$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa File: 1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa (raw, json) Hash identifier: Rs+plIBxo6qN/Xnfk4jDxUG7U5G169OwE5+vHk6oIig= Subject key identifier: 12:77:FC:95:85:1C:63:17:E9:86:8B:12:FC:25:9C:E1:8F:0D:37:99 Certificate issuer: /CN=f357e341-9d26-4129-b5e8-c23c09471ee7 Certificate serial: 010D0C9F43285848E16BE57D70BA2CDEB3B2C600 Authority key identifier: E8:96:BE:52:65:9E:06:78:DF:65:AD:F8:A7:03:20:A4:4E:FD:7F:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 32244 IP address blocks: 2620:139:5002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e5:7d:70:ba:2c:de:b3:b2:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f357e341-9d26-4129-b5e8-c23c09471ee7 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=2774cf3b-5c54-44dc-b2c7-76be60afdbd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:ed:e0:96:e3:55:f0:84:39:d3:77:76:85: fd:89:81:51:73:54:43:a1:d3:6a:e2:15:0a:eb:9f: 9d:d0:78:39:3f:f3:6b:13:88:39:db:ff:e9:69:11: 2a:17:03:6b:02:37:4c:4c:64:bd:3f:0d:75:78:16: a5:36:4b:32:8c:cd:50:8c:ba:ee:f5:ff:4c:ce:69: 72:bf:ce:1d:3f:9e:4d:d6:95:bc:43:f4:78:ff:94: 70:85:ab:e8:6f:41:d7:db:d6:a5:be:e4:13:b6:49: 63:5b:78:e9:5a:e8:3f:7a:66:04:2e:97:6a:6d:ac: 7f:e9:86:8b:02:df:24:75:23:a2:e8:88:64:b4:07: dd:13:15:17:2c:df:c6:30:48:1e:ca:51:d7:55:05: a4:35:1e:72:0d:6b:23:b0:18:f4:65:be:4c:19:eb: ef:da:71:d0:e2:29:e2:23:dc:24:39:e1:28:af:f5: e0:02:9a:cd:e0:c6:68:8f:ca:89:00:16:ba:27:44: f8:94:c1:c1:1e:9c:8e:16:ba:a2:51:9f:37:77:64: 77:62:1d:6b:5f:5b:5f:29:83:3c:4e:50:61:60:f9: b9:73:ad:be:38:60:d9:ec:28:b7:d3:0b:6c:e2:e3: 36:05:7f:a4:9b:37:fc:df:c5:91:6a:a1:64:4b:81: ef:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:77:FC:95:85:1C:63:17:E9:86:8B:12:FC:25:9C:E1:8F:0D:37:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.crl X509v3 Authority Key Identifier: keyid:E8:96:BE:52:65:9E:06:78:DF:65:AD:F8:A7:03:20:A4:4E:FD:7F:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer sbgp-ipAddrBlock: critical IPv6: 2620:139:5002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:5f:89:54:d8:d4:3d:dd:14:0a:77:bf:2a:29:ec:ec:ab:62: 9f:6f:2a:af:7f:f9:8b:f8:9f:e8:a5:87:ae:23:8d:a2:20:78: b8:82:75:32:15:d8:c5:ac:5d:48:6d:6c:29:88:aa:21:1c:41: 19:13:e3:92:05:6a:49:37:5f:cf:30:5a:b7:82:23:19:68:a7: 06:cb:3f:34:b6:e6:7a:00:76:17:95:6e:5c:19:81:78:15:9b: 6b:f3:db:b7:16:f5:32:75:90:29:d9:69:9a:f6:24:be:d7:b8: c0:11:62:ce:70:08:cf:eb:fb:d0:bf:0f:07:9c:e4:f0:5b:bc: fe:98:2c:6c:6e:b7:53:41:cc:e5:1d:25:1a:0e:98:ae:19:d5: e3:59:c9:a5:99:0b:ae:72:dc:bd:ed:d8:9d:c1:bd:81:b5:b6: ad:f8:23:d5:f3:ed:34:a6:2b:16:26:69:15:87:17:5b:b1:1d: a9:af:0b:35:ff:f5:35:de:e3:b0:91:c6:09:a0:50:95:fb:12: 62:9d:ce:c8:49:21:d7:4c:08:ac:5d:52:ea:07:5e:ee:b1:34: c6:9c:97:c8:5b:b8:52:3d:9c:3e:1f:c2:a4:d9:32:42:27:9e: 95:d3:e6:95:ac:1d:3c:82:cc:a8:53:b4:ba:02:f1:96:ca:cf: 18:6c:06:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjha+V9cLos3rOyxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM1N2UzNDEtOWQyNi00MTI5LWI1ZTgtYzIzYzA5NDcx ZWU3MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk Mjc3NGNmM2ItNWM1NC00NGRjLWIyYzctNzZiZTYwYWZkYmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg/t4JbjVfCEOdN3doX9iYFRc1RDodNq4hUK 65+d0Hg5P/NrE4g52//paREqFwNrAjdMTGS9Pw11eBalNksyjM1QjLru9f9Mzmly v84dP55N1pW8Q/R4/5Rwhavob0HX29alvuQTtkljW3jpWug/emYELpdqbax/6YaL At8kdSOi6IhktAfdExUXLN/GMEgeylHXVQWkNR5yDWsjsBj0Zb5MGevv2nHQ4ini I9wkOeEor/XgAprN4MZoj8qJABa6J0T4lMHBHpyOFrqiUZ83d2R3Yh1rX1tfKYM8 TlBhYPm5c62+OGDZ7Ci30wts4uM2BX+kmzf838WRaqFkS4HvGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBJ3/JWFHGMX6YaLEvwlnOGPDTeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzU3 ZTM0MS05ZDI2LTQxMjktYjVlOC1jMjNjMDk0NzFlZTcvMWEyZjk2YTQtY2JmMy0z YjE4LTg5ZGUtODk3MjlhZjE2YWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM1N2UzNDEtOWQyNi00MTI5LWI1 ZTgtYzIzYzA5NDcxZWU3L2YzNTdlMzQxLTlkMjYtNDEyOS1iNWU4LWMyM2MwOTQ3 MWVlNy5jcmwwHwYDVR0jBBgwFoAU6Ja+UmWeBnjfZa34pwMgpE79fy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzU3ZTM0MS05ZDI2LTQxMjktYjVlOC1jMjNj MDk0NzFlZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABOVAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAENfiVTY1D3dFAp3vyop7OyrYp9vKq9/+Yv4n+ilh64jjaIgeLiC dTIV2MWsXUhtbCmIqiEcQRkT45IFakk3X88wWreCIxlopwbLPzS25noAdheVblwZ gXgVm2vz27cW9TJ1kCnZaZr2JL7XuMARYs5wCM/r+9C/Dwec5PBbvP6YLGxut1NB zOUdJRoOmK4Z1eNZyaWZC65y3L3t2J3BvYG1tq34I9Xz7TSmKxYmaRWHF1uxHamv CzX/9TXe47CRxgmgUJX7EmKdzshJIddMCKxdUuoHXu6xNMacl8hbuFI9nD4fwqTZ MkInnpXT5pWsHTyCzKhTtLoC8ZbKzxhsBl8= -----END CERTIFICATE-----Generated at Thu Apr 17 21:31:26 2025 by rpki-client