$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa File: b8eafb21-360c-3a19-bb7e-88d44624594b.roa (raw, json) Hash identifier: vjEZkxtW2e3TdpEp4u9WqAIL5F31Ue5V1FFsveApJU4= Subject key identifier: 55:B9:37:C6:BA:85:DA:24:1D:23:84:60:DF:29:16:F9:8D:8A:29:08 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584902EC2E82350EF5BA11C383C0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 30238 IP address blocks: 2620:101:2009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2e:82:35:0e:f5:ba:11:c3:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=36f8f991-3dd1-43ea-9042-3d9de25f2a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3b:91:23:ab:50:85:df:a1:f7:bd:ba:74:7d: 26:ee:8f:45:76:97:9f:15:62:8b:7c:d9:c5:42:0f: c0:a2:58:d9:0b:cd:c2:82:9a:8d:80:2d:70:8e:27: 53:a9:26:ee:4e:27:da:d0:11:a6:f8:54:56:33:f4: 17:82:f3:a5:eb:4f:84:ef:2b:ca:98:14:a6:8b:d4: 74:ad:df:a9:b8:28:5e:7e:4d:5e:38:d9:be:8a:35: dc:d9:7f:2b:e6:86:77:f7:f3:ab:f0:54:6f:30:d5: f4:13:38:35:9b:26:7e:4c:35:1a:f4:05:be:2c:78: a7:ae:71:40:0b:17:8e:7f:64:b1:30:e4:c3:b8:02: 59:88:f9:b2:10:92:f1:c3:fa:da:69:2d:e1:40:39: 3b:dd:64:04:53:e4:7a:d0:f3:6b:4a:48:a6:66:cf: f9:19:63:40:af:d9:5d:67:99:7d:68:66:5f:47:61: d1:82:29:db:24:b2:62:36:df:ed:e1:e3:35:fc:94: 57:14:a7:30:67:e0:2d:04:7d:ad:fe:3c:c0:ab:51: 1c:5a:e1:ce:29:ff:2d:92:41:17:22:ca:31:2a:53: 30:64:19:c3:ef:fc:ab:39:ea:33:84:7a:10:64:70: 12:e0:03:14:f2:f8:ff:a1:3f:8c:45:43:af:2f:36: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B9:37:C6:BA:85:DA:24:1D:23:84:60:DF:29:16:F9:8D:8A:29:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:2009::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:4f:1d:fc:c1:0a:ef:b0:e6:76:3a:a7:d9:e7:ae:ff:1f:d3: 58:c9:cc:ce:2e:4d:50:5b:4c:8b:4f:b5:c1:c7:84:8b:7e:91: c0:ed:8b:29:39:7c:31:1a:4e:76:0d:12:41:d0:22:76:58:c8: 12:6a:03:d6:3a:ef:cf:63:05:96:2d:7d:46:06:93:5d:a2:f4: 48:83:3f:af:85:dc:4c:33:a6:1b:12:14:10:1d:f0:90:7d:84: 2f:d2:de:ec:30:16:ae:da:09:07:50:f4:33:b9:07:e9:00:cc: 8c:bc:80:b1:a9:70:0f:5a:fe:0d:14:3d:e3:1b:66:20:0d:69: 30:00:30:35:42:ce:c3:4a:0a:15:e5:c9:be:a5:00:9a:63:bb: e7:d1:d0:86:91:7f:ba:05:54:0d:76:85:a8:28:42:be:d9:89: f8:05:5a:17:ff:db:6c:03:13:1d:ec:12:49:81:af:94:aa:3e: 27:8c:ab:f4:25:63:f4:19:37:21:aa:8c:f6:70:12:26:bf:d1: 79:75:0f:16:59:85:ca:db:a4:4d:f2:36:2c:db:05:42:bb:76: e0:fe:45:19:41:46:b3:40:d8:88:75:fe:e9:d4:5b:f2:73:eb: 4b:6e:23:ca:d2:90:98:d2:b2:be:f7:f1:bf:8f:3f:7f:3b:49: 89:d5:89:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkC7C6CNQ71uhHDg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MzZmOGY5OTEtM2RkMS00M2VhLTkwNDItM2Q5ZGUyNWYyYTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TuRI6tQhd+h9726dH0m7o9FdpefFWKLfNnF Qg/AoljZC83CgpqNgC1wjidTqSbuTifa0BGm+FRWM/QXgvOl60+E7yvKmBSmi9R0 rd+puChefk1eONm+ijXc2X8r5oZ39/Or8FRvMNX0Ezg1myZ+TDUa9AW+LHinrnFA CxeOf2SxMOTDuAJZiPmyEJLxw/raaS3hQDk73WQEU+R60PNrSkimZs/5GWNAr9ld Z5l9aGZfR2HRginbJLJiNt/t4eM1/JRXFKcwZ+AtBH2t/jzAq1EcWuHOKf8tkkEX IsoxKlMwZBnD7/yrOeozhHoQZHAS4AMU8vj/oT+MRUOvLzY0VQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFW5N8a6hdokHSOEYN8pFvmNiikIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjhlYWZiMjEtMzYwYy0z YTE5LWJiN2UtODhkNDQ2MjQ1OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHxPHfzBCu+w5nY6p9nnrv8f01jJzM4uTVBbTItPtcHHhIt+kcDt iyk5fDEaTnYNEkHQInZYyBJqA9Y6789jBZYtfUYGk12i9EiDP6+F3EwzphsSFBAd 8JB9hC/S3uwwFq7aCQdQ9DO5B+kAzIy8gLGpcA9a/g0UPeMbZiANaTAAMDVCzsNK ChXlyb6lAJpju+fR0IaRf7oFVA12hagoQr7ZifgFWhf/22wDEx3sEkmBr5SqPieM q/QlY/QZNyGqjPZwEia/0Xl1DxZZhcrbpE3yNizbBUK7duD+RRlBRrNA2Ih1/unU W/Jz60tuI8rSkJjSsr738b+PP387SYnViQI= -----END CERTIFICATE-----Generated at Mon Apr 28 15:05:05 2025 by rpki-client