$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/0453bfb8-ee99-3c0e-8daa-2c682040bff0.roa File: 0453bfb8-ee99-3c0e-8daa-2c682040bff0.roa (raw, json) Hash identifier: 27Cbx0XOgGUZLtRPZzBEZb7lc5xA2c+ZYbz5G475ias= Subject key identifier: EE:9A:D4:7B:82:59:8F:4D:C0:9A:B7:C5:72:FC:1A:1F:DF:61:50:3E Certificate issuer: /CN=e13a5b98-c410-4224-be84-d8a01047fa5b Certificate serial: 010D0C9F432858496FAF0B3B901285CACF539568 Authority key identifier: 07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/0453bfb8-ee99-3c0e-8daa-2c682040bff0.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 16519 IP address blocks: 2620:123:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:0b:3b:90:12:85:ca:cf:53:95:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13a5b98-c410-4224-be84-d8a01047fa5b Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=e656cf7a-b337-44cc-a384-de7b3b6097ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:25:c4:84:39:f0:5b:a2:01:84:07:2f:fd:7b: cb:96:4d:29:eb:77:eb:bf:9a:93:43:cb:13:0a:30: 71:70:32:d3:fa:83:ee:c5:d8:c4:26:df:00:25:45: b0:57:8d:5a:3c:91:5f:ab:b9:1d:a6:b2:fe:97:bc: 3c:f2:7b:c2:64:3e:fd:a5:97:47:d7:00:fd:9f:40: 0b:bf:31:27:30:d0:b0:3f:62:c4:45:bb:f3:28:d6: d5:bc:6d:d3:87:cc:ed:e0:a5:1a:2b:d1:f6:9b:7f: d2:c8:82:ef:cf:56:81:c2:81:ce:1b:25:e6:2b:4d: 73:c0:39:fa:ac:04:62:d8:51:32:cd:b0:29:22:90: d9:25:30:a8:a5:02:98:04:46:dc:2e:66:21:e3:5f: fa:21:12:be:7e:e2:19:5d:88:84:f3:3a:5a:f4:c6: 79:05:8c:45:2a:0f:67:03:8a:5c:3c:ac:f2:51:5f: 06:3d:ba:05:6d:66:f0:1f:8d:69:13:49:7f:23:ef: 90:7e:4d:c3:46:86:cf:2d:0a:55:db:c4:c2:da:9b: 05:74:52:ac:1b:fb:ac:70:45:c1:4a:39:bf:9d:9a: a8:69:ba:0d:54:f6:c3:30:47:4f:25:16:c5:0b:e0: 41:20:d1:fc:7b:dc:16:27:c3:cb:9d:c4:55:72:b5: b8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9A:D4:7B:82:59:8F:4D:C0:9A:B7:C5:72:FC:1A:1F:DF:61:50:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/0453bfb8-ee99-3c0e-8daa-2c682040bff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.crl X509v3 Authority Key Identifier: keyid:07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8d:08:e1:3d:94:c1:6e:df:4c:e0:b4:60:d4:47:c7:16:03: f6:a0:09:5c:ab:9b:67:78:a0:f4:11:ab:d1:32:3f:d5:5a:81: f8:8b:49:e2:82:73:0c:0a:74:65:53:88:df:f4:61:02:47:36: 61:da:33:b7:16:af:fc:48:8f:e4:ec:44:32:3c:d1:c4:ee:70: c0:78:42:a4:6b:98:26:86:10:87:aa:2a:22:61:b6:a8:e2:42: 04:16:68:75:f6:f5:64:e2:52:b7:26:6c:ca:b6:fa:db:6c:2a: 68:92:8b:aa:e4:fb:57:cb:0e:b4:8b:be:1f:b0:ae:f2:c2:eb: be:2e:57:bd:4c:45:da:f2:8c:52:f7:4f:9c:f6:4b:b9:48:26: aa:b3:76:e1:b2:d0:86:76:4b:e6:e5:a7:f0:3c:4d:39:e1:b9: 5a:49:27:47:d0:ee:cc:84:e7:70:f8:e8:65:4c:c0:ca:41:68: 76:12:ff:0a:7f:17:67:94:03:f2:84:9c:53:ff:85:e0:57:31: da:c0:95:32:5a:ef:95:70:21:c8:97:2b:d2:06:33:d4:81:3d: 53:66:11:3a:df:0a:08:6e:76:07:1c:40:26:60:ba:a2:cd:19: e4:be:80:ff:48:62:ca:e0:4e:bd:5e:cc:c9:44:99:fc:f8:55: 41:c4:c2:2d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElvrws7kBKFys9TlWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTEzYTViOTgtYzQxMC00MjI0LWJlODQtZDhhMDEwNDdm YTViMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTY1NmNmN2EtYjMzNy00NGNjLWEzODQtZGU3YjNiNjA5N2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyXEhDnwW6IBhAcv/XvLlk0p63frv5qTQ8sT CjBxcDLT+oPuxdjEJt8AJUWwV41aPJFfq7kdprL+l7w88nvCZD79pZdH1wD9n0AL vzEnMNCwP2LERbvzKNbVvG3Th8zt4KUaK9H2m3/SyILvz1aBwoHOGyXmK01zwDn6 rARi2FEyzbApIpDZJTCopQKYBEbcLmYh41/6IRK+fuIZXYiE8zpa9MZ5BYxFKg9n A4pcPKzyUV8GPboFbWbwH41pE0l/I++Qfk3DRobPLQpV28TC2psFdFKsG/uscEXB Sjm/nZqoaboNVPbDMEdPJRbFC+BBINH8e9wWJ8PLncRVcrW4VwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFO6a1HuCWY9NwJq3xXL8Gh/fYVA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMTNh NWI5OC1jNDEwLTQyMjQtYmU4NC1kOGEwMTA0N2ZhNWIvMDQ1M2JmYjgtZWU5OS0z YzBlLThkYWEtMmM2ODIwNDBiZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTEzYTViOTgtYzQxMC00MjI0LWJl ODQtZDhhMDEwNDdmYTViL2UxM2E1Yjk4LWM0MTAtNDIyNC1iZTg0LWQ4YTAxMDQ3 ZmE1Yi5jcmwwHwYDVR0jBBgwFoAUBzT8cMlD4r8n1KXf9GQ5fSh+ZXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMTNhNWI5OC1jNDEwLTQyMjQtYmU4NC1kOGEw MTA0N2ZhNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABI1Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdI0I4T2UwW7fTOC0YNRHxxYD9qAJXKubZ3ig9BGr0TI/1VqB+ItJ 4oJzDAp0ZVOI3/RhAkc2Ydoztxav/EiP5OxEMjzRxO5wwHhCpGuYJoYQh6oqImG2 qOJCBBZodfb1ZOJStyZsyrb622wqaJKLquT7V8sOtIu+H7Cu8sLrvi5XvUxF2vKM UvdPnPZLuUgmqrN24bLQhnZL5uWn8DxNOeG5WkknR9DuzITncPjoZUzAykFodhL/ Cn8XZ5QD8oScU/+F4Fcx2sCVMlrvlXAhyJcr0gYz1IE9U2YROt8KCG52BxxAJmC6 os0Z5L6A/0hiyuBOvV7MyUSZ/PhVQcTCLQ== -----END CERTIFICATE-----Generated at Sat Apr 12 16:03:15 2025 by rpki-client