$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/2123b838-49c4-3858-b38c-bc8e324cca24.roa File: 2123b838-49c4-3858-b38c-bc8e324cca24.roa (raw, json) Hash identifier: lhXTzAKowBbXC6brICdnyxW6dv/akYP8/XLTjqhaZGA= Subject key identifier: CB:9A:50:BA:03:4D:94:47:9D:11:EC:25:B0:E7:BF:4C:C6:A4:E5:58 Certificate issuer: /CN=15b30dd1-216d-4b82-87ee-44becb2d20c7 Certificate serial: 010D0C9F43285849912F2FC626EBE9E8CD7C5D00 Authority key identifier: 4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/2123b838-49c4-3858-b38c-bc8e324cca24.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 32852 IP address blocks: 2607:5540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2f:c6:26:eb:e9:e8:cd:7c:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15b30dd1-216d-4b82-87ee-44becb2d20c7 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=a3d406ba-c724-456c-998f-1b8fee172fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:77:ce:8f:30:26:d7:90:bd:34:96:a8:a6: 4b:04:a2:1e:f6:81:61:6f:96:fe:f5:22:6d:86:ac: 24:ba:2b:8d:a1:85:51:6c:53:6e:e4:6a:3f:f0:a2: 2e:43:b3:16:30:b5:28:19:1f:ac:88:67:94:2c:85: 39:9d:b5:dd:a9:d9:66:d0:c4:12:06:2e:9b:e7:57: 9b:cd:f5:39:35:22:fa:bc:2d:42:18:58:5e:56:c3: 79:ba:c3:7a:f3:ab:7c:89:ab:47:73:74:60:92:58: 4e:64:da:47:5d:55:7f:d7:fb:5f:75:05:be:b6:0b: 1c:96:00:7c:ee:75:04:6c:29:78:62:66:44:b8:e4: 25:41:91:cd:7c:da:a3:b7:16:c0:13:d1:aa:69:79: 4c:8f:44:44:08:93:84:94:de:19:8f:1e:3a:56:1c: a2:73:6b:a2:6b:b3:82:4b:4a:68:6d:81:ec:17:94: a7:37:66:cc:09:df:39:fc:b0:c6:55:45:2f:9e:1a: 57:71:86:d9:1f:2a:07:9f:64:89:0a:63:f0:5d:f6: 00:c9:da:10:08:29:fb:8d:1a:2d:18:11:b0:7d:0d: 06:17:94:1e:45:4b:9d:cb:a3:0d:44:f8:4d:db:40: 24:30:c0:82:03:66:89:48:33:8f:bd:fb:00:e4:1b: a4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9A:50:BA:03:4D:94:47:9D:11:EC:25:B0:E7:BF:4C:C6:A4:E5:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/2123b838-49c4-3858-b38c-bc8e324cca24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl X509v3 Authority Key Identifier: keyid:4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer sbgp-ipAddrBlock: critical IPv6: 2607:5540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:97:1b:16:53:1c:34:70:e1:01:30:d4:8a:4c:96:52:fb:38: 3f:fe:86:4d:64:71:34:d8:27:8d:c7:54:7e:03:e7:86:d0:27: 84:d1:6d:39:da:76:02:a5:91:6e:53:1d:36:9f:20:22:5c:2a: 99:97:dc:94:f8:f4:54:67:aa:e0:a7:d2:5b:da:ec:cc:64:2d: 78:74:a1:02:8d:b9:f8:3b:85:4b:8d:b1:4c:46:98:9f:d8:fe: d9:ff:ce:4d:d9:90:81:d8:91:c1:72:a9:d0:18:d8:06:55:ca: 8c:2f:4d:b6:85:b0:a6:91:f3:d9:87:e4:a9:22:8f:18:29:13: c8:e7:66:ba:28:e2:0e:68:26:b2:db:fe:b5:9a:1b:dd:a3:22: 6c:81:db:c2:a5:e9:21:3b:e1:64:2d:c4:97:ee:67:e7:a0:89: 3d:dd:b1:8f:91:ec:d4:c4:f0:75:9d:c8:1f:82:08:37:49:f1: 05:e1:2a:6b:d8:d4:52:31:3f:96:94:8e:46:aa:97:b6:c1:b0: 3f:5a:ff:91:44:c1:9f:fc:78:9f:48:91:ab:39:0c:80:b4:08: 17:da:ff:82:64:66:da:85:7d:2c:bd:9b:dc:42:59:b9:e0:dd: fd:f4:9f:31:06:9e:5c:6b:fc:60:0b:08:29:82:05:73:e5:e1: 8a:57:dc:ed -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmRLy/GJuvp6M18XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTViMzBkZDEtMjE2ZC00YjgyLTg3ZWUtNDRiZWNiMmQy MGM3MB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk YTNkNDA2YmEtYzcyNC00NTZjLTk5OGYtMWI4ZmVlMTcyZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwup3zo8wJteQvTSWqKZLBKIe9oFhb5b+9SJt hqwkuiuNoYVRbFNu5Go/8KIuQ7MWMLUoGR+siGeULIU5nbXdqdlm0MQSBi6b51eb zfU5NSL6vC1CGFheVsN5usN686t8iatHc3RgklhOZNpHXVV/1/tfdQW+tgsclgB8 7nUEbCl4YmZEuOQlQZHNfNqjtxbAE9GqaXlMj0RECJOElN4Zjx46Vhyic2uia7OC S0pobYHsF5SnN2bMCd85/LDGVUUvnhpXcYbZHyoHn2SJCmPwXfYAydoQCCn7jRot GBGwfQ0GF5QeRUudy6MNRPhN20AkMMCCA2aJSDOPvfsA5BukmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMuaULoDTZRHnRHsJbDnv0zGpOVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWIz MGRkMS0yMTZkLTRiODItODdlZS00NGJlY2IyZDIwYzcvMjEyM2I4MzgtNDljNC0z ODU4LWIzOGMtYmM4ZTMyNGNjYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTViMzBkZDEtMjE2ZC00YjgyLTg3 ZWUtNDRiZWNiMmQyMGM3LzE1YjMwZGQxLTIxNmQtNGI4Mi04N2VlLTQ0YmVjYjJk MjBjNy5jcmwwHwYDVR0jBBgwFoAUTjhQMD+vrYkvte6IsNsBPCDDV/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWIzMGRkMS0yMTZkLTRiODItODdlZS00NGJl Y2IyZDIwYzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdVQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOlxsWUxw0cOEBMNSKTJZS+zg//oZNZHE02CeNx1R+A+eG0CeE0W05 2nYCpZFuUx02nyAiXCqZl9yU+PRUZ6rgp9Jb2uzMZC14dKECjbn4O4VLjbFMRpif 2P7Z/85N2ZCB2JHBcqnQGNgGVcqML022hbCmkfPZh+SpIo8YKRPI52a6KOIOaCay 2/61mhvdoyJsgdvCpekhO+FkLcSX7mfnoIk93bGPkezUxPB1ncgfggg3SfEF4Spr 2NRSMT+WlI5Gqpe2wbA/Wv+RRMGf/HifSJGrOQyAtAgX2v+CZGbahX0svZvcQlm5 4N399J8xBp5ca/xgCwgpggVz5eGKV9zt -----END CERTIFICATE-----Generated at Mon Apr 28 10:40:12 2025 by rpki-client