$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/ef6288bf-9586-3449-8d94-7be543b242f9.roa File: ef6288bf-9586-3449-8d94-7be543b242f9.roa (raw, json) Hash identifier: g9gpi1lM/BqBeiVYjO6zEfKIU8rNE8lDaPrUY7ZJWjY= Subject key identifier: E1:40:1A:DF:5B:1C:93:1A:D2:80:38:50:24:05:37:40:70:F4:10:D1 Certificate issuer: /CN=5d1f7581-692a-467e-ae71-d3c4921d0765 Certificate serial: 010D0C9F432858490E16B718290FBD6869636280 Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/ef6288bf-9586-3449-8d94-7be543b242f9.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 3257 IP address blocks: 2620:4e:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:b7:18:29:0f:bd:68:69:63:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=8a040da1-2d29-4ce3-b479-31041e732a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:cf:18:a0:2b:5f:43:28:d3:e8:f8:a9:9a: 77:75:33:fa:72:9d:5b:4c:8f:d4:5d:9d:1a:ac:4b: a9:2e:9f:4a:88:47:4e:d7:d6:06:22:6a:e0:fc:45: 11:19:76:a0:35:da:32:c6:16:e3:ba:82:a8:95:cd: da:38:e8:76:af:00:55:ed:03:1d:e3:6d:03:10:ba: 17:b3:c9:fc:ad:29:82:94:d2:45:c7:41:82:6d:f3: d4:81:3b:0f:0e:6e:65:a9:68:6f:9a:ac:b3:73:44: 7e:9b:7c:44:4e:00:03:ca:ab:85:5d:d6:2f:66:c6: 7f:6e:e3:3a:ef:b1:ee:5d:85:fe:94:36:9c:c4:e3: 59:25:07:6e:5a:81:34:d8:2f:c4:34:36:82:6c:de: c4:e8:cd:1c:85:7c:86:40:91:e8:42:a1:9f:5f:fb: 03:8b:cf:63:4b:d4:ba:48:eb:49:b3:7c:c9:f3:73: 6a:87:96:53:12:92:d0:bf:ba:d1:77:39:51:84:2f: d4:7b:fa:fd:ac:a2:7a:a6:e3:4b:5c:c0:d2:2c:75: d8:dc:63:27:2f:42:5d:0b:91:d7:63:ce:34:e2:e4: 51:b9:22:00:11:8f:fd:51:ae:c3:76:b7:70:68:15: 83:66:37:ce:85:55:d0:63:2f:e9:63:73:89:43:9a: 85:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:40:1A:DF:5B:1C:93:1A:D2:80:38:50:24:05:37:40:70:F4:10:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/ef6288bf-9586-3449-8d94-7be543b242f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl X509v3 Authority Key Identifier: keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer sbgp-ipAddrBlock: critical IPv6: 2620:4e:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:68:d0:05:2c:1a:69:ba:e2:e0:49:d8:63:31:6c:30:de:e2: 50:4b:38:e0:be:54:0e:7b:30:f3:43:0d:4b:f5:d5:c5:30:eb: c3:7c:32:63:69:d8:57:83:9e:9b:e6:24:9a:39:f8:0f:a4:4e: 79:63:a0:6e:a8:75:d1:a6:a7:cc:7b:86:b8:51:d3:61:c3:8b: 50:f1:db:9f:b1:41:9f:3e:fc:2c:b7:7a:ca:c7:3e:63:9f:19: bf:53:6e:ef:b5:7e:3e:9f:5d:75:51:0f:99:c4:5d:e3:ee:49: a3:d2:cd:6e:5f:94:c3:27:e5:2b:58:47:27:4b:ea:46:c6:8e: 36:f0:ff:c3:f3:05:19:e0:7e:4a:d0:b2:b0:22:1c:1f:9e:e8: 54:79:cf:1d:2f:2a:77:cd:1e:57:de:18:4a:e1:1e:e6:8d:c3: 52:65:76:2b:78:ec:74:69:06:aa:dd:fe:27:8b:34:fd:b7:a6: c2:4a:7c:84:b0:ed:f9:26:98:73:1a:e3:27:2d:73:ed:80:1e: 04:34:8b:6d:aa:f9:4e:1b:c4:42:0a:e4:9d:37:bc:00:eb:06: b8:4c:ce:9e:23:fc:67:39:56:b6:fb:95:8e:ce:ba:e5:5d:70: 89:e7:1e:64:71:73:51:8f:0a:64:69:e3:d2:ba:29:bf:9e:69: 29:d5:36:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkOFrcYKQ+9aGljYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQxZjc1ODEtNjkyYS00NjdlLWFlNzEtZDNjNDkyMWQw NzY1MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk OGEwNDBkYTEtMmQyOS00Y2UzLWI0NzktMzEwNDFlNzMyYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1rPGKArX0Mo0+j4qZp3dTP6cp1bTI/UXZ0a rEupLp9KiEdO19YGImrg/EURGXagNdoyxhbjuoKolc3aOOh2rwBV7QMd420DELoX s8n8rSmClNJFx0GCbfPUgTsPDm5lqWhvmqyzc0R+m3xETgADyquFXdYvZsZ/buM6 77HuXYX+lDacxONZJQduWoE02C/ENDaCbN7E6M0chXyGQJHoQqGfX/sDi89jS9S6 SOtJs3zJ83Nqh5ZTEpLQv7rRdzlRhC/Ue/r9rKJ6puNLXMDSLHXY3GMnL0JdC5HX Y8404uRRuSIAEY/9Ua7DdrdwaBWDZjfOhVXQYy/pY3OJQ5qFHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOFAGt9bHJMa0oA4UCQFN0Bw9BDRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFm NzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0OTIxZDA3NjUvZWY2Mjg4YmYtOTU4Ni0z NDQ5LThkOTQtN2JlNTQzYjI0MmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQxZjc1ODEtNjkyYS00NjdlLWFl NzEtZDNjNDkyMWQwNzY1LzVkMWY3NTgxLTY5MmEtNDY3ZS1hZTcxLWQzYzQ5MjFk MDc2NS5jcmwwHwYDVR0jBBgwFoAU/E+wVT9F4ouBttKQsjS83QRwJYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFmNzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0 OTIxZDA3NjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATuAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHpo0AUsGmm64uBJ2GMxbDDe4lBLOOC+VA57MPNDDUv11cUw68N8 MmNp2FeDnpvmJJo5+A+kTnljoG6oddGmp8x7hrhR02HDi1Dx25+xQZ8+/Cy3esrH PmOfGb9Tbu+1fj6fXXVRD5nEXePuSaPSzW5flMMn5StYRydL6kbGjjbw/8PzBRng fkrQsrAiHB+e6FR5zx0vKnfNHlfeGErhHuaNw1Jldit47HRpBqrd/ieLNP23psJK fISw7fkmmHMa4yctc+2AHgQ0i22q+U4bxEIK5J03vADrBrhMzp4j/Gc5Vrb7lY7O uuVdcInnHmRxc1GPCmRp49K6Kb+eaSnVNgw= -----END CERTIFICATE-----Generated at Sat Apr 5 16:10:56 2025 by rpki-client