$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/433412d2-634b-385e-8c4e-1f8544534a5f.roa File: 433412d2-634b-385e-8c4e-1f8544534a5f.roa (raw, json) Hash identifier: 9osmxe3c6XzHPQMa4LKZ0B3v5DIjMPEEtQZTniv+s5c= Subject key identifier: FA:9E:1B:29:AD:41:3C:D3:43:F0:D7:2D:C7:A4:81:D7:EE:51:C3:4E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB14AF515A7DD23841F7100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/433412d2-634b-385e-8c4e-1f8544534a5f.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 396570 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:4a:f5:15:a7:dd:23:84:1f:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=803bc689-98f2-439b-9b0d-3b4b4e1edd6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:0c:4d:b1:94:f0:27:ae:17:19:1f:d4:cd: bf:2e:46:3f:5f:51:d2:05:6c:69:07:2a:c2:a3:9b: 77:47:e5:ff:f3:c5:b4:d9:68:e1:b3:e7:04:b7:d6: 32:b4:d5:2f:5a:0c:33:aa:15:bc:b6:f2:ae:73:3d: a8:92:49:ad:41:18:bd:46:6a:c8:83:a4:30:cc:7c: 21:5b:c9:58:b7:44:30:07:b7:44:7c:aa:ce:39:55: 56:f1:2f:b8:b4:3e:71:22:76:e7:ec:48:2d:9c:3f: ee:9a:16:99:04:fe:9f:84:a7:22:a8:6a:d8:23:cd: 97:e6:b0:29:7b:fb:84:5f:36:ed:34:a0:95:aa:c9: 05:72:3a:fb:b4:89:ed:7b:77:18:1a:58:8f:38:74: 4a:e3:7c:5d:9c:f2:62:40:98:82:8e:a2:79:ef:e4: 13:03:f2:e4:b9:cc:33:5d:5a:28:e3:fc:b9:5a:46: 27:07:fd:56:9b:b0:be:5b:d9:9a:c9:a3:78:17:65: f4:d5:9a:5a:2f:15:d4:66:d5:ab:3c:97:c7:98:fd: 10:7b:f4:f6:60:f5:d0:d1:5d:92:0f:9e:37:b7:77: 98:7f:87:5e:0a:5f:73:79:e9:7c:05:a7:6f:f0:54: 36:07:e4:5a:f5:44:98:93:8d:00:ab:e3:14:f5:94: 06:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9E:1B:29:AD:41:3C:D3:43:F0:D7:2D:C7:A4:81:D7:EE:51:C3:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/433412d2-634b-385e-8c4e-1f8544534a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:18:d7:8a:03:be:b0:17:05:28:2d:4c:d6:77:d5:cc:58:85: 2f:7a:3d:70:8a:06:f7:2f:72:d9:ce:a0:9e:92:b0:d8:33:6f: bb:f2:fd:bf:d8:e3:8f:f8:60:ea:b2:14:f4:12:bb:9a:bd:a5: bb:dd:69:e7:45:f5:61:0f:69:bb:04:e6:91:f6:13:22:26:c6: 5f:56:3f:0f:6e:95:cb:e4:f8:d4:9f:ec:60:20:7f:48:84:24: 81:dd:63:2b:58:60:62:8b:3e:7f:c9:ed:6b:15:de:fe:0f:79: ff:b8:ef:a1:26:b4:33:78:b9:e2:a8:1e:8b:b8:31:9a:b9:14: 15:eb:82:ed:03:93:cd:4f:fd:bc:dc:53:ee:36:12:c8:61:98: 16:62:5d:87:4c:19:2f:df:e3:af:9b:be:0c:27:3e:5c:61:f9: a2:31:b5:84:8c:06:e4:53:90:75:44:fb:30:b6:10:4d:55:1b: 05:ec:07:10:ce:d3:d0:47:97:c7:e2:4d:7e:b8:7e:0f:66:5f: a3:f5:be:d6:da:cc:73:54:60:9b:71:5a:79:24:77:92:aa:6f: ec:82:5a:18:64:5a:47:2d:81:92:e2:94:40:43:15:88:89:56: 18:23:3a:c1:f1:1a:97:f7:8f:ba:68:d5:9a:97:89:1f:d0:4a: 22:8e:53:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsUr1FafdI4QfcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ODAzYmM2ODktOThmMi00MzliLTliMGQtM2I0YjRlMWVkZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2kMTbGU8CeuFxkf1M2/LkY/X1HSBWxpByrC o5t3R+X/88W02Wjhs+cEt9YytNUvWgwzqhW8tvKucz2okkmtQRi9RmrIg6QwzHwh W8lYt0QwB7dEfKrOOVVW8S+4tD5xInbn7EgtnD/umhaZBP6fhKciqGrYI82X5rAp e/uEXzbtNKCVqskFcjr7tInte3cYGliPOHRK43xdnPJiQJiCjqJ57+QTA/Lkucwz XVoo4/y5WkYnB/1Wm7C+W9mayaN4F2X01ZpaLxXUZtWrPJfHmP0Qe/T2YPXQ0V2S D543t3eYf4deCl9zeel8Badv8FQ2B+Ra9USYk40Aq+MU9ZQGywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPqeGymtQTzTQ/DXLcekgdfuUcNOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDMzNDEyZDItNjM0Yi0z ODVlLThjNGUtMWY4NTQ0NTM0YTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABUY14oDvrAXBSgtTNZ31cxYhS96PXCKBvcvctnOoJ6SsNgzb7vy /b/Y44/4YOqyFPQSu5q9pbvdaedF9WEPabsE5pH2EyImxl9WPw9ulcvk+NSf7GAg f0iEJIHdYytYYGKLPn/J7WsV3v4Pef+476EmtDN4ueKoHou4MZq5FBXrgu0Dk81P /bzcU+42EshhmBZiXYdMGS/f46+bvgwnPlxh+aIxtYSMBuRTkHVE+zC2EE1VGwXs BxDO09BHl8fiTX64fg9mX6P1vtbazHNUYJtxWnkkd5Kqb+yCWhhkWkctgZLilEBD FYiJVhgjOsHxGpf3j7po1ZqXiR/QSiKOU/I= -----END CERTIFICATE-----Generated at Sat Apr 12 00:21:43 2025 by rpki-client