$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa File: a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa (raw, json) Hash identifier: Kgs2NLjfVAbVO781c/Fo7Rh8QwqMYel517NRpMykFis= Subject key identifier: D1:DC:DE:8A:30:91:76:B8:31:49:CA:1A:CF:46:54:41:1E:6D:4A:2E Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F43285849674EEA4ED6E86DBF7FD30A40 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 4 IP address blocks: 2001:500:84::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:ea:4e:d6:e8:6d:bf:7f:d3:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=1cff9b22-bb60-43ee-b22c-026c0006a876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:3e:4d:dd:29:23:18:2f:b9:0e:02:e0:39: 1c:b2:6f:a0:d7:00:dc:f6:fc:5c:08:fb:6f:8b:9f: b3:9f:40:13:42:05:bb:68:c5:ed:60:4d:eb:8f:fc: 20:80:8a:09:78:5a:8d:79:3d:51:5c:af:f2:dc:ea: 34:15:33:06:84:5d:41:33:e2:cd:09:14:f4:7e:40: 2b:50:51:9f:b6:3d:8d:07:11:7c:de:ef:b6:da:4c: 7d:fd:80:07:e1:ab:00:73:1c:93:b9:5b:f0:07:3f: 85:83:a3:0a:99:3a:18:7b:bf:d6:57:69:ab:2b:14: 13:76:ca:d2:23:bf:32:7b:9f:27:7f:20:e1:72:dd: c0:0f:92:d5:12:59:7b:bc:db:24:a3:db:1c:c7:e4: 35:47:ce:41:dc:d3:c9:d3:63:19:1c:8c:08:2d:2d: 30:7b:8e:bd:5e:94:29:a1:4f:57:26:ad:1e:60:49: 6e:33:df:de:16:f1:16:d0:22:70:36:71:1f:76:86: 07:33:27:e2:3b:a9:38:ea:13:98:87:1a:32:b6:de: a2:d8:57:e7:03:04:d3:34:28:40:ba:9c:48:e3:93: cf:6e:bf:42:ca:76:02:7b:3d:6e:a3:8a:26:bd:31: e6:cc:99:8e:3e:c2:b6:a9:c1:9b:20:2d:2d:02:e3: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DC:DE:8A:30:91:76:B8:31:49:CA:1A:CF:46:54:41:1E:6D:4A:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:84::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:49:13:39:1e:ec:27:21:4c:e5:80:74:20:a0:c4:72:44:43: 5a:be:f3:07:5b:a7:66:54:c3:a6:c2:48:d3:74:f0:e3:a4:e9: 61:78:d8:03:1f:94:4c:bc:8a:97:27:2f:ed:72:bd:1b:1f:81: b9:60:3a:67:3d:28:8e:ae:26:49:b0:c9:4f:99:af:ba:77:59: 50:b8:8e:a8:81:e0:df:52:90:55:f4:f0:b6:d8:8c:4a:8e:0f: 82:91:4f:c8:f1:c7:bf:db:82:f2:fe:d6:5f:90:1a:3f:e5:65: 55:5d:4e:53:2f:70:0d:c7:7b:9c:94:dc:5e:3d:61:ec:2d:9f: 60:11:e6:2b:be:60:7c:94:cc:92:eb:51:a0:e5:7e:c1:cc:48: bb:e9:1d:d0:ca:f5:50:95:a4:e0:cb:43:8b:62:a1:c8:7d:44: 44:a7:d6:8e:23:ea:d2:5f:fb:bd:23:72:fc:02:6a:a6:b9:96: b4:1e:d9:0b:ac:b0:2e:c7:36:ef:ab:ed:06:af:83:f6:d5:99: 5c:c8:78:fa:1e:e5:97:c1:97:78:98:37:04:46:e6:fa:24:d7: cc:64:81:30:3a:93:fc:5e:f5:0e:e4:e1:15:4e:e5:24:46:1c: c5:d5:aa:e4:d2:b7:cb:9f:0c:42:ae:7d:96:56:09:41:ec:81: a4:a5:a2:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElnTupO1uhtv3/TCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk MWNmZjliMjItYmI2MC00M2VlLWIyMmMtMDI2YzAwMDZhODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIc+Td0pIxgvuQ4C4Dkcsm+g1wDc9vxcCPtv i5+zn0ATQgW7aMXtYE3rj/wggIoJeFqNeT1RXK/y3Oo0FTMGhF1BM+LNCRT0fkAr UFGftj2NBxF83u+22kx9/YAH4asAcxyTuVvwBz+Fg6MKmToYe7/WV2mrKxQTdsrS I78ye58nfyDhct3AD5LVEll7vNsko9scx+Q1R85B3NPJ02MZHIwILS0we469XpQp oU9XJq0eYEluM9/eFvEW0CJwNnEfdoYHMyfiO6k46hOYhxoytt6i2FfnAwTTNChA upxI45PPbr9CynYCez1uo4omvTHmzJmOPsK2qcGbIC0tAuPk4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNHc3oowkXa4MUnKGs9GVEEebUouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvYTI2MDRhMzItNzhjMy0z YjQyLWE4NmUtYTM2YjllMmQ5YjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAItJEzke7CchTOWAdCCgxHJEQ1q+8wdbp2ZUw6bCSNN08OOk6WF4 2AMflEy8ipcnL+1yvRsfgblgOmc9KI6uJkmwyU+Zr7p3WVC4jqiB4N9SkFX08LbY jEqOD4KRT8jxx7/bgvL+1l+QGj/lZVVdTlMvcA3He5yU3F49Yewtn2AR5iu+YHyU zJLrUaDlfsHMSLvpHdDK9VCVpODLQ4tioch9RESn1o4j6tJf+70jcvwCaqa5lrQe 2QussC7HNu+r7Qavg/bVmVzIePoe5ZfBl3iYNwRG5vok18xkgTA6k/xe9Q7k4RVO 5SRGHMXVquTSt8ufDEKufZZWCUHsgaSlonw= -----END CERTIFICATE-----Generated at Sun Apr 27 11:34:25 2025 by rpki-client