$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/c3ed521a-ae83-3435-9480-593d70ad3dd3.roa File: c3ed521a-ae83-3435-9480-593d70ad3dd3.roa (raw, json) Hash identifier: arQEcAI7SbWzdTtE59PJntZvs/3GFRzHhZ/gnFoXuWY= Subject key identifier: AE:DC:FF:70:75:1E:62:A2:F5:91:48:2F:E8:2C:11:58:6C:DA:BF:0D Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F432858498769B2CFE74C631D058154BD Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/c3ed521a-ae83-3435-9480-593d70ad3dd3.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 399728 IP address blocks: 2620:98:e00e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b2:cf:e7:4c:63:1d:05:81:54:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=d1a12842-5d17-44df-9ca8-f4eb11ae1a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a9:cc:23:bf:54:d8:6f:db:5f:97:fa:21:82: de:ab:a5:44:a3:18:8a:fd:2d:b0:29:d2:06:98:d7: 2e:5c:cc:39:bd:c9:55:d0:88:43:3d:2b:4e:72:95: 2c:0c:f1:2e:9c:d2:db:51:67:15:05:13:de:fb:74: ff:af:3b:d2:6a:fe:cd:17:fb:e5:79:88:9a:97:b3: 85:89:b7:92:a3:b7:0f:f7:03:28:35:5b:a9:34:30: be:4f:3c:66:25:63:85:96:3a:34:90:50:62:07:72: a7:58:24:3d:ff:dd:ea:07:6a:e7:5f:86:7e:b4:cf: 2d:91:b3:53:0a:93:b1:75:f9:44:cf:93:18:0b:33: 47:d8:a6:9a:0d:8a:22:94:d5:32:56:bd:7c:37:61: b2:62:3e:ee:5e:c4:0e:96:af:89:55:7d:19:62:a7: 64:a4:6e:fe:cc:e6:d7:18:7c:b8:03:7b:f7:c8:de: e1:69:e9:25:a2:a2:4d:6c:85:0d:37:57:55:ca:67: 1d:e7:bc:95:d2:79:d7:57:ca:6a:a6:83:9a:c3:58: 48:a4:1c:45:42:61:7d:c2:fc:d3:37:60:5a:ce:42: 87:f5:59:cc:73:b8:3b:51:74:91:5b:ab:a6:bf:bc: 45:a8:68:b7:03:a3:0e:73:f4:88:43:46:fc:b8:fb: d4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DC:FF:70:75:1E:62:A2:F5:91:48:2F:E8:2C:11:58:6C:DA:BF:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/c3ed521a-ae83-3435-9480-593d70ad3dd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e00e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:aa:e7:1f:ee:0b:8a:27:95:54:f6:a0:6b:7e:f9:71:ca:84: c9:8f:dc:7a:01:02:8c:8a:27:22:51:95:ee:eb:17:ab:d5:e2: 08:32:4c:b1:2c:a2:a9:0c:64:1d:3f:54:1c:b6:4e:18:f2:a8: 36:19:49:94:dd:02:42:2d:ef:63:1e:de:72:b3:ec:bc:99:17: f6:99:f5:fa:4d:32:b0:82:17:b8:97:98:fc:59:fb:a1:b3:4a: 47:29:96:56:c3:5c:e4:bc:12:96:13:30:e2:51:ac:ae:30:03: 65:e0:55:d5:4b:ab:f7:78:60:3e:06:e8:97:d6:7c:22:2e:63: 3d:5a:1f:38:9f:3d:62:12:72:6b:1d:ac:06:9f:a5:37:e0:21: 13:0b:09:4e:b1:42:f1:b7:ab:da:ed:14:c5:8e:43:9e:90:ff: ea:15:b9:76:11:88:b4:d0:14:df:35:a9:ff:e9:fe:8a:8c:a0: ab:4e:5d:71:99:14:b1:58:16:71:85:2a:b0:07:b4:d7:70:6f: 5f:6b:c4:0f:c2:81:43:0e:b2:04:83:ad:01:14:41:ae:78:93: 5d:52:0f:1c:e2:98:26:32:b3:8d:99:57:db:ba:25:45:e2:ef: dd:73:d7:df:3d:78:36:3b:8c:9c:2e:c7:ff:ba:fa:12:9a:20: 39:c3:8f:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHabLP50xjHQWBVL0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZDFhMTI4NDItNWQxNy00NGRmLTljYTgtZjRlYjExYWUxYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qnMI79U2G/bX5f6IYLeq6VEoxiK/S2wKdIG mNcuXMw5vclV0IhDPStOcpUsDPEunNLbUWcVBRPe+3T/rzvSav7NF/vleYial7OF ibeSo7cP9wMoNVupNDC+TzxmJWOFljo0kFBiB3KnWCQ9/93qB2rnX4Z+tM8tkbNT CpOxdflEz5MYCzNH2KaaDYoilNUyVr18N2GyYj7uXsQOlq+JVX0ZYqdkpG7+zObX GHy4A3v3yN7haekloqJNbIUNN1dVymcd57yV0nnXV8pqpoOaw1hIpBxFQmF9wvzT N2BazkKH9VnMc7g7UXSRW6umv7xFqGi3A6MOc/SIQ0b8uPvUBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK7c/3B1HmKi9ZFIL+gsEVhs2r8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvYzNlZDUyMWEtYWU4My0z NDM1LTk0ODAtNTkzZDcwYWQzZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACmq5x/uC4onlVT2oGt++XHKhMmP3HoBAoyKJyJRle7rF6vV4ggy TLEsoqkMZB0/VBy2ThjyqDYZSZTdAkIt72Me3nKz7LyZF/aZ9fpNMrCCF7iXmPxZ +6GzSkcpllbDXOS8EpYTMOJRrK4wA2XgVdVLq/d4YD4G6JfWfCIuYz1aHzifPWIS cmsdrAafpTfgIRMLCU6xQvG3q9rtFMWOQ56Q/+oVuXYRiLTQFN81qf/p/oqMoKtO XXGZFLFYFnGFKrAHtNdwb19rxA/CgUMOsgSDrQEUQa54k11SDxzimCYys42ZV9u6 JUXi791z1989eDY7jJwux/+6+hKaIDnDj5c= -----END CERTIFICATE-----Generated at Sat Apr 19 00:55:38 2025 by rpki-client