$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa File: 8a673006-55a5-3418-963c-f9a5b7571cea.roa (raw, json) Hash identifier: KRbeZydDO8NyMqZ5C5ZZRJHOXxgC1d30zR6B466fBng= Subject key identifier: 1A:F7:85:DD:66:6A:C6:2B:32:EF:AF:5A:95:B2:C9:53:E4:DB:F3:82 Certificate issuer: /CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc Certificate serial: 010D0C9F432858496CE4521BC243204B7DA15D00 Authority key identifier: 43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 393869 IP address blocks: 2620:11f:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:52:1b:c2:43:20:4b:7d:a1:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=c99c8e03-88e3-41f1-8a1b-b55295661d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:8f:91:b7:85:7c:88:e6:34:5b:c7:f2:01: 6b:68:eb:5d:d3:b5:11:75:79:bf:81:f4:fe:b7:23: a9:d3:59:ff:6e:57:16:c5:06:5c:45:a7:66:62:81: 94:c6:b3:77:68:b0:e4:f9:e9:af:90:80:d9:61:54: 49:67:da:a6:56:a2:ea:c1:03:61:3c:40:40:89:10: 30:1c:d1:c7:e6:3d:0d:85:87:4f:21:e6:6a:02:18: bc:8c:ed:57:62:d6:2f:ed:40:67:01:d5:e0:42:40: ee:f9:96:71:51:0c:34:87:e9:3f:3d:14:5c:cc:e4: 30:3e:85:a2:7b:25:31:a5:ae:56:f7:2c:89:db:cf: bc:b4:06:f1:b8:7f:0d:78:73:97:07:12:e9:26:be: 75:54:54:74:c6:cd:f8:47:d9:8e:77:bd:51:a9:16: cd:c1:f7:7e:f6:ed:9f:9b:ac:df:d9:64:5b:6e:29: d8:0f:a6:5a:74:3f:2a:ef:f0:99:7b:b1:fa:bc:e6: 84:e7:e9:de:e7:fd:a3:2a:89:f3:f5:b6:0a:50:a5: be:b2:60:43:ca:f8:cb:6b:7d:6e:46:b6:55:bf:6f: ab:4d:db:e4:05:3f:d1:2f:e4:85:41:c6:b7:31:d8: 46:15:40:e7:04:6a:4a:b3:3e:d0:2b:95:6a:24:b0: 73:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F7:85:DD:66:6A:C6:2B:32:EF:AF:5A:95:B2:C9:53:E4:DB:F3:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl X509v3 Authority Key Identifier: keyid:43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer sbgp-ipAddrBlock: critical IPv6: 2620:11f:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:99:d5:f2:53:83:60:7e:40:4c:59:23:04:2b:27:0f:71:f4: 1a:13:a7:98:30:a2:1d:e0:7a:7a:7e:e5:5b:59:68:02:7b:ea: 0c:bb:4c:93:0e:e8:a3:06:74:5d:4b:26:39:83:cc:01:2c:b3: 63:f3:ea:1c:1b:a8:e2:51:e0:02:85:da:c4:bb:e7:b0:02:e8: 76:1a:1a:53:2e:11:85:4b:6d:26:3f:a1:53:fe:27:7e:0b:45: 84:a1:24:33:20:36:0b:5a:a4:c8:b8:5d:57:d9:4b:ad:e9:54: ab:5b:8b:c0:53:8a:ad:b3:94:31:d7:af:51:20:0c:eb:64:92: e4:fd:03:a3:95:b9:ef:1b:be:73:0b:da:8f:aa:14:4a:a7:61: 56:4b:de:7c:d5:f3:98:cc:a4:b3:8b:bd:88:c8:1b:0b:48:71: 0b:dc:4c:ab:73:e2:3a:18:1d:6a:0a:92:e4:18:66:15:1d:74: b1:76:ba:f4:1d:ae:09:83:cc:42:c9:4a:e9:53:14:9c:c7:f3: 06:ef:12:77:04:d4:45:6c:02:48:95:a6:a2:61:58:91:78:25: bd:56:e9:29:46:c2:da:00:39:f5:36:5c:32:b8:6a:f6:93:7f: 3f:d6:a3:8f:f6:80:33:83:08:45:c9:ad:89:75:6b:5a:a7:e7: c5:f7:27:f2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEls5FIbwkMgS32hXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTllMmMxYWMtZTI1NS00MGZlLThkYzgtMzY3NTBiNTY5 YmZjMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk Yzk5YzhlMDMtODhlMy00MWYxLThhMWItYjU1Mjk1NjYxZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAaPkbeFfIjmNFvH8gFraOtd07URdXm/gfT+ tyOp01n/blcWxQZcRadmYoGUxrN3aLDk+emvkIDZYVRJZ9qmVqLqwQNhPEBAiRAw HNHH5j0NhYdPIeZqAhi8jO1XYtYv7UBnAdXgQkDu+ZZxUQw0h+k/PRRczOQwPoWi eyUxpa5W9yyJ28+8tAbxuH8NeHOXBxLpJr51VFR0xs34R9mOd71RqRbNwfd+9u2f m6zf2WRbbinYD6ZadD8q7/CZe7H6vOaE5+ne5/2jKonz9bYKUKW+smBDyvjLa31u RrZVv2+rTdvkBT/RL+SFQca3MdhGFUDnBGpKsz7QK5VqJLBzewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBr3hd1masYrMu+vWpWyyVPk2/OCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUy YzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1MGI1NjliZmMvOGE2NzMwMDYtNTVhNS0z NDE4LTk2M2MtZjlhNWI3NTcxY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTllMmMxYWMtZTI1NS00MGZlLThk YzgtMzY3NTBiNTY5YmZjL2E5ZTJjMWFjLWUyNTUtNDBmZS04ZGM4LTM2NzUwYjU2 OWJmYy5jcmwwHwYDVR0jBBgwFoAUQ16gpiq9KrPgDx52W71+jvmA1x0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUyYzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1 MGI1NjliZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABH1Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgZnV8lODYH5ATFkjBCsnD3H0GhOnmDCiHeB6en7lW1loAnvqDLtM kw7oowZ0XUsmOYPMASyzY/PqHBuo4lHgAoXaxLvnsALodhoaUy4RhUttJj+hU/4n fgtFhKEkMyA2C1qkyLhdV9lLrelUq1uLwFOKrbOUMdevUSAM62SS5P0Do5W57xu+ cwvaj6oUSqdhVkvefNXzmMyks4u9iMgbC0hxC9xMq3PiOhgdagqS5BhmFR10sXa6 9B2uCYPMQslK6VMUnMfzBu8SdwTURWwCSJWmomFYkXglvVbpKUbC2gA59TZcMrhq 9pN/P9ajj/aAM4MIRcmtiXVrWqfnxfcn8g== -----END CERTIFICATE-----Generated at Sat Apr 12 15:32:46 2025 by rpki-client