$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa File: e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa (raw, json) Hash identifier: aKE+laQ/+Ks4Pd70nuifX0/ftUW4OIqIaPl8zWXn2TQ= Subject key identifier: 7B:6E:0A:DF:E8:68:9B:F8:B1:6B:00:5C:66:36:13:E7:41:22:56:89 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F43285848B4C0D38B7C8D365CF3081154 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 55116 IP address blocks: 2602:2c9:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:d3:8b:7c:8d:36:5c:f3:08:11:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=f0b569e7-97f9-4b68-bfe9-385ea334e10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:29:56:13:0c:97:4c:6f:2d:b5:e6:ed:6d:f3: 14:1c:07:46:bd:cf:a4:fc:6c:ed:8f:46:14:de:8d: bb:c0:af:f1:09:cc:11:d1:34:0c:84:d8:72:98:5c: e6:33:0f:ee:3f:3c:8e:58:e2:9a:07:f5:45:03:6c: 16:d3:d0:e5:b5:8e:17:e7:21:18:f2:dd:ff:fc:41: 22:d1:ca:9b:00:a1:44:6c:24:da:68:4d:28:c4:30: 49:6c:b7:66:22:42:dd:94:30:e9:f9:29:00:98:75: 52:57:98:b9:5a:9b:2a:95:c2:95:ec:da:bb:55:f4: 49:a0:85:6f:48:19:a0:8c:12:8f:59:c6:95:8a:8b: dd:a1:79:6d:e7:79:f6:b4:79:01:c9:1a:55:e8:f4: d0:bc:31:b4:a5:e3:f4:39:0d:ed:2c:ca:09:a5:9a: ab:2a:60:12:e7:61:3e:35:57:74:fd:9f:05:ff:b5: 88:50:c0:df:ca:44:85:47:27:7c:3c:4e:8e:4d:dd: 04:0f:d6:24:2a:63:9b:85:6e:c0:b9:f6:e1:6f:36: 0e:0a:98:60:d4:89:ec:ad:e3:f9:9e:7c:a9:63:41: e1:24:97:d9:9a:2a:e8:99:b9:91:41:cc:c4:c8:4d: 5b:26:b7:fb:ea:5a:d8:3e:f4:a3:74:68:45:02:dd: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6E:0A:DF:E8:68:9B:F8:B1:6B:00:5C:66:36:13:E7:41:22:56:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:48:11:93:e9:87:c0:be:7d:ba:d0:39:e4:e9:67:ce:b5:81: bd:82:8a:77:e6:40:30:25:a7:d8:08:f9:19:66:64:ba:24:46: 48:2b:56:07:81:21:4c:68:0b:6b:3c:a7:d7:73:1c:f1:95:3e: 8c:a0:c8:be:1f:4c:83:1c:d5:b4:54:b0:a3:44:ec:5c:3d:8f: 95:5e:ab:59:fa:67:f2:6a:37:95:30:40:c9:d9:a1:f7:2e:da: 7a:e1:3b:ce:74:fb:87:e7:f3:77:48:2d:2d:14:df:56:bb:b3: a8:ed:e8:23:45:3f:b9:09:b5:59:e2:0a:fa:3d:c6:a2:97:dc: db:49:c9:b0:33:b3:9d:57:e3:69:bb:6d:37:3f:37:ef:ad:11: 06:f0:17:86:9b:2a:80:5e:92:27:e6:94:88:43:05:83:36:87: 0c:1a:b0:6d:1c:9e:0d:66:a6:76:52:72:ee:74:5f:c4:fd:1c: 2e:d6:49:ea:5e:54:1a:f0:63:4c:a4:f4:2e:0a:68:10:7e:70: 74:96:cf:4c:80:c8:75:b5:c8:5e:47:c1:bb:20:c1:13:26:55: 96:a9:9b:a1:ab:de:fe:c9:aa:48:f4:05:74:6a:db:aa:85:04: 2b:d9:0e:5b:a8:47:79:fe:67:46:9a:2c:35:21:ad:81:72:9a: 58:b1:d9:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi0wNOLfI02XPMIEVQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ZjBiNTY5ZTctOTdmOS00YjY4LWJmZTktMzg1ZWEzMzRlMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSlWEwyXTG8ttebtbfMUHAdGvc+k/Gztj0YU 3o27wK/xCcwR0TQMhNhymFzmMw/uPzyOWOKaB/VFA2wW09DltY4X5yEY8t3//EEi 0cqbAKFEbCTaaE0oxDBJbLdmIkLdlDDp+SkAmHVSV5i5WpsqlcKV7Nq7VfRJoIVv SBmgjBKPWcaViovdoXlt53n2tHkByRpV6PTQvDG0peP0OQ3tLMoJpZqrKmAS52E+ NVd0/Z8F/7WIUMDfykSFRyd8PE6OTd0ED9YkKmObhW7AufbhbzYOCphg1InsreP5 nnypY0HhJJfZmirombmRQczEyE1bJrf76lrYPvSjdGhFAt1qYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHtuCt/oaJv4sWsAXGY2E+dBIlaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvZTJhNGE0YjMtYmMzMS0z MWIxLTk0NGUtNGE4YzM4YjliM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALBIEZPph8C+fbrQOeTpZ861gb2CinfmQDAlp9gI+RlmZLokRkgr VgeBIUxoC2s8p9dzHPGVPoygyL4fTIMc1bRUsKNE7Fw9j5Veq1n6Z/JqN5UwQMnZ ofcu2nrhO850+4fn83dILS0U31a7s6jt6CNFP7kJtVniCvo9xqKX3NtJybAzs51X 42m7bTc/N++tEQbwF4abKoBekifmlIhDBYM2hwwasG0cng1mpnZScu50X8T9HC7W SepeVBrwY0yk9C4KaBB+cHSWz0yAyHW1yF5HwbsgwRMmVZapm6Gr3v7Jqkj0BXRq 26qFBCvZDluoR3n+Z0aaLDUhrYFymlix2b8= -----END CERTIFICATE-----Generated at Fri Apr 11 21:18:15 2025 by rpki-client