$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/359caaca-1c8d-3044-b68d-1e9baf9a7283.roa File: 359caaca-1c8d-3044-b68d-1e9baf9a7283.roa (raw, json) Hash identifier: R5sLBcTWkmrTqTuO67UBKkGhraetEz01sbVC7UTlvBc= Subject key identifier: C5:55:B9:03:A9:AD:7E:DB:9B:0F:39:0B:82:82:B1:6C:41:EF:28:62 Certificate issuer: /CN=8e2da239-793e-4082-afde-6458f2319e7e Certificate serial: 010D0C9F4328584961B99133086104B5B7545A40 Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/359caaca-1c8d-3044-b68d-1e9baf9a7283.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 3629 IP address blocks: 2620:f:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:91:33:08:61:04:b5:b7:54:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=b9b9e822-a668-4c4b-b7ca-c955a0e80c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f8:89:ac:05:e0:48:e2:78:54:b9:73:63:bb: 20:60:6c:0d:bc:9f:26:21:ec:c0:5d:06:85:2a:f7: 55:b4:34:01:70:bf:09:76:53:3c:26:a2:91:15:18: 1f:20:32:dd:d7:c7:84:8b:86:dd:ca:24:20:48:91: 39:bf:ea:83:b0:b7:2c:a2:08:31:62:89:d2:70:80: 2e:c3:04:66:38:57:95:fa:b7:8f:fa:16:7d:b9:ad: 84:e4:54:83:e7:c2:68:79:82:d7:0a:e5:04:bc:32: e2:57:59:45:71:a8:b9:eb:0d:af:e7:b0:97:6d:20: f7:f8:8a:c5:31:4c:a4:2b:e9:a8:d1:e4:90:60:bc: 47:47:98:70:62:4b:db:9a:6e:c7:57:4a:39:dc:3f: 4c:a9:b2:ea:60:1a:04:18:61:f3:b3:26:fb:9d:6e: 0f:37:ab:5c:eb:33:ef:2c:f8:11:10:62:d4:ac:17: 21:7b:89:5b:d1:7a:89:4c:b5:06:16:f8:e8:7c:c2: d8:ee:82:8f:0e:bd:df:bf:99:f0:81:5a:d8:e5:fe: 78:21:87:0b:cc:d9:82:50:8d:f6:24:c2:fb:bd:e8: d7:5b:74:82:72:91:a4:8a:1f:f7:7d:ba:72:c3:00: 21:88:bc:3e:9c:e8:54:c5:ec:7c:de:b7:8e:49:45: eb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:55:B9:03:A9:AD:7E:DB:9B:0F:39:0B:82:82:B1:6C:41:EF:28:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/359caaca-1c8d-3044-b68d-1e9baf9a7283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl X509v3 Authority Key Identifier: keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer sbgp-ipAddrBlock: critical IPv6: 2620:f:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:63:1e:57:a9:37:7a:ba:60:82:5f:a8:33:9f:68:f3:29:7e: 99:aa:e0:62:3e:82:5b:d2:29:46:56:8e:0f:27:46:1c:0a:42: 87:cf:78:4f:1e:7b:bf:3c:c8:40:94:83:db:99:e2:50:69:17: 98:66:12:b3:d9:50:05:19:96:35:2f:9a:04:ab:1f:b7:ec:ac: 87:9e:8b:db:3b:62:5c:23:79:ac:d4:e0:f3:74:22:59:69:c6: 44:5a:63:7a:d3:b8:14:14:83:9b:8f:68:4b:f1:f0:b1:9d:24: 36:a6:85:d5:3f:66:ab:58:4e:ac:d0:17:34:32:ba:cd:f6:6e: b5:be:f1:46:ce:b1:b6:3f:5f:94:29:e5:ab:ea:a3:0d:8a:3c: b5:21:13:34:d9:7a:f1:86:ba:5d:ec:e1:99:ec:49:75:76:03: 5f:1d:01:f5:c3:bb:6e:88:5d:65:75:a2:8b:4f:03:ca:ff:78: ab:a5:2b:77:32:31:f2:70:5f:05:c8:07:ba:6b:2d:25:8a:1a: 95:e6:72:74:35:6e:32:79:a9:fa:72:dc:3a:81:ca:46:9c:ea: e3:d6:3e:61:98:fd:33:74:33:95:d7:e0:bb:d8:1a:1a:76:cf: 09:ed:e2:cc:b6:a2:2f:68:b5:d5:c9:c4:f6:74:c4:5e:42:4c: da:64:b0:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElhuZEzCGEEtbdUWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZGEyMzktNzkzZS00MDgyLWFmZGUtNjQ1OGYyMzE5 ZTdlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk YjliOWU4MjItYTY2OC00YzRiLWI3Y2EtYzk1NWEwZTgwYzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPiJrAXgSOJ4VLlzY7sgYGwNvJ8mIezAXQaF KvdVtDQBcL8JdlM8JqKRFRgfIDLd18eEi4bdyiQgSJE5v+qDsLcsoggxYonScIAu wwRmOFeV+reP+hZ9ua2E5FSD58JoeYLXCuUEvDLiV1lFcai56w2v57CXbSD3+IrF MUykK+mo0eSQYLxHR5hwYkvbmm7HV0o53D9MqbLqYBoEGGHzsyb7nW4PN6tc6zPv LPgREGLUrBche4lb0XqJTLUGFvjofMLY7oKPDr3fv5nwgVrY5f54IYcLzNmCUI32 JML7vejXW3SCcpGkih/3fbpywwAhiLw+nOhUxex83reOSUXr4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMVVuQOprX7bmw85C4KCsWxB7yhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJk YTIzOS03OTNlLTQwODItYWZkZS02NDU4ZjIzMTllN2UvMzU5Y2FhY2EtMWM4ZC0z MDQ0LWI2OGQtMWU5YmFmOWE3MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGUyZGEyMzktNzkzZS00MDgyLWFm ZGUtNjQ1OGYyMzE5ZTdlLzhlMmRhMjM5LTc5M2UtNDA4Mi1hZmRlLTY0NThmMjMx OWU3ZS5jcmwwHwYDVR0jBBgwFoAUth6wyClvWdBkK0QvQaw4WOAHAegwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJkYTIzOS03OTNlLTQwODItYWZkZS02NDU4 ZjIzMTllN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAADwAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVjHlepN3q6YIJfqDOfaPMpfpmq4GI+glvSKUZWjg8nRhwKQofP eE8ee788yECUg9uZ4lBpF5hmErPZUAUZljUvmgSrH7fsrIeei9s7YlwjeazU4PN0 IllpxkRaY3rTuBQUg5uPaEvx8LGdJDamhdU/ZqtYTqzQFzQyus32brW+8UbOsbY/ X5Qp5avqow2KPLUhEzTZevGGul3s4ZnsSXV2A18dAfXDu26IXWV1ootPA8r/eKul K3cyMfJwXwXIB7prLSWKGpXmcnQ1bjJ5qfpy3DqBykac6uPWPmGY/TN0M5XX4LvY Ghp2zwnt4sy2oi9otdXJxPZ0xF5CTNpksLE= -----END CERTIFICATE-----Generated at Fri Apr 11 23:06:16 2025 by rpki-client