$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa File: d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa (raw, json) Hash identifier: ucueTqnzb+upvDeYCVdo/CW7UYIXN69EcvYo1xwP2uo= Subject key identifier: 72:84:ED:9B:41:50:5E:D6:D2:56:4F:5D:A6:05:33:4F:94:04:A6:F7 Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Certificate serial: 010D0C9F43285848CC7B8A76D3E18E21A1226BC0 Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 399358 IP address blocks: 2607:6bc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:8a:76:d3:e1:8e:21:a1:22:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=beb97d82-0105-4be1-beed-59e4dfbf4df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:41:84:df:f9:17:10:a1:11:0e:fa:2c:a8:5b: 71:d2:9b:6b:c5:e0:2e:4f:27:98:af:70:29:49:9b: 7a:72:a4:95:2f:f4:21:4a:3a:2a:56:d0:78:26:11: bf:5c:55:d8:7a:a8:a0:08:b5:99:23:cd:a3:63:2b: bc:8b:20:ea:c3:0d:99:74:d2:5b:62:91:a0:c5:a0: 3c:f9:78:21:8d:20:95:19:81:40:f6:5c:ad:b7:31: d4:6f:62:76:12:ca:5c:c6:15:d3:18:04:05:b2:e7: 0b:92:61:59:45:63:48:6c:dc:14:e6:0f:5b:cf:1b: 88:fd:c2:89:17:49:18:52:1c:f3:ed:60:38:0c:af: f8:01:08:06:74:0f:fb:8e:1d:49:c9:db:30:14:e7: 59:dc:cb:69:1a:7d:33:1c:5e:30:27:9c:15:84:bc: 32:58:c7:13:b1:c5:65:e1:82:42:df:8c:ba:74:88: 92:7e:66:f6:80:bf:58:6e:41:d2:4d:c5:9d:b2:c3: 88:3b:76:fb:e2:b4:36:0a:7f:a1:17:c9:21:05:0d: c2:a9:f7:ba:5b:6e:6e:d6:34:3c:40:fb:54:84:18: d8:c1:1a:c2:29:e6:62:c0:4d:56:e1:bc:8d:73:9d: 50:ff:d1:4e:17:d9:5f:9d:a5:73:ef:d6:69:4e:74: cc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:84:ED:9B:41:50:5E:D6:D2:56:4F:5D:A6:05:33:4F:94:04:A6:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl X509v3 Authority Key Identifier: keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer sbgp-ipAddrBlock: critical IPv6: 2607:6bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e7:ae:d1:32:0e:bf:ca:48:0f:49:53:26:7f:c2:fa:a3:d8: b5:e7:9a:55:d7:4d:79:61:b2:1c:ee:d0:8d:5c:f6:5d:24:6a: e7:0a:bd:ca:36:1f:a7:19:ba:a3:52:7e:04:95:7a:0c:3d:10: 62:75:9c:6f:5e:66:b9:c6:e1:c0:63:a8:95:62:90:42:fe:27: 5a:64:9b:5d:c0:d0:e8:0d:ea:19:30:7a:b1:bb:b7:51:99:0b: 3d:23:5a:45:7b:63:0a:fa:e6:96:7f:5f:73:83:e7:b0:26:53: ca:53:d0:f3:f5:c0:4e:1d:20:1c:16:78:82:67:4c:31:28:aa: 80:3d:9a:4c:db:d5:48:61:64:42:07:84:84:41:71:ca:06:2e: ad:bb:48:0f:bf:20:3b:50:97:c9:92:89:ec:38:bf:7a:82:a5: 9b:cf:4c:ac:b8:74:8f:61:bc:d6:54:0d:3f:65:50:29:3f:13: 6a:0c:86:4c:8a:bf:95:06:02:1b:04:d9:3f:28:3c:49:1c:56: 3c:bb:9f:e8:e1:1a:62:b0:f1:be:4e:61:c1:1f:24:db:a4:6e: ac:ad:b7:db:43:8b:3d:41:c9:e4:63:4b:f0:73:31:8d:74:ea: fa:09:1f:f4:00:ae:ce:df:3a:04:76:4d:8e:59:59:cb:70:d8: 8f:c0:a8:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjMe4p20+GOIaEia8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5 OTc4MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk YmViOTdkODItMDEwNS00YmUxLWJlZWQtNTllNGRmYmY0ZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UGE3/kXEKERDvosqFtx0ptrxeAuTyeYr3Ap SZt6cqSVL/QhSjoqVtB4JhG/XFXYeqigCLWZI82jYyu8iyDqww2ZdNJbYpGgxaA8 +XghjSCVGYFA9lyttzHUb2J2EspcxhXTGAQFsucLkmFZRWNIbNwU5g9bzxuI/cKJ F0kYUhzz7WA4DK/4AQgGdA/7jh1JydswFOdZ3MtpGn0zHF4wJ5wVhLwyWMcTscVl 4YJC34y6dIiSfmb2gL9YbkHSTcWdssOIO3b74rQ2Cn+hF8khBQ3Cqfe6W25u1jQ8 QPtUhBjYwRrCKeZiwE1W4byNc51Q/9FOF9lfnaVz79ZpTnTMyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHKE7ZtBUF7W0lZPXaYFM0+UBKb3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZh MDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvZDIwNzc1YzMtZThjNi0z NjcwLWJjYWEtN2Y3ZTY4Y2ViZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjFmYTA2MjAtYzgwZi00YTk0LTll OTUtZWFkNDRmYjc5OTc4L2YxZmEwNjIwLWM4MGYtNGE5NC05ZTk1LWVhZDQ0ZmI3 OTk3OC5jcmwwHwYDVR0jBBgwFoAUphG/cQGHxBw5AaKqJrnTgQz+K3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0 NGZiNzk5NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3567RMg6/ykgPSVMmf8L6o9i155pV1015YbIc7tCNXPZdJGrnCr3K Nh+nGbqjUn4ElXoMPRBidZxvXma5xuHAY6iVYpBC/idaZJtdwNDoDeoZMHqxu7dR mQs9I1pFe2MK+uaWf19zg+ewJlPKU9Dz9cBOHSAcFniCZ0wxKKqAPZpM29VIYWRC B4SEQXHKBi6tu0gPvyA7UJfJkonsOL96gqWbz0ysuHSPYbzWVA0/ZVApPxNqDIZM ir+VBgIbBNk/KDxJHFY8u5/o4RpisPG+TmHBHyTbpG6srbfbQ4s9QcnkY0vwczGN dOr6CR/0AK7O3zoEdk2OWVnLcNiPwKim -----END CERTIFICATE-----Generated at Fri Apr 4 16:00:40 2025 by rpki-client