$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa File: 1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa (raw, json) Hash identifier: NJeoutSQJ7xwcf7LLGu2bLlFat4g0uoWfo+h1eRHpgE= Subject key identifier: B6:44:E8:CB:FC:AE:4D:71:E2:4B:85:E4:A4:BA:08:F8:5C:33:5F:1B Certificate issuer: /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Certificate serial: 010D0C9F4328584965E974175D5C9B019F16AEC0 Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 395388 IP address blocks: 2620:c2:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:74:17:5d:5c:9b:01:9f:16:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=d7e36539-352f-4663-a5ef-586ad87735ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:b3:2f:42:d8:7b:79:ed:3c:9e:3c:11:31: de:32:c8:39:59:2e:a1:1b:3a:f8:82:10:c6:39:85: 88:2e:70:83:7d:47:fc:29:2c:ce:1f:2b:01:7c:57: 7b:04:0a:ec:d6:82:7e:8b:0f:ba:19:e3:0d:3f:47: ef:35:c0:7e:fc:93:55:34:26:01:80:0e:9c:74:73: fd:c7:bc:67:26:09:9c:36:6e:a6:b3:cc:64:3e:7b: e5:4a:a9:4d:2e:ee:a3:38:b2:67:23:46:29:f2:ae: a2:88:32:b1:c9:87:55:31:db:44:76:f3:41:08:27: 40:e9:e2:0e:8a:5d:33:5c:e2:10:7b:77:f1:ca:f0: c4:75:bd:78:fc:ee:73:fe:19:3b:2b:1e:be:a0:b8: 24:7b:94:56:bd:75:b7:71:0c:bf:ad:3c:f1:ab:25: a3:12:4e:db:35:79:63:e7:ad:35:cb:53:ec:b2:b7: 5a:5d:53:b5:6c:d3:39:65:d2:23:ca:b8:fc:ec:d8: a8:53:b9:f3:4b:a2:42:98:51:cc:1e:fc:2b:8d:43: 33:fd:e9:91:09:67:05:93:c6:79:0b:b3:a9:22:2a: 7f:6f:c0:77:47:d8:e5:e2:9a:11:45:ce:0f:17:6c: 19:81:13:0f:9b:e7:b1:b9:30:47:06:3d:be:9a:a9: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:44:E8:CB:FC:AE:4D:71:E2:4B:85:E4:A4:BA:08:F8:5C:33:5F:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl X509v3 Authority Key Identifier: keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer sbgp-ipAddrBlock: critical IPv6: 2620:c2:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:7b:71:2b:cf:0a:5f:ab:7a:c9:31:35:63:b2:2b:3f:36:69: c2:ab:58:8e:08:b7:a0:66:18:55:2b:f7:e6:13:82:59:2e:0e: d2:18:a8:ba:34:fb:65:33:ff:27:01:f2:8a:cb:4a:cd:94:86: a8:96:7f:f2:41:24:4b:14:17:bd:a5:09:34:a8:9b:c1:1f:5e: c1:07:f0:5e:da:80:ec:55:55:7d:1b:fa:98:38:ee:8d:39:6c: 30:29:5b:f0:d2:54:5a:d4:f8:2e:1d:ee:59:42:7b:bf:cc:89: 2c:4f:e2:db:28:06:2c:e7:7d:6d:c7:32:ea:2d:bd:30:85:84: 2e:6a:d0:49:25:ff:75:21:dd:d5:c9:c3:55:75:ea:c1:9b:d2: 51:c8:fe:a2:3f:6f:ea:3f:54:cd:74:a8:2d:9c:f3:be:b2:de: df:d6:a7:93:b4:b5:96:00:aa:bd:7f:c6:f5:33:19:06:77:4a: 5e:73:e8:05:58:38:13:b8:6d:da:87:ba:a2:7b:5e:ff:9e:31: 9b:39:32:33:a7:48:c6:70:a3:79:5c:61:ac:a8:b0:1e:6c:67: 68:29:37:0d:f5:a3:68:b5:69:8e:e6:2e:b5:14:22:6e:62:b1: f2:18:6c:e8:fd:ba:0b:10:55:e8:c7:dc:07:f8:74:2b:1a:6d: 57:e5:a6:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEll6XQXXVybAZ8WrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxYmFlYmYtMWE3ZC00MGU1LTkwYzktMzcwYzA4OGVi YzcxMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk ZDdlMzY1MzktMzUyZi00NjYzLWE1ZWYtNTg2YWQ4NzczNWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJGzL0LYe3ntPJ48ETHeMsg5WS6hGzr4ghDG OYWILnCDfUf8KSzOHysBfFd7BArs1oJ+iw+6GeMNP0fvNcB+/JNVNCYBgA6cdHP9 x7xnJgmcNm6ms8xkPnvlSqlNLu6jOLJnI0Yp8q6iiDKxyYdVMdtEdvNBCCdA6eIO il0zXOIQe3fxyvDEdb14/O5z/hk7Kx6+oLgke5RWvXW3cQy/rTzxqyWjEk7bNXlj 5601y1PssrdaXVO1bNM5ZdIjyrj87NioU7nzS6JCmFHMHvwrjUMz/emRCWcFk8Z5 C7OpIip/b8B3R9jl4poRRc4PF2wZgRMPm+exuTBHBj2+mqn+nQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLZE6Mv8rk1x4kuF5KS6CPhcM18bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFi YWViZi0xYTdkLTQwZTUtOTBjOS0zNzBjMDg4ZWJjNzEvMWNkYzA4ZjktOWE1OC0z ZjdhLWFlYTItNzEzYzI5NGI0MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjcxYmFlYmYtMWE3ZC00MGU1LTkw YzktMzcwYzA4OGViYzcxL2I3MWJhZWJmLTFhN2QtNDBlNS05MGM5LTM3MGMwODhl YmM3MS5jcmwwHwYDVR0jBBgwFoAUqx/esynKT9RyxZYo3wfX3L3BEScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFiYWViZi0xYTdkLTQwZTUtOTBjOS0zNzBj MDg4ZWJjNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAwiAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIl7cSvPCl+reskxNWOyKz82acKrWI4It6BmGFUr9+YTglkuDtIY qLo0+2Uz/ycB8orLSs2UhqiWf/JBJEsUF72lCTSom8EfXsEH8F7agOxVVX0b+pg4 7o05bDApW/DSVFrU+C4d7llCe7/MiSxP4tsoBiznfW3HMuotvTCFhC5q0Ekl/3Uh 3dXJw1V16sGb0lHI/qI/b+o/VM10qC2c876y3t/Wp5O0tZYAqr1/xvUzGQZ3Sl5z 6AVYOBO4bdqHuqJ7Xv+eMZs5MjOnSMZwo3lcYayosB5sZ2gpNw31o2i1aY7mLrUU Im5isfIYbOj9ugsQVejH3Af4dCsabVflplU= -----END CERTIFICATE-----Generated at Fri Apr 4 19:22:18 2025 by rpki-client