$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/86e6d33d-6a23-354c-af89-a3dd6592183c.roa File: 86e6d33d-6a23-354c-af89-a3dd6592183c.roa (raw, json) Hash identifier: RHz678s2gY9BX2zX5kUi/TsT7sXa8qAzlevo3TrD+Y4= Subject key identifier: FF:FE:65:FA:C4:BB:25:4B:89:39:D8:78:63:16:9F:3A:FF:52:A0:F0 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849AE33ACB0436B71D5475E7180 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/86e6d33d-6a23-354c-af89-a3dd6592183c.roa Signing time: Mon 28 Apr 2025 22:28:36 +0000 ROA not before: Mon 28 Apr 2025 22:28:36 +0000 ROA not after: Sun 27 Jul 2025 22:28:36 +0000 asID: 8987 IP address blocks: 2605:4300:2c24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:33:ac:b0:43:6b:71:d5:47:5e:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 28 22:28:36 2025 GMT Not After : Jul 27 22:28:36 2025 GMT Subject: CN=dd508348-27d8-4046-9cdb-49e06d060995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:69:17:15:a2:99:58:45:d2:28:f4:03:a6: 5d:78:6e:7e:f2:61:1c:e4:78:8f:43:15:eb:51:53: 01:15:d9:bb:43:72:0f:28:f9:76:36:23:4d:1d:46: 8b:dd:39:de:e1:3b:65:aa:fe:c7:b9:82:50:a9:93: 6c:0d:07:56:f6:45:bb:26:c4:00:7e:a3:01:d8:18: 28:2a:a1:0b:be:bb:d1:cf:13:03:34:62:a7:86:99: 1b:3e:80:4c:c4:f1:ea:73:26:2f:79:54:4b:15:d3: a6:ef:c5:f2:2a:99:6d:33:55:9e:d1:69:29:32:61: 24:86:87:b5:ce:66:f0:3e:65:2e:cd:e0:de:5b:5c: b0:3a:f3:8d:c2:6e:18:71:ce:a8:bd:24:41:3a:b0: 70:a2:6e:ad:f3:8e:2e:75:9e:f2:70:0a:2a:32:87: 49:2d:12:bf:45:69:78:ad:81:b6:3d:98:03:75:d2: 04:51:4e:18:70:18:2a:d5:f1:3d:06:41:2f:3b:21: 6c:47:34:f8:44:57:c0:4c:d4:7d:e4:42:e0:37:08: 34:0e:24:73:81:da:bd:df:3d:89:64:d3:3d:d9:83: 59:2e:79:4a:92:9d:16:62:bc:e0:9f:c9:f2:48:6b: 0e:eb:cb:d3:7b:49:a3:92:62:ab:f2:a4:5f:cd:e6: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FE:65:FA:C4:BB:25:4B:89:39:D8:78:63:16:9F:3A:FF:52:A0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/86e6d33d-6a23-354c-af89-a3dd6592183c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c24::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:21:36:bc:14:71:2b:77:9d:a3:98:eb:69:0b:9d:4a:91:cd: f1:24:33:7c:f7:17:e1:5f:a3:84:8d:5e:0f:9d:13:6f:11:ab: 52:24:60:28:e4:6b:28:e8:7e:de:12:ea:8d:44:08:89:04:2c: 1c:eb:a9:4c:3c:2a:b6:55:b4:93:81:fe:34:8c:33:ef:0d:ae: d1:20:0a:ed:44:b2:05:0b:65:ba:0e:c7:aa:d6:73:12:a3:8b: 75:1f:5f:b8:9f:7a:8d:c0:e2:60:b4:64:c4:65:c5:e3:85:75: 92:e1:69:64:58:34:1a:80:df:10:07:15:69:8b:e2:c5:ee:11: c9:3b:3b:99:15:95:22:f9:e6:a5:47:d5:d8:36:92:fd:fa:0e: 52:20:64:bb:24:02:42:5f:85:47:a1:56:af:a5:87:35:28:21: 05:13:af:23:db:cb:f0:db:8d:b6:ef:c3:5e:00:1e:5c:22:f8: bb:40:b3:9d:6d:15:4e:97:f7:29:27:6f:0c:4b:4d:0a:78:e9: 29:c3:ac:35:2d:3f:58:3e:25:59:f5:8d:f5:a1:c5:de:01:c3: a9:6b:de:fe:b9:38:92:ec:1c:40:7e:1c:53:32:07:ff:aa:7d: 25:32:8b:b5:bd:fc:6c:66:d5:2d:98:c3:11:97:c3:4a:f4:e9: 15:61:6b:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmuM6ywQ2tx1UdecYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDQyODIyMjgzNloXDTI1MDcyNzIyMjgzNlowLzEtMCsGA1UEAxMk ZGQ1MDgzNDgtMjdkOC00MDQ2LTljZGItNDllMDZkMDYwOTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDNpFxWimVhF0ij0A6ZdeG5+8mEc5HiPQxXr UVMBFdm7Q3IPKPl2NiNNHUaL3Tne4Ttlqv7HuYJQqZNsDQdW9kW7JsQAfqMB2Bgo KqELvrvRzxMDNGKnhpkbPoBMxPHqcyYveVRLFdOm78XyKpltM1We0WkpMmEkhoe1 zmbwPmUuzeDeW1ywOvONwm4Ycc6ovSRBOrBwom6t844udZ7ycAoqModJLRK/RWl4 rYG2PZgDddIEUU4YcBgq1fE9BkEvOyFsRzT4RFfATNR95ELgNwg0DiRzgdq93z2J ZNM92YNZLnlKkp0WYrzgn8nySGsO68vTe0mjkmKr8qRfzeb7OQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP/+ZfrEuyVLiTnYeGMWnzr/UqDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvODZlNmQzM2QtNmEyMy0z NTRjLWFmODktYTNkZDY1OTIxODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFMhNrwUcSt3naOY62kLnUqRzfEkM3z3F+Ffo4SNXg+dE28Rq1Ik YCjkayjoft4S6o1ECIkELBzrqUw8KrZVtJOB/jSMM+8NrtEgCu1EsgULZboOx6rW cxKji3UfX7ifeo3A4mC0ZMRlxeOFdZLhaWRYNBqA3xAHFWmL4sXuEck7O5kVlSL5 5qVH1dg2kv36DlIgZLskAkJfhUehVq+lhzUoIQUTryPby/Dbjbbvw14AHlwi+LtA s51tFU6X9yknbwxLTQp46SnDrDUtP1g+JVn1jfWhxd4Bw6lr3v65OJLsHEB+HFMy B/+qfSUyi7W9/Gxm1S2YwxGXw0r06RVhawA= -----END CERTIFICATE-----Generated at Mon May 5 07:09:48 2025 by rpki-client