$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa File: 5e197e82-6568-36db-8744-a92186db0276.roa (raw, json) Hash identifier: dZ8v0hWac+E2stCDTNf802lkF0r5GTqT+PQsghPyy5s= Subject key identifier: 8D:12:F4:2F:02:EE:FB:B5:99:A0:FF:45:AD:37:84:C1:D1:16:88:29 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F432858498FC9BDC093549B75754C9E40 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 40623 IP address blocks: 2610:20:8020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:bd:c0:93:54:9b:75:75:4c:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=e2d7c513-b3de-47d3-bae9-50aa482d5a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e9:d5:93:19:ac:0d:fb:42:60:8c:cf:c4:a4: e8:ee:ac:97:5a:d9:b6:6d:0a:58:6c:3c:01:24:5f: 8c:21:98:c4:04:25:65:c3:ce:4a:47:38:29:64:40: ac:d7:90:29:c1:6a:da:81:54:e9:1d:eb:90:a4:e1: 9d:06:c4:eb:d4:83:b5:2e:80:a1:0b:78:a2:cd:33: 5c:dd:77:95:66:79:19:df:4a:d4:af:ae:21:d5:8f: 0f:e3:13:c8:c2:a3:14:b5:6d:f7:ba:78:b5:56:3f: 53:6f:2c:2d:5f:09:bf:97:0e:3f:a5:a3:e2:c8:1e: 34:f2:d9:42:a2:83:62:3b:65:0c:fc:77:7b:27:67: fb:03:f7:c9:89:f8:0e:e8:23:0b:73:47:b7:10:7f: 8b:64:a6:e4:2c:59:d9:08:3d:15:7b:4a:ce:fa:6e: ba:2d:46:ea:bc:7f:d6:07:03:20:78:a8:e4:70:69: 2b:6e:9b:8c:4a:83:de:3e:f0:91:c2:55:2c:ac:4a: 92:e2:7f:5b:44:c2:b6:29:69:72:83:f7:6e:17:3d: 2e:17:5d:cf:71:0e:45:99:c5:ce:20:cf:f1:02:2c: df:bd:f4:88:86:bd:94:77:68:1f:ad:3c:5d:05:4b: 03:a7:85:d9:48:bc:35:71:f3:d4:13:1c:8e:8d:55: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:12:F4:2F:02:EE:FB:B5:99:A0:FF:45:AD:37:84:C1:D1:16:88:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:8020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f6:62:63:a0:6c:22:5d:cd:aa:87:a9:df:72:3f:90:48:3b: 07:97:ea:4c:79:41:02:f3:ee:b0:65:e2:a4:94:f5:11:39:18: 95:84:0c:7b:62:24:1a:2b:80:e5:6d:85:17:34:a0:12:79:eb: de:8e:5b:4a:07:05:1a:64:ae:f5:5c:f6:c1:9b:64:92:d6:8e: d3:56:dd:bb:9c:fe:36:69:0c:d9:9e:e0:09:f4:6e:4f:c2:1e: 6e:2a:a7:37:d3:92:d8:d6:9a:62:cd:cd:44:b6:5d:5e:55:e5: 2d:9b:41:35:83:e3:63:86:36:5c:48:b1:1f:44:11:dc:00:3b: 1f:c6:15:17:36:e1:3d:b3:67:96:ef:83:06:6d:f8:64:2f:78: b5:39:1f:47:14:df:4e:87:9c:17:0b:ec:a2:71:f9:e8:d8:20: 64:8d:18:0d:a3:47:ca:6e:4b:89:4d:34:2f:5a:cd:37:6a:04: 4c:7c:5c:91:ef:a0:bd:e9:41:50:58:22:2b:db:0c:b1:d8:d3: c1:93:2d:29:d0:61:db:69:8b:bd:94:f0:72:94:69:43:2f:eb: 83:e8:65:8d:e9:62:4c:54:a7:41:ad:77:9e:20:35:f9:bd:e7: 53:ac:41:ec:43:fc:7b:2a:5b:7a:3b:1b:62:d5:07:7c:99:cc: 16:84:3f:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmPyb3Ak1SbdXVMnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk ZTJkN2M1MTMtYjNkZS00N2QzLWJhZTktNTBhYTQ4MmQ1YTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjunVkxmsDftCYIzPxKTo7qyXWtm2bQpYbDwB JF+MIZjEBCVlw85KRzgpZECs15ApwWragVTpHeuQpOGdBsTr1IO1LoChC3iizTNc 3XeVZnkZ30rUr64h1Y8P4xPIwqMUtW33uni1Vj9TbywtXwm/lw4/paPiyB408tlC ooNiO2UM/Hd7J2f7A/fJifgO6CMLc0e3EH+LZKbkLFnZCD0Ve0rO+m66LUbqvH/W BwMgeKjkcGkrbpuMSoPePvCRwlUsrEqS4n9bRMK2KWlyg/duFz0uF13PcQ5FmcXO IM/xAizfvfSIhr2Ud2gfrTxdBUsDp4XZSLw1cfPUExyOjVVTqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI0S9C8C7vu1maD/Ra03hMHRFogpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvNWUxOTdlODItNjU2OC0z NmRiLTg3NDQtYTkyMTg2ZGIwMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIIAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJn2YmOgbCJdzaqHqd9yP5BIOweX6kx5QQLz7rBl4qSU9RE5GJWE DHtiJBorgOVthRc0oBJ5696OW0oHBRpkrvVc9sGbZJLWjtNW3buc/jZpDNme4An0 bk/CHm4qpzfTktjWmmLNzUS2XV5V5S2bQTWD42OGNlxIsR9EEdwAOx/GFRc24T2z Z5bvgwZt+GQveLU5H0cU306HnBcL7KJx+ejYIGSNGA2jR8puS4lNNC9azTdqBEx8 XJHvoL3pQVBYIivbDLHY08GTLSnQYdtpi72U8HKUaUMv64PoZY3pYkxUp0Gtd54g Nfm951OsQexD/HsqW3o7G2LVB3yZzBaEP7g= -----END CERTIFICATE-----Generated at Sun May 11 10:31:14 2025 by rpki-client