$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa File: 8370a0b9-b3bb-3794-b676-98a3ff12db47.roa (raw, json) Hash identifier: E2E6Z16ADalkJpPF+LB5nclc7VMbULZhK7EC1RcV0Gk= Subject key identifier: EE:28:C2:B1:DA:9D:9E:9E:A6:1B:6F:E7:0D:E9:47:08:10:CA:B4:0A Certificate issuer: /CN=0412f035-b376-4807-a8ac-e98680ab0e36 Certificate serial: 010D0C9F432858494733EE28FE241C645916C240 Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 6142 IP address blocks: 2620:9:a004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:ee:28:fe:24:1c:64:59:16:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=9efcedf9-97a1-4f27-bc89-a600d5f7e93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:67:30:d6:8b:14:12:ea:9a:31:6e:32:6c: 40:d2:b7:8d:cd:ef:ae:9e:6a:d8:bc:af:5a:4e:9e: 99:c2:e1:94:9a:c1:43:5e:4d:90:c1:33:6b:53:c9: 83:68:9b:0b:78:18:c6:f1:09:c3:6e:21:b6:8e:95: c2:93:26:49:37:3b:f7:0b:14:53:0a:fd:4a:fb:54: 23:98:b2:f3:96:b9:1e:b6:03:17:d0:65:24:2b:b0: d7:21:ba:f1:a4:70:ef:52:d0:51:c8:f9:35:4d:e5: bf:6c:24:e1:01:7e:5c:76:54:d5:9e:24:c5:01:a6: 49:ed:98:22:e6:c8:4b:a2:00:31:e6:81:0c:e6:bb: 9c:6a:b2:c8:97:d8:b4:b9:a7:40:0d:3d:51:64:9e: 18:47:7b:1e:fa:fe:36:7e:b5:cd:e6:98:f1:50:27: a8:9f:75:47:9c:bf:4c:6f:46:4f:22:f7:38:68:27: a5:57:c8:df:fe:d3:07:11:05:48:eb:b3:33:42:23: ed:a6:ab:50:91:64:bc:71:58:15:0a:c1:3b:b3:02: eb:89:c3:6a:12:11:f4:e5:05:99:b6:59:d0:b4:04: c5:29:97:52:f5:01:db:30:87:55:02:fc:8d:80:73: 1a:75:4d:c6:04:ed:19:9f:dd:6a:53:42:8c:ef:25: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:28:C2:B1:DA:9D:9E:9E:A6:1B:6F:E7:0D:E9:47:08:10:CA:B4:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl X509v3 Authority Key Identifier: keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer sbgp-ipAddrBlock: critical IPv6: 2620:9:a004::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:1a:0b:08:4c:31:62:58:62:d8:ca:3f:8c:f3:f8:86:92:a6: cf:d5:e1:b1:f6:1b:9e:c0:61:c0:6f:26:a3:fe:79:92:f0:74: 3a:68:d5:2b:0b:5d:e4:aa:42:2c:af:d4:de:0b:4b:32:66:f9: ce:42:a6:59:e7:fb:8d:b4:76:7c:9b:f8:1a:fd:49:59:bc:e6: d5:38:70:e2:3b:62:d4:07:76:00:f6:40:ea:85:77:2c:9d:e6: 4a:01:40:1a:b7:9a:af:32:89:70:07:cf:59:45:90:eb:a0:f9: af:02:29:3e:19:05:c4:be:51:7a:0f:11:f0:2a:7e:0c:0d:6a: 65:6e:69:84:f5:f0:a4:f5:f5:86:16:04:a1:bb:e1:1e:71:a6: 47:aa:e9:78:5a:4c:15:04:e1:3b:3f:64:85:a3:72:a8:0c:80: 35:0a:5c:60:1c:c0:08:02:c8:b7:15:4d:c7:55:53:9d:70:bb: 43:ac:86:97:36:cf:ce:5a:17:cd:a5:05:f2:9e:b3:58:34:59: 7a:b3:af:da:ca:58:20:a2:c4:67:0e:79:e8:2f:2b:33:9c:44: 19:18:22:d1:ae:74:b3:6f:74:e9:22:38:f9:07:8d:96:53:4b: 66:a4:84:6a:d1:7f:7b:3d:42:c9:45:0a:9a:0b:a7:37:2c:d7: 2b:ce:be:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElHM+4o/iQcZFkWwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQxMmYwMzUtYjM3Ni00ODA3LWE4YWMtZTk4NjgwYWIw ZTM2MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk OWVmY2VkZjktOTdhMS00ZjI3LWJjODktYTYwMGQ1ZjdlOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoVnMNaLFBLqmjFuMmxA0reNze+unmrYvK9a Tp6ZwuGUmsFDXk2QwTNrU8mDaJsLeBjG8QnDbiG2jpXCkyZJNzv3CxRTCv1K+1Qj mLLzlrketgMX0GUkK7DXIbrxpHDvUtBRyPk1TeW/bCThAX5cdlTVniTFAaZJ7Zgi 5shLogAx5oEM5rucarLIl9i0uadADT1RZJ4YR3se+v42frXN5pjxUCeon3VHnL9M b0ZPIvc4aCelV8jf/tMHEQVI67MzQiPtpqtQkWS8cVgVCsE7swLricNqEhH05QWZ tlnQtATFKZdS9QHbMIdVAvyNgHMadU3GBO0Zn91qU0KM7yUSIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO4owrHanZ6ephtv5w3pRwgQyrQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDEy ZjAzNS1iMzc2LTQ4MDctYThhYy1lOTg2ODBhYjBlMzYvODM3MGEwYjktYjNiYi0z Nzk0LWI2NzYtOThhM2ZmMTJkYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQxMmYwMzUtYjM3Ni00ODA3LWE4 YWMtZTk4NjgwYWIwZTM2LzA0MTJmMDM1LWIzNzYtNDgwNy1hOGFjLWU5ODY4MGFi MGUzNi5jcmwwHwYDVR0jBBgwFoAUiXGp/4PgRhbYPlvneCsT+IQp8HowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDEyZjAzNS1iMzc2LTQ4MDctYThhYy1lOTg2 ODBhYjBlMzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAACaAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA4aCwhMMWJYYtjKP4zz+IaSps/V4bH2G57AYcBvJqP+eZLwdDpo 1SsLXeSqQiyv1N4LSzJm+c5Cplnn+420dnyb+Br9SVm85tU4cOI7YtQHdgD2QOqF dyyd5koBQBq3mq8yiXAHz1lFkOug+a8CKT4ZBcS+UXoPEfAqfgwNamVuaYT18KT1 9YYWBKG74R5xpkeq6XhaTBUE4Ts/ZIWjcqgMgDUKXGAcwAgCyLcVTcdVU51wu0Os hpc2z85aF82lBfKes1g0WXqzr9rKWCCixGcOeegvKzOcRBkYItGudLNvdOkiOPkH jZZTS2akhGrRf3s9QslFCpoLpzcs1yvOvt8= -----END CERTIFICATE-----Generated at Tue Apr 29 07:12:11 2025 by rpki-client