$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/d08ce755-af65-3768-957e-3d777b184fec.roa File: d08ce755-af65-3768-957e-3d777b184fec.roa (raw, json) Hash identifier: B6soG9u3gPqlFzV7Xn/UJMwc1jUlmMvXXVlT0PJWSWo= Subject key identifier: F8:38:5E:C9:9D:A8:AE:25:13:01:43:B2:51:06:29:F1:1C:64:DC:05 Certificate issuer: /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Certificate serial: 010D0C9F432858497279AEE4B15784979BC48200 Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/d08ce755-af65-3768-957e-3d777b184fec.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 16509 IP address blocks: 2620:135:7020::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:ae:e4:b1:57:84:97:9b:c4:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=48f5eb0c-2394-4b41-8309-9e32b7cf41e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:78:14:91:f1:5b:4b:1e:1d:61:9d:10:38:8c: 8f:b7:55:57:d7:55:7a:fb:26:90:81:48:63:1f:ed: 1b:69:cc:8c:a9:9b:dd:96:0f:37:99:5b:69:77:4f: 98:65:26:c5:b5:0c:30:fa:5e:7b:a5:f2:70:13:89: f2:24:ed:94:18:1b:85:02:3e:ca:e1:39:99:19:f7: 45:4f:c0:e4:03:90:2a:13:75:ad:ea:7d:01:c2:94: b2:74:1b:d2:52:6f:0d:ec:9a:43:b5:c5:4e:25:d8: 56:f8:8c:bb:48:db:3e:8b:0b:87:3a:92:39:12:b1: b4:11:b3:7e:9e:10:94:40:90:d3:7c:07:2c:2d:0f: 12:4d:20:6a:9c:5e:a0:1d:d1:4b:05:1b:1b:8f:bb: 89:e2:ae:a2:27:24:d3:ae:9e:a9:02:1c:64:1a:b5: 71:4d:2a:3e:72:e0:f6:18:b5:67:41:37:1e:98:a4: b1:f1:0f:0d:3a:24:96:75:16:b3:bb:06:e3:19:5f: 88:50:01:b5:78:0b:e3:24:1c:88:15:8d:fb:dd:14: 15:91:92:03:d2:6d:bc:19:33:53:b4:84:7d:0e:66: 8e:12:af:ac:2b:f9:6b:7e:56:58:f8:2d:fc:55:de: e5:ca:67:59:e1:b8:7d:10:43:b2:f0:7a:86:76:55: 97:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:38:5E:C9:9D:A8:AE:25:13:01:43:B2:51:06:29:F1:1C:64:DC:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/d08ce755-af65-3768-957e-3d777b184fec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl X509v3 Authority Key Identifier: keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:7020::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:7f:81:80:e6:ea:d2:da:0d:66:02:5a:2c:f9:3f:20:09:51: 6a:14:a5:19:f6:a6:75:1f:41:43:d3:dd:39:85:1a:e9:eb:4a: 7a:73:c9:05:9f:bb:25:1d:ba:db:5b:d7:9e:2c:5b:45:d1:f6: 9d:f7:dd:7a:24:cd:8a:2a:87:69:2e:b5:64:b9:f4:f5:34:75: bf:d5:eb:64:dc:72:c1:db:3a:fd:2e:71:cb:7a:af:aa:bd:88: 1d:ca:f4:02:ee:1f:79:c8:1d:7f:1b:7c:07:f0:20:99:e6:85: 5f:f3:0e:07:29:ff:2c:90:79:a9:fe:e9:9a:ef:77:a5:2a:29: be:66:92:e9:4f:5a:5a:cc:2a:28:40:d3:c5:b8:da:6d:4f:a8: 12:fa:ce:43:94:d7:8b:14:aa:63:67:a7:3b:61:e4:c7:87:dc: b2:25:f4:b0:b6:05:62:83:35:ec:de:dc:d0:2d:58:44:53:ef: d2:4d:bf:e3:f4:9f:a5:1d:55:71:fa:ab:45:30:91:ac:49:29: 08:d9:10:a6:53:41:ef:52:2c:76:ac:31:c7:0e:46:bf:0a:77: 57:97:69:e5:5d:5b:de:94:6a:d6:c7:7d:42:66:83:0e:14:94: 2d:35:ec:df:3f:60:e9:82:69:61:19:1c:1b:fd:3f:18:19:c9: 7e:7c:cd:8b -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWElyea7ksVeEl5vEggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQxODJhMGQtZDc0NC00NDFiLWE4NTAtZTNmODVhYTNh YWZiMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk NDhmNWViMGMtMjM5NC00YjQxLTgzMDktOWUzMmI3Y2Y0MWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHgUkfFbSx4dYZ0QOIyPt1VX11V6+yaQgUhj H+0bacyMqZvdlg83mVtpd0+YZSbFtQww+l57pfJwE4nyJO2UGBuFAj7K4TmZGfdF T8DkA5AqE3Wt6n0BwpSydBvSUm8N7JpDtcVOJdhW+Iy7SNs+iwuHOpI5ErG0EbN+ nhCUQJDTfAcsLQ8STSBqnF6gHdFLBRsbj7uJ4q6iJyTTrp6pAhxkGrVxTSo+cuD2 GLVnQTcemKSx8Q8NOiSWdRazuwbjGV+IUAG1eAvjJByIFY373RQVkZID0m28GTNT tIR9DmaOEq+sK/lrflZY+C38Vd7lymdZ4bh9EEOy8HqGdlWXqwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFPg4XsmdqK4lEwFDslEGKfEcZNwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4 MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4NWFhM2FhZmIvZDA4Y2U3NTUtYWY2NS0z NzY4LTk1N2UtM2Q3NzdiMTg0ZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQxODJhMGQtZDc0NC00NDFiLWE4 NTAtZTNmODVhYTNhYWZiL2M0MTgyYTBkLWQ3NDQtNDQxYi1hODUwLWUzZjg1YWEz YWFmYi5jcmwwHwYDVR0jBBgwFoAUK7GR1bTMw7yKfS/LGMgJ/OaZwCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4 NWFhM2FhZmIuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAJiABNXAg ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQB0f4GA5urS2g1mAlos+T8gCVFqFKUZ9qZ1H0FD0905hRrp60p6 c8kFn7slHbrbW9eeLFtF0fad9916JM2KKodpLrVkufT1NHW/1etk3HLB2zr9LnHL eq+qvYgdyvQC7h95yB1/G3wH8CCZ5oVf8w4HKf8skHmp/uma73elKim+ZpLpT1pa zCooQNPFuNptT6gS+s5DlNeLFKpjZ6c7YeTHh9yyJfSwtgVigzXs3tzQLVhEU+/S Tb/j9J+lHVVx+qtFMJGsSSkI2RCmU0HvUix2rDHHDka/CndXl2nlXVvelGrWx31C ZoMOFJQtNezfP2DpgmlhGRwb/T8YGcl+fM2L -----END CERTIFICATE-----Generated at Sat Apr 26 19:25:29 2025 by rpki-client