$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa File: 824e6379-abbf-3ba1-8155-eeab702f1b96.roa (raw, json) Hash identifier: 8ZLY8WNNBD55QOGFajmg7/UxxkbDeZt4mf2N/VCFfLQ= Subject key identifier: 72:B0:B5:80:FE:1D:A1:61:BC:65:BB:95:06:B3:AD:63:DD:97:4C:81 Certificate issuer: /CN=4bc701e5-cff5-4660-9102-08342e5ad35f Certificate serial: 010D0C9F43285849B149E87A9C8D0F2A51A58F80 Authority key identifier: 62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 26523 IP address blocks: 2620:0:f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:e8:7a:9c:8d:0f:2a:51:a5:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc701e5-cff5-4660-9102-08342e5ad35f Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c84651af-28c1-4a27-b714-fc6f2268e15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:df:fe:f6:13:66:f7:41:6d:ad:48:1f:d4:35: 51:b8:36:b5:5d:28:02:91:91:fc:59:4b:01:cf:bb: 8a:54:64:7f:d6:5b:48:70:a2:0b:3b:71:d8:16:34: c3:91:11:a9:43:6a:39:d5:1d:92:a4:58:95:7c:fd: 9a:c2:ca:98:56:0f:8a:c0:85:d5:b0:c5:a3:71:f0: a0:26:10:05:1d:70:58:54:52:6d:45:43:e9:25:3f: 58:6e:ef:81:72:65:d2:4c:5f:fe:7b:35:43:d0:06: 60:b0:d2:b7:a5:e7:2a:00:c4:17:b9:df:66:65:ce: 9f:1e:65:83:61:6e:bf:53:d4:16:68:7b:a8:b7:98: 03:f2:0d:21:ab:b6:33:1a:00:cc:71:08:35:61:43: a7:7a:ab:71:4b:35:5e:1b:57:14:69:0a:d2:20:ca: bc:de:98:18:a9:5d:0a:7e:a7:ea:5b:86:53:1a:4d: 50:7c:65:80:45:ab:45:b6:41:c6:b9:9b:9b:7e:4c: db:62:03:09:35:7f:67:74:ff:3f:95:31:16:89:68: 74:ca:92:24:3d:1d:94:e6:f8:98:8e:ca:d7:ad:e2: 92:b7:49:5d:67:63:8c:41:ef:3f:92:e9:b8:bc:74: ff:b3:79:72:b8:e4:60:56:86:07:a1:44:76:5f:2f: 82:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B0:B5:80:FE:1D:A1:61:BC:65:BB:95:06:B3:AD:63:DD:97:4C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.crl X509v3 Authority Key Identifier: keyid:62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:08:f2:41:0b:45:d2:2f:16:61:9a:94:d8:af:d9:9d:4b:32: 7b:ab:c7:e7:06:10:79:fb:c3:e6:8a:06:1b:5a:a5:1d:28:10: c3:45:24:62:38:dd:d8:9c:86:cf:ee:96:61:58:35:f2:e8:e8: 52:b2:17:01:98:b6:99:a1:18:41:76:3f:c7:e1:54:ce:ce:8c: 6d:36:4f:16:0c:17:db:de:df:93:dc:bd:20:24:79:64:7a:66: 18:a0:51:03:8d:bb:d1:dd:52:1b:02:8b:08:cd:11:6f:5c:67: 7f:fd:cc:33:e4:a9:85:89:e9:36:3e:31:cd:61:9c:4f:37:73: bd:e7:41:e9:64:1c:58:91:9d:8c:85:35:4f:61:8c:6e:7f:60: d8:45:f6:ba:07:7f:bb:40:71:fe:ea:1a:33:88:17:6a:dc:76: 67:a6:13:4f:c2:1b:78:11:7c:e0:7b:19:b0:98:f7:3f:8a:cd: 48:63:fe:28:db:8a:40:92:9b:21:e5:62:a9:d9:aa:81:5c:fc: 2c:6d:6c:3d:80:72:fd:da:18:ef:ac:4c:8c:65:40:2f:8c:cb: e6:27:eb:a3:94:72:f8:7a:67:17:f0:eb:54:f0:1e:95:c5:54: 2f:87:17:2d:04:2b:9a:96:90:64:51:09:a7:6f:59:09:95:62: ec:36:78:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSeh6nI0PKlGlj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNzAxZTUtY2ZmNS00NjYwLTkxMDItMDgzNDJlNWFk MzVmMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Yzg0NjUxYWYtMjhjMS00YTI3LWI3MTQtZmM2ZjIyNjhlMTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd/+9hNm90FtrUgf1DVRuDa1XSgCkZH8WUsB z7uKVGR/1ltIcKILO3HYFjTDkRGpQ2o51R2SpFiVfP2awsqYVg+KwIXVsMWjcfCg JhAFHXBYVFJtRUPpJT9Ybu+BcmXSTF/+ezVD0AZgsNK3pecqAMQXud9mZc6fHmWD YW6/U9QWaHuot5gD8g0hq7YzGgDMcQg1YUOneqtxSzVeG1cUaQrSIMq83pgYqV0K fqfqW4ZTGk1QfGWARatFtkHGuZubfkzbYgMJNX9ndP8/lTEWiWh0ypIkPR2U5viY jsrXreKSt0ldZ2OMQe8/kum4vHT/s3lyuORgVoYHoUR2Xy+CCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHKwtYD+HaFhvGW7lQazrWPdl0yBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YmM3 MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0MmU1YWQzNWYvODI0ZTYzNzktYWJiZi0z YmExLTgxNTUtZWVhYjcwMmYxYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGJjNzAxZTUtY2ZmNS00NjYwLTkx MDItMDgzNDJlNWFkMzVmLzRiYzcwMWU1LWNmZjUtNDY2MC05MTAyLTA4MzQyZTVh ZDM1Zi5jcmwwHwYDVR0jBBgwFoAUYmRTfrlWuIlXLETUQaIf+l4Bu7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YmM3MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0 MmU1YWQzNWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAADw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGkI8kELRdIvFmGalNiv2Z1LMnurx+cGEHn7w+aKBhtapR0oEMNF JGI43dichs/ulmFYNfLo6FKyFwGYtpmhGEF2P8fhVM7OjG02TxYMF9ve35PcvSAk eWR6ZhigUQONu9HdUhsCiwjNEW9cZ3/9zDPkqYWJ6TY+Mc1hnE83c73nQelkHFiR nYyFNU9hjG5/YNhF9roHf7tAcf7qGjOIF2rcdmemE0/CG3gRfOB7GbCY9z+KzUhj /ijbikCSmyHlYqnZqoFc/CxtbD2Acv3aGO+sTIxlQC+My+Yn66OUcvh6Zxfw61Tw HpXFVC+HFy0EK5qWkGRRCadvWQmVYuw2eP0= -----END CERTIFICATE-----Generated at Mon May 12 20:47:24 2025 by rpki-client