$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa File: c431513d-aaef-3485-b46c-d4c9e32372d8.roa (raw, json) Hash identifier: ns9AKaqCwWCKWOQDDQljaeQgzqJvBgcaZ+mzLWQAPwU= Subject key identifier: B6:63:61:21:26:A8:45:04:2D:91:DC:D0:85:F1:0B:5C:4E:1B:F6:9A Certificate issuer: /CN=938e1602-8093-4bcd-b527-f5d1756295fc Certificate serial: 010D0C9F43285848FEBBD5774DD08AC81584E360 Authority key identifier: FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa Signing time: Tue 25 Feb 2025 02:00:39 +0000 ROA not before: Tue 25 Feb 2025 02:00:39 +0000 ROA not after: Mon 26 May 2025 01:00:39 +0000 asID: 401482 IP address blocks: 2620:cf:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:bb:d5:77:4d:d0:8a:c8:15:84:e3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938e1602-8093-4bcd-b527-f5d1756295fc Validity Not Before: Feb 25 02:00:39 2025 GMT Not After : May 26 01:00:39 2025 GMT Subject: CN=b854029a-01a7-479c-b620-706f25ac3c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1a:08:76:36:6a:be:2a:4a:cc:7b:33:36:10: 70:94:86:a7:61:09:f8:78:2e:3b:a9:99:9f:28:55: ad:12:91:db:c2:f3:48:c5:7a:aa:f0:f9:42:f4:bd: 42:07:32:24:0d:7c:a5:f6:e3:3a:64:33:76:cd:89: 15:ac:f3:40:ae:fe:12:6e:67:ee:1c:ae:0d:fe:d8: 7e:de:60:93:45:b7:fd:16:ab:d3:db:de:dd:71:2d: 9b:9f:b8:e7:71:44:4c:79:35:21:a9:cb:21:66:b9: 90:bb:df:8a:01:f4:11:03:c8:d7:a1:55:79:7e:29: 00:62:bc:90:76:77:c7:76:03:fe:41:7c:de:4d:35: 68:b5:96:43:b6:26:1f:40:72:9d:83:cd:fb:98:2f: e3:0d:5f:09:b9:89:0c:72:8c:1e:89:37:d1:2e:64: e2:bf:88:a0:10:8a:2a:4d:bd:f1:07:97:7d:97:c3: 2d:22:09:eb:fb:e5:ec:17:70:af:0a:51:46:29:17: 21:29:14:97:d1:61:64:b8:27:0f:9e:c3:35:f8:fb: b4:ec:07:41:3e:fa:6a:24:64:d6:c2:bb:02:f3:8b: ca:8b:69:2b:e6:18:4e:e7:9e:ac:c6:54:63:7c:b4: 6a:60:f2:21:eb:43:4c:ee:5e:e7:80:5b:9c:38:d4: 8b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:63:61:21:26:A8:45:04:2D:91:DC:D0:85:F1:0B:5C:4E:1B:F6:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl X509v3 Authority Key Identifier: keyid:FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer sbgp-ipAddrBlock: critical IPv6: 2620:cf:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6e:b1:01:1a:28:e9:f2:f9:1a:12:11:de:01:24:8f:b2:15: 04:43:41:45:17:04:8e:3f:c7:46:4d:c4:c8:6a:6e:1f:98:fb: 50:52:f5:98:0c:1b:df:68:a3:29:36:a2:00:c7:39:73:bd:25: f5:cd:76:6c:75:d4:26:41:29:96:06:e0:a1:a0:b9:4d:22:a7: fb:15:26:2f:2a:27:3d:07:4a:cf:24:8a:ef:fa:85:48:85:08: 28:3b:ed:24:4f:bb:ea:bc:f7:0a:14:ab:45:a4:02:3e:26:ca: 89:92:b3:12:6e:c1:2f:da:87:c8:bf:91:b7:10:d3:6a:07:87: ae:a3:4a:f0:8e:c3:74:d1:6a:41:99:ed:db:59:20:e6:8b:3f: e4:2e:52:2d:ab:65:59:38:a4:c1:ad:f9:83:83:e5:79:4e:67: f8:d3:ed:d6:7f:c7:b9:2d:58:e5:25:84:61:05:c2:22:9e:c8: 75:aa:50:4b:8e:36:89:3c:c0:17:98:16:1a:60:ad:62:ad:d0: b6:c6:a8:45:00:0a:2d:02:62:8d:67:b7:9e:23:a2:32:df:04: ba:c3:f3:44:28:6c:70:6b:c6:99:bd:74:39:c5:ca:4a:16:26: 1b:19:16:9a:72:fa:a4:26:41:50:40:26:ea:00:1c:07:c0:5c: f3:20:b5:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj+u9V3TdCKyBWE42AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM4ZTE2MDItODA5My00YmNkLWI1MjctZjVkMTc1NjI5 NWZjMB4XDTI1MDIyNTAyMDAzOVoXDTI1MDUyNjAxMDAzOVowLzEtMCsGA1UEAxMk Yjg1NDAyOWEtMDFhNy00NzljLWI2MjAtNzA2ZjI1YWMzYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBoIdjZqvipKzHszNhBwlIanYQn4eC47qZmf KFWtEpHbwvNIxXqq8PlC9L1CBzIkDXyl9uM6ZDN2zYkVrPNArv4SbmfuHK4N/th+ 3mCTRbf9FqvT297dcS2bn7jncURMeTUhqcshZrmQu9+KAfQRA8jXoVV5fikAYryQ dnfHdgP+QXzeTTVotZZDtiYfQHKdg837mC/jDV8JuYkMcoweiTfRLmTiv4igEIoq Tb3xB5d9l8MtIgnr++XsF3CvClFGKRchKRSX0WFkuCcPnsM1+Pu07AdBPvpqJGTW wrsC84vKi2kr5hhO556sxlRjfLRqYPIh60NM7l7ngFucONSLPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLZjYSEmqEUELZHc0IXxC1xOG/aaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Mzhl MTYwMi04MDkzLTRiY2QtYjUyNy1mNWQxNzU2Mjk1ZmMvYzQzMTUxM2QtYWFlZi0z NDg1LWI0NmMtZDRjOWUzMjM3MmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTM4ZTE2MDItODA5My00YmNkLWI1 MjctZjVkMTc1NjI5NWZjLzkzOGUxNjAyLTgwOTMtNGJjZC1iNTI3LWY1ZDE3NTYy OTVmYy5jcmwwHwYDVR0jBBgwFoAU/MwAtMa9gHxpV2YtGanrwjeJePYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85MzhlMTYwMi04MDkzLTRiY2QtYjUyNy1mNWQx NzU2Mjk1ZmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAz6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVusQEaKOny+RoSEd4BJI+yFQRDQUUXBI4/x0ZNxMhqbh+Y+1BS 9ZgMG99ooyk2ogDHOXO9JfXNdmx11CZBKZYG4KGguU0ip/sVJi8qJz0HSs8kiu/6 hUiFCCg77SRPu+q89woUq0WkAj4myomSsxJuwS/ah8i/kbcQ02oHh66jSvCOw3TR akGZ7dtZIOaLP+QuUi2rZVk4pMGt+YOD5XlOZ/jT7dZ/x7ktWOUlhGEFwiKeyHWq UEuONok8wBeYFhpgrWKt0LbGqEUACi0CYo1nt54jojLfBLrD80QobHBrxpm9dDnF ykoWJhsZFppy+qQmQVBAJuoAHAfAXPMgtUY= -----END CERTIFICATE-----Generated at Sat Apr 12 11:02:55 2025 by rpki-client