$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/209031b8-f18a-343e-ad6b-2d5fbf44fd42.roa File: 209031b8-f18a-343e-ad6b-2d5fbf44fd42.roa (raw, json) Hash identifier: WKJxH2CuDzCulMNctifeIPt27qdPPtGw/npwQcZSsJs= Subject key identifier: 07:85:51:C3:8E:51:7E:C7:BB:59:F0:E4:00:47:59:44:A2:AB:55:E8 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285848FBF125284BB9BA508173FB00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/209031b8-f18a-343e-ad6b-2d5fbf44fd42.roa Signing time: Mon 24 Feb 2025 02:00:38 +0000 ROA not before: Mon 24 Feb 2025 02:00:38 +0000 ROA not after: Sun 25 May 2025 01:00:38 +0000 asID: 62240 IP address blocks: 2604:fc80:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:f1:25:28:4b:b9:ba:50:81:73:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 24 02:00:38 2025 GMT Not After : May 25 01:00:38 2025 GMT Subject: CN=81226ba3-9ec4-4218-80d1-85e01b0c1797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:a6:79:70:48:8b:c3:00:08:10:25:d3:93: 97:99:99:c9:5c:b0:4a:c9:b8:62:55:ca:74:36:ee: 82:2c:74:8f:c9:8a:c2:7b:50:13:c5:3b:40:1a:e5: e7:df:80:28:a8:ea:84:88:03:54:18:fe:9a:cf:6c: 2f:76:9b:44:7f:db:91:50:6d:e3:9a:79:1b:ea:56: d1:f3:30:32:75:5b:dd:53:df:7c:2b:62:0b:dd:46: 0f:46:aa:06:5f:3c:e9:ad:2c:2c:14:79:81:b1:22: 9c:50:e1:5a:07:82:a5:5b:db:20:68:5f:10:bb:2a: b6:9d:7e:a7:46:c6:70:29:70:fa:33:7d:61:bf:60: 7f:09:d6:f2:7a:21:f9:a3:8a:37:58:10:79:1e:14: 95:01:92:ef:83:b5:bf:f9:27:c0:82:96:7e:0c:98: ed:cc:7a:ce:83:3d:6d:e7:9c:18:f0:55:7a:88:69: b5:6c:73:8c:e0:62:d3:a2:84:47:f8:ba:a7:03:b6: ad:08:ba:57:ef:55:73:a0:15:08:0f:16:f0:32:30: 5d:23:14:71:52:30:e3:1c:69:72:64:99:24:0d:c0: 24:1e:6b:91:2b:be:7e:72:5f:44:77:61:e9:7f:14: fc:a6:30:7a:db:88:4c:28:57:cf:32:c7:23:7f:91: 5a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:85:51:C3:8E:51:7E:C7:BB:59:F0:E4:00:47:59:44:A2:AB:55:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/209031b8-f18a-343e-ad6b-2d5fbf44fd42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2604:fc80:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:cf:71:5d:7e:70:0d:91:7a:a7:c9:33:62:a4:1c:75:d1:b9: 30:80:8c:7b:95:7b:27:7d:ef:61:1a:c8:7f:d7:b3:0f:47:21: f7:64:f2:7b:45:0f:f8:ab:34:2d:b8:9f:d6:a8:25:8a:71:69: 3d:48:b1:5d:bc:46:c7:07:f9:a4:f3:d1:55:3a:e0:7c:2d:c7: fe:b1:8c:3b:c0:a7:e7:91:0c:06:bf:85:be:30:ce:b6:0e:19: 9e:fd:5e:c1:77:3c:3b:07:70:10:54:63:84:83:35:73:f3:49: d2:8f:33:e4:2e:ad:9d:94:7a:fb:03:26:26:2a:a5:07:09:84: 9f:00:7f:5f:36:87:0f:df:10:b6:29:78:8b:d9:bd:14:49:41: 2e:b0:7f:fb:60:b2:ce:10:a3:cd:93:0a:1f:d8:32:b5:ef:af: 20:98:b9:08:df:ef:a8:23:37:2f:22:be:36:24:0a:64:56:db: 61:f8:7a:e6:be:7a:83:b9:46:65:d0:52:83:92:a3:7c:49:80: 34:15:5a:8b:97:3f:2e:8c:cb:8a:2f:1e:f8:5c:f8:f7:70:06: f3:0c:11:f8:61:9e:a9:df:1a:1e:b4:37:b0:82:b7:ec:e8:5d: 92:fa:36:be:29:f2:a8:6b:d6:99:a5:c0:de:8b:b6:a0:7b:a8: 32:d9:3c:09 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj78SUoS7m6UIFz+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk ODEyMjZiYTMtOWVjNC00MjE4LTgwZDEtODVlMDFiMGMxNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDWmeXBIi8MACBAl05OXmZnJXLBKybhiVcp0 Nu6CLHSPyYrCe1ATxTtAGuXn34AoqOqEiANUGP6az2wvdptEf9uRUG3jmnkb6lbR 8zAydVvdU998K2IL3UYPRqoGXzzprSwsFHmBsSKcUOFaB4KlW9sgaF8Quyq2nX6n RsZwKXD6M31hv2B/CdbyeiH5o4o3WBB5HhSVAZLvg7W/+SfAgpZ+DJjtzHrOgz1t 55wY8FV6iGm1bHOM4GLTooRH+LqnA7atCLpX71VzoBUIDxbwMjBdIxRxUjDjHGly ZJkkDcAkHmuRK75+cl9Ed2HpfxT8pjB624hMKFfPMscjf5Fa+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAeFUcOOUX7Hu1nw5ABHWUSiq1XoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjA5MDMxYjgtZjE4YS0z NDNlLWFkNmItMmQ1ZmJmNDRmZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgT8gEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAc89xXX5wDZF6p8kzYqQcddG5MICMe5V7J33vYRrIf9ezD0ch92Ty e0UP+Ks0Lbif1qglinFpPUixXbxGxwf5pPPRVTrgfC3H/rGMO8Cn55EMBr+FvjDO tg4Znv1ewXc8OwdwEFRjhIM1c/NJ0o8z5C6tnZR6+wMmJiqlBwmEnwB/XzaHD98Q til4i9m9FElBLrB/+2CyzhCjzZMKH9gyte+vIJi5CN/vqCM3LyK+NiQKZFbbYfh6 5r56g7lGZdBSg5KjfEmANBVai5c/LozLii8e+Fz493AG8wwR+GGeqd8aHrQ3sIK3 7Ohdkvo2vinyqGvWmaXA3ou2oHuoMtk8CQ== -----END CERTIFICATE-----Generated at Thu Apr 3 22:30:40 2025 by rpki-client