$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/a0bf4502-4e24-3f1c-8437-9651062bd71c.roa File: a0bf4502-4e24-3f1c-8437-9651062bd71c.roa (raw, json) Hash identifier: KeQxkiQkZJYgPrkMDIUEUQroyTSCqgSw6XYcuIZgZcE= Subject key identifier: 85:75:1F:CE:19:BC:33:14:B6:37:DD:36:34:2D:F8:0B:5C:80:40:56 Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F4328584991C52D0F8E6B19F6984F4D00 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/a0bf4502-4e24-3f1c-8437-9651062bd71c.roa Signing time: Fri 18 Apr 2025 18:03:19 +0000 ROA not before: Fri 18 Apr 2025 18:03:19 +0000 ROA not after: Thu 17 Jul 2025 18:03:19 +0000 asID: 203236 IP address blocks: 2602:f92a:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:c5:2d:0f:8e:6b:19:f6:98:4f:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: Apr 18 18:03:19 2025 GMT Not After : Jul 17 18:03:19 2025 GMT Subject: CN=2eac24cf-284c-40b3-8a28-33ef18b983d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ac:dd:78:d6:37:55:5e:2c:64:d0:60:4a:9d: 34:9b:83:4c:c8:6e:7a:26:6e:46:8f:bd:cb:bd:4d: 7e:27:66:78:1d:d2:4e:af:91:dc:c4:f6:e6:07:e6: 71:e2:da:34:27:51:3a:a6:9b:ff:58:48:df:f1:c0: f7:5b:06:e5:cd:fc:72:a1:bc:0c:e0:9c:82:66:06: 7a:14:c0:09:74:24:32:c5:2f:a0:47:80:1d:27:75: eb:85:91:c6:cb:ba:cb:99:9c:15:37:40:66:51:d8: b1:7a:fb:4d:fd:ac:58:0d:03:cc:fd:2b:1f:de:55: a3:b2:44:0b:9e:e8:e0:3f:d8:72:2e:58:cc:81:b8: 3e:7c:31:76:e8:ee:af:09:45:ab:70:ff:71:d1:e3: 10:fc:cd:8b:9f:c5:d3:3b:60:39:90:78:24:73:9a: 99:2f:87:b5:bd:02:28:84:6a:c6:1d:8a:fe:47:08: f4:37:c4:bc:24:28:e1:3e:37:4a:a1:c0:90:49:56: 83:e7:41:91:16:d5:e0:be:d7:5e:21:57:7c:33:49: b7:10:9d:e2:a4:53:dc:a8:64:84:9c:d0:53:65:34: 8c:60:a0:24:d0:ae:da:ed:7a:84:a2:06:df:27:e5: 11:4e:46:d7:ab:33:05:8a:6b:f5:a0:77:54:48:54: 17:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:75:1F:CE:19:BC:33:14:B6:37:DD:36:34:2D:F8:0B:5C:80:40:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/a0bf4502-4e24-3f1c-8437-9651062bd71c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f92a:e000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b6:9c:a3:b4:37:5e:26:9c:3e:c8:8d:03:d1:8b:05:0d:d2: 84:8e:aa:bc:c6:a7:d2:91:69:50:83:7a:35:86:60:1d:1c:50: 65:69:69:6e:8f:20:4d:4d:a1:bf:e1:93:55:5d:47:c6:e8:d9: 43:84:31:8c:9b:8a:d0:08:85:d9:55:9a:c0:a6:8e:fa:90:20: a8:f6:d5:2c:48:dd:44:f4:0f:35:1c:68:f3:f7:da:67:5a:6c: a4:59:af:22:c2:95:99:d7:9b:e6:00:fb:0c:d1:bf:5e:70:27: fa:ff:c2:2f:f2:a7:09:36:68:14:fd:27:5b:86:d3:2b:20:3f: 12:be:23:c3:63:7c:a7:25:82:17:72:d2:b3:92:34:3f:66:9b: 74:d3:1f:79:e0:63:5a:7b:4a:b3:9f:7a:42:69:f2:32:47:ea: 78:2f:7d:04:02:08:a1:5f:42:7a:fc:d6:65:b8:81:10:b0:35: 1b:59:8c:20:eb:6f:e6:dd:7b:27:34:35:c9:77:0d:58:e2:8c: 1e:6d:d5:0a:07:40:36:53:4e:35:cf:89:70:66:70:fa:6d:87: 89:62:0e:63:76:8e:7c:7c:a9:3a:42:e3:47:9e:25:16:fd:51: 24:dd:6e:a9:9b:9a:fe:8f:fd:df:53:0e:84:5e:fd:28:31:05: e1:5e:cf:e4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmRxS0PjmsZ9phPTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI1MDQxODE4MDMxOVoXDTI1MDcxNzE4MDMxOVowLzEtMCsGA1UEAxMk MmVhYzI0Y2YtMjg0Yy00MGIzLThhMjgtMzNlZjE4Yjk4M2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKzdeNY3VV4sZNBgSp00m4NMyG56Jm5Gj73L vU1+J2Z4HdJOr5HcxPbmB+Zx4to0J1E6ppv/WEjf8cD3WwblzfxyobwM4JyCZgZ6 FMAJdCQyxS+gR4AdJ3XrhZHGy7rLmZwVN0BmUdixevtN/axYDQPM/Ssf3lWjskQL nujgP9hyLljMgbg+fDF26O6vCUWrcP9x0eMQ/M2Ln8XTO2A5kHgkc5qZL4e1vQIo hGrGHYr+Rwj0N8S8JCjhPjdKocCQSVaD50GRFtXgvtdeIVd8M0m3EJ3ipFPcqGSE nNBTZTSMYKAk0K7a7XqEogbfJ+URTkbXqzMFimv1oHdUSFQXawIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIV1H84ZvDMUtjfdNjQt+AtcgEBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvYTBiZjQ1MDItNGUyNC0z ZjFjLTg0MzctOTY1MTA2MmJkNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5KuAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATLaco7Q3XiacPsiNA9GLBQ3ShI6qvMan0pFpUIN6NYZgHRxQZWlp bo8gTU2hv+GTVV1HxujZQ4QxjJuK0AiF2VWawKaO+pAgqPbVLEjdRPQPNRxo8/fa Z1pspFmvIsKVmdeb5gD7DNG/XnAn+v/CL/KnCTZoFP0nW4bTKyA/Er4jw2N8pyWC F3LSs5I0P2abdNMfeeBjWntKs596QmnyMkfqeC99BAIIoV9CevzWZbiBELA1G1mM IOtv5t17JzQ1yXcNWOKMHm3VCgdANlNONc+JcGZw+m2HiWIOY3aOfHypOkLjR54l Fv1RJN1uqZua/o/931MOhF79KDEF4V7P5A== -----END CERTIFICATE-----Generated at Sat Apr 26 16:23:59 2025 by rpki-client