$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/a56da1d9-4473-30c5-a9b9-924fcf74c5dd.roa File: a56da1d9-4473-30c5-a9b9-924fcf74c5dd.roa (raw, json) Hash identifier: bIO4vyiaB3ZPzL5MASTiPuZarXN1ozt4QnU1ZZGQfZI= Subject key identifier: 33:A9:12:06:E0:BC:E5:98:7E:F0:EB:34:20:CC:02:6D:FD:BB:74:C2 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F43285849912F2C823B8351DF64266100 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/a56da1d9-4473-30c5-a9b9-924fcf74c5dd.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 3477 IP address blocks: 2602:810:d004::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2c:82:3b:83:51:df:64:26:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=b71a457f-7f1d-4cdb-b453-d506402fdbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e1:70:d4:b8:db:e1:b7:ae:31:39:d1:61:9a: 2e:8c:c5:1d:91:f0:7d:5c:10:05:87:e7:05:37:f1: bf:a9:f6:86:b2:79:b9:5d:0d:2a:a3:aa:1b:7d:f2: 2f:13:b5:5f:f7:58:8e:e8:3a:01:7b:48:88:a4:aa: bf:24:ec:a1:ff:d2:cd:41:15:99:9b:d4:56:f8:78: a9:40:d4:52:2c:8f:91:13:52:70:83:3c:e7:ff:fe: c8:e7:cc:1a:30:be:46:e3:b0:d8:20:76:c5:aa:22: 9f:26:17:e7:69:15:34:f4:ed:ea:19:17:16:95:0f: 73:4b:9b:4f:6c:2c:0f:77:5c:5a:81:3d:0e:d9:54: a5:90:f3:be:34:11:9f:2f:54:ae:52:10:49:31:00: bc:24:8c:9c:64:9c:36:36:d9:17:98:74:e4:97:bb: 43:b6:fe:21:75:6f:5b:da:6e:a2:4c:a6:c0:98:b0: db:68:4d:50:50:ba:70:10:d4:89:64:be:53:0e:46: 68:91:ab:05:99:25:43:22:bd:b3:7f:e6:81:d6:8b: ba:34:9d:9f:c0:0e:02:a4:3a:39:53:58:00:27:8f: bd:ef:7f:39:51:77:42:7d:c3:9c:8f:b6:42:47:ac: 61:5b:6e:fe:70:50:9b:6a:a5:25:68:00:21:e0:07: fd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A9:12:06:E0:BC:E5:98:7E:F0:EB:34:20:CC:02:6D:FD:BB:74:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/a56da1d9-4473-30c5-a9b9-924fcf74c5dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv6: 2602:810:d004::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:52:bc:39:e9:c5:6a:2d:04:6c:08:2e:ac:81:c4:bc:88:6a: 01:a4:55:95:be:c9:62:cf:1e:fe:89:43:2e:4d:4e:75:d5:33: 9d:f6:83:ec:44:bb:20:6b:9c:89:d0:3f:83:1c:de:25:1c:28: 34:c9:81:a0:aa:83:80:40:61:a3:a1:49:12:94:09:07:b1:85: 6c:ca:0c:81:10:33:66:47:c9:35:1b:62:c4:dc:4b:a3:51:e2: a3:fc:5c:85:49:1a:7b:b2:13:30:f8:4b:b6:74:e7:31:2f:79: 99:8e:55:a5:40:51:be:b4:2f:0c:70:d5:bb:59:ec:29:8b:f8: fc:b2:8e:49:79:37:c7:15:25:c7:01:38:f7:65:9a:2c:6f:7c: 05:73:6a:2c:d5:f7:18:b9:dd:c8:01:18:13:18:3f:0c:89:ea: de:c4:3d:d1:b6:18:6a:65:47:41:5a:a0:2e:55:a0:f8:83:c3: 91:2d:26:d2:32:a7:1a:f9:40:5c:be:55:79:fc:9a:fa:ea:39: e2:f7:1f:70:0f:18:54:94:76:13:c2:2f:ed:b1:e6:6c:3d:16: 16:a1:fc:ff:27:be:ed:c8:89:bb:78:3f:fc:15:ac:5b:50:06: 6a:ac:9f:d6:75:14:97:7d:e1:4a:89:ba:de:c8:54:d1:56:2e: fa:c9:f6:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmRLyyCO4NR32QmYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk YjcxYTQ1N2YtN2YxZC00Y2RiLWI0NTMtZDUwNjQwMmZkYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeFw1Ljb4beuMTnRYZoujMUdkfB9XBAFh+cF N/G/qfaGsnm5XQ0qo6obffIvE7Vf91iO6DoBe0iIpKq/JOyh/9LNQRWZm9RW+Hip QNRSLI+RE1Jwgzzn//7I58waML5G47DYIHbFqiKfJhfnaRU09O3qGRcWlQ9zS5tP bCwPd1xagT0O2VSlkPO+NBGfL1SuUhBJMQC8JIycZJw2NtkXmHTkl7tDtv4hdW9b 2m6iTKbAmLDbaE1QULpwENSJZL5TDkZokasFmSVDIr2zf+aB1ou6NJ2fwA4CpDo5 U1gAJ4+97385UXdCfcOcj7ZCR6xhW27+cFCbaqUlaAAh4Af9dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDOpEgbgvOWYfvDrNCDMAm39u3TCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvYTU2ZGExZDktNDQ3My0z MGM1LWE5YjktOTI0ZmNmNzRjNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgIIENAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANlSvDnpxWotBGwILqyBxLyIagGkVZW+yWLPHv6JQy5NTnXVM532 g+xEuyBrnInQP4Mc3iUcKDTJgaCqg4BAYaOhSRKUCQexhWzKDIEQM2ZHyTUbYsTc S6NR4qP8XIVJGnuyEzD4S7Z05zEveZmOVaVAUb60Lwxw1btZ7CmL+Pyyjkl5N8cV JccBOPdlmixvfAVzaizV9xi53cgBGBMYPwyJ6t7EPdG2GGplR0FaoC5VoPiDw5Et JtIypxr5QFy+VXn8mvrqOeL3H3APGFSUdhPCL+2x5mw9Fhah/P8nvu3Iibt4P/wV rFtQBmqsn9Z1FJd94UqJut7IVNFWLvrJ9gY= -----END CERTIFICATE-----Generated at Sun Apr 27 15:20:48 2025 by rpki-client