$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/839e2083-c5c2-3bed-adfe-e8e97bea6214.roa File: 839e2083-c5c2-3bed-adfe-e8e97bea6214.roa (raw, json) Hash identifier: pivOd0AE3ohE1LjKV1zgBznOtpUK7tLBIUIP/LDP37o= Subject key identifier: CB:83:AE:A0:9C:CA:D8:CD:1D:18:B3:65:9F:0C:3D:A1:05:A6:33:4B Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285848EC96AE4E5E3ED4CB42DC5080 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/839e2083-c5c2-3bed-adfe-e8e97bea6214.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 62240 IP address blocks: 2604:ea80:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:ae:4e:5e:3e:d4:cb:42:dc:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=33a0fa8d-6d5d-455e-a4af-9924f6b6ba12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:31:64:df:54:bf:d9:14:f0:a1:6a:d4:c6:12: 73:f0:f4:db:ae:b5:dd:6b:fb:fa:ac:6e:72:9a:7b: cb:0a:1b:72:31:46:e4:3b:85:6c:90:12:29:55:e5: df:a4:ae:c0:6e:8a:56:f2:78:95:39:f5:de:2c:cc: e2:ca:20:ca:c0:e5:0c:9e:fc:a9:86:98:8c:54:41: 03:c9:fd:38:6e:50:57:50:6a:25:48:38:03:68:84: e4:25:cf:73:8a:c4:54:0f:c5:9b:91:fb:7b:7c:b9: b5:21:9a:ec:83:b1:a8:28:36:93:8f:bb:f3:8f:79: 1f:cb:45:e7:90:fc:11:b8:e1:12:b9:1c:3e:ef:30: 2b:6c:74:ad:f6:d6:01:9d:2e:1f:19:85:01:78:32: 3d:2f:fa:62:2f:f0:26:22:1d:c9:8c:90:27:f6:38: b2:f0:f8:04:04:ca:da:a1:5d:cc:b2:42:93:17:0b: 06:a0:b0:9e:da:ca:c4:60:78:c5:04:b6:21:37:e0: ee:9a:67:2b:fa:80:eb:00:f3:49:26:b5:83:80:f5: b8:c3:e7:16:53:b8:6f:4e:d5:1f:dc:47:2d:5f:ba: c1:3d:7a:a9:f8:80:f6:99:ee:c9:80:ec:b6:f0:24: 98:a6:f9:4d:a6:42:82:1d:93:0b:91:76:cd:0d:bf: 24:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:83:AE:A0:9C:CA:D8:CD:1D:18:B3:65:9F:0C:3D:A1:05:A6:33:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/839e2083-c5c2-3bed-adfe-e8e97bea6214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2604:ea80:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ba:71:a1:24:ab:08:95:e1:03:51:ea:6c:06:e1:39:1c:3c: a5:60:2a:5b:1d:76:c2:b0:cf:e8:90:80:7e:0b:5f:4b:9c:60: 0a:41:e4:c2:bd:aa:9b:06:5d:5f:14:42:52:1e:55:e4:5b:b4: 6e:a3:d4:32:5a:73:24:d2:5c:cd:9b:04:80:74:a9:45:7e:31: 1f:53:ee:f1:aa:6a:e8:26:1c:2c:4b:1f:c6:17:fd:c8:44:01: 0f:55:55:5b:96:24:06:c2:28:bb:1c:50:ce:94:9f:3e:37:f6: 72:48:e1:4b:18:07:1d:d3:e8:07:3f:8d:53:7e:ed:c3:e9:87: 7b:ce:e4:af:e7:36:97:be:fe:f4:25:d6:75:6b:ba:8d:16:d4: 07:70:6c:8d:e8:0a:0b:84:37:61:39:8e:34:9e:21:17:d0:09: 3b:3f:92:04:46:f5:3d:a0:ba:bc:c7:4d:3d:c1:01:e0:25:59: 7c:5e:7d:1d:c9:2b:3e:7c:53:82:8e:05:a1:fd:d5:39:11:43: 23:ad:0a:81:59:29:0b:10:b9:2d:26:45:9f:da:96:22:db:17: cb:a3:da:d0:cb:a0:80:78:52:f4:28:2d:f7:9e:b7:cd:3f:c5: 36:2d:a2:1c:79:eb:74:e0:89:e4:b2:91:90:81:43:42:34:c8: 96:66:e5:b5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjslq5OXj7Uy0LcUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MzNhMGZhOGQtNmQ1ZC00NTVlLWE0YWYtOTkyNGY2YjZiYTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzFk31S/2RTwoWrUxhJz8PTbrrXda/v6rG5y mnvLChtyMUbkO4VskBIpVeXfpK7AbopW8niVOfXeLMziyiDKwOUMnvyphpiMVEED yf04blBXUGolSDgDaITkJc9zisRUD8Wbkft7fLm1IZrsg7GoKDaTj7vzj3kfy0Xn kPwRuOESuRw+7zArbHSt9tYBnS4fGYUBeDI9L/piL/AmIh3JjJAn9jiy8PgEBMra oV3MskKTFwsGoLCe2srEYHjFBLYhN+Dummcr+oDrAPNJJrWDgPW4w+cWU7hvTtUf 3EctX7rBPXqp+ID2me7JgOy28CSYpvlNpkKCHZMLkXbNDb8k3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMuDrqCcytjNHRizZZ8MPaEFpjNLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODM5ZTIwODMtYzVjMi0z YmVkLWFkZmUtZThlOTdiZWE2MjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTqgBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAS7pxoSSrCJXhA1HqbAbhORw8pWAqWx12wrDP6JCAfgtfS5xgCkHk wr2qmwZdXxRCUh5V5Fu0bqPUMlpzJNJczZsEgHSpRX4xH1Pu8apq6CYcLEsfxhf9 yEQBD1VVW5YkBsIouxxQzpSfPjf2ckjhSxgHHdPoBz+NU37tw+mHe87kr+c2l77+ 9CXWdWu6jRbUB3BsjegKC4Q3YTmONJ4hF9AJOz+SBEb1PaC6vMdNPcEB4CVZfF59 HckrPnxTgo4Fof3VORFDI60KgVkpCxC5LSZFn9qWItsXy6Pa0MuggHhS9Cgt9563 zT/FNi2iHHnrdOCJ5LKRkIFDQjTIlmbltQ== -----END CERTIFICATE-----Generated at Fri Mar 14 08:36:14 2025 by rpki-client