$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/a32864a7-8943-31ea-94c0-9969594288ea.roa File: a32864a7-8943-31ea-94c0-9969594288ea.roa (raw, json) Hash identifier: 5n4uUQ0GF9LUHa7ygsPT6Bejlgwc+UOjEpsitRxCmPo= Subject key identifier: 9E:FF:11:69:67:F2:B9:BC:2D:C7:EE:CC:77:F0:F9:6C:8D:88:7B:14 Certificate issuer: /CN=9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2 Certificate serial: 010D0C9F432858489BA0B4702321A9328640BCC0 Authority key identifier: 4A:50:AF:35:A5:D1:64:97:78:A1:8A:FD:E4:D2:43:0D:8C:EF:32:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/a32864a7-8943-31ea-94c0-9969594288ea.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 33523 IP address blocks: 2620:26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:b4:70:23:21:a9:32:86:40:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=49bfe62f-2f7c-4513-909d-cd6f882f68d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:24:ab:88:fc:5b:59:f8:db:55:1f:78:ee: 55:21:19:bd:02:73:73:4f:a0:33:88:21:2b:34:11: 45:0f:18:47:ae:7e:bf:58:0e:1d:50:dc:d9:09:5f: 9c:e7:80:ef:58:c8:3d:b9:9d:d1:62:db:92:8a:32: 9f:b3:db:38:75:40:57:75:0c:32:45:0b:d4:66:7b: f7:cf:d7:2f:fe:66:98:ac:88:1e:7c:77:c2:d8:13: c5:81:10:35:74:8c:e8:40:5c:c5:61:b4:0a:9a:ed: d9:e2:f1:02:5c:87:19:de:b2:3c:03:8d:44:fd:08: a1:d8:b5:eb:cf:ea:77:ee:f5:aa:ce:52:86:92:48: a0:6a:c9:aa:0b:ac:12:30:a6:ff:fa:7e:13:d0:ba: a2:1f:22:53:13:ca:7f:73:0a:f2:af:53:6b:8f:ba: d7:bd:cd:6d:16:6d:f0:c0:d7:cc:d9:75:90:2a:81: ea:83:96:0a:56:1e:15:ab:eb:00:ea:86:a8:55:6e: e2:9f:c7:a3:86:5f:52:4c:65:34:b6:fb:32:b0:0e: 9d:bb:6a:d4:3d:98:5e:2b:97:35:87:cf:62:a3:4c: 54:dc:79:db:fe:f3:ad:7d:f3:c7:1c:4e:96:a0:cc: 92:17:a9:13:d9:13:74:7d:08:1c:0c:28:34:93:d5: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FF:11:69:67:F2:B9:BC:2D:C7:EE:CC:77:F0:F9:6C:8D:88:7B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/a32864a7-8943-31ea-94c0-9969594288ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl X509v3 Authority Key Identifier: keyid:4A:50:AF:35:A5:D1:64:97:78:A1:8A:FD:E4:D2:43:0D:8C:EF:32:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer sbgp-ipAddrBlock: critical IPv6: 2620:26::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4a:d0:cc:c3:f7:09:e3:72:c3:71:6b:cd:53:19:63:11:29: e4:99:3e:c6:38:ab:f5:13:d2:37:74:cd:ab:63:49:2e:77:6a: d1:ae:34:de:19:9d:c0:05:50:b8:b0:29:e1:de:43:b9:56:90: b8:22:4d:13:34:5c:71:1b:5a:8c:61:38:1f:a5:cc:c0:c6:8e: de:27:4e:e4:9b:e5:34:15:13:94:89:34:10:fb:49:89:c1:8d: 26:05:3e:b1:ec:56:f6:35:2e:cf:67:4a:a9:59:fa:97:89:e0: 01:0e:41:b7:92:68:fc:6d:7f:76:2a:a2:dc:2d:6c:06:c2:0e: 1c:8c:9b:15:94:a2:52:15:f1:01:41:ee:bb:5a:d5:ba:73:cd: 55:be:c2:7f:d8:02:bb:64:da:85:aa:1d:58:9b:be:32:32:32: ca:94:fc:14:76:d6:6c:45:fb:c4:6d:a2:b2:30:4a:f6:95:f0: 9f:6d:d6:16:66:cb:80:ec:78:a6:12:29:75:23:32:d4:8e:dd: 3d:1a:30:e0:bc:6b:9f:b2:99:35:47:a1:2f:73:50:97:e3:3c: c5:d9:e3:f1:cb:de:6a:99:47:03:da:94:41:c1:3a:3e:aa:ca: 01:68:f2:e5:0a:c8:ac:17:0d:ad:3f:6a:3a:79:e0:ec:92:09: 73:87:a0:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiboLRwIyGpMoZAvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI3ZjU3YTUtOGFkMS00OWMxLThlNTMtZjZiMTIyZWQ2 MmUyMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk NDliZmU2MmYtMmY3Yy00NTEzLTkwOWQtY2Q2Zjg4MmY2OGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOIkq4j8W1n421UfeO5VIRm9AnNzT6AziCEr NBFFDxhHrn6/WA4dUNzZCV+c54DvWMg9uZ3RYtuSijKfs9s4dUBXdQwyRQvUZnv3 z9cv/maYrIgefHfC2BPFgRA1dIzoQFzFYbQKmu3Z4vECXIcZ3rI8A41E/Qih2LXr z+p37vWqzlKGkkigasmqC6wSMKb/+n4T0LqiHyJTE8p/cwryr1Nrj7rXvc1tFm3w wNfM2XWQKoHqg5YKVh4Vq+sA6oaoVW7in8ejhl9STGU0tvsysA6du2rUPZheK5c1 h89io0xU3Hnb/vOtffPHHE6WoMySF6kT2RN0fQgcDCg0k9XMdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ7/EWln8rm8LcfuzHfw+WyNiHsUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85Yjdm NTdhNS04YWQxLTQ5YzEtOGU1My1mNmIxMjJlZDYyZTIvYTMyODY0YTctODk0My0z MWVhLTk0YzAtOTk2OTU5NDI4OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWI3ZjU3YTUtOGFkMS00OWMxLThl NTMtZjZiMTIyZWQ2MmUyLzliN2Y1N2E1LThhZDEtNDljMS04ZTUzLWY2YjEyMmVk NjJlMi5jcmwwHwYDVR0jBBgwFoAUSlCvNaXRZJd4oYr95NJDDYzvMkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YjdmNTdhNS04YWQxLTQ5YzEtOGU1My1mNmIx MjJlZDYyZTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAJgAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHBK0MzD9wnjcsNxa81TGWMRKeSZPsY4q/UT0jd0zatjSS53atGu NN4ZncAFULiwKeHeQ7lWkLgiTRM0XHEbWoxhOB+lzMDGjt4nTuSb5TQVE5SJNBD7 SYnBjSYFPrHsVvY1Ls9nSqlZ+peJ4AEOQbeSaPxtf3YqotwtbAbCDhyMmxWUolIV 8QFB7rta1bpzzVW+wn/YArtk2oWqHVibvjIyMsqU/BR21mxF+8RtorIwSvaV8J9t 1hZmy4DseKYSKXUjMtSO3T0aMOC8a5+ymTVHoS9zUJfjPMXZ4/HL3mqZRwPalEHB Oj6qygFo8uUKyKwXDa0/ajp54OySCXOHoB8= -----END CERTIFICATE-----Generated at Fri Apr 4 16:14:33 2025 by rpki-client