$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/5a2746dd-ae6d-32f0-a103-8cbc447241ea.roa File: 5a2746dd-ae6d-32f0-a103-8cbc447241ea.roa (raw, json) Hash identifier: h58OknUs4ucvFTljttsUlm4v/DH8cc7pfaGsUnadYOs= Subject key identifier: C8:E3:53:C7:47:63:98:0D:DF:A0:C7:4A:88:78:50:2B:E1:2E:EB:84 Certificate issuer: /CN=e51abfb2-ff55-4866-8f32-d2fc9346d303 Certificate serial: 010D0C9F4328584921840351055E6A7742AFEE00 Authority key identifier: 0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/5a2746dd-ae6d-32f0-a103-8cbc447241ea.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 2620:20:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:03:51:05:5e:6a:77:42:af:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e51abfb2-ff55-4866-8f32-d2fc9346d303 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=12dd2dc6-38e7-4dba-ba5b-b5397491ecee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:04:42:a4:18:5b:64:0a:57:29:4b:56:76:da: 48:e6:1f:0e:c1:ea:db:49:e9:30:01:1f:6c:ea:76: ed:a7:ad:9e:e8:90:3f:e8:89:6f:22:e9:62:9c:33: 8e:8c:b3:72:d5:71:d9:58:13:04:7c:96:49:c7:91: 7c:8a:69:c5:ac:f7:ca:41:db:23:0b:e9:e1:6a:27: 0b:ed:00:84:0c:14:3c:57:16:30:de:cd:0f:f6:8b: 1c:c4:12:56:60:30:65:15:0a:bd:e3:04:be:24:98: c5:74:8b:c2:43:63:72:43:a1:bb:bf:f0:d4:cc:96: 12:ec:62:29:85:88:78:ac:8b:93:29:1a:b8:dd:a4: ec:9b:f5:53:ec:4a:f3:53:47:91:e5:b2:ee:d1:23: 20:72:d2:d6:8c:5b:67:fb:4f:74:68:a6:7f:6d:ca: b0:ff:b5:45:62:cb:0a:c4:8b:30:ff:3b:46:1e:f3: 93:44:e5:76:a6:1e:7f:59:a4:47:e8:2b:41:a0:c3: a8:76:30:48:d1:29:fe:e1:48:63:cc:bf:fc:96:bf: 2a:13:4b:c6:91:37:85:55:03:ab:eb:02:5b:a1:9c: 83:53:72:7c:6c:7a:96:2f:df:a4:b9:06:34:6b:89: 53:e4:69:f1:21:89:b7:b3:66:f4:da:50:c2:be:65: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E3:53:C7:47:63:98:0D:DF:A0:C7:4A:88:78:50:2B:E1:2E:EB:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/5a2746dd-ae6d-32f0-a103-8cbc447241ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl X509v3 Authority Key Identifier: keyid:0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer sbgp-ipAddrBlock: critical IPv6: 2620:20:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:31:af:e1:5d:80:72:4b:6a:37:95:56:05:e3:cb:9b:d1:a3: c0:9f:2f:e0:95:fe:84:15:1a:be:40:72:4c:83:6b:3a:cd:33: 28:89:3b:b7:a1:04:75:ec:fe:33:70:d0:1b:48:d9:67:5e:5a: 10:eb:f4:0d:a8:77:b7:8e:0d:ed:f0:d7:b8:d1:fe:79:68:7e: 31:ef:d6:45:f3:e9:4e:ab:d9:d4:4a:16:7b:fe:89:8a:df:fd: 23:79:d7:00:cf:37:eb:a7:7f:80:ac:e6:bd:54:a9:b4:63:b9: 36:94:9d:29:72:ad:cc:db:9c:57:86:3b:cc:cd:d4:a3:7f:c0: ac:72:bd:27:5e:18:7a:df:2f:57:71:75:ab:61:5e:6d:f8:1d: d6:f1:77:96:13:59:16:62:41:59:f5:6d:64:62:04:15:2c:b2: 59:f5:ef:29:65:be:19:c9:ab:d4:15:53:8b:d3:08:a4:2a:ec: 5f:e9:8a:2a:58:56:d6:bf:6b:bd:d4:6f:c3:42:93:30:8b:13: fa:36:b2:37:53:1c:16:5c:27:f2:a1:be:52:3e:31:e3:06:f4: 2e:d1:ff:22:67:08:5c:34:74:ab:e6:4a:4f:85:20:f8:ab:b4: 1e:27:28:47:88:44:ca:98:56:fa:05:1e:1b:35:4c:8b:e0:0f: b2:95:81:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhANRBV5qd0Kv7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTUxYWJmYjItZmY1NS00ODY2LThmMzItZDJmYzkzNDZk MzAzMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MTJkZDJkYzYtMzhlNy00ZGJhLWJhNWItYjUzOTc0OTFlY2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigRCpBhbZApXKUtWdtpI5h8OwerbSekwAR9s 6nbtp62e6JA/6IlvIulinDOOjLNy1XHZWBMEfJZJx5F8imnFrPfKQdsjC+nhaicL 7QCEDBQ8VxYw3s0P9oscxBJWYDBlFQq94wS+JJjFdIvCQ2NyQ6G7v/DUzJYS7GIp hYh4rIuTKRq43aTsm/VT7ErzU0eR5bLu0SMgctLWjFtn+090aKZ/bcqw/7VFYssK xIsw/ztGHvOTROV2ph5/WaRH6CtBoMOodjBI0Sn+4UhjzL/8lr8qE0vGkTeFVQOr 6wJboZyDU3J8bHqWL9+kuQY0a4lT5GnxIYm3s2b02lDCvmXmuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMjjU8dHY5gN36DHSoh4UCvhLuuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNTFh YmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZjOTM0NmQzMDMvNWEyNzQ2ZGQtYWU2ZC0z MmYwLWExMDMtOGNiYzQ0NzI0MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTUxYWJmYjItZmY1NS00ODY2LThm MzItZDJmYzkzNDZkMzAzL2U1MWFiZmIyLWZmNTUtNDg2Ni04ZjMyLWQyZmM5MzQ2 ZDMwMy5jcmwwHwYDVR0jBBgwFoAUDvT5JuL94JoF5JVDUqYmwxmh63QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNTFhYmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZj OTM0NmQzMDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIIAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG0xr+FdgHJLajeVVgXjy5vRo8CfL+CV/oQVGr5AckyDazrNMyiJ O7ehBHXs/jNw0BtI2WdeWhDr9A2od7eODe3w17jR/nlofjHv1kXz6U6r2dRKFnv+ iYrf/SN51wDPN+unf4Cs5r1UqbRjuTaUnSlyrczbnFeGO8zN1KN/wKxyvSdeGHrf L1dxdathXm34Hdbxd5YTWRZiQVn1bWRiBBUssln17yllvhnJq9QVU4vTCKQq7F/p iipYVta/a73Ub8NCkzCLE/o2sjdTHBZcJ/KhvlI+MeMG9C7R/yJnCFw0dKvmSk+F IPirtB4nKEeIRMqYVvoFHhs1TIvgD7KVgeE= -----END CERTIFICATE-----Generated at Fri Mar 14 09:27:14 2025 by rpki-client