$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/a5022391-3d98-3475-9d45-50bc5466d06d.roa File: a5022391-3d98-3475-9d45-50bc5466d06d.roa (raw, json) Hash identifier: UA5YGUV27uQYfIXzbw+e0Lnv7vKX85sidRFi3xHVq8I= Subject key identifier: 08:FE:4C:2A:A8:DE:CA:E6:BA:95:83:A8:A2:C8:95:B2:CB:74:AC:80 Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d Certificate serial: 010D0C9F432858499DBF319A315281F611D78980 Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/a5022391-3d98-3475-9d45-50bc5466d06d.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 395700 IP address blocks: 2620:10f:b000::/47 maxlen: 48 2620:10f:b070::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:31:9a:31:52:81:f6:11:d7:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=af8f3f44-3d5f-4e7b-98bc-497de33c8d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:51:0f:ef:d9:dc:30:1a:da:46:a4:58:b6: 95:49:cf:df:e1:d1:9d:77:62:f1:65:fd:77:fb:0e: 01:e1:17:38:ae:21:d4:34:31:07:b3:13:86:df:4e: 8e:6d:0c:f5:a9:3e:ff:3b:c3:b9:0f:bc:31:58:ee: c0:45:e5:d7:fe:ec:0b:22:16:d7:e0:71:2f:4f:c4: 2a:0d:1a:6b:82:00:4c:a2:c7:cd:25:3f:7a:b0:9a: ad:ed:82:5e:7b:6c:a5:83:3b:56:75:ea:5d:55:99: 31:29:67:4c:fd:3e:74:25:ff:6a:95:ba:8f:b0:3d: 90:a5:d9:6c:5f:90:b1:f9:83:6b:39:07:61:d4:cb: 0f:3f:3c:e1:0a:42:55:63:7d:89:13:8b:b4:38:3c: fd:aa:fb:cd:73:2a:a8:05:25:c1:61:59:94:62:af: a2:a2:96:eb:8d:c0:6d:ef:94:ac:16:85:4b:0c:93: 24:4b:67:2b:2a:0d:ae:f8:ee:67:3a:4b:e1:12:ea: 8b:a8:33:91:ad:59:6c:80:9f:84:f7:52:79:35:27: ce:06:ea:10:ea:36:8b:e9:30:61:a1:ba:87:62:69: fe:56:59:93:80:b0:ae:fc:ff:7f:b2:4d:54:8a:3a: 9d:d9:9e:f4:90:db:f7:30:bf:9d:30:f8:32:ab:f0: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FE:4C:2A:A8:DE:CA:E6:BA:95:83:A8:A2:C8:95:B2:CB:74:AC:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/a5022391-3d98-3475-9d45-50bc5466d06d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl X509v3 Authority Key Identifier: keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer sbgp-ipAddrBlock: critical IPv6: 2620:10f:b000::/47 2620:10f:b070::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ad:d7:18:ef:4d:33:61:fd:64:bb:3d:ae:37:30:a9:99:05: 57:2b:90:24:7e:c7:e3:10:4f:36:69:9a:74:5d:27:df:71:0a: 7c:f0:46:d8:dd:ab:24:41:fe:67:09:0a:31:f3:f2:97:59:bc: 5f:7c:2f:04:57:9e:52:6b:5d:a8:d0:32:6b:fa:27:12:31:1f: e6:0b:8d:b4:4a:71:a4:91:c5:9e:43:9c:6c:bc:64:81:58:55: 62:e6:64:66:05:f8:1f:9c:01:4e:52:fa:53:9c:c3:69:a5:f8: b8:41:92:2e:50:a8:4b:08:df:71:f4:db:9a:c4:4f:32:08:00: 0f:58:24:c0:d4:58:51:c1:7e:a1:a2:57:6a:69:e8:5e:c0:8c: 92:fe:76:79:6e:1c:33:87:04:8b:fe:46:58:a7:86:28:98:cf: 8f:63:d1:5e:6a:35:81:3e:ba:1c:b1:32:90:b0:f3:b1:f6:e0: 63:a6:8b:e7:d7:7d:d1:0a:e0:67:ba:b1:b7:44:e2:cb:fb:c2: 62:63:fe:79:9d:9d:a1:62:b8:c3:00:b6:ee:cb:84:f1:e4:9e: 07:23:da:38:d4:6a:a2:ab:38:7b:cc:ee:52:dc:2d:c3:cb:3d: c7:9c:e6:e8:fa:69:fe:1a:95:41:5a:65:3c:f5:1f:8a:ec:5e: 71:5e:fe:80 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmdvzGaMVKB9hHXiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmMDYxY2UtMWE2MS00OTNiLThmM2ItNDcyMzM0NDUz ZjBkMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YWY4ZjNmNDQtM2Q1Zi00ZTdiLTk4YmMtNDk3ZGUzM2M4ZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31tRD+/Z3DAa2kakWLaVSc/f4dGdd2LxZf13 +w4B4Rc4riHUNDEHsxOG306ObQz1qT7/O8O5D7wxWO7AReXX/uwLIhbX4HEvT8Qq DRprggBMosfNJT96sJqt7YJee2ylgztWdepdVZkxKWdM/T50Jf9qlbqPsD2Qpdls X5Cx+YNrOQdh1MsPPzzhCkJVY32JE4u0ODz9qvvNcyqoBSXBYVmUYq+iopbrjcBt 75SsFoVLDJMkS2crKg2u+O5nOkvhEuqLqDORrVlsgJ+E91J5NSfOBuoQ6jaL6TBh obqHYmn+VlmTgLCu/P9/sk1Uijqd2Z70kNv3ML+dMPgyq/B2UwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFAj+TCqo3srmupWDqKLIlbLLdKyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Yw NjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIzMzQ0NTNmMGQvYTUwMjIzOTEtM2Q5OC0z NDc1LTlkNDUtNTBiYzU0NjZkMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNmMDYxY2UtMWE2MS00OTNiLThm M2ItNDcyMzM0NDUzZjBkLzIzZjA2MWNlLTFhNjEtNDkzYi04ZjNiLTQ3MjMzNDQ1 M2YwZC5jcmwwHwYDVR0jBBgwFoAUsEwcv9sM76V+ua9TApCg50y83MkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2YwNjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIz MzQ0NTNmMGQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBJiABD7AA AwcBJiABD7BwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFOt1xjvTTNh/WS7Pa43MKmZBVcrkCR+x+MQTzZp mnRdJ99xCnzwRtjdqyRB/mcJCjHz8pdZvF98LwRXnlJrXajQMmv6JxIxH+YLjbRK caSRxZ5DnGy8ZIFYVWLmZGYF+B+cAU5S+lOcw2ml+LhBki5QqEsI33H025rETzII AA9YJMDUWFHBfqGiV2pp6F7AjJL+dnluHDOHBIv+RlinhiiYz49j0V5qNYE+uhyx MpCw87H24GOmi+fXfdEK4Ge6sbdE4sv7wmJj/nmdnaFiuMMAtu7LhPHkngcj2jjU aqKrOHvM7lLcLcPLPcec5uj6af4alUFaZTz1H4rsXnFe/oA= -----END CERTIFICATE-----Generated at Tue Apr 29 14:03:05 2025 by rpki-client