$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa File: 1ef3825e-f90a-3a97-aaff-27789621c9c6.roa (raw, json) Hash identifier: FHeKgKxncOnI4cWJ138927ZOxYwoFDpQctyer8RiTyg= Subject key identifier: 0B:5E:06:C0:A0:E9:B5:96:D3:5D:50:96:1E:66:8B:3A:5E:91:86:6C Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F432858494FE09EC5DDA1089695473AC8 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa Signing time: Wed 26 Mar 2025 03:35:16 +0000 ROA not before: Wed 26 Mar 2025 03:35:16 +0000 ROA not after: Tue 24 Jun 2025 03:35:16 +0000 asID: 11017 IP address blocks: 2620:41::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:e0:9e:c5:dd:a1:08:96:95:47:3a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Mar 26 03:35:16 2025 GMT Not After : Jun 24 03:35:16 2025 GMT Subject: CN=e4b01bd2-bdce-4db0-9060-122c659e5bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b2:e7:35:6f:b1:a0:be:3d:2b:ac:1f:43:38: c9:f4:40:42:8e:49:16:37:92:b4:ff:81:b6:3c:a3: fb:15:4c:7e:f2:57:aa:7b:64:c0:bd:91:f5:fc:37: 10:ba:68:22:4e:f7:d5:9a:23:d5:e2:02:29:7d:f7: 13:49:70:0c:92:49:58:8c:4e:70:69:49:11:ee:8f: 22:65:5c:9f:56:71:64:52:9d:f9:cf:94:a6:af:1c: d6:18:45:a6:dd:39:73:75:0c:9e:2c:c7:12:e1:88: c6:83:97:ec:3c:a4:23:d0:26:91:71:82:6e:ad:21: bc:ff:ce:63:b7:ab:ba:9d:50:9a:31:9a:55:ab:fd: c7:15:fa:fb:12:8b:0d:9b:ec:9f:07:85:10:4c:41: 2c:f9:2d:07:f0:dd:32:a1:f7:ac:77:82:4f:92:6f: 71:12:84:5e:0d:84:8c:15:10:37:08:2d:b4:88:09: 03:af:f9:1a:e6:62:17:3b:3d:97:fe:ac:43:1b:4d: ab:58:81:5c:64:5e:f1:04:20:6c:77:2d:1d:b9:6f: 11:4b:a8:79:31:ac:02:00:74:46:40:fc:76:83:6b: e4:04:29:61:73:fb:54:67:62:07:a3:b6:b7:8d:20: 59:69:2e:47:a6:74:d5:be:22:6a:8b:64:7b:37:66: e5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5E:06:C0:A0:E9:B5:96:D3:5D:50:96:1E:66:8B:3A:5E:91:86:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2620:41::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:fc:a1:06:ba:cc:40:f3:cb:92:f0:9d:78:a4:26:4a:ea:df: ae:2e:16:e9:7c:e7:2b:f4:e5:3d:5e:77:45:c5:a8:71:7a:a9: 19:bd:8f:42:fc:d1:d8:fb:6c:3b:47:4e:c5:d5:6d:b6:66:2e: 50:2d:47:94:ce:66:70:99:b7:15:0c:96:1b:88:0d:aa:24:40: 60:ce:f6:df:76:f2:ed:ea:57:3b:94:b2:e9:74:19:a3:86:8b: 73:57:af:4f:c2:3e:40:e7:72:8d:c2:f9:ae:02:4a:92:ea:92: a4:b8:4f:75:f7:ba:2c:52:0c:02:92:2e:9e:34:d3:7e:2c:94: d7:3d:b7:1b:83:88:ff:5b:eb:2a:4e:f8:f3:18:75:52:5c:c4: 76:fb:d5:1c:b6:b7:c6:8a:1c:5a:22:e3:e5:37:9e:d8:41:4d: 39:9c:b7:9c:c8:32:e9:3d:ae:53:91:ac:bc:24:fb:d5:b9:dc: 78:16:91:9f:23:39:b8:99:e4:4b:e2:1c:63:27:5f:b1:c3:5a: 41:a3:02:be:4a:80:c8:da:28:1f:f6:c5:b2:bd:98:30:19:58: ee:28:08:4c:7a:2f:a5:00:f4:bc:8a:0d:b6:c4:e3:e0:5b:98: b3:98:83:94:97:8f:45:d6:f7:f7:3d:fa:db:a3:90:b6:5c:9d: 29:c9:80:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElP4J7F3aEIlpVHOsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDMyNjAzMzUxNloXDTI1MDYyNDAzMzUxNlowLzEtMCsGA1UEAxMk ZTRiMDFiZDItYmRjZS00ZGIwLTkwNjAtMTIyYzY1OWU1YmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLLnNW+xoL49K6wfQzjJ9EBCjkkWN5K0/4G2 PKP7FUx+8leqe2TAvZH1/DcQumgiTvfVmiPV4gIpffcTSXAMkklYjE5waUkR7o8i ZVyfVnFkUp35z5SmrxzWGEWm3TlzdQyeLMcS4YjGg5fsPKQj0CaRcYJurSG8/85j t6u6nVCaMZpVq/3HFfr7EosNm+yfB4UQTEEs+S0H8N0yofesd4JPkm9xEoReDYSM FRA3CC20iAkDr/ka5mIXOz2X/qxDG02rWIFcZF7xBCBsdy0duW8RS6h5MawCAHRG QPx2g2vkBClhc/tUZ2IHo7a3jSBZaS5HpnTVviJqi2R7N2blZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAteBsCg6bWW011Qlh5mizpekYZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvMWVmMzgyNWUtZjkwYS0z YTk3LWFhZmYtMjc3ODk2MjFjOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAQQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAED8oQa6zEDzy5LwnXikJkrq364uFul85yv05T1ed0XFqHF6qRm9 j0L80dj7bDtHTsXVbbZmLlAtR5TOZnCZtxUMlhuIDaokQGDO9t928u3qVzuUsul0 GaOGi3NXr0/CPkDnco3C+a4CSpLqkqS4T3X3uixSDAKSLp40034slNc9txuDiP9b 6ypO+PMYdVJcxHb71Ry2t8aKHFoi4+U3nthBTTmct5zIMuk9rlORrLwk+9W53HgW kZ8jObiZ5EviHGMnX7HDWkGjAr5KgMjaKB/2xbK9mDAZWO4oCEx6L6UA9LyKDbbE 4+BbmLOYg5SXj0XW9/c9+tujkLZcnSnJgJ8= -----END CERTIFICATE-----Generated at Sat Apr 5 02:41:29 2025 by rpki-client