$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c21b6880-f1b4-3460-af5b-aa8c465e5d0c.roa File: c21b6880-f1b4-3460-af5b-aa8c465e5d0c.roa (raw, json) Hash identifier: p5Hl7Pf8efvAGJjJD1Y1OAtAdgiy7N0jZ0glnqm3U78= Subject key identifier: D6:E1:A7:BE:78:6E:48:0F:E0:6D:FE:82:14:CF:14:6C:41:9F:C7:A0 Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7 Certificate serial: 010D0C9F43285848CC7B9B48C389DB11728E8180 Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c21b6880-f1b4-3460-af5b-aa8c465e5d0c.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 5744 IP address blocks: 2610:20:5000::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:9b:48:c3:89:db:11:72:8e:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=f55e209a-2804-4717-bc83-0ce3bab2ef6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:26:e3:e4:cb:92:d5:f6:a1:79:28:1c:88: 90:db:a5:db:a1:92:8a:dd:e8:03:cb:ec:2f:81:90: b7:94:bf:34:e7:56:18:f5:f6:62:67:13:1b:dc:08: f0:e4:69:ba:95:4e:95:23:90:16:3d:64:3e:a2:82: e9:ca:ef:72:6f:9f:92:8f:37:12:5f:a1:5d:cd:49: d3:cd:d6:b0:a4:cb:fb:00:d1:79:12:79:cf:94:89: 6a:c8:c1:c0:f4:39:57:95:0e:ec:7e:ff:6b:1a:18: 5a:92:9d:f3:c9:e5:a9:f6:c4:1a:34:50:7a:b0:25: 19:b2:56:20:56:35:bd:be:14:5b:d0:9c:17:3e:80: 18:59:65:69:b0:f7:a0:23:6f:18:6a:7f:e9:c7:e0: 9f:87:bc:64:96:00:9f:90:16:bd:06:0e:62:7c:64: 3a:90:37:ed:00:c5:bc:8b:63:69:38:cf:b3:c9:21: e0:61:a0:88:22:39:93:37:d4:cc:fc:bb:02:1c:91: f3:63:49:ad:df:ce:32:fe:30:4d:1e:6e:fe:6d:ef: 72:3a:97:db:52:fe:ba:2f:9c:85:2a:82:5d:63:90: cc:e5:28:5e:cc:87:8e:c3:84:b6:b5:5c:a2:60:04: ea:1d:5d:0b:de:2f:e8:11:d6:ab:4b:78:52:47:62: fc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E1:A7:BE:78:6E:48:0F:E0:6D:FE:82:14:CF:14:6C:41:9F:C7:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c21b6880-f1b4-3460-af5b-aa8c465e5d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl X509v3 Authority Key Identifier: keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:5000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ee:56:55:cf:b3:9e:64:07:bb:82:a6:b3:60:77:17:f4:ca: d4:01:8e:c6:46:54:14:33:a2:c4:ad:9a:70:dd:ae:bb:4b:91: 9c:9f:79:36:ff:2f:e6:64:70:b5:2d:c9:1c:2b:5e:bb:29:ed: 07:31:0f:71:be:04:ff:b2:48:d3:49:d3:69:ae:5f:bd:6f:fb: 29:83:3e:84:c6:cc:9b:57:cb:17:ab:76:61:9b:0f:c2:1c:f9: 89:08:3a:ed:4e:31:5b:00:41:9a:f4:d7:13:44:30:9d:a7:80: 11:5f:72:29:a8:93:6f:55:34:bf:c4:b0:74:df:b9:89:a7:ed: 11:9c:69:36:fa:bf:ce:39:46:0a:17:61:ed:cd:da:02:ee:b7: 94:28:c3:c9:78:26:74:19:32:8a:d4:cc:3d:3e:8c:4c:d9:84: 34:c6:3b:3e:46:e2:c8:9a:04:3e:93:e7:ed:4e:6c:7a:75:4c: 15:2a:02:2f:3d:1a:86:38:6e:bc:77:dd:4e:dd:c3:ee:9a:68: ac:c8:1d:55:cc:fe:df:b0:2b:2c:fe:52:ad:a4:06:97:23:48: 08:67:27:d8:c5:27:61:fb:09:70:c6:fb:bd:c0:d2:e2:89:77: 29:a0:9e:5c:de:34:e4:33:0b:30:18:9c:48:bc:26:57:de:97: b0:97:ad:40 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjMe5tIw4nbEXKOgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm YWI3MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk ZjU1ZTIwOWEtMjgwNC00NzE3LWJjODMtMGNlM2JhYjJlZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphgm4+TLktX2oXkoHIiQ26XboZKK3egDy+wv gZC3lL8051YY9fZiZxMb3Ajw5Gm6lU6VI5AWPWQ+ooLpyu9yb5+SjzcSX6FdzUnT zdawpMv7ANF5EnnPlIlqyMHA9DlXlQ7sfv9rGhhakp3zyeWp9sQaNFB6sCUZslYg VjW9vhRb0JwXPoAYWWVpsPegI28Yan/px+Cfh7xklgCfkBa9Bg5ifGQ6kDftAMW8 i2NpOM+zySHgYaCIIjmTN9TM/LsCHJHzY0mt384y/jBNHm7+be9yOpfbUv66L5yF KoJdY5DM5ShezIeOw4S2tVyiYATqHV0L3i/oEdarS3hSR2L8iQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNbhp754bkgP4G3+ghTPFGxBn8egMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvYzIxYjY4ODAtZjFiNC0z NDYwLWFmNWItYWE4YzQ2NWU1ZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2 ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3 ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4 ZDU3N2ZhYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJhAAIFAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXO5WVc+znmQHu4Kms2B3F/TK1AGOxkZUFDOixK2acN2uu0uRnJ95 Nv8v5mRwtS3JHCteuyntBzEPcb4E/7JI00nTaa5fvW/7KYM+hMbMm1fLF6t2YZsP whz5iQg67U4xWwBBmvTXE0QwnaeAEV9yKaiTb1U0v8SwdN+5iaftEZxpNvq/zjlG Chdh7c3aAu63lCjDyXgmdBkyitTMPT6MTNmENMY7PkbiyJoEPpPn7U5senVMFSoC Lz0ahjhuvHfdTt3D7pporMgdVcz+37ArLP5SraQGlyNICGcn2MUnYfsJcMb7vcDS 4ol3KaCeXN405DMLMBicSLwmV96XsJetQA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:16:25 2025 by rpki-client