$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa File: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (raw, json) Hash identifier: U5LJsYk7o1CD1ZNiSmS8ozUTnWpBZ6KqtU1y/LtHCos= Subject key identifier: 67:1D:98:10:AE:B0:64:17:B7:9C:1E:63:99:EC:61:86:75:B8:89:C9 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F432858494B641C84C5C9125531CF7380 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 397511 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1c:84:c5:c9:12:55:31:cf:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=8bc179fb-cfd6-4c1c-89df-2f6fbd111256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0e:53:ff:62:64:a1:3a:f0:7e:9b:d8:3f:a6: bf:cd:5d:8b:01:0e:a5:c5:7d:67:1b:84:b2:a9:0d: d3:52:38:bb:be:6c:1e:58:0a:44:82:0c:e1:b9:6b: 2e:08:e0:dc:7c:cd:cf:1b:2d:13:d6:6d:f3:e8:78: 56:f3:84:59:fa:d4:99:ab:48:84:8f:e2:80:85:d5: 71:f8:59:09:03:e2:d8:85:30:3e:56:e1:f0:84:6f: 09:4b:cb:36:65:9c:04:ef:fc:66:f8:cc:0e:6f:a9: 28:74:24:61:8a:12:4b:ca:2e:d3:39:81:9f:28:63: c8:9f:a0:a3:b6:7e:c5:02:1b:15:8b:45:53:56:c6: f2:4b:22:b2:52:27:11:4e:23:18:fa:5a:03:e8:18: cc:8d:7f:69:f6:0b:78:80:5a:8f:f0:49:6d:f9:1b: 54:0a:f5:ed:3d:71:f1:a0:21:b6:31:aa:cc:70:fe: d7:78:19:ef:53:69:63:22:b5:6b:b3:8f:26:fe:1f: 7b:5f:92:84:15:3a:cb:d3:1e:49:83:10:4b:8b:71: 17:6f:4d:58:6e:a1:5a:f6:03:35:e7:ab:4a:d5:7c: 7e:bc:d9:a8:c7:9e:16:39:67:a4:31:6a:53:87:52: 7f:7f:04:5c:02:a8:84:c4:43:7d:f0:49:f1:26:36: 0c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1D:98:10:AE:B0:64:17:B7:9C:1E:63:99:EC:61:86:75:B8:89:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5f:95:8c:d8:45:21:65:51:f7:52:8d:2d:0a:0c:b7:bb:26: 52:df:66:a9:ea:f3:2c:29:ad:f4:c3:5c:86:48:1b:51:46:ed: b4:9c:c2:1e:b1:1a:3c:f4:de:8f:1b:6d:88:07:3b:09:a4:9b: 82:1b:5b:14:0a:0b:34:79:c1:31:28:e9:7e:85:c6:28:2f:48: 18:21:e5:eb:b2:b2:60:33:13:f6:5b:7a:3b:7f:01:5b:c5:af: 6c:24:80:fd:d5:13:97:fc:ff:56:67:41:53:79:e9:4d:45:2f: a1:c1:fc:aa:a1:52:b2:a0:db:cd:e7:1c:be:53:9e:67:0c:29: 46:8a:a9:29:38:6e:c9:b3:f3:d7:31:dd:d6:f0:fc:0c:85:ac: ce:00:39:45:e7:61:f8:07:aa:7c:55:9c:b4:92:78:63:0d:6c: 6b:66:85:4f:16:42:62:3a:ad:9d:e6:65:08:a4:52:bb:e7:4c: e6:6e:11:79:0c:90:4f:8c:59:f1:ee:01:cf:a9:f1:3c:83:24: aa:db:42:fe:ac:7f:6c:43:16:9d:78:d1:83:ab:30:b4:1b:77: 4d:4e:14:f9:23:9b:73:fd:fe:4d:68:e8:18:04:17:ae:ed:d7: 28:a7:03:cc:2b:f6:3f:70:dc:29:58:61:34:71:ea:4a:19:19: 40:81:8f:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZByExckSVTHPc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OGJjMTc5ZmItY2ZkNi00YzFjLTg5ZGYtMmY2ZmJkMTExMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9A5T/2JkoTrwfpvYP6a/zV2LAQ6lxX1nG4Sy qQ3TUji7vmweWApEggzhuWsuCODcfM3PGy0T1m3z6HhW84RZ+tSZq0iEj+KAhdVx +FkJA+LYhTA+VuHwhG8JS8s2ZZwE7/xm+MwOb6kodCRhihJLyi7TOYGfKGPIn6Cj tn7FAhsVi0VTVsbySyKyUicRTiMY+loD6BjMjX9p9gt4gFqP8Elt+RtUCvXtPXHx oCG2MarMcP7XeBnvU2ljIrVrs48m/h97X5KEFTrL0x5JgxBLi3EXb01YbqFa9gM1 56tK1Xx+vNmox54WOWekMWpTh1J/fwRcAqiExEN98EnxJjYMEwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGcdmBCusGQXt5weY5nsYYZ1uInJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvYzhhN2U4NDYtMDlmMi0z MTg5LTg4ODAtYjY2MWJmZGUxZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAnX5WM2EUhZVH3Uo0tCgy3uyZS32ap6vMsKa30w1yGSBtRRu20nMIe sRo89N6PG22IBzsJpJuCG1sUCgs0ecExKOl+hcYoL0gYIeXrsrJgMxP2W3o7fwFb xa9sJID91ROX/P9WZ0FTeelNRS+hwfyqoVKyoNvN5xy+U55nDClGiqkpOG7Js/PX Md3W8PwMhazOADlF52H4B6p8VZy0knhjDWxrZoVPFkJiOq2d5mUIpFK750zmbhF5 DJBPjFnx7gHPqfE8gySq20L+rH9sQxadeNGDqzC0G3dNThT5I5tz/f5NaOgYBBeu 7dcopwPMK/Y/cNwpWGE0cepKGRlAgY+s -----END CERTIFICATE-----Generated at Sat Apr 12 15:03:33 2025 by rpki-client