$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/7ed0b9d0-0c7f-32e1-8116-6f8776bec31e.roa File: 7ed0b9d0-0c7f-32e1-8116-6f8776bec31e.roa (raw, json) Hash identifier: agiJApuUnOeGR3r/aG4ERlUQ9xCgqkhasO79/nR7dtY= Subject key identifier: BF:8A:C1:0B:E5:90:8B:35:EF:8A:19:8C:43:85:8E:BB:B5:FD:19:98 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584930DE69EC74C8F68B0D46C480 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/7ed0b9d0-0c7f-32e1-8116-6f8776bec31e.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 16686 IP address blocks: 2620:49::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:69:ec:74:c8:f6:8b:0d:46:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=72a998b1-d226-43c9-8532-4a2e4afd2924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:25:6c:0f:ab:1a:1a:88:d0:8c:d9:c1:71:8a: 3e:de:e4:6a:3d:cc:fb:52:3a:15:75:57:e1:8a:bf: 18:98:6d:b0:9a:10:1a:5f:62:7d:3f:35:bb:1d:b9: 87:af:e6:60:17:39:57:09:0a:74:2f:0c:13:d1:36: 28:ba:cb:f6:fa:bb:a0:1b:c9:19:8e:b9:92:8e:11: 24:2f:a3:b5:98:92:8d:11:d5:5e:90:07:5b:d4:85: c8:74:ca:90:b1:b7:75:3d:45:2e:36:33:14:b1:54: e6:ce:59:b8:e5:f7:56:b3:f9:c8:44:80:6f:1b:da: 4b:ae:4a:5d:4c:a9:fa:02:58:cc:6d:fb:a8:bc:ae: bf:99:41:57:d7:a4:37:2e:86:8f:6c:0c:00:56:0b: 7d:95:c4:fd:2f:d9:60:aa:74:02:bb:a1:5c:23:f6: fc:24:88:dc:dc:79:2b:0f:cb:b7:58:55:a6:73:cd: e1:d2:e9:3e:ca:9f:69:2c:32:d3:d2:7a:41:7e:22: f5:71:78:1d:0d:20:a6:74:75:72:1d:89:c1:8e:ef: 0a:4d:14:c0:8f:07:d2:68:23:49:b4:a7:9b:fd:7c: 15:f6:0d:21:a9:d8:f8:ea:dd:89:b8:e4:45:90:25: d6:ec:74:d0:2e:02:82:49:10:68:80:71:97:90:5f: 1f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8A:C1:0B:E5:90:8B:35:EF:8A:19:8C:43:85:8E:BB:B5:FD:19:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/7ed0b9d0-0c7f-32e1-8116-6f8776bec31e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv6: 2620:49::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:46:63:77:fa:9a:c3:bc:3b:c1:3e:b5:0c:94:c4:ba:0d:72: 1f:64:e0:26:e5:02:cf:49:cb:84:7d:82:86:20:6f:98:c6:8b: f9:19:10:b2:47:6a:39:78:ec:e0:bc:4f:f8:91:08:0e:6d:94: 7d:a1:8d:18:d8:9a:03:67:5d:a3:ac:da:f0:96:ec:19:0f:09: b3:30:0e:7a:88:5a:1e:41:95:1f:c0:f4:24:04:56:68:6b:01: 51:d3:e1:eb:e1:0b:3d:0a:60:7c:0d:08:76:d4:8c:64:85:d4: 08:c9:c1:76:fa:f2:de:c4:be:da:a1:56:21:8e:c8:8c:2d:67: e7:79:6f:29:12:73:74:a8:7b:9e:4d:4a:5c:cf:8f:7e:00:43: be:42:a9:a1:05:4c:e6:24:7a:c1:95:bf:2f:76:48:27:0a:5d: ee:3d:ae:59:89:5c:a1:31:b6:d1:29:8b:3b:fe:20:85:2f:b9: 2e:74:49:06:90:c0:69:c6:98:77:75:5f:c4:33:b4:06:d9:fb: 8b:6d:00:de:c1:28:6b:8f:5f:65:ad:ef:66:8f:52:c8:1c:20: 23:5d:7d:fe:f5:29:01:6c:12:95:02:2f:47:64:50:8b:4f:03: 25:9a:80:e4:ff:2a:7f:77:be:23:a0:06:43:4b:d9:9e:ea:f8: 26:26:81:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkw3mnsdMj2iw1GxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk NzJhOTk4YjEtZDIyNi00M2M5LTg1MzItNGEyZTRhZmQyOTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSVsD6saGojQjNnBcYo+3uRqPcz7UjoVdVfh ir8YmG2wmhAaX2J9PzW7HbmHr+ZgFzlXCQp0LwwT0TYousv2+rugG8kZjrmSjhEk L6O1mJKNEdVekAdb1IXIdMqQsbd1PUUuNjMUsVTmzlm45fdWs/nIRIBvG9pLrkpd TKn6AljMbfuovK6/mUFX16Q3LoaPbAwAVgt9lcT9L9lgqnQCu6FcI/b8JIjc3Hkr D8u3WFWmc83h0uk+yp9pLDLT0npBfiL1cXgdDSCmdHVyHYnBju8KTRTAjwfSaCNJ tKeb/XwV9g0hqdj46t2JuORFkCXW7HTQLgKCSRBogHGXkF8fmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL+KwQvlkIs174oZjEOFjru1/RmYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvN2VkMGI5ZDAtMGM3Zi0z MmUxLTgxMTYtNmY4Nzc2YmVjMzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAASQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIdGY3f6msO8O8E+tQyUxLoNch9k4CblAs9Jy4R9goYgb5jGi/kZ ELJHajl47OC8T/iRCA5tlH2hjRjYmgNnXaOs2vCW7BkPCbMwDnqIWh5BlR/A9CQE VmhrAVHT4evhCz0KYHwNCHbUjGSF1AjJwXb68t7EvtqhViGOyIwtZ+d5bykSc3So e55NSlzPj34AQ75CqaEFTOYkesGVvy92SCcKXe49rlmJXKExttEpizv+IIUvuS50 SQaQwGnGmHd1X8QztAbZ+4ttAN7BKGuPX2Wt72aPUsgcICNdff71KQFsEpUCL0dk UItPAyWagOT/Kn93viOgBkNL2Z7q+CYmgUg= -----END CERTIFICATE-----Generated at Sat Apr 12 14:05:16 2025 by rpki-client