$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa File: cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa (raw, json) Hash identifier: uuoaZbTWGlAwBCsCNQJo5yp7t1i649lds3rJKAVyY3A= Subject key identifier: 29:82:25:2D:6A:DB:22:E3:F1:33:E5:C0:17:47:F0:FF:67:D9:64:04 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F43285848A830AEF5F5ACF821503ECF80 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 399728 IP address blocks: 2620:98:e005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ae:f5:f5:ac:f8:21:50:3e:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=760540c7-cd0a-4769-a6d1-04a7e135a22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:99:1b:86:f8:4d:7a:46:b1:19:e9:ca:66:a9: 5c:0d:bb:1f:e4:e2:f1:59:3f:e0:c9:31:25:11:09: bd:e1:99:43:14:d0:f2:64:6d:ed:1d:ce:58:2d:26: 26:f1:8b:c1:b4:d4:42:4a:ba:f0:24:fd:6d:66:76: 9d:39:ea:ea:ca:25:38:e4:ac:6c:cb:23:8a:d8:08: 5b:d2:b2:5a:59:25:76:f0:26:00:f9:88:ae:13:b4: 7d:7a:e5:87:24:e1:0e:41:91:e4:d7:66:a4:e5:63: bc:83:a0:84:de:4d:e6:e6:eb:76:76:b2:f7:1c:77: a1:b8:c0:22:8a:ad:5e:dc:0c:9d:9b:b9:cb:5b:ca: 03:42:74:ba:e2:ce:fb:aa:d4:22:42:fe:9d:4c:ff: 42:65:44:b7:ec:ca:be:4f:fa:3a:58:de:13:87:69: 35:b8:94:3e:76:42:35:15:d7:b1:36:22:52:e9:1b: 0d:90:20:29:03:c6:81:44:7a:95:86:16:21:17:75: 33:c4:2b:b2:00:57:f0:f1:c5:25:30:6a:b5:0e:36: 80:da:89:64:94:08:13:71:9a:16:21:29:0c:82:dd: 17:0c:5e:a9:85:11:8f:55:39:ff:b6:72:71:7f:e7: ce:01:81:4d:79:60:aa:3b:5c:ac:6c:2a:0a:43:5e: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:82:25:2D:6A:DB:22:E3:F1:33:E5:C0:17:47:F0:FF:67:D9:64:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e005::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ee:f7:21:b2:8d:ac:10:33:94:ce:c8:fb:66:1e:6e:19:a8: f9:2f:32:94:81:85:39:94:c6:88:25:48:b9:37:0b:4b:a1:c3: c3:33:74:e9:36:89:e6:3f:80:8d:d3:f8:84:94:0c:2d:a6:8f: fe:9e:e2:59:bc:cb:d8:fa:61:c4:ac:5a:f8:31:c9:81:9e:3b: fb:5d:f5:d1:fe:f2:69:29:22:ff:7c:5d:65:f1:59:44:ec:04: 4c:77:40:ee:55:d6:0d:49:0e:fc:a3:7e:fa:f0:c5:a0:45:14: b2:56:35:75:01:70:dc:b5:09:00:63:2c:99:58:a2:14:64:30: fc:c5:30:ae:cd:c9:35:68:c1:d1:d9:03:1b:0b:a5:6e:17:a2: 6d:75:ec:03:f8:38:5a:8f:2a:f6:13:a6:1c:1e:67:d0:16:fb: f2:7e:b5:d8:a8:66:5d:58:05:3a:5b:2b:45:20:0c:f3:08:df: b9:ab:43:82:af:dd:b2:5b:35:e1:5c:70:44:c7:72:23:99:d6: d1:88:14:dd:92:91:c6:8d:48:f1:20:82:7f:d6:ce:0f:55:50: 08:80:ff:f1:2a:e6:12:0e:ca:bd:23:34:06:7d:ce:e3:5b:1c: ec:cf:ee:d0:55:67:68:c8:5a:48:44:a3:54:d6:02:7a:5f:90: 2a:7f:da:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEioMK719az4IVA+z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NzYwNTQwYzctY2QwYS00NzY5LWE2ZDEtMDRhN2UxMzVhMjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJkbhvhNekaxGenKZqlcDbsf5OLxWT/gyTEl EQm94ZlDFNDyZG3tHc5YLSYm8YvBtNRCSrrwJP1tZnadOerqyiU45KxsyyOK2Ahb 0rJaWSV28CYA+YiuE7R9euWHJOEOQZHk12ak5WO8g6CE3k3m5ut2drL3HHehuMAi iq1e3Aydm7nLW8oDQnS64s77qtQiQv6dTP9CZUS37Mq+T/o6WN4Th2k1uJQ+dkI1 FdexNiJS6RsNkCApA8aBRHqVhhYhF3UzxCuyAFfw8cUlMGq1DjaA2olklAgTcZoW ISkMgt0XDF6phRGPVTn/tnJxf+fOAYFNeWCqO1ysbCoKQ14m+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCmCJS1q2yLj8TPlwBdH8P9n2WQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvY2YzZDliYWEtNjU3Yi0z M2NmLWI1NzgtZWQwZmU3M2U0NWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKLu9yGyjawQM5TOyPtmHm4ZqPkvMpSBhTmUxoglSLk3C0uhw8Mz dOk2ieY/gI3T+ISUDC2mj/6e4lm8y9j6YcSsWvgxyYGeO/td9dH+8mkpIv98XWXx WUTsBEx3QO5V1g1JDvyjfvrwxaBFFLJWNXUBcNy1CQBjLJlYohRkMPzFMK7NyTVo wdHZAxsLpW4Xom117AP4OFqPKvYTphweZ9AW+/J+tdioZl1YBTpbK0UgDPMI37mr Q4Kv3bJbNeFccETHciOZ1tGIFN2SkcaNSPEggn/Wzg9VUAiA//Eq5hIOyr0jNAZ9 zuNbHOzP7tBVZ2jIWkhEo1TWAnpfkCp/2g4= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:32 2025 by rpki-client