$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa File: f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa (raw, json) Hash identifier: vbIfchyIZ5lyR2ynYZqg5cOOhB1j0Sk0+Q1Bm/6RKRE= Subject key identifier: 17:FD:25:88:16:44:B0:C7:59:49:71:54:9F:34:F0:2F:50:83:A7:E0 Certificate issuer: /CN=da62f168-0c26-4931-a3e3-4abaa31177f0 Certificate serial: 010D0C9F432858490B4C26EC89A48532CE3618C0 Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2620:c3:e000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:26:ec:89:a4:85:32:ce:36:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=844f8e4b-a462-4639-8873-0f50ae90f0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:b7:a9:d6:f9:7e:99:b7:dd:1d:d2:b7:c4: 5d:93:dd:94:4c:c1:ba:05:7c:84:f7:ef:25:55:83: 6e:69:5c:a6:07:7a:eb:91:16:92:11:41:e0:5e:43: 39:49:9b:62:b3:84:d2:40:5b:82:5c:26:c6:da:a5: 53:bc:84:e2:f5:7a:45:1e:4f:6a:4a:16:bb:3c:7e: 7d:f3:c8:ed:f8:46:01:e6:31:d0:b2:9c:be:5e:ab: 56:83:a6:37:a6:80:12:c2:40:df:23:8e:d8:45:d2: 27:0c:88:08:a7:56:ab:ad:93:d1:b7:d0:1a:03:fa: 24:15:42:00:a5:ee:78:d8:b9:c9:51:13:3d:8f:7d: 46:21:75:c5:bc:a9:99:b4:14:8d:e5:c5:f8:c2:07: c9:b7:9b:1d:b9:70:52:21:93:8c:bb:bc:5a:be:e4: a5:87:89:33:d3:2b:b0:69:af:61:94:e2:1d:e2:cf: d9:8d:a3:a5:fc:22:78:71:ed:6d:d6:69:b5:f3:50: 8e:bc:a5:d2:9f:e3:b1:66:17:a1:ba:13:be:40:91: 34:45:d6:fd:fa:65:dd:c2:cd:76:bd:28:45:33:2b: 7c:b5:ac:a9:ee:61:d1:30:c7:23:f9:cc:1e:29:c8: c4:42:0e:b8:e8:d7:e1:45:bc:ec:ec:f8:71:0c:c5: d4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FD:25:88:16:44:B0:C7:59:49:71:54:9F:34:F0:2F:50:83:A7:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl X509v3 Authority Key Identifier: keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer sbgp-ipAddrBlock: critical IPv6: 2620:c3:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4b:8e:9c:62:5d:dd:31:b2:55:f4:c5:8a:cb:64:1c:42:ca: 75:88:6b:9a:c2:5f:77:27:e4:71:1a:c3:75:96:98:5d:0c:42: 31:a4:d4:a4:a4:a0:aa:da:ff:29:25:d3:20:1c:b9:d5:c4:b7: 27:dc:6b:12:24:dd:9c:1a:ef:bf:a1:96:c2:37:fe:47:dd:d8: ce:cf:eb:43:32:92:41:da:f7:7c:3e:b5:22:b6:e3:4a:4a:57: b4:74:38:1e:46:a8:6c:df:1f:a6:d0:9f:b9:00:cc:26:0b:f1: 95:81:a3:85:e9:55:87:e5:ed:f3:46:07:56:41:40:0a:69:fa: a4:d4:ac:95:46:af:7e:84:99:9f:a3:06:1d:b8:2c:ac:3b:82: 5a:c1:e9:2b:b4:ea:8c:61:a1:47:09:e6:5d:90:68:90:a0:9b: 9f:73:b4:e3:ca:44:c5:45:6f:db:8d:f9:25:a4:7f:24:6d:cd: f2:d7:13:91:e3:0d:10:da:0d:25:24:f6:6a:6e:eb:2e:8a:27: 61:00:d1:2f:fa:41:61:95:69:b2:a2:ed:1e:fd:5b:76:d1:71: 1f:25:d2:40:5d:ce:64:46:22:f0:00:1a:e2:86:44:9b:bc:31: 85:e1:1d:2e:52:ec:d1:7c:cc:3b:4c:b9:66:9d:25:e9:d7:c4: 46:5d:94:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkLTCbsiaSFMs42GMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MmYxNjgtMGMyNi00OTMxLWEzZTMtNGFiYWEzMTE3 N2YwMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ODQ0ZjhlNGItYTQ2Mi00NjM5LTg4NzMtMGY1MGFlOTBmMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQu3qdb5fpm33R3St8Rdk92UTMG6BXyE9+8l VYNuaVymB3rrkRaSEUHgXkM5SZtis4TSQFuCXCbG2qVTvITi9XpFHk9qSha7PH59 88jt+EYB5jHQspy+XqtWg6Y3poASwkDfI47YRdInDIgIp1arrZPRt9AaA/okFUIA pe542LnJURM9j31GIXXFvKmZtBSN5cX4wgfJt5sduXBSIZOMu7xavuSlh4kz0yuw aa9hlOId4s/ZjaOl/CJ4ce1t1mm181COvKXSn+OxZhehuhO+QJE0Rdb9+mXdws12 vShFMyt8tayp7mHRMMcj+cweKcjEQg646NfhRbzs7PhxDMXUPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBf9JYgWRLDHWUlxVJ808C9Qg6fgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYy ZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJhYTMxMTc3ZjAvZjUzM2QxNmUtZjBiMC0z YjM2LThhYWItMzJlZDViMTA3ODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2MmYxNjgtMGMyNi00OTMxLWEz ZTMtNGFiYWEzMTE3N2YwL2RhNjJmMTY4LTBjMjYtNDkzMS1hM2UzLTRhYmFhMzEx NzdmMC5jcmwwHwYDVR0jBBgwFoAUfROpS3VMZyRtsvrl5XQi7LMcxiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYyZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJh YTMxMTc3ZjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAw+AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHBLjpxiXd0xslX0xYrLZBxCynWIa5rCX3cn5HEaw3WWmF0MQjGk 1KSkoKra/ykl0yAcudXEtyfcaxIk3Zwa77+hlsI3/kfd2M7P60MykkHa93w+tSK2 40pKV7R0OB5GqGzfH6bQn7kAzCYL8ZWBo4XpVYfl7fNGB1ZBQApp+qTUrJVGr36E mZ+jBh24LKw7glrB6Su06oxhoUcJ5l2QaJCgm59ztOPKRMVFb9uN+SWkfyRtzfLX E5HjDRDaDSUk9mpu6y6KJ2EA0S/6QWGVabKi7R79W3bRcR8l0kBdzmRGIvAAGuKG RJu8MYXhHS5S7NF8zDtMuWadJenXxEZdlPA= -----END CERTIFICATE-----Generated at Fri Mar 14 11:27:59 2025 by rpki-client