$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa File: 3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa (raw, json) Hash identifier: iWZuYl8tFQ5OIf6xvqA6QnLHPYVgWVACdjfZ3nimHcY= Subject key identifier: DC:0C:2C:11:1B:92:78:D8:0A:46:F8:E7:7A:DD:B7:14:88:38:44:21 Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F43285849797443C11C736B5D314AE000 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 77 IP address blocks: 2620:0:320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:43:c1:1c:73:6b:5d:31:4a:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=63b03013-df73-4946-a4d2-83f2cea0b7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:47:d8:d1:3d:f9:9a:50:98:a6:e7:dc:9b: 5a:e3:e9:f5:4b:32:51:9f:90:24:8c:92:ed:bd:49: 50:cb:b2:36:6f:77:b4:53:44:12:b3:04:87:37:87: 5c:f0:eb:24:97:24:7e:55:86:50:3d:47:f8:a6:cb: 8c:80:59:4f:d7:99:40:36:57:c6:6d:02:23:fd:66: b8:36:fa:84:45:0c:69:6e:8e:d0:96:a0:ff:1b:9b: 49:d2:39:8c:35:8f:bb:01:1d:1d:59:94:9c:1d:b0: 2a:fe:97:26:e2:e1:ef:92:f1:f0:15:f7:d7:5d:74: f8:58:55:a8:4f:80:da:0d:12:24:3d:e8:4c:c6:c7: 23:c2:4e:28:7f:08:4e:d0:57:ac:c6:f5:bb:89:55: ee:c7:09:61:b5:c7:5b:5d:a9:f0:19:37:6a:f2:67: dd:83:1a:71:7a:41:ca:6a:5b:70:59:77:89:0c:01: 5d:bf:f4:20:82:dd:6c:96:11:30:fc:34:26:58:13: 0c:71:72:6b:58:3f:7f:7d:7b:3a:da:21:fa:82:da: 13:c4:58:84:aa:a6:ec:d4:56:4e:82:84:f4:d3:58: c6:63:58:a4:c5:7d:f9:b1:8c:02:50:69:df:e4:36: 29:a1:59:65:72:f2:e1:44:4d:32:91:08:2d:99:ad: 5d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0C:2C:11:1B:92:78:D8:0A:46:F8:E7:7A:DD:B7:14:88:38:44:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:320::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:07:2e:39:67:fc:41:3b:b7:8e:b1:ca:62:57:5d:ec:9a:70: 61:15:f0:2c:59:e0:75:aa:e1:c6:05:ce:b5:1f:f3:39:fb:79: 53:0f:ac:3d:b8:ab:0c:86:6d:c0:96:4d:e9:8b:ff:35:c1:a8: ca:2a:f2:17:76:81:fa:57:9f:21:83:b8:d1:f6:12:3f:98:9e: ed:94:bc:47:22:f0:e2:41:6d:9d:ca:a3:b7:47:fc:cd:e6:4a: 75:bc:f2:39:04:e5:8a:8a:03:b2:13:6e:d8:2f:89:c1:2c:ed: 84:4a:c0:fd:67:21:d7:75:17:c5:3e:4e:fb:9e:f7:59:fa:e0: 96:90:5c:84:48:f9:ce:f6:d5:53:44:75:62:ed:e7:c5:97:fd: c2:5b:05:5d:ed:d8:08:43:a7:fd:27:4c:42:7e:3b:00:c1:5c: 0f:41:10:31:2a:85:3e:a6:f1:b8:01:81:ae:fa:7e:93:ec:dc: 3a:95:2b:a4:c6:80:b1:bc:dd:04:f1:06:d7:03:f6:21:f2:8c: 15:93:28:d5:9d:c9:a3:6b:d1:f1:d3:72:10:87:67:c5:1e:db: 41:2e:e6:6e:5b:02:8a:13:26:0e:83:2d:45:62:53:21:68:ce: c9:bc:34:f6:27:0b:d0:45:be:f7:51:59:12:a7:8c:be:ca:8e: 0b:28:f9:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl5dEPBHHNrXTFK4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk NjNiMDMwMTMtZGY3My00OTQ2LWE0ZDItODNmMmNlYTBiN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbpH2NE9+ZpQmKbn3Jta4+n1SzJRn5AkjJLt vUlQy7I2b3e0U0QSswSHN4dc8OsklyR+VYZQPUf4psuMgFlP15lANlfGbQIj/Wa4 NvqERQxpbo7QlqD/G5tJ0jmMNY+7AR0dWZScHbAq/pcm4uHvkvHwFffXXXT4WFWo T4DaDRIkPehMxscjwk4ofwhO0FesxvW7iVXuxwlhtcdbXanwGTdq8mfdgxpxekHK altwWXeJDAFdv/Qggt1slhEw/DQmWBMMcXJrWD9/fXs62iH6gtoTxFiEqqbs1FZO goT001jGY1ikxX35sYwCUGnf5DYpoVllcvLhRE0ykQgtma1d+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNwMLBEbknjYCkb453rdtxSIOEQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvM2ZiN2NkNGEtZGZhMS0z MmUxLWEzMTEtYWIxOGFlYjFiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAMg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAgHLjln/EE7t46xymJXXeyacGEV8CxZ4HWq4cYFzrUf8zn7eVMP rD24qwyGbcCWTemL/zXBqMoq8hd2gfpXnyGDuNH2Ej+Ynu2UvEci8OJBbZ3Ko7dH /M3mSnW88jkE5YqKA7ITbtgvicEs7YRKwP1nIdd1F8U+Tvue91n64JaQXIRI+c72 1VNEdWLt58WX/cJbBV3t2AhDp/0nTEJ+OwDBXA9BEDEqhT6m8bgBga76fpPs3DqV K6TGgLG83QTxBtcD9iHyjBWTKNWdyaNr0fHTchCHZ8Ue20Eu5m5bAooTJg6DLUVi UyFozsm8NPYnC9BFvvdRWRKnjL7Kjgso+es= -----END CERTIFICATE-----Generated at Sat Apr 12 15:07:12 2025 by rpki-client