$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b87d1157-6514-3d18-8122-844af2b4950b.roa File: b87d1157-6514-3d18-8122-844af2b4950b.roa (raw, json) Hash identifier: tjNAJWbhnfTAYGEwNX5IlaeVKCNOnoL/oBw+A/L81tQ= Subject key identifier: 2B:BF:C6:28:D8:B3:89:13:56:30:F7:20:A6:CA:13:F7:6D:89:9B:03 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F432858498F3A406C721318F711C66A00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b87d1157-6514-3d18-8122-844af2b4950b.roa Signing time: Thu 17 Apr 2025 20:11:47 +0000 ROA not before: Thu 17 Apr 2025 20:11:47 +0000 ROA not after: Wed 16 Jul 2025 20:11:47 +0000 asID: 8987 IP address blocks: 2605:4300:2c21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:3a:40:6c:72:13:18:f7:11:c6:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 17 20:11:47 2025 GMT Not After : Jul 16 20:11:47 2025 GMT Subject: CN=8b048ef1-e9d0-4f88-9024-42ef1a4bca47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:52:68:d9:f9:30:1b:31:11:bd:ae:ba:c7: b0:49:fe:43:3b:2d:5e:d9:ab:f0:c7:91:b3:e8:61: b6:10:90:1a:30:ba:a9:5d:a6:fe:01:89:8e:54:f4: a8:e4:5c:38:37:77:3d:29:03:83:42:94:a9:25:84: 80:e0:cd:68:a5:45:f8:d5:64:12:a0:32:9a:3c:20: f8:79:8a:04:97:5a:36:8e:af:94:58:ad:41:5d:e5: 28:c5:fa:92:80:a5:36:52:63:6b:d7:0a:a0:ab:77: cd:03:55:10:16:f4:3a:a1:fc:6a:e6:a3:0f:24:6f: e8:75:cd:8e:37:7c:f5:a3:d8:74:13:75:05:ce:7e: 2f:11:34:f4:db:4b:d0:4c:8b:94:ab:0a:ab:ff:54: 0b:1b:3c:1f:47:a4:e3:ce:5e:48:04:39:02:59:73: c4:ad:bc:b2:47:26:7e:af:9f:f8:c7:eb:f8:15:ba: 8e:79:14:0f:aa:82:6f:a1:88:eb:c5:08:48:e0:24: 30:0c:54:d7:d8:e9:cb:e6:67:bd:40:c8:e3:9f:ac: 08:dc:ba:13:4a:7a:bf:fc:4e:65:96:52:01:b9:5f: a8:e3:d7:31:7e:f1:e0:75:1f:e0:e7:4c:2c:75:92: b2:c0:be:8d:8b:92:9d:85:fa:7b:63:59:92:a7:28: 9f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BF:C6:28:D8:B3:89:13:56:30:F7:20:A6:CA:13:F7:6D:89:9B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b87d1157-6514-3d18-8122-844af2b4950b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:72:56:b8:a9:93:f2:e3:41:53:8f:ac:87:ce:2a:7d:a4:b3: 5e:ad:0f:d9:77:ca:1f:11:8a:33:11:bb:c1:ea:1b:c2:aa:32: b7:18:da:12:b9:82:25:69:78:8c:ef:de:85:e7:2c:bc:d1:da: 21:70:05:39:89:da:c6:a3:2c:55:9d:fa:fc:ea:9b:ed:5b:e6: f3:68:a5:e0:58:fb:f9:82:aa:53:94:0b:4b:d3:15:f7:0a:62: e0:92:2f:3f:dc:1c:28:6f:92:cc:e6:f9:44:b1:2f:9c:80:0b: 35:ad:e5:b6:1a:9e:2e:f4:fd:2a:e2:8f:37:16:f6:5b:48:de: 83:38:94:5d:e4:f7:4d:0a:58:36:71:67:52:21:c7:5a:d0:67: da:84:ef:82:b6:cf:2b:0e:04:b2:52:74:f7:74:53:43:9f:84: fa:7e:aa:17:5c:36:de:5f:a2:9b:71:22:d7:91:cf:1a:0a:12: e7:fc:8c:5d:e0:70:0c:50:5e:e6:18:6a:c6:20:60:13:4e:19: 90:70:1a:7f:b0:9e:4e:46:13:95:5d:0e:3c:35:54:f7:5c:ff: 5a:aa:4d:00:da:6b:f5:a2:de:3b:ac:b0:57:20:d0:4e:89:59: ae:2e:aa:3b:42:79:8e:61:13:88:cc:87:41:e4:0c:3a:42:1f: 03:4f:09:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmPOkBschMY9xHGagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDQxNzIwMTE0N1oXDTI1MDcxNjIwMTE0N1owLzEtMCsGA1UEAxMk OGIwNDhlZjEtZTlkMC00Zjg4LTkwMjQtNDJlZjFhNGJjYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWRSaNn5MBsxEb2uusewSf5DOy1e2avwx5Gz 6GG2EJAaMLqpXab+AYmOVPSo5Fw4N3c9KQODQpSpJYSA4M1opUX41WQSoDKaPCD4 eYoEl1o2jq+UWK1BXeUoxfqSgKU2UmNr1wqgq3fNA1UQFvQ6ofxq5qMPJG/odc2O N3z1o9h0E3UFzn4vETT020vQTIuUqwqr/1QLGzwfR6Tjzl5IBDkCWXPErbyyRyZ+ r5/4x+v4FbqOeRQPqoJvoYjrxQhI4CQwDFTX2OnL5me9QMjjn6wI3LoTSnq//E5l llIBuV+o49cxfvHgdR/g50wsdZKywL6Ni5Kdhfp7Y1mSpyifAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCu/xijYs4kTVjD3IKbKE/dtiZsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjg3ZDExNTctNjUxNC0z ZDE4LTgxMjItODQ0YWYyYjQ5NTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADByVripk/LjQVOPrIfOKn2ks16tD9l3yh8RijMRu8HqG8KqMrcY 2hK5giVpeIzv3oXnLLzR2iFwBTmJ2sajLFWd+vzqm+1b5vNopeBY+/mCqlOUC0vT FfcKYuCSLz/cHChvkszm+USxL5yACzWt5bYani70/SrijzcW9ltI3oM4lF3k900K WDZxZ1Ihx1rQZ9qE74K2zysOBLJSdPd0U0OfhPp+qhdcNt5foptxIteRzxoKEuf8 jF3gcAxQXuYYasYgYBNOGZBwGn+wnk5GE5VdDjw1VPdc/1qqTQDaa/Wi3jussFcg 0E6JWa4uqjtCeY5hE4jMh0HkDDpCHwNPCWk= -----END CERTIFICATE-----Generated at Sun Apr 20 03:26:41 2025 by rpki-client