$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa File: eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa (raw, json) Hash identifier: 6DeEPeqUTbGZtM++o+L2fugF4s+RMgPA9I1ztvHGQDo= Subject key identifier: 97:94:79:06:1B:E7:5D:E3:58:16:AD:CC:DD:AB:BF:A2:DA:18:94:F3 Certificate issuer: /CN=4f965035-760e-4232-a4c3-bc290fa7e325 Certificate serial: 010D0C9F43285848EC96912FEAB74A1F4FC66580 Authority key identifier: 4F:53:AA:A6:82:E5:67:D0:28:69:98:61:76:F7:6E:EB:DB:83:C1:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 25656 IP address blocks: 2620:38:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:91:2f:ea:b7:4a:1f:4f:c6:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f965035-760e-4232-a4c3-bc290fa7e325 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=273979b5-9c2c-4643-b430-86e014418299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:72:4b:ce:04:61:f4:22:8d:bd:b2:4a:9e:ee: 51:46:66:80:92:93:8b:42:a2:58:39:07:cc:b7:91: 0b:e3:68:0f:44:44:4c:8b:6a:4e:bf:fd:cb:24:50: aa:01:42:39:ca:1f:c7:4a:27:f8:94:d7:28:50:2b: 04:d0:fe:b5:cd:b1:54:01:a4:8c:d7:48:a0:a4:bd: 1f:8c:96:4f:16:56:d3:b5:d0:94:e5:b4:38:97:09: bd:47:d2:98:9f:64:fb:44:a4:2c:c5:65:c7:fa:b0: 65:30:d7:0c:2a:02:61:90:55:b9:8b:c3:2c:9a:94: 61:42:e2:ed:8a:e7:25:e2:e2:8d:f2:80:ee:b7:bc: aa:53:05:bc:96:89:47:9a:c2:f6:0d:a6:9b:2b:71: d8:84:6a:08:92:af:af:99:fa:7c:12:c5:a9:61:23: 82:34:63:46:9d:a9:65:9d:78:f0:f0:f8:e0:a2:1b: aa:16:76:ce:51:27:f7:eb:a7:4e:a1:1a:03:95:d2: 96:f9:46:9c:aa:2a:ef:76:c6:b3:f9:e9:2a:80:00: 7a:3f:66:cf:6a:72:53:4b:39:ef:d6:04:a7:d0:13: ed:45:03:c9:e7:85:47:ae:9a:37:8a:56:da:79:06: 97:ef:46:54:bf:38:5a:8e:55:ac:4d:ae:31:c9:de: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:94:79:06:1B:E7:5D:E3:58:16:AD:CC:DD:AB:BF:A2:DA:18:94:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.crl X509v3 Authority Key Identifier: keyid:4F:53:AA:A6:82:E5:67:D0:28:69:98:61:76:F7:6E:EB:DB:83:C1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer sbgp-ipAddrBlock: critical IPv6: 2620:38:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:15:f6:6e:3f:6c:f9:57:31:e9:09:ea:d3:67:4a:56:d3:77: 5e:36:38:e1:0e:72:db:df:49:71:48:ed:12:3e:58:b9:44:94: 55:ae:85:a0:6e:74:43:a5:95:8b:ef:47:39:de:05:9a:d0:0e: e9:2e:34:81:6c:26:55:27:a5:8a:c4:0b:01:a4:f2:70:09:a2: e6:5b:c0:44:32:41:f4:eb:4c:78:aa:b9:ee:a9:48:83:44:ff: 3e:24:95:2b:2d:92:3e:4f:3f:36:91:f2:8e:15:9e:5e:44:b2: a7:1a:96:80:10:c9:60:13:95:d0:f7:ed:14:b1:dd:19:d3:58: 06:eb:bb:84:e1:1d:0d:9a:fe:49:af:f7:0b:a7:9a:6b:0c:e8: ad:94:2a:0b:6c:1e:c8:a3:ab:25:d2:5c:42:f2:70:1d:64:91: 9c:4b:39:46:c3:af:a0:3c:5a:f1:30:ce:7d:a1:0b:2b:37:db: 86:51:fa:bf:f4:9c:69:3d:c4:4f:7c:24:8e:61:c1:42:d1:5a: 5b:68:3a:c1:f5:1c:1f:84:17:19:7f:b0:28:32:45:02:f3:1d: 5d:b6:75:66:18:b0:67:2a:ec:3e:93:3b:87:c2:fe:31:3f:04: c9:95:e3:82:68:39:45:42:a4:da:74:05:22:3a:c2:ae:76:dc: fe:07:4e:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjslpEv6rdKH0/GZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5NjUwMzUtNzYwZS00MjMyLWE0YzMtYmMyOTBmYTdl MzI1MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MjczOTc5YjUtOWMyYy00NjQzLWI0MzAtODZlMDE0NDE4Mjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXJLzgRh9CKNvbJKnu5RRmaAkpOLQqJYOQfM t5EL42gPRERMi2pOv/3LJFCqAUI5yh/HSif4lNcoUCsE0P61zbFUAaSM10igpL0f jJZPFlbTtdCU5bQ4lwm9R9KYn2T7RKQsxWXH+rBlMNcMKgJhkFW5i8MsmpRhQuLt iucl4uKN8oDut7yqUwW8lolHmsL2DaabK3HYhGoIkq+vmfp8EsWpYSOCNGNGnall nXjw8PjgohuqFnbOUSf366dOoRoDldKW+Uacqirvdsaz+ekqgAB6P2bPanJTSznv 1gSn0BPtRQPJ54VHrpo3ilbaeQaX70ZUvzhajlWsTa4xyd567wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJeUeQYb513jWBatzN2rv6LaGJTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80Zjk2 NTAzNS03NjBlLTQyMzItYTRjMy1iYzI5MGZhN2UzMjUvZWFhNzE5YTAtNDQwMi0z NjdhLTlmZTYtZjdhZTI1ZGMyM2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGY5NjUwMzUtNzYwZS00MjMyLWE0 YzMtYmMyOTBmYTdlMzI1LzRmOTY1MDM1LTc2MGUtNDIzMi1hNGMzLWJjMjkwZmE3 ZTMyNS5jcmwwHwYDVR0jBBgwFoAUT1OqpoLlZ9AoaZhhdvdu69uDwVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80Zjk2NTAzNS03NjBlLTQyMzItYTRjMy1iYzI5 MGZhN2UzMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAOMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHgV9m4/bPlXMekJ6tNnSlbTd142OOEOctvfSXFI7RI+WLlElFWu haBudEOllYvvRzneBZrQDukuNIFsJlUnpYrECwGk8nAJouZbwEQyQfTrTHique6p SINE/z4klSstkj5PPzaR8o4Vnl5EsqcaloAQyWATldD37RSx3RnTWAbru4ThHQ2a /kmv9wunmmsM6K2UKgtsHsijqyXSXELycB1kkZxLOUbDr6A8WvEwzn2hCys324ZR +r/0nGk9xE98JI5hwULRWltoOsH1HB+EFxl/sCgyRQLzHV22dWYYsGcq7D6TO4fC /jE/BMmV44JoOUVCpNp0BSI6wq523P4HTkk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:45:56 2025 by rpki-client