$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa File: b5060e1b-5649-3da3-90ed-6368bf81760a.roa (raw, json) Hash identifier: qa5ygBNRzcFjNjAfYfRfhV8Qodb32Ojywj54NigH6YU= Subject key identifier: C7:84:63:FA:FD:34:FB:A5:D6:AC:3D:2B:AE:F2:85:CF:C4:46:BB:50 Certificate issuer: /CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Certificate serial: 010D0C9F43285848DA70FB223D13C4F643151080 Authority key identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 14228 IP address blocks: 2620:d5:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:fb:22:3d:13:c4:f6:43:15:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=b1b242f9-f248-46b3-adbe-41618eef2f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bc:67:ba:4a:d2:81:88:c7:18:d0:ce:de:f2: 58:7b:c7:01:b9:87:c4:74:13:9a:24:03:73:5b:db: 4e:6f:7f:8e:8e:13:44:7f:17:1c:6c:5a:24:12:fa: 3f:97:40:fa:00:20:ff:51:c3:1e:23:68:77:f8:4c: 12:25:aa:68:3e:b1:d6:50:1c:75:9e:24:bb:74:40: c9:24:7a:49:ae:30:d6:1a:e6:cd:82:e4:8e:c5:2c: 38:08:69:82:fd:7e:76:44:4e:ef:2e:fe:3a:2d:c5: fd:86:ca:01:1a:c8:c3:78:54:77:a9:98:2c:2b:bb: ed:45:f8:fa:0c:fd:e5:08:d9:b8:af:7d:77:49:65: b6:37:65:a2:fc:fc:78:07:d0:92:5b:92:9e:5d:c1: a9:c2:55:ff:53:cf:d3:82:b7:a1:04:0a:61:0a:c5: 70:bf:f9:80:d4:41:70:6a:a1:14:99:18:b4:0e:1b: e4:e5:04:f3:82:4e:0c:00:03:8c:f6:b7:b3:5a:84: c9:fc:70:aa:cc:aa:a5:58:65:05:91:61:e3:58:1a: 1f:57:2b:b5:b5:84:de:37:16:e3:8c:1c:00:25:af: 69:ad:da:da:59:da:4b:72:21:d0:50:dc:d2:09:a9: 87:ef:27:6e:02:de:04:af:00:2d:59:5a:33:05:62: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:84:63:FA:FD:34:FB:A5:D6:AC:3D:2B:AE:F2:85:CF:C4:46:BB:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl X509v3 Authority Key Identifier: keyid:F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer sbgp-ipAddrBlock: critical IPv6: 2620:d5:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:3d:7a:29:8d:58:dc:4f:23:d1:87:7d:11:79:10:ed:a8:40: 36:4a:16:67:f4:44:60:41:f6:39:73:9c:71:06:68:4a:ac:17: f2:c8:be:82:c4:f2:5b:46:d9:02:6d:e4:bf:7b:4e:c4:e0:9c: 08:19:6c:c9:82:7e:74:76:54:34:41:65:de:f0:43:93:4e:ab: 66:f3:60:11:dd:85:b3:8d:5f:81:9e:49:69:48:6e:5b:c6:9f: 4a:58:e2:43:c3:f9:32:bd:d6:15:86:5f:11:44:9e:0b:89:2e: 1c:d9:e7:71:9c:b3:40:98:11:79:83:96:5b:a8:91:65:13:8e: 01:ee:a8:2c:06:8a:3a:ed:60:7d:d8:6e:44:90:1d:4e:b8:66: fd:97:c6:22:0b:af:f1:9e:b5:e2:fa:1b:2f:a0:c2:93:19:ed: cc:d6:1f:ab:54:78:e3:da:3b:b8:76:d7:1a:73:a7:b3:b1:45: 6a:09:b2:4c:88:47:3e:ff:ea:fd:5b:6f:70:18:4c:85:01:05: 27:51:14:52:c7:3d:69:65:ff:ed:c4:07:23:62:2d:2f:62:f8: 86:ac:3a:9f:04:1d:fd:fe:17:b9:c8:91:9b:bf:3d:f6:7c:da: b2:58:ae:44:fb:e4:1f:d0:bd:0f:79:7d:e1:da:19:ed:f4:b7: 35:23:5e:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjacPsiPRPE9kMVEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U2NWM2MTAtZmE0OS00ZDdiLWEyZTctNjkxMjRmMWU1 Yzg1MB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk YjFiMjQyZjktZjI0OC00NmIzLWFkYmUtNDE2MThlZWYyZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rxnukrSgYjHGNDO3vJYe8cBuYfEdBOaJANz W9tOb3+OjhNEfxccbFokEvo/l0D6ACD/UcMeI2h3+EwSJapoPrHWUBx1niS7dEDJ JHpJrjDWGubNguSOxSw4CGmC/X52RE7vLv46LcX9hsoBGsjDeFR3qZgsK7vtRfj6 DP3lCNm4r313SWW2N2Wi/Px4B9CSW5KeXcGpwlX/U8/TgrehBAphCsVwv/mA1EFw aqEUmRi0Dhvk5QTzgk4MAAOM9rezWoTJ/HCqzKqlWGUFkWHjWBofVyu1tYTeNxbj jBwAJa9prdraWdpLciHQUNzSCamH7yduAt4ErwAtWVozBWKuEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMeEY/r9NPul1qw9K67yhc/ERrtQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTY1 YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEyNGYxZTVjODUvYjUwNjBlMWItNTY0OS0z ZGEzLTkwZWQtNjM2OGJmODE3NjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U2NWM2MTAtZmE0OS00ZDdiLWEy ZTctNjkxMjRmMWU1Yzg1LzNlNjVjNjEwLWZhNDktNGQ3Yi1hMmU3LTY5MTI0ZjFl NWM4NS5jcmwwHwYDVR0jBBgwFoAU8UDtM/qZ+uZow0I3AcJrTGquNSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTY1YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEy NGYxZTVjODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA1UAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAQ9eimNWNxPI9GHfRF5EO2oQDZKFmf0RGBB9jlznHEGaEqsF/LI voLE8ltG2QJt5L97TsTgnAgZbMmCfnR2VDRBZd7wQ5NOq2bzYBHdhbONX4GeSWlI blvGn0pY4kPD+TK91hWGXxFEnguJLhzZ53Gcs0CYEXmDlluokWUTjgHuqCwGijrt YH3YbkSQHU64Zv2XxiILr/GeteL6Gy+gwpMZ7czWH6tUeOPaO7h21xpzp7OxRWoJ skyIRz7/6v1bb3AYTIUBBSdRFFLHPWll/+3EByNiLS9i+IasOp8EHf3+F7nIkZu/ PfZ82rJYrkT75B/QvQ95feHaGe30tzUjXjY= -----END CERTIFICATE-----Generated at Mon Apr 28 15:33:30 2025 by rpki-client