$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa File: 9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa (raw, json) Hash identifier: l1jeg1yDrPtDjjzcB0OphUylX250AP9hQoXqDR0l5LQ= Subject key identifier: 8F:DA:81:5C:F5:80:93:D4:9E:99:EA:6E:B2:69:95:DB:4E:D8:7F:D3 Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F43285848BE862FE9B77500F3FFA91D00 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 11067 IP address blocks: 2605:d800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:2f:e9:b7:75:00:f3:ff:a9:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=d223dc16-7051-43c2-a1ff-63a8e89439bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:62:c0:d6:fa:25:03:39:aa:aa:80:90:0b:1f: a2:75:72:75:36:e2:07:02:21:ae:62:74:83:f8:bc: 95:bf:3e:aa:74:64:5e:e1:c4:3e:7a:78:9c:e1:40: 9a:45:14:e4:2a:46:b1:b9:c2:0d:48:1f:b2:34:9f: f7:d8:0b:b4:63:cf:18:f5:f0:d1:f8:06:de:06:97: c3:bd:8e:17:f5:a0:9b:ee:9b:04:b3:ff:2e:1d:98: 54:0d:f9:11:8e:d8:f4:2f:b9:5a:6e:a2:0e:9d:27: e8:c8:6c:86:99:41:d2:54:bf:3b:db:6b:73:19:ab: 52:78:fd:ba:2e:f0:94:66:14:63:83:ac:d2:3d:46: 82:89:01:69:4d:ce:51:55:d1:87:a7:59:41:d1:92: 17:ba:52:00:53:e7:d0:27:3d:49:ee:cc:bd:7c:6e: 7a:e5:c3:58:c1:a8:39:ee:cc:04:b9:80:15:d1:98: f6:b8:f0:1e:1f:5a:18:f6:f7:a9:be:11:cb:56:8b: f6:10:d4:2b:be:eb:b2:8c:23:7f:35:26:1b:90:85: 54:cf:64:08:8e:54:a5:1d:da:3a:3e:9c:e1:06:66: 37:73:69:4f:d5:78:f5:fd:dd:63:e7:7f:f8:5c:2c: 2b:4b:df:26:55:ff:7d:e5:c0:ec:a7:91:e5:c8:61: cf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DA:81:5C:F5:80:93:D4:9E:99:EA:6E:B2:69:95:DB:4E:D8:7F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv6: 2605:d800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:6e:64:60:b1:9a:fa:d1:35:43:a1:5b:32:25:56:b1:26:e8: 49:7c:04:73:0c:eb:4c:5f:91:67:8d:dc:3a:49:a9:b0:a4:09: 0b:33:b9:3e:ac:5e:02:47:5f:13:ef:23:45:0f:88:16:31:37: 9a:49:c1:09:83:13:6d:20:e2:5d:1e:8e:e3:db:7b:88:6e:d0: 7a:93:bc:cb:6c:14:78:67:96:b7:0e:e2:95:84:5b:95:1d:b8: 71:22:c6:e3:7a:73:3a:a9:45:51:02:2f:cd:ea:70:55:0b:09: 0e:c1:af:01:b1:ae:89:fe:a6:fb:5c:11:55:8d:aa:8e:84:6d: c9:8f:07:bf:bf:10:ec:ad:2b:d0:fd:7f:bd:cf:4c:29:6e:55: 9c:a0:20:59:03:74:b7:d8:db:f0:28:ff:ab:ec:63:25:bd:91: eb:d7:d4:6c:5b:65:09:31:7b:b1:89:81:85:38:9d:85:74:3f: 74:ce:19:02:d5:7d:28:0c:a8:68:75:cb:7f:e5:d8:d4:23:4a: 12:fd:48:aa:09:ea:31:bc:00:f0:9d:0c:3c:15:24:5a:50:b7: d2:46:72:32:90:0b:af:37:81:4e:d7:e6:06:fd:ba:9e:0d:dc: c5:75:db:db:64:c9:0f:a7:65:1c:ce:15:31:35:25:8d:6a:29: 69:29:a4:31 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi+hi/pt3UA8/+pHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk ZDIyM2RjMTYtNzA1MS00M2MyLWExZmYtNjNhOGU4OTQzOWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGLA1volAzmqqoCQCx+idXJ1NuIHAiGuYnSD +LyVvz6qdGRe4cQ+enic4UCaRRTkKkaxucINSB+yNJ/32Au0Y88Y9fDR+AbeBpfD vY4X9aCb7psEs/8uHZhUDfkRjtj0L7labqIOnSfoyGyGmUHSVL8722tzGatSeP26 LvCUZhRjg6zSPUaCiQFpTc5RVdGHp1lB0ZIXulIAU+fQJz1J7sy9fG565cNYwag5 7swEuYAV0Zj2uPAeH1oY9vepvhHLVov2ENQrvuuyjCN/NSYbkIVUz2QIjlSlHdo6 PpzhBmY3c2lP1Xj1/d1j53/4XCwrS98mVf995cDsp5HlyGHPfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI/agVz1gJPUnpnqbrJpldtO2H/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvOWRhNWFmNGUtZGFlNi0z YTEwLTk2ZTMtZTgzZWE0YzkwNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXYADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBXbmRgsZr60TVDoVsyJVaxJuhJfARzDOtMX5Fnjdw6SamwpAkLM7k+ rF4CR18T7yNFD4gWMTeaScEJgxNtIOJdHo7j23uIbtB6k7zLbBR4Z5a3DuKVhFuV HbhxIsbjenM6qUVRAi/N6nBVCwkOwa8Bsa6J/qb7XBFVjaqOhG3Jjwe/vxDsrSvQ /X+9z0wpblWcoCBZA3S32NvwKP+r7GMlvZHr19RsW2UJMXuxiYGFOJ2FdD90zhkC 1X0oDKhodct/5djUI0oS/UiqCeoxvADwnQw8FSRaULfSRnIykAuvN4FO1+YG/bqe DdzFddvbZMkPp2UczhUxNSWNailpKaQx -----END CERTIFICATE-----Generated at Fri Apr 4 16:00:48 2025 by rpki-client