$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b14f6dc6-aac6-354c-b773-19074de6cb64.roa File: b14f6dc6-aac6-354c-b773-19074de6cb64.roa (raw, json) Hash identifier: pXL7kKDhIeEVhzXRWPXLTGupyFrpR3DIivbw8EGLn1g= Subject key identifier: D5:71:EE:1D:B8:83:FE:EF:60:CC:13:62:2E:86:02:F1:C2:EA:46:CE Certificate issuer: /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Certificate serial: 010D0C9F432858496CE45BFED17D8B8943936520 Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b14f6dc6-aac6-354c-b773-19074de6cb64.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 2620:197:de0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:5b:fe:d1:7d:8b:89:43:93:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=216cafcf-feba-419d-8a22-e4e2cd1cefbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:93:00:18:10:81:9d:57:fe:ef:e3:c6:14:98: ea:08:f3:1d:ca:72:6f:99:67:68:51:34:14:24:82: 9c:13:54:5d:06:bd:9d:d8:63:47:6e:5e:de:5d:16: f6:d6:e2:14:46:6a:d8:d1:9a:a8:82:51:c6:83:56: 76:db:f4:52:62:d9:70:73:96:68:44:ac:d9:6b:3a: ed:36:75:9a:cf:d5:22:ae:c2:6b:44:fb:81:d2:d9: ff:07:af:46:e6:6e:2a:87:91:b0:48:ef:e0:b7:91: 4a:ea:0d:46:4c:5b:cb:47:02:a9:4b:10:ef:54:73: 66:cb:00:05:c0:7c:68:1e:55:7b:1d:fe:cd:da:39: 64:31:bc:01:a4:c7:e3:9c:49:ad:d6:64:72:01:62: 12:87:55:42:04:b1:60:b7:bb:b7:12:2d:6b:26:bc: f6:0b:57:53:1c:42:21:88:14:59:68:9b:6e:96:a8: 0b:b4:12:e3:1e:1c:64:77:b6:94:60:24:fa:57:67: 2f:b5:bf:2d:b2:7d:23:53:e8:6d:d2:a2:ea:c5:4c: ab:99:d9:0b:53:47:a7:21:e0:92:3a:c8:0a:e3:26: e1:ae:15:41:7e:e9:a7:99:7c:b7:42:66:3d:a7:c4: 55:09:2a:86:f4:30:a3:eb:bf:b9:19:6c:9a:a5:21: d0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:71:EE:1D:B8:83:FE:EF:60:CC:13:62:2E:86:02:F1:C2:EA:46:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b14f6dc6-aac6-354c-b773-19074de6cb64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl X509v3 Authority Key Identifier: keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer sbgp-ipAddrBlock: critical IPv6: 2620:197:de0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ed:70:38:f2:33:d9:19:2f:99:b8:6c:cd:5e:29:4e:91:97: 5f:e1:bc:93:4f:a4:86:ac:f4:fc:e6:65:7a:45:c5:e4:be:1e: 9e:9f:95:0d:1e:d0:b0:df:ad:bc:37:56:0c:ce:aa:ef:db:e6: 4f:49:e2:b8:b0:cb:74:90:13:b1:54:24:28:d1:2a:7e:69:c1: 17:e0:cc:84:fe:b0:6a:b7:32:c4:36:d9:a3:98:6a:6c:3e:45: 3e:86:5e:44:3d:db:3b:9f:4b:2f:e5:6c:cd:cf:9f:d6:22:37: fa:46:52:7e:b5:49:85:e1:7e:5a:81:6e:f4:d0:43:49:c7:a7: f9:70:ce:ae:a1:fd:23:1f:98:db:3f:c3:6a:bf:7e:79:c4:0b: b1:55:5c:d7:79:06:05:a6:b2:68:90:e2:d2:c9:33:76:e1:62: 22:7a:2b:09:20:61:b8:e8:0f:6e:1f:6f:5f:94:dc:88:f3:05: 82:e1:9e:93:06:a2:fc:b2:6a:1c:d5:82:5e:54:42:d5:d0:6b: 08:db:7f:02:4a:9a:e3:75:e6:43:6e:f3:e2:c1:0a:e0:1d:a8: cc:90:77:c8:f9:50:1b:0d:aa:06:d1:41:d3:31:0d:7c:fd:98: be:a2:5b:d7:25:2d:ba:ec:1a:f6:7b:1a:42:1d:85:83:03:7e: c9:41:90:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEls5Fv+0X2LiUOTZSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4 ZGMzMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MjE2Y2FmY2YtZmViYS00MTlkLThhMjItZTRlMmNkMWNlZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5MAGBCBnVf+7+PGFJjqCPMdynJvmWdoUTQU JIKcE1RdBr2d2GNHbl7eXRb21uIURmrY0ZqoglHGg1Z22/RSYtlwc5ZoRKzZazrt NnWaz9UirsJrRPuB0tn/B69G5m4qh5GwSO/gt5FK6g1GTFvLRwKpSxDvVHNmywAF wHxoHlV7Hf7N2jlkMbwBpMfjnEmt1mRyAWISh1VCBLFgt7u3Ei1rJrz2C1dTHEIh iBRZaJtulqgLtBLjHhxkd7aUYCT6V2cvtb8tsn0jU+ht0qLqxUyrmdkLU0enIeCS OsgK4ybhrhVBfumnmXy3QmY9p8RVCSqG9DCj67+5GWyapSHQQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNVx7h24g/7vYMwTYi6GAvHC6kbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4 ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvYjE0ZjZkYzYtYWFjNi0z NTRjLWI3NzMtMTkwNzRkZTZjYjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0 OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw3g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJLtcDjyM9kZL5m4bM1eKU6Rl1/hvJNPpIas9PzmZXpFxeS+Hp6f lQ0e0LDfrbw3VgzOqu/b5k9J4riwy3SQE7FUJCjRKn5pwRfgzIT+sGq3MsQ22aOY amw+RT6GXkQ92zufSy/lbM3Pn9YiN/pGUn61SYXhflqBbvTQQ0nHp/lwzq6h/SMf mNs/w2q/fnnEC7FVXNd5BgWmsmiQ4tLJM3bhYiJ6KwkgYbjoD24fb1+U3IjzBYLh npMGovyyahzVgl5UQtXQawjbfwJKmuN15kNu8+LBCuAdqMyQd8j5UBsNqgbRQdMx DXz9mL6iW9clLbrsGvZ7GkIdhYMDfslBkGw= -----END CERTIFICATE-----Generated at Sat Apr 26 18:31:55 2025 by rpki-client