$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c817559c-60bc-373b-966f-49027ee8f1ab.roa File: c817559c-60bc-373b-966f-49027ee8f1ab.roa (raw, json) Hash identifier: +0fluNQR80dpuXlRTnJN+RAnOrskAIKuK+g0sl4dxP8= Subject key identifier: A5:66:53:CE:B1:34:A9:D3:80:A8:AB:03:C2:88:2E:0A:75:78:01:92 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F43285848FD56B85948C375F2878C1940 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c817559c-60bc-373b-966f-49027ee8f1ab.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 54282 IP address blocks: 2620:147::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b8:59:48:c3:75:f2:87:8c:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=36be6eb1-c11b-4d61-82d2-02ec9312f217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b4:66:cd:1d:20:f8:3e:cc:26:3a:c3:c5:9c: 35:31:5d:a0:03:38:cd:f3:ab:e2:83:76:aa:cb:11: bf:9e:c8:38:a5:54:9f:a7:bf:62:6b:b9:3d:c9:79: 8c:09:19:00:5c:2f:5d:56:06:0d:f9:14:48:a3:be: dc:a4:79:8b:e9:9e:2d:d7:b1:d2:83:08:46:bf:36: e9:0b:d2:68:3a:7b:c6:dd:0f:59:84:b6:b7:b5:7e: ef:03:bf:a4:f7:66:29:d4:ec:d2:0e:9d:1f:8c:ee: a8:1c:21:17:f8:25:bd:f9:c5:1f:a4:7c:99:5c:7f: 63:0c:82:be:f4:76:4f:78:34:35:09:e2:20:2c:1a: 6d:6c:6a:32:ff:11:dd:dd:1e:e8:fa:e6:8a:04:25: 82:60:01:b0:ab:f5:fb:25:bd:aa:e0:f5:7e:89:f7: b7:76:09:1c:ea:aa:59:8f:b9:e4:04:ab:a9:de:71: dd:7f:af:f2:43:50:de:2e:20:94:06:52:8b:53:74: 6a:68:7b:b9:94:07:76:65:cc:52:f6:10:b4:b6:42: 7d:f7:f1:60:16:07:f8:74:cc:69:a7:b0:e2:13:35: c2:a6:88:32:c0:4a:07:e3:8d:8f:52:27:e9:83:d7: 7c:ec:9b:d6:15:22:53:f0:ec:68:bb:b1:df:d4:24: eb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:66:53:CE:B1:34:A9:D3:80:A8:AB:03:C2:88:2E:0A:75:78:01:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c817559c-60bc-373b-966f-49027ee8f1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c9:4c:b3:83:f8:53:43:01:09:2f:45:f0:de:07:53:07:15: 02:fa:52:4d:cf:68:71:23:6c:98:de:db:02:c1:0a:32:b1:88: 98:b4:bc:0a:bc:b8:78:de:36:c7:ac:7a:05:de:70:7a:e0:c0: 49:b3:78:1a:50:a1:56:d5:f5:db:39:54:eb:b6:96:27:3d:dc: bc:07:99:90:0f:80:85:bd:c2:b0:c0:1a:f4:38:b0:dc:e9:91: 99:f2:66:8c:6d:27:37:5e:80:8a:a9:41:25:f3:4b:c1:4a:14: d7:dc:8f:6e:a5:2f:db:a2:4b:ca:9b:31:8f:ae:82:c8:38:1a: ce:2c:aa:73:8f:d2:a4:a6:5e:31:b2:26:54:3a:f3:a9:06:10: 56:cb:81:14:74:f4:e5:25:6b:44:9c:82:04:7a:6a:58:9b:f4: 00:ff:04:c7:42:3b:59:5a:47:99:2a:f4:f2:b6:53:a2:f0:fb: a6:20:85:70:3d:43:9d:00:f7:44:97:a5:fc:9f:6f:e9:ad:af: 69:48:a7:66:c8:7e:11:79:45:18:23:f0:11:e8:43:f6:c7:ec: 24:55:20:78:fb:9b:05:48:67:88:05:8b:fa:e5:4d:68:97:3b: ad:a1:05:fe:f6:76:76:54:08:c4:04:21:2d:1f:59:e9:ee:25: 2a:dd:39:f9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj9VrhZSMN18oeMGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzZiZTZlYjEtYzExYi00ZDYxLTgyZDItMDJlYzkzMTJmMjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrRmzR0g+D7MJjrDxZw1MV2gAzjN86vig3aq yxG/nsg4pVSfp79ia7k9yXmMCRkAXC9dVgYN+RRIo77cpHmL6Z4t17HSgwhGvzbp C9JoOnvG3Q9ZhLa3tX7vA7+k92Yp1OzSDp0fjO6oHCEX+CW9+cUfpHyZXH9jDIK+ 9HZPeDQ1CeIgLBptbGoy/xHd3R7o+uaKBCWCYAGwq/X7Jb2q4PV+ife3dgkc6qpZ j7nkBKup3nHdf6/yQ1DeLiCUBlKLU3RqaHu5lAd2ZcxS9hC0tkJ99/FgFgf4dMxp p7DiEzXCpogywEoH442PUifpg9d87JvWFSJT8Oxou7Hf1CTrtQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKVmU86xNKnTgKirA8KILgp1eAGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYzgxNzU1OWMtNjBiYy0z NzNiLTk2NmYtNDkwMjdlZThmMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABRwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJclMs4P4U0MBCS9F8N4HUwcVAvpSTc9ocSNsmN7bAsEKMrGImLS8 Cry4eN42x6x6Bd5weuDASbN4GlChVtX12zlU67aWJz3cvAeZkA+Ahb3CsMAa9Diw 3OmRmfJmjG0nN16AiqlBJfNLwUoU19yPbqUv26JLypsxj66CyDgaziyqc4/SpKZe MbImVDrzqQYQVsuBFHT05SVrRJyCBHpqWJv0AP8Ex0I7WVpHmSr08rZTovD7piCF cD1DnQD3RJel/J9v6a2vaUinZsh+EXlFGCPwEehD9sfsJFUgePubBUhniAWL+uVN aJc7raEF/vZ2dlQIxAQhLR9Z6e4lKt05+Q== -----END CERTIFICATE-----Generated at Sun Apr 6 21:33:33 2025 by rpki-client