$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/14225c85-02d7-3302-b9fc-e26bf7888e33.roa File: 14225c85-02d7-3302-b9fc-e26bf7888e33.roa (raw, json) Hash identifier: 9BM4VyiFOF5Ro0XSxxcuSk8TeaM0MwrP6SDsnhV+BK0= Subject key identifier: E1:DB:BE:F8:F5:D9:03:C5:DB:F8:58:FB:5F:14:D9:92:18:81:88:75 Certificate issuer: /CN=8def8532-8491-4ca2-9370-4768f22df42b Certificate serial: 010D0C9F43285849A5A1B0E6600F278293E372C0 Authority key identifier: 78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/14225c85-02d7-3302-b9fc-e26bf7888e33.roa Signing time: Fri 25 Apr 2025 20:47:59 +0000 ROA not before: Fri 25 Apr 2025 20:47:59 +0000 ROA not after: Thu 24 Jul 2025 20:47:59 +0000 asID: 36305 IP address blocks: 2604:e20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a5:a1:b0:e6:60:0f:27:82:93:e3:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8def8532-8491-4ca2-9370-4768f22df42b Validity Not Before: Apr 25 20:47:59 2025 GMT Not After : Jul 24 20:47:59 2025 GMT Subject: CN=af2dbd55-c752-4eb1-9f8d-f30439b3a2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:05:d2:18:bb:1e:88:6a:7f:d9:be:1d:fc: b6:a8:9c:18:6e:60:ac:71:44:2e:4a:50:07:94:e7: c4:32:a8:64:bb:ff:89:7d:9b:54:e3:cf:db:77:d3: 6f:58:b4:89:38:b3:cd:fa:19:74:a4:81:55:d6:d1: ec:4f:41:0a:17:8b:1f:d6:cc:6e:6e:de:a0:0e:72: 84:7d:e1:91:5f:90:55:db:d9:d8:f9:c5:ff:83:4e: 4d:f8:65:be:db:3f:1d:93:f5:3b:fc:64:dd:72:5a: 55:2a:18:c5:e2:50:5e:c0:03:70:dc:46:6c:c3:43: fc:f0:20:fc:cf:8e:0a:1e:af:02:0a:9a:57:e1:32: 65:2d:32:f0:22:5d:1b:37:98:8a:2a:08:0b:f7:fb: 1b:cb:79:82:bc:b8:ab:31:ad:4b:80:88:e3:01:d0: f5:f7:78:82:51:8b:98:0b:1d:61:46:54:2f:70:bd: ee:14:44:43:92:ca:83:23:aa:51:a5:23:8d:d6:38: 1a:56:c2:d5:61:82:39:95:55:20:95:0c:d8:8b:62: dd:51:20:b4:21:72:21:aa:bd:ba:5e:93:bf:e1:c6: 30:f9:91:09:5d:93:8a:0e:8b:23:c1:e6:76:10:d5: b2:1f:38:3f:22:94:8e:4c:b1:49:d4:15:d2:bb:03: f4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DB:BE:F8:F5:D9:03:C5:DB:F8:58:FB:5F:14:D9:92:18:81:88:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/14225c85-02d7-3302-b9fc-e26bf7888e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.crl X509v3 Authority Key Identifier: keyid:78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer sbgp-ipAddrBlock: critical IPv6: 2604:e20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:1d:3d:a2:50:dc:6d:ee:14:f9:6d:13:09:2c:64:ec:8c:27: 63:5d:cc:73:82:f3:25:9c:ee:11:b6:85:96:88:41:73:d2:4d: aa:56:a7:de:e4:15:fb:7e:8f:d5:c5:75:4a:62:20:b5:37:20: e8:da:41:af:d2:ad:d0:21:c5:e8:3c:83:c9:8a:21:fc:02:66: 22:8f:2a:de:07:5c:c6:61:59:2e:35:5a:c4:de:05:41:87:78: d8:17:4d:f1:dd:6f:76:fd:dd:91:ef:fc:2a:24:90:b7:ad:12: 20:2e:54:e8:b9:d3:d9:0a:2f:a2:cd:34:84:23:72:a9:5d:94: 3f:d7:e2:91:54:1f:df:dd:a1:57:93:e3:b1:02:47:1f:2a:f6: 7b:77:a1:21:73:c4:c0:b6:87:c0:76:0a:9c:4b:5a:05:49:a4: 60:45:14:dc:7c:e5:1f:44:92:2d:9b:17:e1:68:78:3c:0b:79: 00:41:9e:38:21:1a:dd:0e:ae:3b:c8:56:5f:cb:da:f6:5f:08: 4a:f4:ad:b1:f0:57:e4:2d:85:d3:98:93:9e:ea:86:3b:61:56: 25:04:34:a0:38:70:81:4d:92:7e:28:ed:13:94:cf:a2:1b:0c: b9:80:d2:e1:8a:7a:1c:76:14:f3:79:0a:9d:cc:61:ed:08:2c: f3:8d:6e:67 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmlobDmYA8ngpPjcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRlZjg1MzItODQ5MS00Y2EyLTkzNzAtNDc2OGYyMmRm NDJiMB4XDTI1MDQyNTIwNDc1OVoXDTI1MDcyNDIwNDc1OVowLzEtMCsGA1UEAxMk YWYyZGJkNTUtYzc1Mi00ZWIxLTlmOGQtZjMwNDM5YjNhMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN8F0hi7Hohqf9m+Hfy2qJwYbmCscUQuSlAH lOfEMqhku/+JfZtU48/bd9NvWLSJOLPN+hl0pIFV1tHsT0EKF4sf1sxubt6gDnKE feGRX5BV29nY+cX/g05N+GW+2z8dk/U7/GTdclpVKhjF4lBewANw3EZsw0P88CD8 z44KHq8CCppX4TJlLTLwIl0bN5iKKggL9/sby3mCvLirMa1LgIjjAdD193iCUYuY Cx1hRlQvcL3uFERDksqDI6pRpSON1jgaVsLVYYI5lVUglQzYi2LdUSC0IXIhqr26 XpO/4cYw+ZEJXZOKDosjweZ2ENWyHzg/IpSOTLFJ1BXSuwP0VwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOHbvvj12QPF2/hY+18U2ZIYgYh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZGVm ODUzMi04NDkxLTRjYTItOTM3MC00NzY4ZjIyZGY0MmIvMTQyMjVjODUtMDJkNy0z MzAyLWI5ZmMtZTI2YmY3ODg4ZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGRlZjg1MzItODQ5MS00Y2EyLTkz NzAtNDc2OGYyMmRmNDJiLzhkZWY4NTMyLTg0OTEtNGNhMi05MzcwLTQ3NjhmMjJk ZjQyYi5jcmwwHwYDVR0jBBgwFoAUeK5vSwlNKsXflVqqpMA614oxgw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZGVmODUzMi04NDkxLTRjYTItOTM3MC00NzY4 ZjIyZGY0MmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQOIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBHT2iUNxt7hT5bRMJLGTsjCdjXcxzgvMlnO4RtoWWiEFz0k2qVqfe 5BX7fo/VxXVKYiC1NyDo2kGv0q3QIcXoPIPJiiH8AmYijyreB1zGYVkuNVrE3gVB h3jYF03x3W92/d2R7/wqJJC3rRIgLlToudPZCi+izTSEI3KpXZQ/1+KRVB/f3aFX k+OxAkcfKvZ7d6Ehc8TAtofAdgqcS1oFSaRgRRTcfOUfRJItmxfhaHg8C3kAQZ44 IRrdDq47yFZfy9r2XwhK9K2x8FfkLYXTmJOe6oY7YVYlBDSgOHCBTZJ+KO0TlM+i Gwy5gNLhinocdhTzeQqdzGHtCCzzjW5n -----END CERTIFICATE-----Generated at Mon Apr 28 22:43:24 2025 by rpki-client