$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fc10b7a-a2fc-37f9-a586-d3f3f8d3ded9.roa File: 1fc10b7a-a2fc-37f9-a586-d3f3f8d3ded9.roa (raw, json) Hash identifier: qFDOurQ5bYXVbhOlv92d1OQiiiQJMkaS70II6LpylzU= Subject key identifier: DF:5D:8B:44:EE:A1:24:FE:41:72:AC:E7:B3:8F:E9:EA:8E:A0:EB:66 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB14C19CD732F351EA79840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fc10b7a-a2fc-37f9-a586-d3f3f8d3ded9.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 396559 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:4c:19:cd:73:2f:35:1e:a7:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=411ebb27-1e13-4588-81be-aec793b4d90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:5f:d9:ec:fc:b7:99:69:a1:6c:c7:bb:78: b9:34:f2:f7:81:3b:f6:86:db:ef:62:a8:74:47:f8: 82:16:6e:5a:30:d7:d9:2b:da:7d:c7:0b:05:ac:40: 2f:9b:11:94:bb:b8:b7:a3:9b:f5:9d:b6:a5:4e:c6: 37:e3:39:64:d0:28:74:c6:fb:33:56:9d:07:c4:7d: bd:fa:84:6c:01:c5:0a:77:85:e1:2d:28:d8:40:e3: 59:20:84:33:a4:62:ce:68:eb:5e:a2:15:5a:37:c0: f7:9e:e1:77:96:40:cb:a6:49:4f:b5:64:26:02:d9: e8:c6:8e:67:cd:0e:84:34:17:58:61:87:89:1d:35: df:92:69:22:e1:37:3e:66:f5:cc:6a:f5:60:e4:71: 0d:de:e6:40:9c:8d:50:0f:dc:de:49:a0:4c:be:73: 12:ba:17:cd:d7:16:d8:f5:aa:3c:ba:6b:11:97:a2: f5:4d:0d:c8:bd:e7:e2:5c:7a:77:77:1e:57:96:ca: 2f:43:72:fd:00:9d:4b:d3:b4:7a:b0:63:04:16:9f: 3f:c8:92:16:a4:5f:dc:fd:30:97:5b:23:0f:75:09: 73:56:6d:e2:78:57:fb:25:a2:75:9d:45:0e:51:72: 7d:71:b1:62:e2:6d:f6:c9:42:60:43:22:8f:43:45: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5D:8B:44:EE:A1:24:FE:41:72:AC:E7:B3:8F:E9:EA:8E:A0:EB:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fc10b7a-a2fc-37f9-a586-d3f3f8d3ded9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:35:9c:41:87:bb:b8:b2:0b:a0:b0:58:94:74:30:e4:ac:50: e8:bd:20:22:d0:3d:bd:6d:88:52:6c:17:51:0f:88:f1:4e:ea: f5:3f:82:96:3e:c1:ac:87:e1:11:c4:ce:4b:12:dd:62:76:56: 26:f4:53:4b:a3:8d:ca:f3:1e:10:9f:ee:0c:cc:01:82:51:4b: 80:f6:e5:bf:d7:3c:9f:ab:c3:c7:e4:23:0e:e3:fe:54:b6:28: f7:27:22:96:e0:a9:d6:4f:82:16:95:19:19:23:5e:fc:79:10: 93:3a:3b:4a:44:18:f8:9d:44:1f:f6:8a:9b:b5:0d:69:0f:a1: 02:26:43:7f:bd:47:85:ab:7d:35:d2:5e:2b:e1:47:bd:8a:4d: eb:12:3a:42:43:70:1d:16:de:95:3d:70:2a:4e:51:97:f0:3f: 1f:e5:39:36:45:23:39:39:bd:98:4e:22:22:c5:8d:a4:c7:5e: 67:e9:a6:b8:7c:55:27:d0:d5:a1:83:c6:a0:4a:b5:9d:92:d8: e0:52:4a:0a:e5:d6:ea:0d:72:f3:d2:72:ac:6d:f3:3e:d6:9b: fc:fb:f6:86:d3:ab:a3:12:a9:83:d7:18:64:85:07:b9:ce:33: e6:c3:8c:69:14:08:c3:4e:10:c5:e2:30:5a:c5:80:7b:9f:56: 99:50:ec:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsUwZzXMvNR6nmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk NDExZWJiMjctMWUxMy00NTg4LTgxYmUtYWVjNzkzYjRkOTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwORf2ez8t5lpoWzHu3i5NPL3gTv2htvvYqh0 R/iCFm5aMNfZK9p9xwsFrEAvmxGUu7i3o5v1nbalTsY34zlk0Ch0xvszVp0HxH29 +oRsAcUKd4XhLSjYQONZIIQzpGLOaOteohVaN8D3nuF3lkDLpklPtWQmAtnoxo5n zQ6ENBdYYYeJHTXfkmki4Tc+ZvXMavVg5HEN3uZAnI1QD9zeSaBMvnMSuhfN1xbY 9ao8umsRl6L1TQ3IvefiXHp3dx5XlsovQ3L9AJ1L07R6sGMEFp8/yJIWpF/c/TCX WyMPdQlzVm3ieFf7JaJ1nUUOUXJ9cbFi4m32yUJgQyKPQ0UzRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN9di0TuoST+QXKs57OP6eqOoOtmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWZjMTBiN2EtYTJmYy0z N2Y5LWE1ODYtZDNmM2Y4ZDNkZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKQ1nEGHu7iyC6CwWJR0MOSsUOi9ICLQPb1tiFJsF1EPiPFO6vU/ gpY+wayH4RHEzksS3WJ2Vib0U0ujjcrzHhCf7gzMAYJRS4D25b/XPJ+rw8fkIw7j /lS2KPcnIpbgqdZPghaVGRkjXvx5EJM6O0pEGPidRB/2ipu1DWkPoQImQ3+9R4Wr fTXSXivhR72KTesSOkJDcB0W3pU9cCpOUZfwPx/lOTZFIzk5vZhOIiLFjaTHXmfp prh8VSfQ1aGDxqBKtZ2S2OBSSgrl1uoNcvPScqxt8z7Wm/z79obTq6MSqYPXGGSF B7nOM+bDjGkUCMNOEMXiMFrFgHufVplQ7Io= -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:59 2025 by rpki-client