$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa File: 8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa (raw, json) Hash identifier: sygHYLgsFYDz6PxlixJPDT7hNYnCdN4jfsaMWJ73VlE= Subject key identifier: E5:34:D4:AE:90:BD:17:0C:91:C0:6B:8C:16:EB:FD:06:DF:97:FC:52 Certificate issuer: /CN=8e2da239-793e-4082-afde-6458f2319e7e Certificate serial: 010D0C9F4328584961B989C07A63A7B80A25CE00 Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 3755 IP address blocks: 2620:f:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:89:c0:7a:63:a7:b8:0a:25:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=aecbacf2-5e25-491a-9202-418c5e5beeeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:70:99:05:3f:54:4f:f7:3f:b5:5a:49:c8:73: 8e:35:8a:92:32:77:80:e6:90:11:1a:08:40:36:c9: 7d:b0:17:45:dd:dc:6e:7e:40:0b:12:9d:a5:5d:bf: 66:22:b0:98:08:67:1d:a5:33:4d:89:9d:6c:89:87: 57:89:f7:b7:3b:1a:53:82:90:f9:a2:75:e4:1a:d8: 27:41:b2:7a:ca:c4:0f:b0:20:8e:88:3b:43:df:4e: a9:97:09:86:54:0b:20:d5:f8:0d:47:6c:dc:23:7b: f3:d7:ed:75:ac:a2:ef:31:15:bd:f1:17:a2:af:e9: 1c:67:b3:36:95:8b:68:87:9d:24:45:a7:65:78:c8: f2:aa:57:d4:f1:83:be:a9:e0:fe:93:5d:ec:cb:15: b4:78:ea:18:ce:d4:5e:af:6e:33:5e:50:51:6f:c4: 3f:7d:58:25:b8:38:7f:67:3e:50:91:21:e5:e9:0b: b5:7d:23:94:ee:bd:b9:49:fe:13:c6:11:9f:31:62: e2:0a:a0:a3:ae:77:1d:5f:f9:4e:c5:ec:9a:9c:39: a4:45:bc:a8:a8:35:22:b4:a5:e7:c8:a9:ec:18:05: 57:c2:da:fa:29:a6:a4:14:21:17:37:d0:63:4c:b7: 7f:5f:5a:d8:b8:08:86:7c:25:8a:8d:09:bd:9d:23: a7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:34:D4:AE:90:BD:17:0C:91:C0:6B:8C:16:EB:FD:06:DF:97:FC:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl X509v3 Authority Key Identifier: keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer sbgp-ipAddrBlock: critical IPv6: 2620:f:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:7e:fc:1c:60:16:7e:ca:20:4e:a1:ee:e5:a2:eb:21:5a:0d: d6:c6:cd:39:d2:03:7d:94:86:85:33:ff:09:5f:70:cb:f8:67: 46:22:a5:84:29:d3:6e:b1:02:65:88:31:6e:3e:cc:8f:71:46: e9:44:a1:90:5c:93:fb:73:c5:9a:24:1d:f5:71:a7:cc:26:eb: 40:36:1d:01:c5:fb:f5:c2:a7:f8:4f:e0:52:a3:d0:19:a9:5d: c4:f0:45:8e:d8:fe:9f:8d:a7:22:95:41:82:bc:1d:8b:b0:42: 04:b1:b9:8b:94:d0:0f:51:d0:65:d2:0f:9d:43:29:e7:73:ba: b2:a1:4c:11:26:e1:88:65:88:8c:53:6e:fb:e6:a8:c2:2f:e4: 83:c4:d2:21:37:ea:e9:df:65:82:46:d2:1f:8c:42:f2:e9:a6: 12:b3:8c:2e:15:ab:45:d1:e7:9f:2c:21:29:64:06:28:d9:1e: ad:49:41:d5:db:2e:eb:05:b1:8b:ba:07:55:a6:fa:68:1b:53: f3:21:bf:a4:8b:78:ec:c0:e7:b8:73:4a:89:17:89:13:25:09: 6c:03:6a:fc:1f:1c:b9:3b:73:a4:19:2b:e9:d0:9d:3c:32:55: 1e:20:cd:ad:d1:7a:a2:bb:a0:0f:45:8a:29:f4:40:77:78:57: b3:04:0a:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElhuYnAemOnuAolzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZGEyMzktNzkzZS00MDgyLWFmZGUtNjQ1OGYyMzE5 ZTdlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk YWVjYmFjZjItNWUyNS00OTFhLTkyMDItNDE4YzVlNWJlZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHCZBT9UT/c/tVpJyHOONYqSMneA5pARGghA Nsl9sBdF3dxufkALEp2lXb9mIrCYCGcdpTNNiZ1siYdXife3OxpTgpD5onXkGtgn QbJ6ysQPsCCOiDtD306plwmGVAsg1fgNR2zcI3vz1+11rKLvMRW98Reir+kcZ7M2 lYtoh50kRadleMjyqlfU8YO+qeD+k13syxW0eOoYztRer24zXlBRb8Q/fVgluDh/ Zz5QkSHl6Qu1fSOU7r25Sf4TxhGfMWLiCqCjrncdX/lOxeyanDmkRbyoqDUitKXn yKnsGAVXwtr6KaakFCEXN9BjTLd/X1rYuAiGfCWKjQm9nSOn9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOU01K6QvRcMkcBrjBbr/Qbfl/xSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJk YTIzOS03OTNlLTQwODItYWZkZS02NDU4ZjIzMTllN2UvOGRjNjg4YzgtZDI2My0z ZTdiLWJlMjktZDRmZjRmNzNkMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGUyZGEyMzktNzkzZS00MDgyLWFm ZGUtNjQ1OGYyMzE5ZTdlLzhlMmRhMjM5LTc5M2UtNDA4Mi1hZmRlLTY0NThmMjMx OWU3ZS5jcmwwHwYDVR0jBBgwFoAUth6wyClvWdBkK0QvQaw4WOAHAegwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJkYTIzOS03OTNlLTQwODItYWZkZS02NDU4 ZjIzMTllN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAADwAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHR+/BxgFn7KIE6h7uWi6yFaDdbGzTnSA32UhoUz/wlfcMv4Z0Yi pYQp026xAmWIMW4+zI9xRulEoZBck/tzxZokHfVxp8wm60A2HQHF+/XCp/hP4FKj 0BmpXcTwRY7Y/p+NpyKVQYK8HYuwQgSxuYuU0A9R0GXSD51DKedzurKhTBEm4Yhl iIxTbvvmqMIv5IPE0iE36unfZYJG0h+MQvLpphKzjC4Vq0XR558sISlkBijZHq1J QdXbLusFsYu6B1Wm+mgbU/Mhv6SLeOzA57hzSokXiRMlCWwDavwfHLk7c6QZK+nQ nTwyVR4gza3ReqK7oA9Fiin0QHd4V7MEChw= -----END CERTIFICATE-----Generated at Fri Apr 11 22:34:42 2025 by rpki-client