$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cde4ef19-0ad5-390d-95c9-95ab139449fd.roa File: cde4ef19-0ad5-390d-95c9-95ab139449fd.roa (raw, json) Hash identifier: AOCH9mSglVYvNQCrNseQ/3XndrlSN2Mxu9kXIRfN5zo= Subject key identifier: 8F:E6:84:FC:37:0B:70:FC:B9:1C:78:D7:86:34:F3:7C:6F:87:05:AE Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285849955F232743D289D53DC857E0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cde4ef19-0ad5-390d-95c9-95ab139449fd.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 30238 IP address blocks: 2620:101:2012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:23:27:43:d2:89:d5:3d:c8:57:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=3f7cfe42-ff08-457b-b06b-59a53ae08048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8d:49:45:1d:20:7f:95:af:fb:26:a2:2b:d6: ae:9a:0e:6d:92:43:b1:c3:33:3e:91:16:b7:26:d1: de:2a:80:f3:01:67:bd:fd:ff:5a:6b:a8:52:c8:a5: a9:58:35:80:2d:1c:25:bc:cc:11:24:4a:0d:02:33: 9e:06:d0:dc:3c:23:24:0e:05:f1:53:02:7b:cf:36: cd:4f:58:70:9a:62:95:0c:22:92:5f:23:bf:6d:87: 7a:79:b5:e8:66:29:ec:a2:eb:33:11:86:7c:e5:7b: d5:2b:4b:65:64:d4:57:9f:f7:ea:ab:aa:0c:6b:5d: 75:4b:09:b5:9c:15:52:d6:a9:af:05:07:38:0f:4b: 88:2b:01:90:0a:a0:ec:47:44:d3:80:ca:37:c8:58: ff:7c:a6:cf:cf:f9:41:1d:b7:21:66:80:2c:3e:26: ca:2e:03:da:55:35:f4:f9:ac:9b:86:4a:a1:ec:18: a0:da:8d:f6:4f:07:e4:af:61:66:9d:de:2d:b7:b7: 42:b6:d2:de:88:fc:7e:76:8e:b3:49:17:11:e5:90: 77:98:4c:9e:bd:cc:fe:d7:01:83:c7:e2:da:a5:16: 41:05:8c:bb:f7:c6:0f:20:da:66:b3:1b:64:e7:db: 97:40:db:5a:98:19:08:a4:b2:0c:a7:ee:3d:88:44: 81:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E6:84:FC:37:0B:70:FC:B9:1C:78:D7:86:34:F3:7C:6F:87:05:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cde4ef19-0ad5-390d-95c9-95ab139449fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:2012::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:19:da:96:51:71:98:ff:f3:32:80:8b:31:d9:fb:67:9b:85: 4e:af:42:96:3e:75:5d:e4:79:f7:4a:e4:54:2c:e6:bf:14:6d: 87:e6:64:76:5b:15:02:31:13:5f:65:18:76:46:67:47:86:a2: ad:ae:3f:f8:00:54:fd:0e:37:73:a2:35:7c:ac:f1:f2:00:1f: 1a:4e:70:20:91:2b:27:3a:6e:fe:fa:68:c4:d9:70:73:f8:97: 1f:5c:35:1f:a7:51:5c:88:c2:75:c7:f3:7f:56:02:64:e2:13: bf:f6:4a:d8:b4:e0:b9:5e:93:33:55:59:af:11:b1:c5:46:61: b8:38:a8:3b:96:d7:ab:e7:5c:a7:ce:0b:12:c5:74:42:c9:f6: 47:ca:b9:ee:75:ed:96:ac:20:a3:80:f3:8b:a0:03:a6:31:e7: 81:64:29:88:5e:e6:db:f8:a8:b5:1d:5f:fa:1d:0b:d4:e3:2e: e5:d7:60:a4:b3:73:ed:c3:63:28:8c:fe:39:39:7a:15:72:79: b0:04:3c:ea:64:a0:e6:0a:3d:77:5b:37:90:79:52:d8:1f:09: e6:34:3c:0f:a3:51:d1:f9:6b:fb:e6:5f:66:a7:10:4f:82:62: 2f:d7:96:86:85:99:1f:4b:d6:34:4d:44:27:d6:cf:b0:0c:62: e1:6e:82:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmVXyMnQ9KJ1T3IV+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk M2Y3Y2ZlNDItZmYwOC00NTdiLWIwNmItNTlhNTNhZTA4MDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI1JRR0gf5Wv+yaiK9aumg5tkkOxwzM+kRa3 JtHeKoDzAWe9/f9aa6hSyKWpWDWALRwlvMwRJEoNAjOeBtDcPCMkDgXxUwJ7zzbN T1hwmmKVDCKSXyO/bYd6ebXoZinsouszEYZ85XvVK0tlZNRXn/fqq6oMa111Swm1 nBVS1qmvBQc4D0uIKwGQCqDsR0TTgMo3yFj/fKbPz/lBHbchZoAsPibKLgPaVTX0 +aybhkqh7Big2o32Twfkr2Fmnd4tt7dCttLeiPx+do6zSRcR5ZB3mEyevcz+1wGD x+LapRZBBYy798YPINpmsxtk59uXQNtamBkIpLIMp+49iESBYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI/mhPw3C3D8uRx414Y083xvhwWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvY2RlNGVmMTktMGFkNS0z OTBkLTk1YzktOTVhYjEzOTQ0OWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAcZ2pZRcZj/8zKAizHZ+2ebhU6vQpY+dV3kefdK5FQs5r8UbYfm ZHZbFQIxE19lGHZGZ0eGoq2uP/gAVP0ON3OiNXys8fIAHxpOcCCRKyc6bv76aMTZ cHP4lx9cNR+nUVyIwnXH839WAmTiE7/2Sti04LlekzNVWa8RscVGYbg4qDuW16vn XKfOCxLFdELJ9kfKue517ZasIKOA84ugA6Yx54FkKYhe5tv4qLUdX/odC9TjLuXX YKSzc+3DYyiM/jk5ehVyebAEPOpkoOYKPXdbN5B5UtgfCeY0PA+jUdH5a/vmX2an EE+CYi/XloaFmR9L1jRNRCfWz7AMYuFuggI= -----END CERTIFICATE-----Generated at Tue Apr 29 09:31:49 2025 by rpki-client