$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa File: dede31bf-e82b-3380-8794-1fc710158b40.roa (raw, json) Hash identifier: tbghQAQGO3NoLEvbEp/DJDv73968WeAIH3c6kyuyoKs= Subject key identifier: 1D:28:BE:E8:43:4C:BA:A4:41:A0:AE:BC:0C:31:DC:93:13:9D:72:13 Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F432858489E6B6FD96BCB56ECD4B5F760 Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 32242 IP address blocks: 2620:48:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6f:d9:6b:cb:56:ec:d4:b5:f7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=2af68c4c-fc19-4497-a5e8-cb060277a1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:23:c5:57:63:99:2e:b3:c1:72:1b:60:69: 13:af:be:20:b1:8c:c2:91:32:da:64:31:2b:86:d1: 36:ae:65:d4:3e:a4:11:76:97:d2:65:fc:7b:a7:a8: 5f:1d:69:7c:bd:3a:67:2e:6a:81:1e:7d:ad:ba:e5: 38:77:fd:5c:ae:6c:35:01:2e:0b:3f:db:7b:4b:ca: d9:77:fd:d4:8c:3b:60:fa:1a:2f:f7:1a:ad:30:f6: b7:32:ad:0b:1c:2b:29:6d:d5:64:46:ea:b3:2d:bc: 5d:b1:fe:04:6e:c0:ef:ca:89:22:9d:2b:e2:18:27: 44:1f:f2:1d:5d:8b:bf:a4:ff:ee:cb:39:13:22:d0: c7:e4:dc:7a:68:af:19:5b:49:f6:35:d6:4d:6e:fe: 4e:24:db:9a:38:1a:cf:b0:46:ee:38:1d:b0:29:55: b7:f7:40:43:1a:03:50:94:29:80:0c:a5:3f:ac:a2: 0b:4e:1c:44:78:03:7d:16:b2:f6:0e:9c:53:ec:9a: 9a:67:f5:a7:f1:11:e3:c5:52:be:8a:ac:2e:e9:4c: 91:b9:9b:6c:a8:1f:cc:93:be:de:4b:ce:7c:6e:d7: 8f:3d:6c:ad:1b:16:fe:f7:3c:f3:e8:60:4f:3d:c3: a7:41:8f:75:97:f9:f6:2c:40:8c:31:3a:2a:41:c2: 5a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:28:BE:E8:43:4C:BA:A4:41:A0:AE:BC:0C:31:DC:93:13:9D:72:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv6: 2620:48:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:47:81:06:ec:07:47:bd:a2:59:4a:8d:67:fc:3a:62:47:0b: b1:43:7a:0f:00:e6:46:7b:e1:3e:f3:92:cc:01:10:a5:93:7e: 50:76:ce:d5:fb:91:4d:37:e3:5b:a0:cb:f1:32:a4:95:75:a7: e4:f3:ce:f9:c1:4b:d0:6a:59:18:c0:ef:28:7c:fe:df:d4:f8: 7b:1e:32:68:0f:86:c7:e8:84:74:2a:af:ea:76:20:8a:a1:61: b9:4a:45:47:4b:79:b4:11:33:cb:f3:6e:0d:96:bb:93:e1:f0: af:40:24:d5:1c:e4:c0:01:f5:44:c9:06:dc:58:6d:41:7b:3e: 01:5f:f1:06:2d:7f:5a:a6:82:29:ea:db:8b:c4:b9:a6:0a:9f: ef:8a:24:a0:4f:17:e0:4f:50:81:1e:8f:c8:ed:07:9d:f1:4e: a2:1a:92:16:8d:0c:43:9d:be:40:6b:67:43:e8:8d:d0:a2:38: 8a:6e:4a:3d:cb:5b:ea:11:c8:0a:e8:14:52:41:14:cf:a1:fd: 91:3e:83:00:21:66:f0:30:5c:bc:f4:1b:94:f1:12:57:00:a8: 26:72:80:d9:c4:9e:f2:43:a4:39:1b:e7:81:f4:81:5b:ea:66: 05:de:f8:04:37:da:c0:c3:1a:3f:b5:bb:8d:70:8c:36:1a:e3: 06:bb:84:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea2/Za8tW7NS192AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MmFmNjhjNGMtZmMxOS00NDk3LWE1ZTgtY2IwNjAyNzdhMWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtAjxVdjmS6zwXIbYGkTr74gsYzCkTLaZDEr htE2rmXUPqQRdpfSZfx7p6hfHWl8vTpnLmqBHn2tuuU4d/1crmw1AS4LP9t7S8rZ d/3UjDtg+hov9xqtMPa3Mq0LHCspbdVkRuqzLbxdsf4EbsDvyokinSviGCdEH/Id XYu/pP/uyzkTItDH5Nx6aK8ZW0n2NdZNbv5OJNuaOBrPsEbuOB2wKVW390BDGgNQ lCmADKU/rKILThxEeAN9FrL2DpxT7JqaZ/Wn8RHjxVK+iqwu6UyRuZtsqB/Mk77e S858btePPWytGxb+9zzz6GBPPcOnQY91l/n2LECMMToqQcJakwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB0ovuhDTLqkQaCuvAwx3JMTnXITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvZGVkZTMxYmYtZTgyYi0z MzgwLTg3OTQtMWZjNzEwMTU4YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAASKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC1HgQbsB0e9ollKjWf8OmJHC7FDeg8A5kZ74T7zkswBEKWTflB2 ztX7kU0341ugy/EypJV1p+TzzvnBS9BqWRjA7yh8/t/U+HseMmgPhsfohHQqr+p2 IIqhYblKRUdLebQRM8vzbg2Wu5Ph8K9AJNUc5MAB9UTJBtxYbUF7PgFf8QYtf1qm ginq24vEuaYKn++KJKBPF+BPUIEej8jtB53xTqIakhaNDEOdvkBrZ0PojdCiOIpu Sj3LW+oRyAroFFJBFM+h/ZE+gwAhZvAwXLz0G5TxElcAqCZygNnEnvJDpDkb54H0 gVvqZgXe+AQ32sDDGj+1u41wjDYa4wa7hIA= -----END CERTIFICATE-----Generated at Thu Apr 10 04:20:44 2025 by rpki-client