$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/ca79c64b-eb6d-3434-8473-70559314df53.roa File: ca79c64b-eb6d-3434-8473-70559314df53.roa (raw, json) Hash identifier: EEor3JhLb7w8S2SRuPCdlNFDZ/yl+9Z5rvL2h0QmyPo= Subject key identifier: 58:01:05:6D:C5:B9:92:40:09:B2:C1:50:08:AD:D6:BC:17:93:51:CA Certificate issuer: /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Certificate serial: 010D0C9F43285849A1EF73B8DAF772335EFBFF80 Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/ca79c64b-eb6d-3434-8473-70559314df53.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 14618 IP address blocks: 2620:197:f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:73:b8:da:f7:72:33:5e:fb:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=984f24d0-8c99-4814-b3a3-d3fb29ead8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d8:8c:85:8b:a9:d5:45:53:61:18:0e:18:f3: bf:8a:05:9a:6e:4e:f0:57:fc:24:9f:f5:67:bf:4f: 44:c0:9b:82:5c:71:13:cc:10:0d:e7:c5:5f:7b:fe: f7:02:f7:be:a1:47:49:56:09:3f:f3:eb:56:d7:a4: 4d:84:cb:04:d9:56:3e:a3:7c:19:7f:42:b1:f6:a4: c9:64:cc:64:25:20:c2:3b:e6:c4:8a:8b:09:67:90: b6:88:f6:09:0e:16:c1:9b:8f:06:a2:be:a6:57:87: 17:74:6f:71:a0:ef:20:65:4f:a6:2a:12:a4:e2:80: e5:c8:f3:dc:fc:94:52:16:21:d5:80:d2:d2:f1:3d: 6a:7a:3c:f5:90:db:08:90:a2:ba:7c:88:74:89:c1: 9d:6a:ab:24:87:b2:45:9e:a2:b8:8f:5d:26:a1:a8: 67:98:eb:d8:42:1d:2a:d6:87:c5:e0:7a:42:a3:80: 47:fc:7b:59:eb:8c:0f:f1:88:4e:6c:29:e3:ef:09: 10:00:d4:bb:a4:cc:4d:da:51:e7:69:ce:df:56:82: f8:9a:43:97:d0:a5:07:35:b4:a1:ff:29:87:f3:ed: 14:0c:f4:b8:59:18:26:64:9f:a2:73:53:ba:b2:ff: 50:9c:e4:30:72:88:6d:66:51:70:ce:3c:0d:fd:3a: 58:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:01:05:6D:C5:B9:92:40:09:B2:C1:50:08:AD:D6:BC:17:93:51:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/ca79c64b-eb6d-3434-8473-70559314df53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl X509v3 Authority Key Identifier: keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer sbgp-ipAddrBlock: critical IPv6: 2620:197:f00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d0:da:06:6f:db:1b:47:99:d8:72:57:af:9e:dd:dc:d8:c4: c5:01:64:11:b3:8f:de:b7:20:3c:b9:a3:1a:76:2f:7a:0a:73: e1:5e:75:c1:f4:11:f2:d4:4b:70:92:8d:03:2e:64:4c:8f:8c: 4a:03:c3:57:dc:8e:d3:55:58:f0:c7:10:2b:39:ed:cc:54:32: b2:a6:f1:ee:f7:38:93:0f:03:76:0e:43:f0:8f:c2:fc:1a:17: f3:40:fe:0d:4e:53:d2:69:ff:31:d6:24:14:42:b7:5b:38:04: 72:cc:f7:a8:0a:58:98:b3:94:8a:ca:f8:78:e8:50:aa:f7:79: 81:73:92:c9:a6:ac:71:32:a0:40:42:f3:db:41:43:ce:f2:e5: d1:23:60:91:b1:49:cf:b9:2a:f3:48:06:a3:e3:d7:af:22:3b: 3d:ac:7c:2e:8a:82:2f:4a:5f:91:f6:3e:f1:08:8f:9e:72:ab: 0f:44:8f:70:83:d1:6d:ae:58:be:b8:ad:64:e0:40:f6:f6:d0: 69:29:e9:c9:87:b7:de:1c:85:fd:f6:3b:6f:67:13:91:c6:55: 77:2f:1e:49:06:01:3a:54:c3:1d:f1:cd:c4:bc:30:75:7a:7b: 9d:4b:88:43:3c:e9:4c:c7:96:91:14:59:d9:22:10:ba:b8:ed: e0:be:ac:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh73O42vdyM177/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4 ZGMzMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk OTg0ZjI0ZDAtOGM5OS00ODE0LWIzYTMtZDNmYjI5ZWFkOGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNiMhYup1UVTYRgOGPO/igWabk7wV/wkn/Vn v09EwJuCXHETzBAN58Vfe/73Ave+oUdJVgk/8+tW16RNhMsE2VY+o3wZf0Kx9qTJ ZMxkJSDCO+bEiosJZ5C2iPYJDhbBm48Gor6mV4cXdG9xoO8gZU+mKhKk4oDlyPPc /JRSFiHVgNLS8T1qejz1kNsIkKK6fIh0icGdaqskh7JFnqK4j10moahnmOvYQh0q 1ofF4HpCo4BH/HtZ64wP8YhObCnj7wkQANS7pMxN2lHnac7fVoL4mkOX0KUHNbSh /ymH8+0UDPS4WRgmZJ+ic1O6sv9QnOQwcohtZlFwzjwN/TpYBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFgBBW3FuZJACbLBUAit1rwXk1HKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4 ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvY2E3OWM2NGItZWI2ZC0z NDM0LTg0NzMtNzA1NTkzMTRkZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0 OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHDQ2gZv2xtHmdhyV6+e3dzYxMUBZBGzj963IDy5oxp2L3oKc+Fe dcH0EfLUS3CSjQMuZEyPjEoDw1fcjtNVWPDHECs57cxUMrKm8e73OJMPA3YOQ/CP wvwaF/NA/g1OU9Jp/zHWJBRCt1s4BHLM96gKWJizlIrK+HjoUKr3eYFzksmmrHEy oEBC89tBQ87y5dEjYJGxSc+5KvNIBqPj168iOz2sfC6Kgi9KX5H2PvEIj55yqw9E j3CD0W2uWL64rWTgQPb20Gkp6cmHt94chf32O29nE5HGVXcvHkkGATpUwx3xzcS8 MHV6e51LiEM86UzHlpEUWdkiELq47eC+rKE= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:01 2025 by rpki-client