$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f8ed1838-7ca7-384a-990b-6e78286fd5e5.roa File: f8ed1838-7ca7-384a-990b-6e78286fd5e5.roa (raw, json) Hash identifier: ddNCy48N+45b/lntsFKygtfrof+EZOB6jhbmXX3yETs= Subject key identifier: 8F:43:D0:44:FE:7D:28:B3:92:71:C4:7B:79:35:65:79:64:02:4C:02 Certificate issuer: /CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4 Certificate serial: 010D0C9F43285849350EAF091DD1AC372C635080 Authority key identifier: 59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f8ed1838-7ca7-384a-990b-6e78286fd5e5.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 12129 IP address blocks: 2620:11f:7008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:af:09:1d:d1:ac:37:2c:63:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=275cf2fe-85f6-4c4c-8700-e02b1fcb8a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:65:df:ab:6c:fa:ac:1d:36:28:37:3c:95: b3:62:d8:ca:21:0f:60:96:5f:9c:50:fd:5a:0f:68: dc:9e:dd:4e:41:81:93:16:0d:5f:93:16:cd:55:13: 9c:d5:bf:fb:a7:16:b4:43:d4:c4:6c:ea:24:65:7a: 18:cf:6f:9f:67:ea:31:30:18:4e:4d:74:8a:3d:8a: 7a:0e:a4:86:7e:1c:d6:96:28:92:7b:ab:31:41:13: a0:0e:cd:84:7f:16:c4:1a:12:db:db:83:9d:47:c7: c0:5a:a8:3e:9a:2a:2e:ff:ca:f0:55:79:37:bc:3e: 40:fe:e1:6b:03:dd:23:6f:7d:3d:de:f2:c6:87:e0: 21:a4:83:be:c6:1b:25:54:72:6b:34:2e:78:3d:62: 7d:a3:e3:8e:d9:2e:9f:c7:1a:41:8b:3c:94:84:81: 0f:24:1e:16:b2:a0:08:f0:fb:d8:91:31:92:b4:5c: b1:c2:8c:ac:e3:6a:84:53:e8:8d:cb:52:5c:8c:1b: da:bf:43:b6:60:f3:ff:9e:ca:84:c7:8d:b7:61:3a: 66:3e:c4:60:32:5a:fd:41:6f:5c:8f:8d:13:bc:95: f4:cf:92:c7:fc:a7:b0:64:b5:2e:ae:a7:33:6e:1a: 5d:e1:ff:9f:06:72:b1:2f:56:87:c4:ee:32:e6:85: 69:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:43:D0:44:FE:7D:28:B3:92:71:C4:7B:79:35:65:79:64:02:4C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f8ed1838-7ca7-384a-990b-6e78286fd5e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl X509v3 Authority Key Identifier: keyid:59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer sbgp-ipAddrBlock: critical IPv6: 2620:11f:7008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4d:10:de:f2:f7:a8:37:44:2f:50:8d:8e:5f:8f:70:a2:a2: 22:d3:d0:2a:7f:4b:bc:9e:7f:be:4c:f2:06:b4:8f:f1:62:e3: e6:3f:f6:fa:03:e7:cb:5a:46:ae:5d:e2:39:2d:1b:61:9b:00: 8b:e6:6f:0d:c2:b4:9c:74:ae:db:3b:5b:7e:7d:9d:ff:59:e4: d7:bb:eb:15:4e:bc:2e:29:b2:b2:ff:71:1f:86:d6:8d:9f:ff: 2d:08:59:71:b3:1e:f6:0c:22:c4:a7:02:f1:c5:06:18:b5:b1: cf:ff:85:6e:90:c8:9b:0a:40:bf:fe:0c:95:59:78:8c:7c:2a: eb:fa:e0:07:51:bf:23:cc:98:ff:70:5e:af:62:e3:65:aa:27: fa:31:78:4f:58:d4:39:59:5b:e0:42:f3:11:d1:74:4e:08:2f: 32:42:f3:18:34:e1:18:ef:bb:3a:6a:78:e2:2d:05:e4:d8:34: 06:be:3b:61:4c:70:e5:00:8b:7a:1b:2d:70:5a:f9:14:c4:b5: 19:28:6a:cc:7f:c2:4e:4a:8d:0d:66:7c:2f:07:3c:f2:c3:3d: 0d:a1:f0:11:53:f8:48:21:cd:f1:ab:df:db:3d:56:68:a9:5e: 5e:8c:42:d5:af:de:ed:5b:7a:2d:fe:b9:5f:2c:9e:7d:64:0d: 93:0e:53:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1Dq8JHdGsNyxjUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmY2RlNTUtZGQ3OC00OWY4LThjNjYtODAyYTY4Yjhm NmM0MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk Mjc1Y2YyZmUtODVmNi00YzRjLTg3MDAtZTAyYjFmY2I4YTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOFl36ts+qwdNig3PJWzYtjKIQ9gll+cUP1a D2jcnt1OQYGTFg1fkxbNVROc1b/7pxa0Q9TEbOokZXoYz2+fZ+oxMBhOTXSKPYp6 DqSGfhzWliiSe6sxQROgDs2EfxbEGhLb24OdR8fAWqg+miou/8rwVXk3vD5A/uFr A90jb3093vLGh+AhpIO+xhslVHJrNC54PWJ9o+OO2S6fxxpBizyUhIEPJB4WsqAI 8PvYkTGStFyxwoys42qEU+iNy1JcjBvav0O2YPP/nsqEx423YTpmPsRgMlr9QW9c j40TvJX0z5LH/KewZLUurqczbhpd4f+fBnKxL1aHxO4y5oVpqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI9D0ET+fSizknHEe3k1ZXlkAkwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMmZj ZGU1NS1kZDc4LTQ5ZjgtOGM2Ni04MDJhNjhiOGY2YzQvZjhlZDE4MzgtN2NhNy0z ODRhLTk5MGItNmU3ODI4NmZkNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjJmY2RlNTUtZGQ3OC00OWY4LThj NjYtODAyYTY4YjhmNmM0L2YyZmNkZTU1LWRkNzgtNDlmOC04YzY2LTgwMmE2OGI4 ZjZjNC5jcmwwHwYDVR0jBBgwFoAUWSAm5tfGR2LuoxyjrDOlMszNFQAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMmZjZGU1NS1kZDc4LTQ5ZjgtOGM2Ni04MDJh NjhiOGY2YzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABH3AI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFhNEN7y96g3RC9QjY5fj3CioiLT0Cp/S7yef75M8ga0j/Fi4+Y/ 9voD58taRq5d4jktG2GbAIvmbw3CtJx0rts7W359nf9Z5Ne76xVOvC4psrL/cR+G 1o2f/y0IWXGzHvYMIsSnAvHFBhi1sc//hW6QyJsKQL/+DJVZeIx8Kuv64AdRvyPM mP9wXq9i42WqJ/oxeE9Y1DlZW+BC8xHRdE4ILzJC8xg04RjvuzpqeOItBeTYNAa+ O2FMcOUAi3obLXBa+RTEtRkoasx/wk5KjQ1mfC8HPPLDPQ2h8BFT+EghzfGr39s9 VmipXl6MQtWv3u1bei3+uV8snn1kDZMOU9o= -----END CERTIFICATE-----Generated at Sat Apr 5 12:11:40 2025 by rpki-client