$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/1c1b63d7-1212-31b9-926f-79dc220a0e24.roa File: 1c1b63d7-1212-31b9-926f-79dc220a0e24.roa (raw, json) Hash identifier: Q1JHcJWnbVgT4uEjTX9sru/WAkTpky6vgv5A/cWHZg4= Subject key identifier: C8:72:74:A7:41:66:0C:C7:7F:66:5B:9A:6E:BE:A8:E2:7D:00:98:0A Certificate issuer: /CN=c487dbf3-3b16-4d19-9025-e64b6f47a247 Certificate serial: 010D0C9F43285849446939FB8DD7B2DF52B07880 Authority key identifier: 85:15:99:42:C3:72:B2:77:FC:D2:81:6C:46:72:C3:65:2D:B7:81:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/1c1b63d7-1212-31b9-926f-79dc220a0e24.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 807 IP address blocks: 2620:39:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/c487dbf3-3b16-4d19-9025-e64b6f47a247.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/c487dbf3-3b16-4d19-9025-e64b6f47a247.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:39:fb:8d:d7:b2:df:52:b0:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c487dbf3-3b16-4d19-9025-e64b6f47a247 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=e4210666-f0d4-4044-b7d9-a3b43996bead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:03:d3:84:fb:af:5b:25:f9:69:5a:1d:cd: 07:d3:d6:45:df:55:27:d9:02:aa:18:ae:1f:26:53: c2:bb:91:2f:0c:f5:63:ad:0b:d5:e4:28:cc:4b:1e: f7:e4:4d:9e:8e:78:fb:44:0d:14:0c:bb:63:2b:6b: 40:bc:12:02:85:2d:b3:28:77:62:c3:cf:04:80:3e: ac:ee:3f:11:11:1a:d5:ab:8c:47:c4:c7:2e:5a:9f: 24:33:4a:49:7b:f8:9c:27:0a:cf:a1:33:5d:3b:48: 18:1d:76:92:b9:d2:44:3a:cc:a1:0a:93:1a:cf:0a: 7b:b1:5b:5e:2f:c9:39:36:9d:66:7f:ab:01:1b:62: 26:c2:45:14:67:4b:01:9c:db:5f:c9:7a:a0:0e:aa: c2:82:ef:4f:37:dc:03:0e:b8:d2:17:51:03:cd:02: ee:91:8d:84:ba:36:ca:a8:d1:fe:15:0f:d9:af:2a: 50:2f:38:cb:58:b9:67:ae:d0:43:03:5e:4f:51:b6: bb:dc:4b:eb:a6:1c:3d:83:28:cd:b0:05:b9:22:dd: 23:e7:1d:57:4c:87:52:60:5e:c2:09:d7:37:f0:08: e8:e1:23:f4:98:20:dd:27:99:f8:e0:9f:9c:0d:95: 59:ab:6e:0b:0f:db:f5:09:ba:af:13:81:9a:6b:a5: 07:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:72:74:A7:41:66:0C:C7:7F:66:5B:9A:6E:BE:A8:E2:7D:00:98:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/1c1b63d7-1212-31b9-926f-79dc220a0e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/c487dbf3-3b16-4d19-9025-e64b6f47a247.crl X509v3 Authority Key Identifier: keyid:85:15:99:42:C3:72:B2:77:FC:D2:81:6C:46:72:C3:65:2D:B7:81:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247.cer sbgp-ipAddrBlock: critical IPv6: 2620:39:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1a:0b:fa:61:29:9e:79:30:b4:3c:b3:ae:d9:44:3f:42:ba: a5:86:c8:e3:f0:92:d9:f6:ef:b9:94:1f:48:c2:a7:db:2e:e6: c5:47:c0:cc:2a:00:b7:4a:6b:b2:1a:5e:7c:38:45:13:b8:50: 16:cd:2e:a2:db:cf:89:a4:68:bc:fa:e8:d5:54:ab:4e:25:02: d0:7d:1d:28:9c:04:a7:dd:84:5d:34:f8:74:95:12:ac:51:4f: 72:27:fb:b8:8b:7f:af:80:39:e2:20:29:21:64:cf:0f:d3:5c: a8:38:93:bd:15:d5:1d:c4:02:d1:29:39:05:b5:f8:56:1b:79: d6:3d:97:27:c0:b6:d1:4d:1b:a5:59:83:0b:ea:33:5e:7a:6a: f8:b4:30:16:09:37:28:7b:2c:52:92:62:65:a4:90:1e:87:70: 49:d2:7c:39:1b:67:1f:a4:ff:f8:f4:80:5a:dc:dd:33:fb:e1: 5b:1b:20:2b:fa:55:07:1f:9e:87:ab:1c:a7:ec:8f:f7:a1:16: e3:3d:f1:2b:e3:25:b6:6b:59:cc:f0:07:f9:04:4c:e4:9e:ea: 52:f3:be:81:02:e4:ec:d9:dc:53:87:c7:b3:ba:aa:cd:83:ae: 36:5b:ec:41:d7:3e:73:fc:4a:96:7a:55:30:80:8d:0f:03:e3: fd:f3:a1:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaTn7jdey31KweIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ4N2RiZjMtM2IxNi00ZDE5LTkwMjUtZTY0YjZmNDdh MjQ3MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZTQyMTA2NjYtZjBkNC00MDQ0LWI3ZDktYTNiNDM5OTZiZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0MD04T7r1sl+WlaHc0H09ZF31Un2QKqGK4f JlPCu5EvDPVjrQvV5CjMSx735E2ejnj7RA0UDLtjK2tAvBIChS2zKHdiw88EgD6s 7j8RERrVq4xHxMcuWp8kM0pJe/icJwrPoTNdO0gYHXaSudJEOsyhCpMazwp7sVte L8k5Np1mf6sBG2ImwkUUZ0sBnNtfyXqgDqrCgu9PN9wDDrjSF1EDzQLukY2EujbK qNH+FQ/ZrypQLzjLWLlnrtBDA15PUba73Evrphw9gyjNsAW5It0j5x1XTIdSYF7C Cdc38Ajo4SP0mCDdJ5n44J+cDZVZq24LD9v1CbqvE4Gaa6UH/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMhydKdBZgzHf2Zbmm6+qOJ9AJgKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNDg3 ZGJmMy0zYjE2LTRkMTktOTAyNS1lNjRiNmY0N2EyNDcvMWMxYjYzZDctMTIxMi0z MWI5LTkyNmYtNzlkYzIyMGEwZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzQ4N2RiZjMtM2IxNi00ZDE5LTkw MjUtZTY0YjZmNDdhMjQ3L2M0ODdkYmYzLTNiMTYtNGQxOS05MDI1LWU2NGI2ZjQ3 YTI0Ny5jcmwwHwYDVR0jBBgwFoAUhRWZQsNysnf80oFsRnLDZS23gXIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNDg3ZGJmMy0zYjE2LTRkMTktOTAyNS1lNjRi NmY0N2EyNDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAOWAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACgaC/phKZ55MLQ8s67ZRD9CuqWGyOPwktn277mUH0jCp9su5sVH wMwqALdKa7IaXnw4RRO4UBbNLqLbz4mkaLz66NVUq04lAtB9HSicBKfdhF00+HSV EqxRT3In+7iLf6+AOeIgKSFkzw/TXKg4k70V1R3EAtEpOQW1+FYbedY9lyfAttFN G6VZgwvqM156avi0MBYJNyh7LFKSYmWkkB6HcEnSfDkbZx+k//j0gFrc3TP74Vsb ICv6VQcfnoerHKfsj/ehFuM98SvjJbZrWczwB/kETOSe6lLzvoEC5OzZ3FOHx7O6 qs2DrjZb7EHXPnP8SpZ6VTCAjQ8D4/3zoRs= -----END CERTIFICATE-----Generated at Sat Apr 12 14:15:51 2025 by rpki-client