$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/8784cf8c-9b11-362d-91e0-48fb10c6a1a5.roa File: 8784cf8c-9b11-362d-91e0-48fb10c6a1a5.roa (raw, json) Hash identifier: QuUbxduR+I9tyZD7kHDd/xjxwIppynOR4aHua/2XdTU= Subject key identifier: 09:3B:5C:A2:C8:94:FD:E0:9C:BB:D5:58:26:96:B2:9C:A5:E2:E0:2F Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584940394A78CCCCA896D23A30C0 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/8784cf8c-9b11-362d-91e0-48fb10c6a1a5.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 14618 IP address blocks: 2620:1f7:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4a:78:cc:cc:a8:96:d2:3a:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=286d0801-bbbd-4229-841d-08d5bc2a4a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6d:df:61:7a:63:07:09:77:21:65:28:d3:b4: 12:32:81:39:7c:72:08:dc:48:a0:99:f7:ed:1b:f6: af:80:e6:f8:2c:38:f5:5a:dc:5d:4e:26:4b:5b:f0: 42:f7:44:ae:c4:30:c2:25:cc:34:fe:3a:5d:aa:c4: 06:41:ae:4c:27:c3:00:6e:23:d8:89:53:26:fe:05: c7:55:39:a4:5a:9c:51:17:16:9b:a2:21:11:eb:85: e2:32:ed:b3:be:a4:1f:70:71:19:af:53:23:f3:98: b0:73:43:87:05:76:80:cb:ae:4e:97:9b:4e:8f:2c: 1d:f6:e3:92:17:1b:ce:04:2a:54:30:ef:f4:34:04: d5:d6:c2:ab:94:50:4b:ff:2f:36:6f:2b:ff:15:72: 6e:72:e5:a2:d1:39:97:f9:ad:11:e3:1f:3b:af:54: bf:c3:d2:99:e0:f2:ad:d3:9e:5e:1f:21:5a:dc:0c: 17:b8:bb:60:9b:0d:f8:c8:3f:7b:1b:ad:59:cd:45: 99:b8:a5:50:e4:52:e1:f1:ac:8b:a5:36:2e:4d:c1: 83:23:cc:d3:61:11:ea:56:48:5c:58:2f:08:e0:fa: b0:08:0e:61:e6:f7:69:39:1e:d6:ff:cd:cd:08:ac: 8d:73:5d:16:35:49:be:1b:a9:9c:5c:55:e2:77:d6: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3B:5C:A2:C8:94:FD:E0:9C:BB:D5:58:26:96:B2:9C:A5:E2:E0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/8784cf8c-9b11-362d-91e0-48fb10c6a1a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv6: 2620:1f7:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:82:fa:f9:c5:42:9b:6b:1e:ff:76:37:22:e9:2e:37:93:56: 01:be:14:64:84:56:37:d0:c9:72:8d:7a:09:d0:0e:62:7a:c2: 4e:c9:5a:6f:25:bf:6c:79:5e:9f:40:40:3f:56:94:18:78:24: 99:45:4a:b0:c9:94:46:46:bd:45:f3:37:88:bc:7b:0d:3d:02: 4a:10:00:bb:24:78:f1:65:c5:18:9e:e1:b7:61:ea:f4:9f:0c: 31:80:40:8e:d1:8d:f0:bd:70:40:5b:8c:72:17:36:e4:fe:c0: 65:6c:78:4d:fd:70:4b:4d:a3:f6:29:51:12:9a:e7:13:1e:47: 6e:8b:63:e8:5b:32:fa:0c:fa:36:6b:c1:a1:25:c1:54:91:29: 6d:a2:61:3e:6b:e1:33:f2:4d:97:53:76:dc:52:a7:9f:70:c6: e0:74:ae:7d:59:68:27:1f:5d:27:b6:ac:a3:6a:42:41:76:a4: 82:4b:1a:b8:cc:a8:25:dc:cf:b8:aa:3e:4b:1d:20:c9:69:54: db:68:99:98:30:7e:79:1e:ac:5e:b3:f8:e7:ac:5f:e9:ba:75: b5:92:67:1f:93:d3:51:e6:f5:15:6e:09:ff:bc:0f:a8:26:e4: 76:63:1e:43:30:82:d6:c3:df:4c:40:3e:b4:bd:21:a0:92:a6: ba:57:7d:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOUp4zMyoltI6MMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk Mjg2ZDA4MDEtYmJiZC00MjI5LTg0MWQtMDhkNWJjMmE0YTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm3fYXpjBwl3IWUo07QSMoE5fHII3Eigmfft G/avgOb4LDj1WtxdTiZLW/BC90SuxDDCJcw0/jpdqsQGQa5MJ8MAbiPYiVMm/gXH VTmkWpxRFxaboiER64XiMu2zvqQfcHEZr1Mj85iwc0OHBXaAy65Ol5tOjywd9uOS FxvOBCpUMO/0NATV1sKrlFBL/y82byv/FXJucuWi0TmX+a0R4x87r1S/w9KZ4PKt 055eHyFa3AwXuLtgmw34yD97G61ZzUWZuKVQ5FLh8ayLpTYuTcGDI8zTYRHqVkhc WC8I4PqwCA5h5vdpOR7W/83NCKyNc10WNUm+G6mcXFXid9ZV+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAk7XKLIlP3gnLvVWCaWspyl4uAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvODc4NGNmOGMtOWIxMS0z NjJkLTkxZTAtNDhmYjEwYzZhMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADSC+vnFQptrHv92NyLpLjeTVgG+FGSEVjfQyXKNegnQDmJ6wk7J Wm8lv2x5Xp9AQD9WlBh4JJlFSrDJlEZGvUXzN4i8ew09AkoQALskePFlxRie4bdh 6vSfDDGAQI7RjfC9cEBbjHIXNuT+wGVseE39cEtNo/YpURKa5xMeR26LY+hbMvoM +jZrwaElwVSRKW2iYT5r4TPyTZdTdtxSp59wxuB0rn1ZaCcfXSe2rKNqQkF2pIJL GrjMqCXcz7iqPksdIMlpVNtomZgwfnkerF6z+OesX+m6dbWSZx+T01Hm9RVuCf+8 D6gm5HZjHkMwgtbD30xAPrS9IaCSprpXfdM= -----END CERTIFICATE-----Generated at Fri Apr 4 23:32:41 2025 by rpki-client