$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1db65866-967e-3f6c-a700-1bf1cc6398c7.roa File: 1db65866-967e-3f6c-a700-1bf1cc6398c7.roa (raw, json) Hash identifier: CacfOexWjKF1wjZQAp8e+KrjS1T0hT5Vk5DmDr3hS1c= Subject key identifier: AF:CC:39:62:91:2D:1A:27:D2:F0:62:FE:B9:DF:06:FF:82:76:65:5E Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C425B8533D1FD006633900 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1db65866-967e-3f6c-a700-1bf1cc6398c7.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 2620:11a:c042::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:25:b8:53:3d:1f:d0:06:63:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=baf69b96-bdc0-4277-9c1c-52ca5d5096f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:02:23:77:67:16:d2:74:f1:77:c1:db:d6: d1:58:d6:9b:b2:e2:2f:87:11:af:c5:3a:f1:aa:91: c6:53:39:6b:ec:29:71:10:fd:d7:9a:d7:85:54:86: c8:ce:cb:c2:dd:51:17:a4:a6:08:8e:f8:53:45:06: 1b:cb:14:c5:fa:05:dd:c4:50:b7:17:29:a1:fb:69: 1e:22:5d:4b:8e:82:81:77:7b:12:8b:f6:fb:44:8c: 6c:71:dd:45:75:f5:e0:84:b3:bc:c9:a6:85:44:6e: 85:16:ea:63:f9:c3:1a:8c:e2:4e:9d:0c:a2:49:f8: f2:4d:ef:eb:1b:a1:93:21:f1:0b:cc:d4:4c:f9:45: b4:ee:c0:db:4c:37:1b:5d:87:2a:ce:1d:19:2f:6a: 29:22:86:aa:17:ea:8a:f6:e1:1b:e7:e0:9d:f0:11: 51:a2:e4:a5:df:c9:8f:6a:23:85:7b:ec:10:d6:ba: df:36:ba:42:02:8b:fe:74:f1:0b:d1:c8:d0:cc:a6: dd:56:f4:90:11:a8:42:b5:5f:fd:f4:4a:84:d5:f2: 31:ca:64:44:e9:4e:99:15:6a:1f:df:ff:ae:91:1a: 9a:37:c1:ba:ae:99:0f:33:a6:bb:d0:36:09:f1:86: da:a8:7e:95:08:a8:20:11:9f:c4:5f:22:87:c7:95: f2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CC:39:62:91:2D:1A:27:D2:F0:62:FE:B9:DF:06:FF:82:76:65:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1db65866-967e-3f6c-a700-1bf1cc6398c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv6: 2620:11a:c042::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:3e:96:5d:22:ae:ee:8c:6b:f1:fc:92:a3:3a:80:d9:c5:1b: 71:1b:e8:61:9d:45:62:7c:31:dc:47:c0:69:8e:c8:85:f3:80: d9:bb:65:69:71:5f:47:d8:a8:d4:fd:58:95:7f:1d:47:8b:18: fb:a3:e7:6d:1a:90:9a:0c:66:6c:63:0b:3f:52:be:d0:d4:5d: bc:68:bd:1f:6e:1e:4f:c1:ea:54:b8:d7:96:a0:cc:e4:97:a2: b0:ca:75:71:4a:df:fe:0f:2e:8a:33:40:08:52:fb:ed:26:5b: 36:b7:a1:95:5f:03:69:cb:94:41:df:25:0c:3f:da:cd:13:27: 60:c2:66:1d:16:aa:27:05:d6:dc:21:9f:8f:42:f1:9f:f3:cb: 40:be:45:06:40:79:86:b2:8d:9f:94:96:1a:80:d2:b2:6f:8c: 99:b8:50:c9:f6:db:a7:b6:6f:d1:1c:5d:27:48:9c:4c:25:81: d3:6b:8f:f8:91:e8:95:3c:88:1a:b4:69:af:b4:6a:d1:1d:77: bb:f5:3c:61:75:71:19:87:8a:0d:ac:3d:85:57:ba:52:dc:3d: cd:cd:a1:62:a7:73:29:71:3d:0c:34:cd:ab:aa:05:9a:85:66: c8:24:18:f2:28:dd:c6:31:0b:69:41:3b:45:69:dc:7c:a8:b1: 3f:37:2b:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElTxCW4Uz0f0AZjOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YmFmNjliOTYtYmRjMC00Mjc3LTljMWMtNTJjYTVkNTA5NmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+UCI3dnFtJ08XfB29bRWNabsuIvhxGvxTrx qpHGUzlr7ClxEP3XmteFVIbIzsvC3VEXpKYIjvhTRQYbyxTF+gXdxFC3Fymh+2ke Il1LjoKBd3sSi/b7RIxscd1FdfXghLO8yaaFRG6FFupj+cMajOJOnQyiSfjyTe/r G6GTIfELzNRM+UW07sDbTDcbXYcqzh0ZL2opIoaqF+qK9uEb5+Cd8BFRouSl38mP aiOFe+wQ1rrfNrpCAov+dPEL0cjQzKbdVvSQEahCtV/99EqE1fIxymRE6U6ZFWof 3/+ukRqaN8G6rpkPM6a70DYJ8YbaqH6VCKggEZ/EXyKHx5XyBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK/MOWKRLRon0vBi/rnfBv+CdmVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMWRiNjU4NjYtOTY3ZS0z ZjZjLWE3MDAtMWJmMWNjNjM5OGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGsBC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ4+ll0iru6Ma/H8kqM6gNnFG3Eb6GGdRWJ8MdxHwGmOyIXzgNm7 ZWlxX0fYqNT9WJV/HUeLGPuj520akJoMZmxjCz9SvtDUXbxovR9uHk/B6lS415ag zOSXorDKdXFK3/4PLoozQAhS++0mWza3oZVfA2nLlEHfJQw/2s0TJ2DCZh0WqicF 1twhn49C8Z/zy0C+RQZAeYayjZ+UlhqA0rJvjJm4UMn226e2b9EcXSdInEwlgdNr j/iR6JU8iBq0aa+0atEdd7v1PGF1cRmHig2sPYVXulLcPc3NoWKncylxPQw0zauq BZqFZsgkGPIo3cYxC2lBO0Vp3HyosT83K80= -----END CERTIFICATE-----Generated at Sat Apr 26 16:19:28 2025 by rpki-client