$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa File: 449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa (raw, json) Hash identifier: 1HNpis/zUVeABvf0sUxISZ7KmCFLW+OftvVlr4ps5Xo= Subject key identifier: 64:BA:83:71:6E:06:69:A4:3A:AE:5D:12:7B:02:AC:4A:C8:A0:20:F4 Certificate issuer: /CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc Certificate serial: 010D0C9F432858496FAF0610DE102EE416F4C780 Authority key identifier: 43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 14041 IP address blocks: 2620:11f:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:06:10:de:10:2e:e4:16:f4:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=f88c0df2-cb2f-48bb-b678-3de6d2848fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:5a:e4:60:15:6b:ac:ca:4f:f9:c4:34:49: 90:e3:86:6a:35:c8:4b:b8:f5:d9:ef:30:55:dd:81: 86:59:13:f9:f7:f3:d6:f8:61:53:90:a3:21:f7:2e: 79:9b:d8:c1:ed:fe:1c:0f:1b:d4:3e:a3:9e:17:2b: 21:52:de:d2:b1:bd:eb:40:f0:42:4e:a6:91:31:73: ad:34:b4:28:6a:07:a0:83:01:dd:38:58:88:89:71: 35:f2:43:e0:62:61:2a:83:f1:83:23:8a:28:42:75: 06:08:e9:0f:58:ef:f6:8b:88:6b:48:e4:b3:89:7b: f2:ab:5f:a9:c2:73:b9:94:41:81:89:13:df:f6:88: 8b:bf:d1:70:8d:34:21:98:e7:40:c5:7d:df:b6:05: de:ca:c8:f5:f3:b5:c2:fb:f9:54:fb:53:84:43:c0: 40:eb:e8:c0:5a:59:2a:a9:ac:96:0e:b2:1e:1a:bf: a6:22:7b:7c:77:6c:4a:e6:7a:69:ea:34:c4:79:84: 67:49:a1:99:65:bf:e8:84:94:9a:ff:ea:64:6f:d6: af:16:ba:11:e1:48:50:d6:a2:d1:93:3d:23:75:64: 90:64:bb:73:1c:75:81:4b:a3:60:1d:a6:93:27:fe: 6f:cb:b3:cb:54:01:fb:12:39:fe:57:d5:76:94:ab: de:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BA:83:71:6E:06:69:A4:3A:AE:5D:12:7B:02:AC:4A:C8:A0:20:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl X509v3 Authority Key Identifier: keyid:43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer sbgp-ipAddrBlock: critical IPv6: 2620:11f:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:c1:25:f3:f9:22:71:d6:18:d2:72:52:8f:30:10:8e:85:40: 9c:01:4f:07:a1:87:fc:b1:22:be:40:5c:f8:33:cc:d8:99:bc: 5c:6b:df:b8:e8:9a:cf:02:e6:b9:a6:44:17:8b:08:1f:0d:f6: 1f:bb:37:af:52:22:24:2f:af:a2:90:72:a8:20:17:ab:5c:18: d5:6f:52:f3:36:37:56:c2:7a:68:b4:f6:5a:6d:39:c1:93:34: dc:51:fc:02:8f:b2:35:71:02:fd:60:5b:de:3e:76:ff:e2:ca: 4a:32:6f:17:a6:0f:8b:02:9c:ef:23:e9:a5:cf:ec:1e:1e:50: 76:1c:22:d1:58:fd:49:75:31:3b:cc:d8:67:7a:d3:8a:34:c1: 13:1b:58:ea:1c:5b:50:cf:47:ca:98:3c:4e:67:74:20:e7:ab: 9f:5a:42:b1:da:d5:64:cd:19:59:d1:5b:f1:67:d4:a9:93:5e: 3f:72:f3:7b:bd:02:42:03:59:f3:a2:67:8c:71:88:4d:46:2d: a8:ae:e2:54:d3:25:cd:1b:40:6b:aa:ba:8d:53:05:b3:6e:c1: 2f:03:b4:5a:e3:56:7e:e0:4a:b6:cf:b4:46:dc:66:10:3b:b9: 60:1a:1b:38:99:47:22:fd:5d:c7:11:84:ca:a7:c5:95:30:6d: e8:83:d0:09 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElvrwYQ3hAu5Bb0x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTllMmMxYWMtZTI1NS00MGZlLThkYzgtMzY3NTBiNTY5 YmZjMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk Zjg4YzBkZjItY2IyZi00OGJiLWI2NzgtM2RlNmQyODQ4ZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgZa5GAVa6zKT/nENEmQ44ZqNchLuPXZ7zBV 3YGGWRP59/PW+GFTkKMh9y55m9jB7f4cDxvUPqOeFyshUt7Ssb3rQPBCTqaRMXOt NLQoageggwHdOFiIiXE18kPgYmEqg/GDI4ooQnUGCOkPWO/2i4hrSOSziXvyq1+p wnO5lEGBiRPf9oiLv9FwjTQhmOdAxX3ftgXeysj187XC+/lU+1OEQ8BA6+jAWlkq qayWDrIeGr+mInt8d2xK5npp6jTEeYRnSaGZZb/ohJSa/+pkb9avFroR4UhQ1qLR kz0jdWSQZLtzHHWBS6NgHaaTJ/5vy7PLVAH7Ejn+V9V2lKveiwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGS6g3FuBmmkOq5dEnsCrErIoCD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUy YzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1MGI1NjliZmMvNDQ5ZDYyYWEtMTQ3ZC0z Y2MxLWI2ZDEtMDk2Y2UyNDYxYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTllMmMxYWMtZTI1NS00MGZlLThk YzgtMzY3NTBiNTY5YmZjL2E5ZTJjMWFjLWUyNTUtNDBmZS04ZGM4LTM2NzUwYjU2 OWJmYy5jcmwwHwYDVR0jBBgwFoAUQ16gpiq9KrPgDx52W71+jvmA1x0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUyYzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1 MGI1NjliZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABH1Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASMEl8/kicdYY0nJSjzAQjoVAnAFPB6GH/LEivkBc+DPM2Jm8XGvf uOiazwLmuaZEF4sIHw32H7s3r1IiJC+vopByqCAXq1wY1W9S8zY3VsJ6aLT2Wm05 wZM03FH8Ao+yNXEC/WBb3j52/+LKSjJvF6YPiwKc7yPppc/sHh5Qdhwi0Vj9SXUx O8zYZ3rTijTBExtY6hxbUM9Hypg8Tmd0IOern1pCsdrVZM0ZWdFb8WfUqZNeP3Lz e70CQgNZ86JnjHGITUYtqK7iVNMlzRtAa6q6jVMFs27BLwO0WuNWfuBKts+0Rtxm EDu5YBobOJlHIv1dxxGEyqfFlTBt6IPQCQ== -----END CERTIFICATE-----Generated at Sat May 10 16:22:03 2025 by rpki-client