$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa File: f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa (raw, json) Hash identifier: GR7QTrZZymJbGT9Fl5dhAtNkPmHLSVgu4avMsqlxAEU= Subject key identifier: 39:E9:B2:5C:AD:D2:7E:32:7A:F1:D3:DE:E9:25:BE:6D:22:42:A3:B8 Certificate issuer: /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Certificate serial: 010D0C9F43285848C2B64ECD660005259C2CC8C0 Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2620:197:f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:4e:cd:66:00:05:25:9c:2c:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=1bcd24c2-1b81-4bd8-bac4-f667f6dde995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:64:1a:c7:72:3b:0a:ec:4d:6a:94:3f:c4: c2:b4:97:d1:81:60:4e:dc:f9:79:ee:f3:a8:a1:1d: 0f:38:7c:67:9a:4c:69:fa:80:d1:b2:04:b3:09:5c: c6:52:d7:1c:e2:31:36:ad:fb:d2:85:8f:d8:65:b7: 3d:ee:a9:0f:07:1f:b8:c8:6b:7f:0b:e4:00:00:f1: 54:30:ac:ce:18:94:4e:44:e4:75:61:43:67:4f:84: af:f7:66:56:45:6f:d8:b2:8a:85:bb:f5:7a:bf:db: 18:1a:db:69:56:66:a5:e6:bb:da:54:22:9e:14:76: d3:48:b4:25:23:88:eb:69:9c:d5:10:ce:e8:e3:32: f8:3f:ca:65:6b:99:26:21:62:5d:f3:8a:be:63:c9: 81:ac:e6:28:42:ee:61:4e:b6:d6:2d:67:b5:d3:e5: 56:56:83:97:e0:8c:cf:46:ad:6c:b2:d9:9f:ba:cd: 08:bf:c0:cb:23:30:e9:24:52:3c:a2:3d:36:ac:e8: 17:80:41:6d:ed:8c:8d:a6:68:bd:cf:52:32:8a:75: 92:c1:13:95:09:4c:da:0b:7e:e5:85:55:1d:5a:1a: 7d:fc:2e:3e:6f:34:30:d3:15:0f:93:96:05:ae:cb: 87:ac:75:1c:6d:f0:32:de:71:1a:c3:c9:e3:68:ef: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E9:B2:5C:AD:D2:7E:32:7A:F1:D3:DE:E9:25:BE:6D:22:42:A3:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl X509v3 Authority Key Identifier: keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer sbgp-ipAddrBlock: critical IPv6: 2620:197:f00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f9:fb:33:1f:e4:01:b2:d2:e0:1a:11:00:c0:69:fa:34:b8: 69:3f:8d:39:26:aa:03:9d:c5:55:f4:70:0a:9b:57:30:46:77: f0:a8:20:6b:d2:15:4f:4a:52:82:f1:51:3b:23:8a:c0:42:73: 40:c5:84:11:61:5c:03:27:6e:0e:79:b2:a1:b0:96:16:ee:c9: c4:c9:bc:a6:8f:ee:d5:c8:b8:ff:fb:7f:35:34:54:9f:59:8c: d4:d4:a2:24:c4:f6:39:a9:4e:5b:12:65:ee:89:f2:9c:16:19: 90:39:d0:78:ee:50:34:2e:15:b9:63:af:96:2e:fa:0d:93:6d: 99:21:f8:28:a3:48:e0:9c:98:19:b2:04:6d:c3:68:be:15:86: 1a:85:d8:df:1d:88:11:bd:85:ba:ad:4f:88:06:91:e9:ed:a8: cc:43:84:a4:84:0c:1b:6f:0c:1d:b4:95:f5:72:fd:c8:2d:c9: 83:80:19:76:9c:40:4c:4e:d4:a7:1c:b7:d7:db:7e:bb:b8:e9: 31:4e:13:66:5d:98:10:2f:0b:35:8b:13:ab:6f:6d:bf:6e:43: 2b:65:ca:7e:43:70:55:93:46:cc:8f:b5:7b:f4:b7:93:ba:1b: 2b:84:5f:b6:8c:f5:c5:4d:75:f2:19:12:f8:eb:85:80:34:f8: 63:d5:ed:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjCtk7NZgAFJZwsyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4 ZGMzMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk MWJjZDI0YzItMWI4MS00YmQ4LWJhYzQtZjY2N2Y2ZGRlOTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZRkGsdyOwrsTWqUP8TCtJfRgWBO3Pl57vOo oR0POHxnmkxp+oDRsgSzCVzGUtcc4jE2rfvShY/YZbc97qkPBx+4yGt/C+QAAPFU MKzOGJROROR1YUNnT4Sv92ZWRW/YsoqFu/V6v9sYGttpVmal5rvaVCKeFHbTSLQl I4jraZzVEM7o4zL4P8pla5kmIWJd84q+Y8mBrOYoQu5hTrbWLWe10+VWVoOX4IzP Rq1sstmfus0Iv8DLIzDpJFI8oj02rOgXgEFt7YyNpmi9z1IyinWSwROVCUzaC37l hVUdWhp9/C4+bzQw0xUPk5YFrsuHrHUcbfAy3nEaw8njaO8wqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDnpslyt0n4yevHT3uklvm0iQqO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4 ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvZjVlOWNmZGMtZmRhZi0z MmI3LWEwYjMtY2EwOTJiNTY0OGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0 OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAz5+zMf5AGy0uAaEQDAafo0uGk/jTkmqgOdxVX0cAqbVzBGd/Co IGvSFU9KUoLxUTsjisBCc0DFhBFhXAMnbg55sqGwlhbuycTJvKaP7tXIuP/7fzU0 VJ9ZjNTUoiTE9jmpTlsSZe6J8pwWGZA50HjuUDQuFbljr5Yu+g2TbZkh+CijSOCc mBmyBG3DaL4VhhqF2N8diBG9hbqtT4gGkentqMxDhKSEDBtvDB20lfVy/cgtyYOA GXacQExO1Kcct9fbfru46TFOE2ZdmBAvCzWLE6tvbb9uQytlyn5DcFWTRsyPtXv0 t5O6GyuEX7aM9cVNdfIZEvjrhYA0+GPV7X8= -----END CERTIFICATE-----Generated at Fri Apr 4 15:56:36 2025 by rpki-client