$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/fac20b6e-cd3e-3f6e-a6a1-785c4ff62701.roa File: fac20b6e-cd3e-3f6e-a6a1-785c4ff62701.roa (raw, json) Hash identifier: BRwGh2rpAjGRPXYxNyZOFBpXZRCgiF6B6Lt7Ujea50M= Subject key identifier: C3:F1:0F:70:30:B9:D9:35:EE:7D:D9:75:77:08:4A:84:26:F4:BD:BA Certificate issuer: /CN=b4c30032-490a-4e49-8e1d-48d69c85212a Certificate serial: 010D0C9F43285848F22BE58F96B7BFB4694BA770 Authority key identifier: 96:82:23:C5:CB:7D:B1:E4:BB:5C:D7:0F:21:B2:5B:2D:D6:22:64:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/fac20b6e-cd3e-3f6e-a6a1-785c4ff62701.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2605:f80:f100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/b4c30032-490a-4e49-8e1d-48d69c85212a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/b4c30032-490a-4e49-8e1d-48d69c85212a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2b:e5:8f:96:b7:bf:b4:69:4b:a7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4c30032-490a-4e49-8e1d-48d69c85212a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=a93a5cf4-8e83-4abf-b94b-7ca08f638445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:e3:7f:88:e5:9f:87:8e:11:28:c0:74:fe: 57:24:9d:25:d5:1a:91:77:8d:c6:87:b1:e1:a9:5d: 08:20:68:f7:8a:6e:6d:f4:73:d0:36:53:98:8a:75: 4e:5b:f1:b9:66:aa:72:9c:d7:41:46:fa:7d:ee:22: 6b:d8:8c:06:01:4d:07:d6:08:7d:94:c4:fd:c6:b7: 6b:8b:6b:cc:c8:c3:e0:52:46:0c:5c:97:78:59:9c: ba:28:18:63:93:c9:0b:21:d3:48:69:60:bc:f0:d1: c1:26:83:53:ec:30:ab:7e:9c:43:16:98:04:55:3a: c4:ec:f5:0a:b7:f3:7d:d1:da:dd:60:e9:54:ff:f4: 59:6d:3a:ef:2b:66:89:da:fa:7e:c7:e3:64:2e:de: a6:8b:a8:9a:35:12:d9:e9:f7:39:38:5f:9c:3c:f0: f4:ca:d0:41:e7:5b:0d:2d:2c:29:98:69:96:8a:e2: 2b:c2:cb:e0:ae:48:45:15:37:21:e9:a5:99:f0:e9: a0:f2:84:47:a5:d2:2d:3a:36:be:1b:9a:cf:41:13: 90:70:0c:c3:47:cd:7c:37:af:c1:b1:86:27:43:01: 7b:71:70:5e:bd:bc:cc:7d:20:fa:ef:06:66:52:82: 70:40:be:f7:7f:86:c9:be:63:b8:5d:59:34:e0:15: dc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F1:0F:70:30:B9:D9:35:EE:7D:D9:75:77:08:4A:84:26:F4:BD:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/fac20b6e-cd3e-3f6e-a6a1-785c4ff62701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/b4c30032-490a-4e49-8e1d-48d69c85212a.crl X509v3 Authority Key Identifier: keyid:96:82:23:C5:CB:7D:B1:E4:BB:5C:D7:0F:21:B2:5B:2D:D6:22:64:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a.cer sbgp-ipAddrBlock: critical IPv6: 2605:f80:f100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:4a:2e:b1:d1:d2:95:81:ce:23:c4:b7:b1:a1:84:d0:4e:b2: d6:05:f2:1b:d9:71:e8:db:0a:78:95:74:1b:b8:96:1e:29:db: 57:c5:7c:f4:b9:b9:20:29:25:06:bd:01:e6:3d:97:8b:0d:f2: b0:97:5b:32:ff:24:97:77:bd:7a:8b:23:00:db:69:d3:9a:d2: ca:9a:18:ba:3e:55:7b:08:9b:fa:70:db:a0:9e:f1:92:89:bb: ab:ca:3d:e5:87:25:d1:18:a3:34:1c:e8:d2:78:c6:6e:50:46: 99:ad:4b:cb:d5:d6:20:e9:af:f8:29:93:5e:08:d5:ad:c8:bd: 23:0a:a1:cf:4f:5e:42:e2:1b:ac:60:ea:1e:ce:12:b9:c4:cc: 86:3e:06:85:20:94:76:43:f6:c9:c8:09:6b:a6:1e:4b:b0:70: cb:64:a6:9c:c9:03:80:74:6c:aa:e2:58:7b:64:6d:63:ad:b7: 8c:4d:6f:81:ee:2d:b6:ff:37:da:d8:93:45:fa:58:e5:ec:b7: 7c:ab:67:7c:24:6c:2d:e2:21:2c:28:61:98:6c:cb:bb:65:2a: f3:4f:5d:05:53:64:5a:8b:f8:b2:15:30:c5:b4:91:d3:71:62: 99:cf:8b:89:cc:9d:49:0f:08:f3:4f:73:5d:23:ba:3a:95:7d: 38:db:bc:7c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjyK+WPlre/tGlLp3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRjMzAwMzItNDkwYS00ZTQ5LThlMWQtNDhkNjljODUy MTJhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk YTkzYTVjZjQtOGU4My00YWJmLWI5NGItN2NhMDhmNjM4NDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdbjf4jln4eOESjAdP5XJJ0l1RqRd43Gh7Hh qV0IIGj3im5t9HPQNlOYinVOW/G5ZqpynNdBRvp97iJr2IwGAU0H1gh9lMT9xrdr i2vMyMPgUkYMXJd4WZy6KBhjk8kLIdNIaWC88NHBJoNT7DCrfpxDFpgEVTrE7PUK t/N90drdYOlU//RZbTrvK2aJ2vp+x+NkLt6mi6iaNRLZ6fc5OF+cPPD0ytBB51sN LSwpmGmWiuIrwsvgrkhFFTch6aWZ8Omg8oRHpdItOja+G5rPQROQcAzDR818N6/B sYYnQwF7cXBevbzMfSD67wZmUoJwQL73f4bJvmO4XVk04BXchwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMPxD3Awudk17n3ZdXcISoQm9L26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iNGMz MDAzMi00OTBhLTRlNDktOGUxZC00OGQ2OWM4NTIxMmEvZmFjMjBiNmUtY2QzZS0z ZjZlLWE2YTEtNzg1YzRmZjYyNzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjRjMzAwMzItNDkwYS00ZTQ5LThl MWQtNDhkNjljODUyMTJhL2I0YzMwMDMyLTQ5MGEtNGU0OS04ZTFkLTQ4ZDY5Yzg1 MjEyYS5jcmwwHwYDVR0jBBgwFoAUloIjxct9seS7XNcPIbJbLdYiZBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iNGMzMDAzMi00OTBhLTRlNDktOGUxZC00OGQ2 OWM4NTIxMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgUPgPEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFUousdHSlYHOI8S3saGE0E6y1gXyG9lx6NsKeJV0G7iWHinbV8V8 9Lm5ICklBr0B5j2Xiw3ysJdbMv8kl3e9eosjANtp05rSypoYuj5Vewib+nDboJ7x kom7q8o95Ycl0RijNBzo0njGblBGma1Ly9XWIOmv+CmTXgjVrci9Iwqhz09eQuIb rGDqHs4SucTMhj4GhSCUdkP2ycgJa6YeS7Bwy2SmnMkDgHRsquJYe2RtY623jE1v ge4ttv832tiTRfpY5ey3fKtnfCRsLeIhLChhmGzLu2Uq809dBVNkWov4shUwxbSR 03Fimc+LicydSQ8I809zXSO6OpV9ONu8fA== -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:00 2025 by rpki-client