$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa File: 8cad8b2d-6269-31fa-a87b-fc60824d517b.roa (raw, json) Hash identifier: glzYpqrf9MB07DrGXpTZssE0bv0TyWHjQrIxFU1Irqs= Subject key identifier: B0:A4:FC:A3:C5:83:EF:47:7A:7C:11:BD:67:88:C4:78:3A:93:4B:32 Certificate issuer: /CN=8e2da239-793e-4082-afde-6458f2319e7e Certificate serial: 010D0C9F4328584964843B9CE3E0FBD0E488AA00 Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 3756 IP address blocks: 2620:f:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:3b:9c:e3:e0:fb:d0:e4:88:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=10c5b862-3a85-46ff-a3f8-4370e039e9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:99:04:02:8d:49:03:5b:d7:ba:3b:7a:e9:e7: 7d:a3:55:e5:3c:4b:00:dd:59:4e:c6:1c:95:74:4e: 19:85:27:fc:c9:35:36:7b:90:55:9b:cd:df:2a:2c: 62:ec:3c:81:5f:f3:f1:a2:d8:b6:ce:a0:5e:05:8d: cc:48:db:78:4c:82:09:64:c3:4a:10:d3:7d:9e:8c: 34:e1:6e:f2:a6:1f:a4:59:2a:92:9a:ce:7b:a5:b9: 62:03:83:05:cc:75:bc:db:4c:51:3c:d7:5b:97:b3: 21:da:da:3a:d1:d7:3b:7a:5c:31:7c:46:87:41:52: 71:99:7a:f5:59:7b:07:23:42:25:b8:77:23:9b:10: 2a:ce:51:70:fd:8a:bf:3f:cf:23:e3:d8:7e:05:42: db:e6:9d:af:0d:5c:14:b7:07:ed:0d:72:58:39:0f: b9:f2:73:fc:2e:c9:36:59:7f:a4:e6:81:44:a4:ac: 83:5d:aa:72:b2:1f:85:3c:b9:d5:37:36:f7:4d:8d: ed:f4:ee:31:9e:a1:f5:92:9e:b5:c0:b1:fc:06:b6: 5a:b6:f5:60:8a:c1:91:e7:5f:7a:f7:d9:eb:e7:a3: 5e:a3:c3:36:ab:e8:d5:36:c1:3d:40:ea:24:40:51: 2e:70:97:8e:e5:f9:fc:23:94:74:98:d3:38:2c:4a: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A4:FC:A3:C5:83:EF:47:7A:7C:11:BD:67:88:C4:78:3A:93:4B:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl X509v3 Authority Key Identifier: keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer sbgp-ipAddrBlock: critical IPv6: 2620:f:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:01:6e:db:8b:3d:71:f2:fd:e7:72:3e:43:2d:09:ff:f2:64: 3d:16:af:58:4b:67:c1:68:55:74:a8:6d:ea:cf:0d:3e:b4:e3: 45:d5:80:95:b4:98:bc:88:d4:5b:35:6d:26:32:de:66:66:01: c0:12:d8:5b:5d:dc:1c:c7:af:a8:cc:54:bd:5b:7d:8d:c6:3c: 8b:bb:fb:42:92:48:55:52:96:aa:e1:3b:00:53:94:fb:b3:f0: d1:ec:a5:c4:1f:81:7d:a5:19:f2:18:90:0d:4d:b1:88:f2:e7: d5:fa:54:e1:c0:76:27:47:1f:74:a6:00:40:45:90:52:4d:b6: b1:a8:a8:76:cd:c1:84:16:f5:51:2b:ac:f3:1d:49:df:51:57: ab:bb:e3:06:8a:90:81:9a:f1:6b:46:e7:f7:4c:06:ab:be:69: 0d:c3:25:d9:54:3d:53:b7:71:63:d2:2e:70:d2:1b:2a:78:93: 8b:9d:d0:b4:7d:99:8c:b8:01:4b:45:9e:b1:6f:0d:77:81:80: 08:c4:9f:12:d6:46:5a:66:ee:cd:a2:84:58:35:c0:6d:1b:c4: bd:29:3b:d1:e6:9f:f4:8c:e6:ef:45:e7:ce:ad:73:53:ea:65: 42:d3:b5:fe:48:11:87:e6:fe:cf:8c:86:f7:72:ab:3f:85:d6: 61:d7:8f:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElkhDuc4+D70OSIqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZGEyMzktNzkzZS00MDgyLWFmZGUtNjQ1OGYyMzE5 ZTdlMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk MTBjNWI4NjItM2E4NS00NmZmLWEzZjgtNDM3MGUwMzllOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55kEAo1JA1vXujt66ed9o1XlPEsA3VlOxhyV dE4ZhSf8yTU2e5BVm83fKixi7DyBX/Pxoti2zqBeBY3MSNt4TIIJZMNKENN9now0 4W7yph+kWSqSms57pbliA4MFzHW820xRPNdbl7Mh2to60dc7elwxfEaHQVJxmXr1 WXsHI0IluHcjmxAqzlFw/Yq/P88j49h+BULb5p2vDVwUtwftDXJYOQ+58nP8Lsk2 WX+k5oFEpKyDXapysh+FPLnVNzb3TY3t9O4xnqH1kp61wLH8BrZatvVgisGR5196 99nr56Neo8M2q+jVNsE9QOokQFEucJeO5fn8I5R0mNM4LEpirwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLCk/KPFg+9HenwRvWeIxHg6k0syMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJk YTIzOS03OTNlLTQwODItYWZkZS02NDU4ZjIzMTllN2UvOGNhZDhiMmQtNjI2OS0z MWZhLWE4N2ItZmM2MDgyNGQ1MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGUyZGEyMzktNzkzZS00MDgyLWFm ZGUtNjQ1OGYyMzE5ZTdlLzhlMmRhMjM5LTc5M2UtNDA4Mi1hZmRlLTY0NThmMjMx OWU3ZS5jcmwwHwYDVR0jBBgwFoAUth6wyClvWdBkK0QvQaw4WOAHAegwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJkYTIzOS03OTNlLTQwODItYWZkZS02NDU4 ZjIzMTllN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAADwAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABsBbtuLPXHy/edyPkMtCf/yZD0Wr1hLZ8FoVXSoberPDT6040XV gJW0mLyI1Fs1bSYy3mZmAcAS2Ftd3BzHr6jMVL1bfY3GPIu7+0KSSFVSlqrhOwBT lPuz8NHspcQfgX2lGfIYkA1NsYjy59X6VOHAdidHH3SmAEBFkFJNtrGoqHbNwYQW 9VErrPMdSd9RV6u74waKkIGa8WtG5/dMBqu+aQ3DJdlUPVO3cWPSLnDSGyp4k4ud 0LR9mYy4AUtFnrFvDXeBgAjEnxLWRlpm7s2ihFg1wG0bxL0pO9Hmn/SM5u9F586t c1PqZULTtf5IEYfm/s+Mhvdyqz+F1mHXjwg= -----END CERTIFICATE-----Generated at Fri Apr 11 23:03:04 2025 by rpki-client