$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa File: 5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa (raw, json) Hash identifier: ZSggx/rUyiIF4wSoLFglaNmm4Me3uqGo7mHjyJS3eJA= Subject key identifier: A7:98:8D:97:6D:C9:B0:48:F3:A9:8F:F7:7F:56:FB:42:36:D5:BE:F5 Certificate issuer: /CN=22ce2863-e26f-47ca-8b36-16048be7f337 Certificate serial: 010D0C9F432858491D715B452CAEC529BC1E9280 Authority key identifier: 26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 398931 IP address blocks: 2620:af:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:5b:45:2c:ae:c5:29:bc:1e:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ce2863-e26f-47ca-8b36-16048be7f337 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=ec8ca5c5-3fdc-4957-a9da-a335145d0b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:26:62:a1:ef:a3:9a:d8:a7:9c:8a:7a:07:dd: e7:db:b9:df:83:5f:23:98:54:e5:9b:19:d0:68:cf: 12:3c:5d:0f:6e:df:f2:18:eb:70:36:b1:c5:17:be: 21:7d:a9:8d:8a:82:17:22:a2:dc:85:c0:55:8b:f3: 06:96:fa:40:0e:68:70:da:78:31:73:fe:82:8b:08: fd:0f:10:38:54:58:86:d1:29:6c:d3:cc:b6:c2:a4: 68:49:22:ec:4b:63:cc:73:e2:4f:6d:06:1f:55:33: 55:02:10:d3:71:0c:69:00:8f:39:ed:9c:08:06:80: 86:db:0d:f6:49:6a:bb:df:43:e2:74:01:a2:03:85: 18:91:16:22:47:60:58:58:6c:5a:92:8c:cf:1b:30: 50:2b:02:b5:71:79:8f:0c:6a:49:6d:0d:4c:9d:a8: 3e:13:f7:7a:60:7c:8a:e8:d1:ed:80:f2:d3:f9:68: 25:b9:56:00:4c:3f:c5:4b:cd:17:c0:93:f0:8b:5c: ee:a4:a9:e7:72:47:91:18:3a:9f:84:26:95:a1:15: 83:ae:68:c1:37:77:b2:87:df:25:fd:31:ac:04:bf: 81:e8:2c:20:19:f5:d3:d9:89:a9:57:e6:c5:d8:c3: f1:e9:89:d6:dd:35:48:fc:87:e8:47:bd:50:c1:8d: 88:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:98:8D:97:6D:C9:B0:48:F3:A9:8F:F7:7F:56:FB:42:36:D5:BE:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.crl X509v3 Authority Key Identifier: keyid:26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer sbgp-ipAddrBlock: critical IPv6: 2620:af:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:09:fc:55:55:52:49:73:7a:1c:8c:67:7a:98:7f:48:c3:03: c8:dc:cd:94:17:35:95:a8:b3:6e:ec:8f:e5:10:69:13:7b:3c: bb:39:fc:b1:1a:30:1a:fd:84:b8:97:b0:36:f7:38:bf:9d:fd: d1:3c:a2:a1:aa:73:cc:b0:e7:3a:01:90:23:e4:5c:bc:f2:d1: 92:f0:0c:99:82:1a:33:c7:0d:2c:45:91:95:31:7a:bc:4a:d1: 56:92:82:2f:91:3a:f0:3b:4c:ab:83:f9:39:2d:4b:b5:40:f3: c8:af:cf:58:a4:0c:cd:e7:ca:52:2d:b6:bb:88:a8:a4:e7:25: e1:63:f4:01:95:52:aa:ef:6c:f4:08:db:aa:a7:7c:83:ad:9d: ce:fa:98:c5:0f:5b:ef:14:76:62:19:b8:1f:ea:1a:fa:55:d4: 40:aa:23:10:a0:df:d3:f5:92:b1:50:71:ea:b6:51:04:cb:ec: 56:f6:d0:01:6f:fa:67:63:9d:96:ff:6a:56:0d:e6:55:77:fe: 6a:85:a3:1a:03:ca:28:e3:48:94:69:0b:c7:58:cf:09:2c:f4: aa:7e:48:37:1c:3e:d5:9c:69:0d:fc:cb:d3:cb:9d:54:bd:ef: c8:9d:04:9e:60:77:6d:2f:05:33:76:f4:72:3e:5b:1d:9b:d1: 2b:45:06:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkdcVtFLK7FKbwekoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJjZTI4NjMtZTI2Zi00N2NhLThiMzYtMTYwNDhiZTdm MzM3MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZWM4Y2E1YzUtM2ZkYy00OTU3LWE5ZGEtYTMzNTE0NWQwYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyZioe+jmtinnIp6B93n27nfg18jmFTlmxnQ aM8SPF0Pbt/yGOtwNrHFF74hfamNioIXIqLchcBVi/MGlvpADmhw2ngxc/6Ciwj9 DxA4VFiG0Sls08y2wqRoSSLsS2PMc+JPbQYfVTNVAhDTcQxpAI857ZwIBoCG2w32 SWq730PidAGiA4UYkRYiR2BYWGxakozPGzBQKwK1cXmPDGpJbQ1Mnag+E/d6YHyK 6NHtgPLT+WgluVYATD/FS80XwJPwi1zupKnnckeRGDqfhCaVoRWDrmjBN3eyh98l /TGsBL+B6CwgGfXT2YmpV+bF2MPx6YnW3TVI/IfoR71QwY2IDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKeYjZdtybBI86mP939W+0I21b71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmNl Mjg2My1lMjZmLTQ3Y2EtOGIzNi0xNjA0OGJlN2YzMzcvNWFjOWM0MmMtOGQ1Yi0z NTY2LTg0YmQtMzlmMTE2NGIwNWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJjZTI4NjMtZTI2Zi00N2NhLThi MzYtMTYwNDhiZTdmMzM3LzIyY2UyODYzLWUyNmYtNDdjYS04YjM2LTE2MDQ4YmU3 ZjMzNy5jcmwwHwYDVR0jBBgwFoAUJiYcU7FxDek62AspsJ2LM7lHYPYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmNlMjg2My1lMjZmLTQ3Y2EtOGIzNi0xNjA0 OGJlN2YzMzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAr6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIkJ/FVVUklzehyMZ3qYf0jDA8jczZQXNZWos27sj+UQaRN7PLs5 /LEaMBr9hLiXsDb3OL+d/dE8oqGqc8yw5zoBkCPkXLzy0ZLwDJmCGjPHDSxFkZUx erxK0VaSgi+ROvA7TKuD+TktS7VA88ivz1ikDM3nylIttruIqKTnJeFj9AGVUqrv bPQI26qnfIOtnc76mMUPW+8UdmIZuB/qGvpV1ECqIxCg39P1krFQceq2UQTL7Fb2 0AFv+mdjnZb/alYN5lV3/mqFoxoDyijjSJRpC8dYzwks9Kp+SDccPtWcaQ38y9PL nVS978idBJ5gd20vBTN29HI+Wx2b0StFBkY= -----END CERTIFICATE-----Generated at Wed May 14 09:22:48 2025 by rpki-client