$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa File: de150f3e-630a-34f4-a9f4-8aae30296160.roa (raw, json) Hash identifier: 5bWSRNZ0AxNVXZzOo0v2dhzLUpocd2dhzE5Ai2ddfjc= Subject key identifier: 1C:3F:BF:CE:A2:DA:94:E2:A7:B4:92:AF:00:01:7E:1C:5E:0B:60:CF Certificate issuer: /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Certificate serial: 010D0C9F432858496CE45C0CED5CC7B2809A18C0 Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 2620:197:de0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:5c:0c:ed:5c:c7:b2:80:9a:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=b126dc7b-1b9e-4d3d-942a-2bbce4c8b85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:c3:a2:a4:e4:62:52:3b:be:18:36:99:c2: 22:7a:c9:2e:6e:19:66:3c:20:a4:e2:ae:ff:b1:de: d9:27:ca:dc:cb:87:1a:3f:93:b8:95:b2:a5:39:a1: 87:ae:91:33:aa:2d:23:f2:f8:96:e6:bb:c0:95:77: bf:46:ad:74:8a:d5:52:a4:f9:1c:a0:8d:e3:11:a1: 6b:31:c2:73:71:da:53:0c:d3:f7:64:85:6f:3e:f0: 09:2c:ed:e6:1c:fa:6e:a5:36:0b:2f:6a:46:9f:f3: fb:50:13:28:52:c9:53:ad:42:02:9e:45:b2:22:68: c9:7c:b4:82:93:18:96:19:59:df:ad:da:ff:5d:71: 74:92:86:d8:61:17:70:fa:db:c7:ea:1b:b1:d9:e2: 95:d4:53:15:4a:a7:3c:ea:d9:b7:36:3a:0e:f3:f5: 1c:53:ed:4b:1d:fd:6b:78:4c:3b:12:4b:b4:e8:86: 65:ac:33:fd:87:c7:f6:1d:63:4d:c5:17:15:30:70: 68:91:00:26:9b:ab:60:cc:b7:c9:1a:24:bf:bd:32: c3:03:3c:39:76:98:6d:c0:3a:61:8e:2b:6f:bc:cd: 21:4e:77:3e:64:38:23:4e:cc:b6:98:0c:c1:60:fd: 38:5c:62:88:d6:00:de:65:f6:d5:05:5f:36:9b:1d: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3F:BF:CE:A2:DA:94:E2:A7:B4:92:AF:00:01:7E:1C:5E:0B:60:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl X509v3 Authority Key Identifier: keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer sbgp-ipAddrBlock: critical IPv6: 2620:197:de0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c5:65:7e:87:59:9e:e3:1c:28:2d:a8:36:23:53:46:53:8c: 6b:bb:0d:87:e8:75:72:a1:6a:97:0e:f4:b4:c4:77:c7:fc:dc: d1:63:f7:d7:cb:a8:54:6c:e4:6d:aa:f8:ec:c6:75:7c:78:34: 45:7a:c5:12:c3:d9:fc:28:2c:b6:1f:e2:5d:47:52:cd:04:ee: f5:cb:96:77:49:4b:df:35:24:b7:6d:67:70:4f:11:21:ca:e8: 2c:e5:be:5c:79:06:e4:5b:05:e5:67:06:06:51:48:d3:51:f8: 74:ce:0a:c5:40:33:4d:d5:e6:35:e3:8d:9e:4d:65:56:e3:44: 62:75:7e:76:95:f1:67:23:66:54:b8:03:e3:f9:4a:77:b2:13: 48:47:86:32:6a:6a:94:eb:62:66:f1:de:71:9b:e1:9b:e3:de: 6b:15:5b:15:34:e8:b7:e1:a9:5c:0d:a8:eb:77:08:11:7c:7f: 92:d5:86:19:4c:00:eb:d5:8e:2c:96:62:fc:31:26:fa:bf:b0: f5:2a:81:96:d6:ac:72:df:73:d6:b2:b4:40:f3:e1:82:8e:58: 28:44:db:0a:70:5f:1e:8e:f7:bc:1c:b5:d5:12:c3:c0:22:6b: 3a:80:b2:ee:89:11:72:6d:5f:df:7c:86:ce:73:a7:00:d6:9a: 94:f8:c2:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEls5FwM7VzHsoCaGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4 ZGMzMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk YjEyNmRjN2ItMWI5ZS00ZDNkLTk0MmEtMmJiY2U0YzhiODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5HDoqTkYlI7vhg2mcIieskubhlmPCCk4q7/ sd7ZJ8rcy4caP5O4lbKlOaGHrpEzqi0j8viW5rvAlXe/Rq10itVSpPkcoI3jEaFr McJzcdpTDNP3ZIVvPvAJLO3mHPpupTYLL2pGn/P7UBMoUslTrUICnkWyImjJfLSC kxiWGVnfrdr/XXF0kobYYRdw+tvH6hux2eKV1FMVSqc86tm3NjoO8/UcU+1LHf1r eEw7Eku06IZlrDP9h8f2HWNNxRcVMHBokQAmm6tgzLfJGiS/vTLDAzw5dphtwDph jitvvM0hTnc+ZDgjTsy2mAzBYP04XGKI1gDeZfbVBV82mx1fmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBw/v86i2pTip7SSrwABfhxeC2DPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4 ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvZGUxNTBmM2UtNjMwYS0z NGY0LWE5ZjQtOGFhZTMwMjk2MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0 OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw3g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACzFZX6HWZ7jHCgtqDYjU0ZTjGu7DYfodXKhapcO9LTEd8f83NFj 99fLqFRs5G2q+OzGdXx4NEV6xRLD2fwoLLYf4l1HUs0E7vXLlndJS981JLdtZ3BP ESHK6Czlvlx5BuRbBeVnBgZRSNNR+HTOCsVAM03V5jXjjZ5NZVbjRGJ1fnaV8Wcj ZlS4A+P5SneyE0hHhjJqapTrYmbx3nGb4Zvj3msVWxU06LfhqVwNqOt3CBF8f5LV hhlMAOvVjiyWYvwxJvq/sPUqgZbWrHLfc9aytEDz4YKOWChE2wpwXx6O97wctdUS w8AiazqAsu6JEXJtX998hs5zpwDWmpT4wjc= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:32 2025 by rpki-client