$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa File: 8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa (raw, json) Hash identifier: ZszKi3RjT/ENP4vnBLI8gK7Sh/IM8/a4mnDldAHnQz8= Subject key identifier: 9F:64:90:31:81:05:5B:9B:87:F0:09:AC:52:8F:DD:0B:38:15:2D:E6 Certificate issuer: /CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Certificate serial: 010D0C9F4328584905B6B11834864A458A90D2C0 Authority key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 2607:c0c0:aaaa::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b1:18:34:86:4a:45:8a:90:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=306002a8-cdaf-4b9b-b9b5-99bf5d1acea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:29:19:cf:d1:27:80:31:60:28:a9:90:52:36: 11:5e:12:03:66:05:e0:1f:e4:30:54:8d:20:d7:e5: 29:0e:87:c8:5f:dd:d1:07:8c:0f:0b:bb:e2:20:f0: 6e:c6:b3:6c:c3:00:ae:5b:e9:5a:6e:7f:96:b4:15: b1:b0:0d:02:f8:88:c6:d5:4f:d3:dd:cb:04:7a:3b: 0a:b9:2f:96:39:b0:f3:14:6c:0f:2a:a6:77:16:61: 58:4f:c2:12:55:f9:da:65:9b:26:a1:c2:e7:b6:90: 4f:75:9a:5e:15:5c:cc:48:d2:7b:f5:79:5e:32:6d: e4:26:91:10:cf:e8:fc:6e:a7:74:71:f9:89:bb:97: 1e:44:70:9f:36:7d:96:c6:4d:b4:0e:4c:f2:02:35: da:ad:83:34:e1:3c:8e:ed:24:0b:fc:c8:7d:a8:59: 4a:a0:f4:26:6f:b1:fd:53:d8:2a:ed:6f:9d:8f:b3: e2:1d:26:f9:d3:1a:36:60:7f:81:50:27:a2:9d:2e: 8e:e1:0c:c8:30:1e:b2:c3:28:54:23:49:14:4b:d9: d1:f9:4c:19:d6:dd:39:f1:81:23:d0:c8:7b:53:1d: e5:65:5b:5c:0f:c2:b2:19:c7:ba:62:6a:84:a7:bd: f1:95:9b:89:a8:d5:bc:a2:c2:0f:66:af:99:4e:ed: e4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:64:90:31:81:05:5B:9B:87:F0:09:AC:52:8F:DD:0B:38:15:2D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl X509v3 Authority Key Identifier: keyid:59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer sbgp-ipAddrBlock: critical IPv6: 2607:c0c0:aaaa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:4a:62:7c:c2:eb:fd:7a:92:df:e1:b7:13:cd:02:fc:48:a4: 4c:c9:fc:7c:e5:2a:74:2e:b0:c6:45:f2:b9:17:71:85:d8:f4: 0a:92:00:f8:86:32:d4:87:05:a4:03:67:63:ab:1f:3b:4e:b1: e1:6c:5d:85:cf:5e:b9:a3:c7:94:8a:e4:40:e8:9c:e4:7d:b5: 6f:de:e8:b0:91:ac:99:50:8e:80:60:70:90:c2:c8:f2:5f:8a: 42:e6:21:54:53:fa:33:19:f6:ff:67:19:bd:ef:8d:33:5a:83: 58:15:12:d0:60:42:7c:27:d4:40:45:40:71:f0:b4:80:dc:31: 31:62:cb:9a:c4:37:89:1e:cb:b9:24:b5:ea:a1:47:b2:d4:f3: 20:e2:f5:2a:fc:f4:a7:7d:e4:d4:e6:f0:d4:d5:7f:a7:ed:68: 3b:20:1c:d3:ee:7a:b2:8a:87:4c:dc:ef:a5:6f:c8:3f:bd:b5: d1:c6:8d:e2:82:bc:06:4a:d5:89:50:d1:79:a5:7f:d0:4e:32: 28:72:f0:bf:b3:db:25:ff:c8:95:fa:76:27:51:e9:10:af:c0: c8:75:fa:b1:68:a8:6b:1f:40:38:0a:85:a9:07:cd:34:2c:21: 2c:48:b1:3a:df:93:48:fb:a7:62:4a:87:78:c9:75:ff:a7:5a: 6e:7c:a7:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkFtrEYNIZKRYqQ0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRjYWZlZWEtY2VlNS00NDJmLTlmNmMtNTMwYWJlYmM2 MTg2MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MzA2MDAyYTgtY2RhZi00YjliLWI5YjUtOTliZjVkMWFjZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiikZz9EngDFgKKmQUjYRXhIDZgXgH+QwVI0g 1+UpDofIX93RB4wPC7viIPBuxrNswwCuW+labn+WtBWxsA0C+IjG1U/T3csEejsK uS+WObDzFGwPKqZ3FmFYT8ISVfnaZZsmocLntpBPdZpeFVzMSNJ79XleMm3kJpEQ z+j8bqd0cfmJu5ceRHCfNn2Wxk20DkzyAjXarYM04TyO7SQL/Mh9qFlKoPQmb7H9 U9gq7W+dj7PiHSb50xo2YH+BUCeinS6O4QzIMB6ywyhUI0kUS9nR+UwZ1t058YEj 0Mh7Ux3lZVtcD8KyGce6YmqEp73xlZuJqNW8osIPZq+ZTu3k1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9kkDGBBVubh/AJrFKP3Qs4FS3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNh ZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBhYmViYzYxODYvODA3N2QxMWMtMWYyNi0z ZjRjLThjN2YtMGI1M2QzYjc5OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDRjYWZlZWEtY2VlNS00NDJmLTlm NmMtNTMwYWJlYmM2MTg2L2Q0Y2FmZWVhLWNlZTUtNDQyZi05ZjZjLTUzMGFiZWJj NjE4Ni5jcmwwHwYDVR0jBBgwFoAUWV9X8eTPjzE2ogtDdn5KrdeOieIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNhZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBh YmViYzYxODYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfAwKqq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJdKYnzC6/16kt/htxPNAvxIpEzJ/HzlKnQusMZF8rkXcYXY9AqS APiGMtSHBaQDZ2OrHztOseFsXYXPXrmjx5SK5EDonOR9tW/e6LCRrJlQjoBgcJDC yPJfikLmIVRT+jMZ9v9nGb3vjTNag1gVEtBgQnwn1EBFQHHwtIDcMTFiy5rEN4ke y7kkteqhR7LU8yDi9Sr89Kd95NTm8NTVf6ftaDsgHNPuerKKh0zc76VvyD+9tdHG jeKCvAZK1YlQ0Xmlf9BOMihy8L+z2yX/yJX6didR6RCvwMh1+rFoqGsfQDgKhakH zTQsISxIsTrfk0j7p2JKh3jJdf+nWm58pxA= -----END CERTIFICATE-----Generated at Fri Mar 14 09:03:51 2025 by rpki-client