$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa File: dc8b4841-4648-3afc-93d8-17cafe748add.roa (raw, json) Hash identifier: Ex+LWSUoTIBPdVp3tXJzQdzxuxRv7bVSbCAEgJ2Ws88= Subject key identifier: 45:A6:23:E5:CD:9E:E3:21:86:09:C5:F4:FC:08:B6:B3:20:CC:EF:91 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F432858497114333B74ECC7017A5EBB00 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 55116 IP address blocks: 2602:2c9:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:33:3b:74:ec:c7:01:7a:5e:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=ef0b7c86-dfad-4798-a06d-86f6b6df5102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:e9:16:b7:55:57:ac:24:43:93:54:45:3c: 11:bc:f1:29:2f:c0:62:54:51:70:22:27:06:e2:36: 6e:34:73:2a:33:01:0e:3e:2e:85:e9:2a:69:af:d4: 11:fc:b2:1d:75:c1:33:c9:12:6b:22:22:15:bc:dc: 80:76:4e:48:19:c6:38:56:54:28:ca:2b:ff:dc:04: 19:ab:ca:4e:aa:b4:d7:d8:4c:10:86:84:75:bd:b9: ee:64:fa:c0:62:95:f4:fd:4f:ae:1a:ca:2c:79:d4: 13:cb:dc:f4:3a:18:70:83:cb:0a:6a:a2:fe:08:8d: 3f:bb:f3:26:64:6c:50:86:90:d9:cb:e2:e7:03:ba: 0e:2a:69:2b:a4:02:27:5e:62:77:fe:c2:40:4d:dd: 2b:08:b7:0d:af:78:0e:8d:43:83:b7:a1:98:87:4a: 78:37:74:43:59:0e:41:16:c7:df:30:c4:ac:2b:32: b6:72:6e:77:53:8f:17:fe:87:ba:e8:cf:6f:7c:1e: 55:45:96:93:c3:97:37:ce:ba:ab:8e:58:2f:b7:71: be:c7:2a:95:bb:29:db:50:7a:4c:fa:4f:42:3c:60: cf:f2:51:59:0f:c1:44:00:b0:dd:e1:61:c2:54:8f: 12:0e:b4:25:83:4c:0f:97:63:f5:74:04:22:a9:4e: 54:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A6:23:E5:CD:9E:E3:21:86:09:C5:F4:FC:08:B6:B3:20:CC:EF:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:22:ed:af:b5:2c:64:f7:55:19:ee:5f:ca:0a:4c:0e:17:94: 1c:ed:25:cc:52:26:37:29:00:c9:34:92:b9:7a:10:1b:19:e1: d8:ac:a2:22:e4:65:5e:11:bb:70:42:de:43:95:e5:eb:30:8a: ea:76:40:a9:23:a1:6c:78:73:02:70:37:0c:e8:5a:b5:dc:c4: 10:7e:07:c9:98:cd:84:d3:dd:72:52:03:31:ae:18:07:1e:4d: a8:93:f4:83:6e:bc:a1:9c:02:8c:c3:d9:ef:8c:e5:64:fb:88: 13:02:8d:00:f0:bb:eb:08:02:c4:8b:b9:14:17:29:eb:dd:d6: a9:a2:2b:f7:8f:f7:0e:0a:01:73:63:26:c3:e5:14:26:ac:7a: 8e:90:c3:76:ce:42:1e:1e:10:f9:f7:2e:27:bf:e0:00:c6:e8: 62:09:55:f6:68:08:00:f1:7a:ba:ad:7c:44:92:c0:32:bc:74: f3:45:f4:b8:5a:f4:57:10:32:3a:15:67:53:2c:0c:0a:90:43: 0e:80:36:f0:02:fd:6a:4b:a0:dc:64:be:62:81:76:80:90:2b: 8c:97:ab:81:c7:14:72:43:0d:0b:18:68:90:c7:cc:7d:eb:04: be:3d:00:82:a2:b7:f4:f1:72:8f:81:21:9f:2f:26:c4:37:26: 34:2b:43:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElxFDM7dOzHAXpeuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk ZWYwYjdjODYtZGZhZC00Nzk4LWEwNmQtODZmNmI2ZGY1MTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bHpFrdVV6wkQ5NURTwRvPEpL8BiVFFwIicG 4jZuNHMqMwEOPi6F6Sppr9QR/LIddcEzyRJrIiIVvNyAdk5IGcY4VlQoyiv/3AQZ q8pOqrTX2EwQhoR1vbnuZPrAYpX0/U+uGsosedQTy9z0Ohhwg8sKaqL+CI0/u/Mm ZGxQhpDZy+LnA7oOKmkrpAInXmJ3/sJATd0rCLcNr3gOjUODt6GYh0p4N3RDWQ5B FsffMMSsKzK2cm53U48X/oe66M9vfB5VRZaTw5c3zrqrjlgvt3G+xyqVuynbUHpM +k9CPGDP8lFZD8FEALDd4WHCVI8SDrQlg0wPl2P1dAQiqU5UXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEWmI+XNnuMhhgnF9PwItrMgzO+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvZGM4YjQ4NDEtNDY0OC0z YWZjLTkzZDgtMTdjYWZlNzQ4YWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKki7a+1LGT3VRnuX8oKTA4XlBztJcxSJjcpAMk0krl6EBsZ4dis oiLkZV4Ru3BC3kOV5eswiup2QKkjoWx4cwJwNwzoWrXcxBB+B8mYzYTT3XJSAzGu GAceTaiT9INuvKGcAozD2e+M5WT7iBMCjQDwu+sIAsSLuRQXKevd1qmiK/eP9w4K AXNjJsPlFCaseo6Qw3bOQh4eEPn3Lie/4ADG6GIJVfZoCADxerqtfESSwDK8dPNF 9Lha9FcQMjoVZ1MsDAqQQw6ANvAC/WpLoNxkvmKBdoCQK4yXq4HHFHJDDQsYaJDH zH3rBL49AIKit/Txco+BIZ8vJsQ3JjQrQ+A= -----END CERTIFICATE-----Generated at Wed Apr 30 12:50:28 2025 by rpki-client