$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa File: dede31bf-e82b-3380-8794-1fc710158b40.roa (raw, json) Hash identifier: SXe7ijPH6FPXoXdb18YFAVXDWUQeArHqI6TQJvtsTTc= Subject key identifier: C0:AA:87:16:2D:86:9C:86:21:D9:D8:96:FA:3A:11:64:11:88:F1:66 Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F432858497DA47507D63902C18AE2DF40 Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 32242 IP address blocks: 2620:48:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:75:07:d6:39:02:c1:8a:e2:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=f4f8ef4b-9ab8-483a-b8a2-73dc943742f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:63:8a:c0:74:76:a2:9b:c2:a9:64:92:83: c8:b6:2c:39:52:fa:6e:f3:16:67:f7:4b:c4:ae:e5: 92:e5:d3:f2:fa:a1:87:cd:ba:82:05:85:2b:7c:ad: cd:01:d5:53:53:7c:1a:77:e1:50:d7:ef:22:65:1c: 25:38:65:cf:5d:c9:f1:4d:13:13:ef:5b:a8:43:49: 56:7b:f3:8f:4b:25:06:60:79:f3:75:57:da:aa:6e: a6:d7:a2:44:7e:15:a7:8b:29:e5:c9:f4:4c:f4:ad: 22:71:07:b2:4c:94:51:7a:22:fb:43:af:27:8e:17: b2:ca:e7:31:ee:18:7f:75:59:ec:58:b0:de:53:fd: 79:59:10:57:b1:1d:34:9d:bb:af:cd:64:56:b8:9a: 85:bd:71:1c:65:7e:66:df:6c:a0:4f:d1:c2:ad:b1: 13:67:d4:ad:88:0b:2a:ad:4b:cd:7e:ff:99:5e:29: e5:4b:f8:7b:7e:54:57:f3:ad:1f:bb:3e:5d:0e:fd: d3:58:47:ad:ae:5a:09:80:c0:9c:f3:f0:28:8a:8a: 32:2b:5f:dd:c7:7f:88:b8:51:34:54:d3:0c:41:84: 00:ae:74:6e:ff:41:57:a7:9c:a5:f1:98:6c:92:68: 65:2f:88:3c:2d:82:02:c5:64:b0:bb:6a:fd:73:23: 14:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AA:87:16:2D:86:9C:86:21:D9:D8:96:FA:3A:11:64:11:88:F1:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv6: 2620:48:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:4d:2c:3b:2b:aa:d0:b7:a8:18:dc:26:b7:13:c0:c2:50:5d: a7:d5:e6:37:6c:74:dc:60:ee:43:cf:75:91:51:b3:50:af:9c: a5:a6:1a:50:ea:c7:e5:c5:d3:84:00:71:a5:4b:d5:b6:91:05: 8d:67:75:d8:17:14:43:50:db:56:3f:7e:9f:17:7c:8a:56:7c: c7:07:89:31:0a:f5:22:41:54:48:42:b5:c8:0e:83:0a:18:ec: 82:e8:12:85:ac:54:c7:62:6c:e9:81:b3:4b:69:0b:f9:04:61: b1:7b:7b:1e:24:a8:b9:41:f3:36:b8:95:f8:32:8e:a7:a2:8f: a6:1e:68:90:d9:d2:2e:7b:53:d3:ed:88:b4:5c:a4:af:ed:70: 1e:c0:de:64:5a:2b:17:28:de:30:19:71:e1:24:2f:8c:b4:5b: 94:88:7b:e9:60:e2:ca:55:5d:ab:98:8c:20:29:6b:a4:e4:e4: 2b:16:a5:1d:ca:45:d3:2a:67:20:cb:e2:fb:47:2e:6f:a7:6f: d1:b2:2c:f4:15:34:01:e8:05:7f:38:c8:69:70:7f:92:a1:d6: 29:9b:a1:dd:af:6b:88:5f:53:2c:73:a6:78:63:e4:b1:41:95: 19:15:a9:53:f6:dc:b3:46:93:e7:e3:b4:f1:de:32:e5:49:8a: 7d:0a:c0:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pHUH1jkCwYri30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjRmOGVmNGItOWFiOC00ODNhLWI4YTItNzNkYzk0Mzc0MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxRjisB0dqKbwqlkkoPItiw5Uvpu8xZn90vE ruWS5dPy+qGHzbqCBYUrfK3NAdVTU3wad+FQ1+8iZRwlOGXPXcnxTRMT71uoQ0lW e/OPSyUGYHnzdVfaqm6m16JEfhWniynlyfRM9K0icQeyTJRReiL7Q68njheyyucx 7hh/dVnsWLDeU/15WRBXsR00nbuvzWRWuJqFvXEcZX5m32ygT9HCrbETZ9StiAsq rUvNfv+ZXinlS/h7flRX860fuz5dDv3TWEetrloJgMCc8/AoiooyK1/dx3+IuFE0 VNMMQYQArnRu/0FXp5yl8ZhskmhlL4g8LYICxWSwu2r9cyMU7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMCqhxYthpyGIdnYlvo6EWQRiPFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvZGVkZTMxYmYtZTgyYi0z MzgwLTg3OTQtMWZjNzEwMTU4YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAASKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG5NLDsrqtC3qBjcJrcTwMJQXafV5jdsdNxg7kPPdZFRs1CvnKWm GlDqx+XF04QAcaVL1baRBY1nddgXFENQ21Y/fp8XfIpWfMcHiTEK9SJBVEhCtcgO gwoY7ILoEoWsVMdibOmBs0tpC/kEYbF7ex4kqLlB8za4lfgyjqeij6YeaJDZ0i57 U9PtiLRcpK/tcB7A3mRaKxco3jAZceEkL4y0W5SIe+lg4spVXauYjCApa6Tk5CsW pR3KRdMqZyDL4vtHLm+nb9GyLPQVNAHoBX84yGlwf5Kh1imbod2va4hfUyxzpnhj 5LFBlRkVqVP23LNGk+fjtPHeMuVJin0KwAw= -----END CERTIFICATE-----Generated at Mon Apr 28 02:49:55 2025 by rpki-client