$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa File: 7c1ba9ff-755e-3117-9120-25b143c0f470.roa (raw, json) Hash identifier: 8wSpOWwXoRh+KAKsizgoDpzC4lNOp6a1j2//C2WRe54= Subject key identifier: 70:00:33:E0:97:26:AF:89:9F:CF:07:11:21:CD:D6:03:90:AD:6D:7F Certificate issuer: /CN=4890f8fd-3ae6-4818-8c1f-19aab66f43a1 Certificate serial: 010D0C9F432858497DA47419DE12783A5D200C40 Authority key identifier: 9F:85:49:00:D8:C8:26:66:8B:5E:DA:A7:05:C6:89:9D:EA:1F:7A:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 12145 IP address blocks: 2604:dec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:74:19:de:12:78:3a:5d:20:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4890f8fd-3ae6-4818-8c1f-19aab66f43a1 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=e0f5bc65-66a5-46d5-8957-083441a86c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:76:24:c0:1c:76:7a:f6:47:94:15:e1:5c: 49:fc:2f:05:dc:e4:c5:73:77:e8:24:a4:ba:b2:16: 46:56:3d:2d:5a:fb:17:ec:9f:42:d1:fc:71:fd:65: 18:35:cd:cf:e5:fa:31:c8:c8:1e:bd:6f:63:9f:d3: 38:38:bc:b3:fa:1b:7b:ff:52:98:36:0f:fc:34:dc: 91:57:e9:be:cc:67:01:60:5a:be:e7:b2:fd:71:3e: 83:5a:d3:ae:17:32:c4:cd:06:ab:a9:bf:da:cb:9e: e3:40:96:19:43:21:8b:43:28:5f:e1:30:72:58:e1: 0b:e2:82:b2:18:9f:f5:d3:82:f4:d0:8c:b4:da:05: 08:3a:87:0f:b2:cd:9d:34:f1:02:f8:b2:f1:1d:f2: 56:45:37:73:95:e4:f5:c6:b0:ea:75:17:a5:53:67: 75:a6:c8:90:11:42:41:4c:84:0c:b8:63:5c:3d:c8: 16:d3:65:27:68:46:84:ac:ac:41:02:e5:64:e6:4c: 83:cd:1b:2d:c1:2c:a0:d3:f0:40:b0:85:82:98:e8: b1:48:34:b3:c9:e6:e8:0b:1a:40:c9:fc:c0:fc:5a: 69:50:d3:d6:18:d7:11:81:d3:88:8c:e4:9f:b1:cc: 37:8f:0e:89:fa:07:38:75:93:df:0c:ec:64:b3:ce: 29:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:00:33:E0:97:26:AF:89:9F:CF:07:11:21:CD:D6:03:90:AD:6D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.crl X509v3 Authority Key Identifier: keyid:9F:85:49:00:D8:C8:26:66:8B:5E:DA:A7:05:C6:89:9D:EA:1F:7A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer sbgp-ipAddrBlock: critical IPv6: 2604:dec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:26:a1:be:b1:7d:f3:b6:44:5e:6b:cd:c5:38:1a:52:0e:f4: 25:5b:bf:aa:c5:cf:3e:72:6d:79:74:73:73:3d:03:09:08:76: cc:53:46:c7:94:f9:9f:2b:bc:ce:a7:0e:41:a7:4e:cb:2c:0b: 04:6c:f8:23:1f:d8:e0:01:19:6b:bc:71:b5:4c:75:3e:a1:5a: 0e:fe:f4:3a:96:3c:1c:ab:6d:38:49:a5:58:2d:92:0a:50:b8: bb:78:36:c2:d4:86:f1:31:40:d0:b0:c6:00:17:d8:0a:ba:60: 14:cb:0c:bb:31:23:65:77:1f:ef:fc:0b:79:a8:9c:17:fe:c1: dc:02:e8:6c:ad:3e:68:ba:3d:d5:c5:f5:e4:58:c0:59:17:6c: 74:27:e0:57:6c:4f:a0:df:68:cf:d2:2d:b2:f4:98:7d:68:73: 03:7f:a1:b8:58:6c:f0:02:bf:00:b1:d8:f0:7d:97:b8:08:b3: 94:be:3b:b4:74:a4:5a:bc:7c:c5:f9:9c:fe:1f:07:8e:d9:89: 77:a2:52:78:4a:ef:62:b2:b5:ee:da:dc:79:c2:96:1c:b7:92: 19:1f:ae:39:e7:37:0a:f9:4d:ec:b4:0d:be:c6:01:1c:d7:ec: eb:ca:4a:16:36:94:1f:2f:30:44:e9:ca:f8:55:d8:54:ef:4a: 14:75:b5:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl9pHQZ3hJ4Ol0gDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg5MGY4ZmQtM2FlNi00ODE4LThjMWYtMTlhYWI2NmY0 M2ExMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZTBmNWJjNjUtNjZhNS00NmQ1LTg5NTctMDgzNDQxYTg2YzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg92JMAcdnr2R5QV4VxJ/C8F3OTFc3foJKS6 shZGVj0tWvsX7J9C0fxx/WUYNc3P5foxyMgevW9jn9M4OLyz+ht7/1KYNg/8NNyR V+m+zGcBYFq+57L9cT6DWtOuFzLEzQarqb/ay57jQJYZQyGLQyhf4TByWOEL4oKy GJ/104L00Iy02gUIOocPss2dNPEC+LLxHfJWRTdzleT1xrDqdRelU2d1psiQEUJB TIQMuGNcPcgW02UnaEaErKxBAuVk5kyDzRstwSyg0/BAsIWCmOixSDSzyeboCxpA yfzA/FppUNPWGNcRgdOIjOSfscw3jw6J+gc4dZPfDOxks84poQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHAAM+CXJq+Jn88HESHN1gOQrW1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODkw ZjhmZC0zYWU2LTQ4MTgtOGMxZi0xOWFhYjY2ZjQzYTEvN2MxYmE5ZmYtNzU1ZS0z MTE3LTkxMjAtMjViMTQzYzBmNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDg5MGY4ZmQtM2FlNi00ODE4LThj MWYtMTlhYWI2NmY0M2ExLzQ4OTBmOGZkLTNhZTYtNDgxOC04YzFmLTE5YWFiNjZm NDNhMS5jcmwwHwYDVR0jBBgwFoAUn4VJANjIJmaLXtqnBcaJneoferwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ODkwZjhmZC0zYWU2LTQ4MTgtOGMxZi0xOWFh YjY2ZjQzYTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTewDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCJqG+sX3ztkRea83FOBpSDvQlW7+qxc8+cm15dHNzPQMJCHbMU0bH lPmfK7zOpw5Bp07LLAsEbPgjH9jgARlrvHG1THU+oVoO/vQ6ljwcq204SaVYLZIK ULi7eDbC1IbxMUDQsMYAF9gKumAUywy7MSNldx/v/At5qJwX/sHcAuhsrT5ouj3V xfXkWMBZF2x0J+BXbE+g32jP0i2y9Jh9aHMDf6G4WGzwAr8AsdjwfZe4CLOUvju0 dKRavHzF+Zz+HweO2Yl3olJ4Su9isrXu2tx5wpYct5IZH6455zcK+U3stA2+xgEc 1+zrykoWNpQfLzBE6cr4VdhU70oUdbWC -----END CERTIFICATE-----Generated at Mon Apr 28 02:44:52 2025 by rpki-client