025 by rpki-client