$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa File: de150f3e-630a-34f4-a9f4-8aae30296160.roa (raw, json) Hash identifier: C3TNrnKZNF9iuDg2e3hl5TkMI3yp8b8joPSyJJMiFHw= Subject key identifier: DB:87:29:08:47:06:2B:66:76:B5:12:FD:69:7F:1B:0A:BD:6D:FB:8C Certificate issuer: /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Certificate serial: 010D0C9F432858488DAB51123DEF11DCB03AC800 Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 14618 IP address blocks: 2620:197:de0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:51:12:3d:ef:11:dc:b0:3a:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=f1791a8e-428f-49b4-80f6-06b934897b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:a1:ed:3c:b3:e0:73:64:4d:12:a5:ae:b3: c7:da:29:26:fe:8a:aa:34:37:7a:7d:15:e0:f8:f7: ff:53:b6:db:6d:c4:6e:87:ac:d9:0c:57:76:10:9b: 42:0d:89:4c:72:7b:02:84:31:92:dc:3c:df:9d:07: a0:a4:36:ec:8f:84:90:4d:73:a3:8c:20:9f:dc:62: 86:d8:81:93:84:44:0c:e1:4c:63:7a:59:5c:51:38: 7c:02:aa:88:24:25:b9:ff:c6:8c:c0:53:a9:ba:a3: db:91:06:67:32:c5:02:3e:2e:6c:a9:90:a1:fc:54: 48:85:d6:59:56:e9:8d:d7:5a:61:9f:05:61:e7:8b: 49:c2:63:19:6f:d3:6b:e8:ae:30:a9:db:a1:19:ca: 15:c9:c8:04:c3:77:92:15:a9:e4:dd:0b:a3:6f:19: 83:c6:01:ed:b0:40:4b:98:02:38:4c:7a:14:8d:3c: a4:14:d1:03:24:01:e0:c9:1d:bb:c7:f4:2b:f3:e7: e0:be:ca:be:fd:23:04:a2:e1:e9:5e:5c:79:d5:42: 3e:3b:a4:6b:f5:65:3f:ea:c0:a8:fa:75:05:ca:29: 18:da:e1:89:7d:e9:02:fd:b4:10:49:f4:d3:5a:b4: 16:83:d1:d7:d9:28:06:54:7e:87:c5:8e:c7:09:dc: dc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:87:29:08:47:06:2B:66:76:B5:12:FD:69:7F:1B:0A:BD:6D:FB:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl X509v3 Authority Key Identifier: keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer sbgp-ipAddrBlock: critical IPv6: 2620:197:de0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:48:21:a3:8a:59:f1:f7:e4:bb:f1:98:6b:ab:66:5e:0c:34: 48:89:4c:e1:0d:5c:36:9f:bc:c8:5b:8a:d9:b4:32:8d:4e:e2: 55:88:a6:69:47:87:b7:23:ad:e6:b8:a3:8e:34:c0:ba:d6:f1: c9:58:66:2b:1a:42:6a:48:91:07:1d:e7:12:be:7e:64:8a:c5: 5d:c5:ca:64:12:0a:0f:b6:ae:a2:ca:89:de:12:2f:94:c1:4b: 99:9d:11:d7:b7:02:b7:df:99:07:4e:29:f3:b4:7f:8e:7c:ea: 1d:e6:a4:b1:3b:64:d7:9e:fe:ad:94:95:e9:d3:71:a8:7e:b1: 55:10:c6:50:17:05:e1:56:74:5d:32:7a:cb:61:95:a7:4d:67: 35:08:27:bf:0b:2c:49:b4:99:d9:4a:ba:fb:c0:aa:e5:16:9c: d9:99:cf:84:97:08:ae:74:dd:93:c7:a7:1c:7b:ee:47:4b:87: b5:89:ea:0a:8e:ce:f8:0c:b1:c1:ba:71:44:2e:6c:d2:9d:e7: 25:c6:00:aa:a4:93:3f:ac:1f:90:dc:cf:d9:40:78:dd:95:6e: 52:25:25:42:f2:7f:47:84:7b:88:18:9a:aa:6f:37:ab:ba:fa: 8d:4d:46:74:17:e8:46:74:4a:a4:16:0c:2c:fc:7f:a7:be:2f: e1:c0:b9:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiNq1ESPe8R3LA6yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4 ZGMzMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk ZjE3OTFhOGUtNDI4Zi00OWI0LTgwZjYtMDZiOTM0ODk3YjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlqh7Tyz4HNkTRKlrrPH2ikm/oqqNDd6fRXg +Pf/U7bbbcRuh6zZDFd2EJtCDYlMcnsChDGS3DzfnQegpDbsj4SQTXOjjCCf3GKG 2IGThEQM4UxjellcUTh8AqqIJCW5/8aMwFOpuqPbkQZnMsUCPi5sqZCh/FRIhdZZ VumN11phnwVh54tJwmMZb9Nr6K4wqduhGcoVycgEw3eSFank3QujbxmDxgHtsEBL mAI4THoUjTykFNEDJAHgyR27x/Qr8+fgvsq+/SMEouHpXlx51UI+O6Rr9WU/6sCo +nUFyikY2uGJfekC/bQQSfTTWrQWg9HX2SgGVH6HxY7HCdzcvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNuHKQhHBitmdrUS/Wl/Gwq9bfuMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4 ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvZGUxNTBmM2UtNjMwYS0z NGY0LWE5ZjQtOGFhZTMwMjk2MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0 OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw3g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEFIIaOKWfH35LvxmGurZl4MNEiJTOENXDafvMhbitm0Mo1O4lWI pmlHh7cjrea4o440wLrW8clYZisaQmpIkQcd5xK+fmSKxV3FymQSCg+2rqLKid4S L5TBS5mdEde3ArffmQdOKfO0f4586h3mpLE7ZNee/q2UlenTcah+sVUQxlAXBeFW dF0yesthladNZzUIJ78LLEm0mdlKuvvAquUWnNmZz4SXCK503ZPHpxx77kdLh7WJ 6gqOzvgMscG6cUQubNKd5yXGAKqkkz+sH5Dcz9lAeN2VblIlJULyf0eEe4gYmqpv N6u6+o1NRnQX6EZ0SqQWDCz8f6e+L+HAuVg= -----END CERTIFICATE-----Generated at Fri Apr 4 18:58:22 2025 by rpki-client