$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a70a2d81-fff6-3085-83fa-6ba2db479e2c.roa File: a70a2d81-fff6-3085-83fa-6ba2db479e2c.roa (raw, json) Hash identifier: uee3xjpRhyc5I/UnpdI3Sf5WugqBqXvuuoekC4KjiIg= Subject key identifier: 4F:60:BB:37:0A:FB:28:36:26:7D:7C:F8:5F:11:CB:D1:4A:44:B6:34 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F432858491246C6CFB0299C8F398A6300 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a70a2d81-fff6-3085-83fa-6ba2db479e2c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 4476 IP address blocks: 2607:f8f0:630::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c6:cf:b0:29:9c:8f:39:8a:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=d0b71d87-7b46-48b8-8ed7-e77ef998c4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f7:63:ef:15:12:07:ba:a4:98:8a:5f:85:73: 40:36:8e:ab:cb:21:8d:59:93:74:8c:cf:0d:0f:b4: 85:96:0c:e4:f1:f9:73:ae:cf:42:3d:fb:56:22:87: 9c:8b:08:e0:ec:48:b7:a8:a2:f1:0d:90:9a:ae:b7: e8:3d:64:55:26:71:f7:cf:21:ff:5c:5a:2a:cc:5e: fd:f3:15:f3:af:a9:8f:3a:39:9d:fd:18:8e:d7:30: e8:4f:22:27:1c:27:6d:53:c9:20:4e:16:c2:41:5e: 76:4e:2f:09:b0:c9:a4:65:f7:4b:96:94:89:95:c4: 1c:0d:9b:51:01:94:05:8a:fc:ef:04:84:2e:b7:3f: 78:c7:88:73:c0:30:3f:a1:36:f3:67:ae:23:0b:c2: e0:4a:d9:18:2a:fb:ec:23:2e:2a:bb:a4:cf:6c:f3: e0:95:2b:8b:db:bf:ee:39:a9:db:d4:c5:14:31:1d: 44:9f:c1:5b:a9:eb:43:18:e2:4c:80:0b:05:6a:3a: 90:6c:f3:7e:7c:f4:ca:ec:d6:81:12:96:f6:b5:be: 7c:6c:d7:6e:0e:cc:2d:ed:dc:ce:9b:ef:9b:e1:59: a8:17:f3:c4:94:38:c8:21:fb:ba:04:b1:17:58:d7: a4:db:ce:4c:2e:a1:00:16:d0:5a:f8:d1:17:7e:fc: e4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:60:BB:37:0A:FB:28:36:26:7D:7C:F8:5F:11:CB:D1:4A:44:B6:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a70a2d81-fff6-3085-83fa-6ba2db479e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:630::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:be:72:e0:4d:09:f4:0c:0d:63:cf:48:e0:81:9a:04:e5:09: bf:fa:13:0c:58:2f:4b:4f:73:90:43:be:0b:71:e8:6a:a4:11: 80:dc:5e:12:b2:10:27:87:98:12:44:4d:6a:8a:c8:fa:5b:95: 81:e4:81:50:fd:ab:7d:99:69:0b:2e:f9:cc:d8:8a:a6:c2:14: 98:3b:86:56:6a:9c:6a:77:cc:89:88:64:7c:47:aa:37:26:be: ad:7c:39:be:b7:32:29:95:57:04:66:6a:51:51:3c:76:8a:22: 70:6c:22:f8:8f:a6:7a:42:4f:3f:b7:3f:5d:ad:cc:f1:f3:44: 8e:8e:95:d9:6b:9e:9e:cc:c8:3b:ca:41:bc:53:1c:59:e4:dd: 63:ca:8c:46:27:c1:45:90:25:43:ae:82:fb:6d:82:49:5a:ac: e7:0e:18:ff:72:3b:26:32:1c:a8:69:68:fe:c0:74:c2:b3:20: 3f:98:bd:82:9b:9b:bb:57:82:e7:c9:8c:3d:f9:8d:a9:50:86: c9:30:35:fc:0a:29:c3:81:e1:ad:d0:4a:da:cf:36:d5:38:53: 23:58:be:3b:d6:ea:cf:d2:c9:10:24:bc:8e:00:85:ff:fb:bb: 93:ad:f8:fb:ed:d7:71:b0:99:b6:65:7d:fb:39:de:53:d8:28: 37:59:7d:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRsbPsCmcjzmKYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZDBiNzFkODctN2I0Ni00OGI4LThlZDctZTc3ZWY5OThjNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPdj7xUSB7qkmIpfhXNANo6ryyGNWZN0jM8N D7SFlgzk8flzrs9CPftWIoeciwjg7Ei3qKLxDZCarrfoPWRVJnH3zyH/XFoqzF79 8xXzr6mPOjmd/RiO1zDoTyInHCdtU8kgThbCQV52Ti8JsMmkZfdLlpSJlcQcDZtR AZQFivzvBIQutz94x4hzwDA/oTbzZ64jC8LgStkYKvvsIy4qu6TPbPPglSuL27/u Oanb1MUUMR1En8FbqetDGOJMgAsFajqQbPN+fPTK7NaBEpb2tb58bNduDswt7dzO m++b4VmoF/PElDjIIfu6BLEXWNek285MLqEAFtBa+NEXfvzk3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE9guzcK+yg2Jn18+F8Ry9FKRLY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvYTcwYTJkODEtZmZmNi0z MDg1LTgzZmEtNmJhMmRiNDc5ZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AYw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAC+cuBNCfQMDWPPSOCBmgTlCb/6EwxYL0tPc5BDvgtx6GqkEYDc XhKyECeHmBJETWqKyPpblYHkgVD9q32ZaQsu+czYiqbCFJg7hlZqnGp3zImIZHxH qjcmvq18Ob63MimVVwRmalFRPHaKInBsIviPpnpCTz+3P12tzPHzRI6Oldlrnp7M yDvKQbxTHFnk3WPKjEYnwUWQJUOugvttgklarOcOGP9yOyYyHKhpaP7AdMKzID+Y vYKbm7tXgufJjD35jalQhskwNfwKKcOB4a3QStrPNtU4UyNYvjvW6s/SyRAkvI4A hf/7u5Ot+Pvt13GwmbZlffs53lPYKDdZfV0= -----END CERTIFICATE-----Generated at Fri Apr 4 15:57:22 2025 by rpki-client