$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/56c386da-86c1-3818-b3b3-0d3250bfb54f.roa File: 56c386da-86c1-3818-b3b3-0d3250bfb54f.roa (raw, json) Hash identifier: ph+FmyAz98U37mESbREuTM3pafW/dKFo15Rc4KSCMFU= Subject key identifier: 9E:B2:BB:A0:57:D7:D0:A3:ED:FE:C8:3C:8B:B7:82:EA:7E:F5:48:26 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F432858495C24425784767FB91CF9BA80 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/56c386da-86c1-3818-b3b3-0d3250bfb54f.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 215909 IP address blocks: 2602:2c9:ff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:42:57:84:76:7f:b9:1c:f9:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=a676abb1-dc9d-41fb-aa53-fc8141d98011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:35:4a:b5:20:44:17:1c:de:62:d5:39:53: cf:fd:e7:81:dc:35:57:b4:1a:89:e0:87:f8:b9:04: b2:21:39:7f:c1:9b:33:5e:c1:d8:06:9d:cb:f6:a5: c0:71:26:63:6a:63:4c:9f:f1:25:43:79:9b:59:54: ab:40:c7:52:d0:1d:7a:f0:a9:86:f0:53:91:18:8b: ef:96:9b:6c:04:97:bf:05:b5:e4:4b:b5:39:43:2e: f0:af:c9:8a:5b:8c:47:90:db:3e:f9:35:42:7c:a7: 63:a0:45:7d:33:31:fb:99:a8:40:e1:90:28:b9:5e: c8:d3:db:80:1b:c5:13:42:3f:95:36:18:7e:49:ec: 99:4f:ea:38:73:b3:d8:0e:a7:4f:a9:1a:74:0d:f4: de:cc:74:43:54:13:bd:e8:1d:00:49:9b:a5:87:b8: 9e:e9:63:c4:64:59:52:6b:03:9b:a9:2b:5f:3f:e9: e6:51:3b:c8:68:a9:45:8a:35:88:f1:fa:52:78:bf: 4d:6f:9c:d1:35:9f:28:31:ab:ce:22:cc:a7:3a:10: 1f:e7:2b:36:72:3d:93:ab:2c:18:e2:34:bc:fb:a4: cf:0e:9f:d9:2c:f3:9e:76:82:7c:c0:17:38:16:68: 30:cf:67:ad:9a:76:a1:9d:35:72:78:66:a2:37:24: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B2:BB:A0:57:D7:D0:A3:ED:FE:C8:3C:8B:B7:82:EA:7E:F5:48:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/56c386da-86c1-3818-b3b3-0d3250bfb54f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:ff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:29:6b:9f:5e:86:68:83:8e:4d:cf:7a:71:13:0e:0c:81:e8: d4:59:c7:1e:26:d2:53:29:2e:7f:d9:14:d8:18:dc:32:1e:b3: 13:10:32:24:8b:83:2a:c4:ae:78:f7:5c:b2:4f:dc:21:92:2e: b9:b5:5b:6f:53:68:54:c9:60:0c:39:54:42:08:7d:2d:bc:06: ad:d4:f9:b7:96:58:52:cb:f1:42:0f:20:99:d6:62:29:b3:a7: af:89:73:81:c1:43:6e:a0:11:d4:6c:3d:02:96:a5:f4:f7:aa: 28:a0:88:a7:e8:71:dc:0a:b6:02:9d:64:4f:ae:fc:8d:34:23: ab:1f:d7:a3:e4:83:58:c2:a2:8f:56:eb:06:91:2d:02:1e:db: a1:71:d6:c0:bc:c3:fd:e7:1d:02:6b:70:ec:45:dc:67:e1:1b: ab:13:65:f8:64:ca:3b:fb:ce:ba:95:de:f8:53:bb:fa:8e:87: 8a:4f:75:85:4c:6f:25:41:d0:28:54:28:77:41:38:10:cd:a0: a1:d7:55:51:b8:d2:38:39:e0:61:c5:86:3e:11:58:e4:95:2d: fe:ed:ae:fc:69:5b:2d:f8:4d:10:6a:ee:4b:c8:76:02:fc:84: a5:e0:fe:e6:f1:a9:2e:66:16:ac:0d:4e:cb:ef:68:1a:86:f4: c8:dd:23:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJEJXhHZ/uRz5uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YTY3NmFiYjEtZGM5ZC00MWZiLWFhNTMtZmM4MTQxZDk4MDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3I1SrUgRBcc3mLVOVPP/eeB3DVXtBqJ4If4 uQSyITl/wZszXsHYBp3L9qXAcSZjamNMn/ElQ3mbWVSrQMdS0B168KmG8FORGIvv lptsBJe/BbXkS7U5Qy7wr8mKW4xHkNs++TVCfKdjoEV9MzH7mahA4ZAouV7I09uA G8UTQj+VNhh+SeyZT+o4c7PYDqdPqRp0DfTezHRDVBO96B0ASZulh7ie6WPEZFlS awObqStfP+nmUTvIaKlFijWI8fpSeL9Nb5zRNZ8oMavOIsynOhAf5ys2cj2TqywY 4jS8+6TPDp/ZLPOedoJ8wBc4Fmgwz2etmnahnTVyeGaiNySnlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ6yu6BX19Cj7f7IPIu3gup+9UgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvNTZjMzg2ZGEtODZjMS0z ODE4LWIzYjMtMGQzMjUwYmZiNTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgICyQ/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFspa59ehmiDjk3PenETDgyB6NRZxx4m0lMpLn/ZFNgY3DIesxMQ MiSLgyrErnj3XLJP3CGSLrm1W29TaFTJYAw5VEIIfS28Bq3U+beWWFLL8UIPIJnW Yimzp6+Jc4HBQ26gEdRsPQKWpfT3qiigiKfocdwKtgKdZE+u/I00I6sf16Pkg1jC oo9W6waRLQIe26Fx1sC8w/3nHQJrcOxF3GfhG6sTZfhkyjv7zrqV3vhTu/qOh4pP dYVMbyVB0ChUKHdBOBDNoKHXVVG40jg54GHFhj4RWOSVLf7trvxpWy34TRBq7kvI dgL8hKXg/ubxqS5mFqwNTsvvaBqG9MjdI0A= -----END CERTIFICATE-----Generated at Wed Apr 30 07:37:26 2025 by rpki-client