$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/22f1cb91-8ecf-3596-adde-62641e5c004e.roa File: 22f1cb91-8ecf-3596-adde-62641e5c004e.roa (raw, json) Hash identifier: Jf44fMGow8xojNCkZCd18L5Mk24X5CeJiFuxUkdHme0= Subject key identifier: E9:F8:04:DA:AA:1A:2E:B2:38:4C:1B:41:C2:EE:B2:BF:C2:01:64:08 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F43285849244E653C97D8881C7F4A0900 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/22f1cb91-8ecf-3596-adde-62641e5c004e.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 395403 IP address blocks: 2620:4d:4090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:65:3c:97:d8:88:1c:7f:4a:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=c0680419-b4b6-44b8-9806-e86d446f021d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:80:74:9f:b8:7c:e4:aa:df:dc:0f:75:33: eb:6c:4f:d3:a8:bb:a8:54:79:a7:1a:88:b3:3f:2e: 72:6d:c5:cf:f5:8e:60:0c:72:eb:29:30:fc:db:97: 57:b3:f3:ce:63:06:30:ee:bb:4f:3f:bc:53:31:c6: 29:ab:86:2c:d2:54:47:d7:06:4b:66:71:be:89:2c: f3:59:91:e9:ed:d0:f3:45:82:f1:17:48:05:18:c1: 1c:23:1a:29:35:75:48:2c:c8:47:87:d4:c4:c8:7c: 3a:24:62:80:fe:68:1c:07:2f:74:db:d8:cf:4e:31: 6f:0e:09:7d:cd:a4:1b:35:a5:a4:05:e3:31:12:9a: a8:0a:41:9a:28:13:95:cc:28:ac:14:9c:00:1b:50: 1b:c9:79:3c:89:28:d0:2d:11:ea:6e:f8:e8:ec:28: b5:29:a1:9b:aa:bf:4f:8d:89:9b:39:94:c3:8e:3c: 77:a6:48:37:04:1d:d7:53:71:87:95:4d:06:cc:4c: 98:74:e6:03:c7:ef:05:9a:f7:9f:2f:3c:9b:49:02: 72:d1:02:cb:5a:4b:70:31:25:16:ab:5b:05:e3:53: 80:18:38:6b:42:e2:4f:3c:9b:aa:22:f6:ef:10:cf: a1:ff:05:4d:f3:0f:94:e9:ce:38:94:bc:fb:44:e2: 02:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F8:04:DA:AA:1A:2E:B2:38:4C:1B:41:C2:EE:B2:BF:C2:01:64:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/22f1cb91-8ecf-3596-adde-62641e5c004e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:4090::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:db:a4:2e:4a:d4:17:56:75:39:01:91:37:3d:27:54:91:8a: ea:b6:6d:4a:10:17:81:88:d4:d0:ea:67:16:a3:a8:0c:c2:dc: b0:4d:aa:8a:8c:98:af:07:34:79:b8:88:e7:d9:cb:7c:2a:2d: be:6c:53:c4:57:97:17:5a:76:77:41:d6:a4:7c:39:e8:bc:40: fd:bb:83:9a:c3:48:b1:c6:00:63:1c:34:e8:3b:58:5d:94:bb: 5f:30:66:6b:76:86:87:a1:26:1c:b6:38:c0:84:0c:91:d6:64: 0f:97:a6:44:17:a4:ec:53:51:21:7e:20:22:c2:65:0e:7d:77: d3:d2:60:af:43:24:5a:ee:b7:47:c3:03:ae:14:1d:24:70:0e: a8:e2:43:39:db:5a:ec:d3:80:88:15:46:37:ae:ed:c0:63:35: 53:1a:a3:3d:62:a9:50:b1:f1:8f:4b:34:20:d2:e5:dd:a0:b9: 03:33:df:dc:14:75:1c:9c:e7:c9:65:02:16:ed:78:40:9e:62: 91:ac:4e:83:9c:37:cb:d0:f4:79:2f:63:56:a2:7e:2e:25:dc: f0:ab:82:c8:1b:7f:f8:e1:ee:8d:62:83:0f:7f:32:3a:da:d6: dc:04:71:b4:77:95:a8:0a:ce:e4:92:e8:00:88:82:78:fe:bf: 94:10:f2:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkkTmU8l9iIHH9KCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YzA2ODA0MTktYjRiNi00NGI4LTk4MDYtZTg2ZDQ0NmYwMjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZOAdJ+4fOSq39wPdTPrbE/TqLuoVHmnGoiz Py5ybcXP9Y5gDHLrKTD825dXs/POYwYw7rtPP7xTMcYpq4Ys0lRH1wZLZnG+iSzz WZHp7dDzRYLxF0gFGMEcIxopNXVILMhHh9TEyHw6JGKA/mgcBy9029jPTjFvDgl9 zaQbNaWkBeMxEpqoCkGaKBOVzCisFJwAG1AbyXk8iSjQLRHqbvjo7Ci1KaGbqr9P jYmbOZTDjjx3pkg3BB3XU3GHlU0GzEyYdOYDx+8FmvefLzybSQJy0QLLWktwMSUW q1sF41OAGDhrQuJPPJuqIvbvEM+h/wVN8w+U6c44lLz7ROICMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOn4BNqqGi6yOEwbQcLusr/CAWQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvMjJmMWNiOTEtOGVjZi0z NTk2LWFkZGUtNjI2NDFlNWMwMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATUCQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFTbpC5K1BdWdTkBkTc9J1SRiuq2bUoQF4GI1NDqZxajqAzC3LBN qoqMmK8HNHm4iOfZy3wqLb5sU8RXlxdadndB1qR8Oei8QP27g5rDSLHGAGMcNOg7 WF2Uu18wZmt2hoehJhy2OMCEDJHWZA+XpkQXpOxTUSF+ICLCZQ59d9PSYK9DJFru t0fDA64UHSRwDqjiQznbWuzTgIgVRjeu7cBjNVMaoz1iqVCx8Y9LNCDS5d2guQMz 39wUdRyc58llAhbteECeYpGsToOcN8vQ9HkvY1aifi4l3PCrgsgbf/jh7o1igw9/ Mjra1twEcbR3lagKzuSS6ACIgnj+v5QQ8mA= -----END CERTIFICATE-----Generated at Thu Apr 10 15:35:40 2025 by rpki-client