$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa File: 4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa (raw, json) Hash identifier: u8mPq00LLkjhZu71IhlSDtofY+PT3vYB4NFYGJ/eIPM= Subject key identifier: 07:CD:52:F5:1C:15:12:ED:39:68:8E:44:FA:A6:EA:A7:8A:78:E6:73 Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F43285848977085A42B03D10FA44FA980 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa Signing time: Sun 19 Jan 2025 02:00:39 +0000 ROA not before: Sun 19 Jan 2025 02:00:39 +0000 ROA not after: Sat 19 Apr 2025 01:00:39 +0000 asID: 46733 IP address blocks: 2602:f9f4:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:70:85:a4:2b:03:d1:0f:a4:4f:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Jan 19 02:00:39 2025 GMT Not After : Apr 19 01:00:39 2025 GMT Subject: CN=e2d6b2e1-ee01-4cba-9594-dc8f57593061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:96:ae:ab:9e:a7:30:c5:da:e3:6e:0b:65:51: e5:c6:36:df:98:cd:fb:04:b9:8e:07:2f:87:87:c0: 76:78:b6:4d:36:07:08:b6:8e:b3:86:83:94:fd:c8: 03:b2:a8:b8:1d:97:3a:35:28:f2:09:65:31:db:ed: 5a:a0:cd:46:19:e2:8a:d8:c1:40:e7:1d:31:09:ba: e7:0c:c2:ef:b2:0f:f6:4c:fc:0b:b6:55:30:dc:2c: 3f:c8:e1:8e:c5:96:f7:d4:f8:90:af:23:9c:4f:d6: a6:de:ce:d3:6b:5c:ff:b3:9b:86:85:c0:0b:9c:2b: 7c:e2:ac:ac:8a:95:8d:ed:c2:03:b4:f0:8d:de:59: 60:47:38:44:22:31:55:1d:44:9c:fc:68:2b:9f:e5: ed:3a:c5:7e:b4:27:5f:ee:fe:e3:9f:71:db:46:60: 39:1c:fe:47:bf:82:08:05:3e:47:be:aa:85:08:a7: 70:ab:b0:e2:a6:25:d3:84:cb:db:0a:ce:77:0b:92: 3b:4b:e7:3e:f9:c2:3a:09:42:3c:a9:cd:9d:ee:9c: e3:3d:ae:0a:aa:ff:f6:42:32:bd:f9:7d:e6:d9:4e: 63:33:37:85:c1:38:ec:43:40:57:0f:39:b9:ef:2e: 7b:ff:10:65:3b:38:91:2e:43:3d:cc:6b:73:50:34: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CD:52:F5:1C:15:12:ED:39:68:8E:44:FA:A6:EA:A7:8A:78:E6:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f4:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:16:5a:e3:56:da:bd:44:92:69:dc:95:87:23:b2:5c:d6:d8: 2c:17:97:44:51:52:26:e9:11:0f:0e:71:ca:de:9e:1a:a5:95: 84:65:1a:89:dc:61:ed:f9:93:a7:18:63:fa:50:58:fd:f2:e5: e9:ad:71:ba:b6:4b:6c:70:44:6c:05:52:39:09:e0:7d:c8:f4: f8:3b:2b:30:3b:ad:1b:e7:ff:0c:69:fd:fe:93:43:e2:bd:73: de:ca:39:56:be:98:f4:c3:32:f4:4b:80:74:19:9c:07:56:30: af:44:ee:e7:76:4e:b1:3a:9c:56:c0:af:c6:62:98:7a:62:5c: 09:31:46:62:b8:81:fe:28:64:ed:ad:da:92:58:f7:8e:30:73: c3:19:e1:2d:9a:ef:12:b1:89:5c:06:1a:df:b0:23:91:30:8f: 74:d1:42:3f:3b:84:3c:d9:69:79:8e:62:95:7c:31:a9:23:ef: 2c:1f:37:ed:02:1d:bd:86:ae:8f:ca:76:e7:51:4e:af:6b:50: ca:3e:c4:92:2e:f6:06:06:86:5d:f9:4a:6e:7b:cb:af:ba:70: 22:a8:28:bb:ff:2a:1c:00:3b:51:fb:eb:ec:96:b8:92:b3:1a: ca:86:0b:27:03:ec:b0:d4:b5:9a:78:46:55:7a:ea:29:8d:a6: f2:66:9f:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiXcIWkKwPRD6RPqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk ZTJkNmIyZTEtZWUwMS00Y2JhLTk1OTQtZGM4ZjU3NTkzMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55auq56nMMXa424LZVHlxjbfmM37BLmOBy+H h8B2eLZNNgcIto6zhoOU/cgDsqi4HZc6NSjyCWUx2+1aoM1GGeKK2MFA5x0xCbrn DMLvsg/2TPwLtlUw3Cw/yOGOxZb31PiQryOcT9am3s7Ta1z/s5uGhcALnCt84qys ipWN7cIDtPCN3llgRzhEIjFVHUSc/Ggrn+XtOsV+tCdf7v7jn3HbRmA5HP5Hv4II BT5HvqqFCKdwq7DipiXThMvbCs53C5I7S+c++cI6CUI8qc2d7pzjPa4Kqv/2QjK9 +X3m2U5jMzeFwTjsQ0BXDzm57y57/xBlOziRLkM9zGtzUDSyMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAfNUvUcFRLtOWiORPqm6qeKeOZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvNGUzYWM4MGYtZWM3MC0z NzViLTgyOWEtMmNlMTY2ZWQ1ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL59AAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAcWWuNW2r1EkmnclYcjslzW2CwXl0RRUibpEQ8OccrenhqllYRl GoncYe35k6cYY/pQWP3y5emtcbq2S2xwRGwFUjkJ4H3I9Pg7KzA7rRvn/wxp/f6T Q+K9c97KOVa+mPTDMvRLgHQZnAdWMK9E7ud2TrE6nFbAr8ZimHpiXAkxRmK4gf4o ZO2t2pJY944wc8MZ4S2a7xKxiVwGGt+wI5Ewj3TRQj87hDzZaXmOYpV8Makj7ywf N+0CHb2Gro/KdudRTq9rUMo+xJIu9gYGhl35Sm57y6+6cCKoKLv/KhwAO1H76+yW uJKzGsqGCycD7LDUtZp4RlV66imNpvJmn/g= -----END CERTIFICATE-----Generated at Fri Apr 4 16:02:52 2025 by rpki-client