$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa File: 870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa (raw, json) Hash identifier: 8wrohdnaXiFUu6vCyEVohF3rY7IneGCr9lwZA3thF1E= Subject key identifier: 86:5C:DA:30:1F:66:AB:CB:C0:5D:E0:A2:51:A7:87:CB:97:6A:03:D8 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F432858498E64853D65BF74430D3C2300 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 5744 IP address blocks: 2602:810:d000::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:85:3d:65:bf:74:43:0d:3c:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=19d09f1b-982f-4569-9d76-f4a69a5fc3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a3:2b:a8:5e:00:b3:1b:bf:14:e9:29:8e:f0: ca:97:94:cc:2e:83:e3:17:c1:f9:b7:20:87:14:c0: 9f:7b:7a:16:34:5e:a6:59:7d:85:fd:88:aa:b1:61: 3a:4a:c2:78:bd:12:11:bc:c8:c8:b4:4c:e6:28:b2: 71:10:68:b8:a7:03:54:a7:e2:13:94:bd:c3:21:3c: d5:f5:50:3e:8c:78:5a:16:e6:fc:42:6c:87:88:cc: 10:ff:8d:a7:3a:12:39:1f:2f:fe:17:99:03:db:8a: 9f:88:86:3e:27:d6:94:1b:f7:88:34:1f:50:95:c0: 09:23:19:30:2d:7a:42:ef:5e:38:f7:b3:71:45:bb: ac:a2:4b:aa:76:97:b4:9e:5f:5a:ea:4c:2f:26:0d: bc:39:96:18:a6:e4:bf:a7:32:93:9c:81:ef:fd:d5: bc:0d:62:5d:3a:9c:b5:c4:67:7a:9d:db:2c:c8:4a: 48:88:59:33:8e:16:5d:e1:31:ba:eb:5e:1a:c0:0c: 14:b4:54:24:4d:8a:a7:e5:ea:24:af:13:f7:21:76: 37:31:30:25:33:c5:e0:e1:c2:de:b5:e0:d8:76:38: af:b8:f0:1a:5c:f0:9f:fe:04:cf:9d:fc:2d:11:c6: 58:65:8a:f3:57:07:c0:4a:8e:a4:d0:61:dc:78:4c: 31:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5C:DA:30:1F:66:AB:CB:C0:5D:E0:A2:51:A7:87:CB:97:6A:03:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv6: 2602:810:d000::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4a:7a:78:a3:5f:b3:04:66:c7:e8:73:02:31:c1:f2:f1:61: f9:e4:59:6c:c7:ce:2a:bb:20:a2:be:f1:9e:97:bb:51:71:44: 65:9b:e1:70:42:70:a7:40:af:4b:9a:97:2a:6a:c8:b3:dd:2c: f3:cc:c7:b0:97:0c:63:3a:c0:57:36:52:a0:73:5d:a8:da:52: 24:db:0c:de:54:01:17:ac:81:e8:26:11:76:31:1d:ea:5d:bc: 57:ba:53:22:04:f4:41:a0:05:e1:db:35:e8:5d:79:08:e1:35: 3b:3f:e7:01:3a:64:74:db:1f:ca:51:05:35:e7:88:8a:52:06: 76:68:5c:c9:52:5c:2c:36:e1:54:77:0b:38:37:a2:6e:64:7d: d4:47:1a:b4:16:59:06:93:49:80:a4:6b:68:23:6a:b2:3a:ef: 1e:b0:01:c3:46:6b:39:14:2c:ad:97:51:73:59:9c:7e:31:b2: 40:61:6e:8a:15:68:1c:84:cb:c7:4f:14:2c:93:7a:f9:9d:94: 8d:37:e3:2b:4c:2a:98:03:5d:85:b7:d0:4b:12:89:13:c8:0d: eb:23:48:d2:0f:75:37:9f:14:76:48:20:d3:12:77:55:e0:e7: 69:59:bc:53:71:81:cf:e4:c5:11:57:31:90:d6:f3:c6:74:0b: 85:85:77:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmOZIU9Zb90Qw08IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MTlkMDlmMWItOTgyZi00NTY5LTlkNzYtZjRhNjlhNWZjM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6MrqF4Asxu/FOkpjvDKl5TMLoPjF8H5tyCH FMCfe3oWNF6mWX2F/YiqsWE6SsJ4vRIRvMjItEzmKLJxEGi4pwNUp+ITlL3DITzV 9VA+jHhaFub8QmyHiMwQ/42nOhI5Hy/+F5kD24qfiIY+J9aUG/eINB9QlcAJIxkw LXpC714497NxRbusokuqdpe0nl9a6kwvJg28OZYYpuS/pzKTnIHv/dW8DWJdOpy1 xGd6ndssyEpIiFkzjhZd4TG6614awAwUtFQkTYqn5eokrxP3IXY3MTAlM8Xg4cLe teDYdjivuPAaXPCf/gTPnfwtEcZYZYrzVwfASo6k0GHceEwxlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIZc2jAfZqvLwF3golGnh8uXagPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvODcwZDlkMDEtNmRmOS0z NWMxLWE0MWItMjhkNjBmNmNiMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgIIENAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtKenijX7MEZsfocwIxwfLxYfnkWWzHziq7IKK+8Z6Xu1FxRGWb 4XBCcKdAr0ualypqyLPdLPPMx7CXDGM6wFc2UqBzXajaUiTbDN5UAResgegmEXYx HepdvFe6UyIE9EGgBeHbNehdeQjhNTs/5wE6ZHTbH8pRBTXniIpSBnZoXMlSXCw2 4VR3Czg3om5kfdRHGrQWWQaTSYCka2gjarI67x6wAcNGazkULK2XUXNZnH4xskBh booVaByEy8dPFCyTevmdlI034ytMKpgDXYW30EsSiRPIDesjSNIPdTefFHZIINMS d1Xg52lZvFNxgc/kxRFXMZDW88Z0C4WFd0U= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:08 2025 by rpki-client