$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53/bcd1faee-ce5b-3d78-b400-22fd98f2fb9b.roa File: bcd1faee-ce5b-3d78-b400-22fd98f2fb9b.roa (raw, json) Hash identifier: C0QDCnoex1SMsroHUJIs6ALeH+XfAdIjFPLL8MS2wSc= Subject key identifier: D5:D1:0E:66:90:4B:48:13:2E:F4:5D:84:28:80:1A:26:06:2C:8A:78 Certificate issuer: /CN=4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53 Certificate serial: 010D0C9F4328584905B6B8A077A68A7B53D34500 Authority key identifier: 3E:63:10:DF:80:E6:E0:26:48:F7:3E:3C:DD:CF:7C:5C:BA:A4:1A:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53/bcd1faee-ce5b-3d78-b400-22fd98f2fb9b.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 393401 IP address blocks: 2620:6e:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53/4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53/4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b8:a0:77:a6:8a:7b:53:d3:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=afa9ea77-3ef6-41f9-8a7e-08e194523532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:15:a0:0d:d3:22:db:78:3c:00:f6:8a:d0:dd: 2e:d2:ed:38:17:60:a4:be:41:13:6e:5e:40:88:0d: 9a:29:4c:28:16:b6:55:40:b9:e4:89:3f:29:f7:0f: 16:67:79:59:2b:64:b8:23:f5:b3:d8:94:9f:a0:a9: d3:54:cb:98:cf:4e:c9:c5:fc:df:f9:7d:20:d8:0c: 4d:85:ab:bf:85:ad:73:f3:96:4b:3c:da:cd:4e:47: dd:06:a3:de:80:4b:74:ae:54:80:aa:5d:5a:c5:ed: 4c:98:a9:b1:a9:7a:5f:55:95:b0:16:6f:a6:68:4e: 27:92:a8:8a:3a:e4:8f:c7:b1:cd:ac:a0:f3:3b:86: 0d:50:60:fa:32:56:2e:be:6f:41:fb:b7:a5:85:d5: 81:c9:34:a4:3f:89:ff:19:d3:de:d7:56:02:b8:d4: 8c:f8:5b:c4:c9:22:aa:21:26:4c:2b:e5:68:14:19: 65:3f:74:a6:ad:8d:f2:0c:98:05:dc:fe:e9:59:ba: d6:8b:dd:6c:bb:69:01:e4:67:4f:cc:f2:63:4e:a8: 6c:3e:64:66:c5:e8:f5:ed:0d:4d:6b:13:fd:04:3b: fd:06:15:c6:fb:db:e9:e2:9f:60:bd:e9:7a:5f:e2: 02:2e:26:29:78:3e:f3:d9:81:09:2b:57:a2:84:bf: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D1:0E:66:90:4B:48:13:2E:F4:5D:84:28:80:1A:26:06:2C:8A:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53/bcd1faee-ce5b-3d78-b400-22fd98f2fb9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53/4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53.crl X509v3 Authority Key Identifier: keyid:3E:63:10:DF:80:E6:E0:26:48:F7:3E:3C:DD:CF:7C:5C:BA:A4:1A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4a1b6541-d1ec-4d99-8c6c-99bdff0c1e53.cer sbgp-ipAddrBlock: critical IPv6: 2620:6e:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c4:98:a6:ae:4e:59:fb:1f:8c:e5:d9:e2:d8:c3:20:99:76: 3f:cd:df:16:d8:de:af:26:d4:54:cb:9d:bd:76:10:f6:99:a9: 0c:a4:09:81:c3:75:fc:ce:72:c0:db:0d:c6:38:99:3b:22:75: d3:04:37:38:16:eb:e3:ca:14:f0:63:4c:bd:cb:01:1c:82:7d: 3a:c2:cf:c2:d2:06:43:fe:d9:a5:8f:d2:cd:3f:3c:81:5b:45: 66:72:d1:d3:10:43:be:a3:9d:8a:42:87:b2:3a:56:7d:d5:3f: 3b:fc:d0:2e:0a:61:59:55:04:e3:bf:8b:6b:fa:12:52:fa:d4: 3f:e7:7e:fe:4d:74:c3:c0:e5:7a:78:6b:13:30:e8:2e:37:f9: 76:e0:08:94:b5:0f:05:4e:f5:c9:12:37:bf:58:e6:6f:23:b5: 03:36:e4:39:7e:f4:f7:8f:06:67:ec:d2:10:da:6e:66:df:0b: d5:b2:24:cd:f1:cc:f1:0d:ad:33:8b:b2:2d:a4:df:78:2c:c0: 95:50:1d:46:15:cc:5b:4c:cc:a0:bb:c1:c2:7b:0b:40:eb:bf: d5:0c:3a:d0:8d:e3:43:1f:11:45:4b:3b:b4:53:0d:29:dc:f2: bc:de:21:26:e0:0e:3f:28:c8:df:17:d5:2b:c6:7f:51:ae:16: 1c:88:db:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkFtrigd6aKe1PTRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGExYjY1NDEtZDFlYy00ZDk5LThjNmMtOTliZGZmMGMx ZTUzMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk YWZhOWVhNzctM2VmNi00MWY5LThhN2UtMDhlMTk0NTIzNTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBWgDdMi23g8APaK0N0u0u04F2CkvkETbl5A iA2aKUwoFrZVQLnkiT8p9w8WZ3lZK2S4I/Wz2JSfoKnTVMuYz07Jxfzf+X0g2AxN hau/ha1z85ZLPNrNTkfdBqPegEt0rlSAql1axe1MmKmxqXpfVZWwFm+maE4nkqiK OuSPx7HNrKDzO4YNUGD6MlYuvm9B+7elhdWByTSkP4n/GdPe11YCuNSM+FvEySKq ISZMK+VoFBllP3SmrY3yDJgF3P7pWbrWi91su2kB5GdPzPJjTqhsPmRmxej17Q1N axP9BDv9BhXG+9vp4p9gvel6X+ICLiYpeD7z2YEJK1eihL9sdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNXRDmaQS0gTLvRdhCiAGiYGLIp4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YTFi NjU0MS1kMWVjLTRkOTktOGM2Yy05OWJkZmYwYzFlNTMvYmNkMWZhZWUtY2U1Yi0z ZDc4LWI0MDAtMjJmZDk4ZjJmYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGExYjY1NDEtZDFlYy00ZDk5LThj NmMtOTliZGZmMGMxZTUzLzRhMWI2NTQxLWQxZWMtNGQ5OS04YzZjLTk5YmRmZjBj MWU1My5jcmwwHwYDVR0jBBgwFoAUPmMQ34Dm4CZI9z483c98XLqkGvkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YTFiNjU0MS1kMWVjLTRkOTktOGM2Yy05OWJk ZmYwYzFlNTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAbsAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD7EmKauTln7H4zl2eLYwyCZdj/N3xbY3q8m1FTLnb12EPaZqQyk CYHDdfzOcsDbDcY4mTsiddMENzgW6+PKFPBjTL3LARyCfTrCz8LSBkP+2aWP0s0/ PIFbRWZy0dMQQ76jnYpCh7I6Vn3VPzv80C4KYVlVBOO/i2v6ElL61D/nfv5NdMPA 5Xp4axMw6C43+XbgCJS1DwVO9ckSN79Y5m8jtQM25Dl+9PePBmfs0hDabmbfC9Wy JM3xzPENrTOLsi2k33gswJVQHUYVzFtMzKC7wcJ7C0Drv9UMOtCN40MfEUVLO7RT DSnc8rzeISbgDj8oyN8X1SvGf1GuFhyI22k= -----END CERTIFICATE-----Generated at Wed Apr 16 14:48:51 2025 by rpki-client