$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/08c3987a-1016-3546-9a9f-6da72edf1b00.roa File: 08c3987a-1016-3546-9a9f-6da72edf1b00.roa (raw, json) Hash identifier: 79/X02MUqgE+lOBN/Z0p1dAWXOmaLWNOhpk+OxhUies= Subject key identifier: 35:4F:BC:B4:2E:82:1D:56:6E:F5:A9:C2:37:BF:D7:81:84:C4:77:FB Certificate issuer: /CN=480e68d2-5883-4233-9f17-992a2ca71e2b Certificate serial: 010D0C9F43285849B016B1E6D1F7BDFCB79B0960 Authority key identifier: 26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/08c3987a-1016-3546-9a9f-6da72edf1b00.roa Signing time: Tue 29 Apr 2025 14:41:49 +0000 ROA not before: Tue 29 Apr 2025 14:41:49 +0000 ROA not after: Mon 28 Jul 2025 14:41:49 +0000 asID: 43755 IP address blocks: 2604:4600:aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:16:b1:e6:d1:f7:bd:fc:b7:9b:09:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480e68d2-5883-4233-9f17-992a2ca71e2b Validity Not Before: Apr 29 14:41:49 2025 GMT Not After : Jul 28 14:41:49 2025 GMT Subject: CN=fc06ed19-0dcb-4522-a6de-d867e1301da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:67:20:11:f3:03:0f:bb:f1:be:92:4b:50: 66:53:db:84:da:33:79:81:c6:bc:89:7a:77:52:f0: 0f:b6:29:83:a1:09:52:90:6e:ce:81:fd:b0:61:5f: 93:52:1e:38:30:3e:84:bd:29:04:0b:56:e6:b6:3c: 06:16:dc:d0:f6:a9:c0:f6:11:20:21:21:5d:92:21: 78:69:f5:a0:68:8a:fc:87:e5:e0:0b:6b:b3:0c:9b: 8b:e3:52:ec:75:a4:27:10:d2:7a:01:e8:b1:ec:f2: 73:a8:75:74:41:33:cb:b3:f7:2a:a1:d1:70:cf:b4: 28:10:f9:79:af:78:ad:0b:90:26:14:db:f1:a3:a0: 98:d2:72:44:75:f7:e1:21:c3:48:94:e4:69:e9:ff: 28:a9:d3:81:14:90:9b:69:f2:a8:bd:05:a6:82:b5: 5f:eb:76:8a:d9:18:63:3c:78:65:9b:a3:38:71:f5: 53:23:4a:6c:7b:b9:00:74:7c:e9:9c:d2:be:ae:1e: 14:ef:17:12:34:0e:66:50:e0:9a:20:35:c2:ea:c0: 5c:28:18:2f:6a:2c:6c:e3:4c:cf:89:88:59:08:9d: 9c:dd:96:c6:f4:21:6c:32:a7:41:fc:ce:f0:cd:a3: 87:1c:23:1f:7d:ee:f7:e5:45:8c:03:97:84:4b:34: 4e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4F:BC:B4:2E:82:1D:56:6E:F5:A9:C2:37:BF:D7:81:84:C4:77:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/08c3987a-1016-3546-9a9f-6da72edf1b00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl X509v3 Authority Key Identifier: keyid:26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4600:aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:5a:b3:a7:b6:61:e6:13:a0:f1:d0:03:fb:85:5c:c4:94:e7: 4b:69:77:05:49:ad:70:a0:46:b3:0f:89:e1:3c:1d:44:95:de: 7b:5f:0c:e8:05:bb:d4:64:02:cd:d9:69:cd:ea:69:ba:a6:d0: 76:a6:b4:76:21:38:8c:1c:53:1c:fc:35:0b:fe:b7:24:78:ee: 5f:83:74:e1:4d:bc:cf:6d:10:60:be:e8:be:d0:52:ae:ff:f4: f4:56:8d:e0:c3:fb:5d:54:83:da:ef:0e:05:5c:66:7b:76:9d: 01:a1:a7:21:ab:34:ca:b0:bd:1a:e8:37:cd:e5:eb:a9:db:22: 7c:8a:cb:c7:c3:c9:8b:49:5d:dc:4c:d1:13:9e:b5:9f:63:6d: 5b:55:da:a1:8d:d9:4d:41:bd:f1:b4:fc:a6:6d:c7:5c:40:6a: 0d:ee:81:ae:15:33:60:7e:96:c5:c5:52:11:5a:96:b3:dd:41: ab:4e:0f:ea:cb:9c:17:cb:32:09:7f:62:20:15:6e:2e:d7:42: ae:fa:56:67:18:fe:ef:a3:8a:a4:56:12:04:29:06:41:22:3f: 07:38:8b:8d:99:0f:a4:14:8f:c8:8c:95:0d:0a:5b:76:f4:77: ca:26:ee:fd:f7:41:a0:6b:8e:f0:e9:f0:84:5f:6e:d8:32:17: b7:59:d6:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmwFrHm0fe9/LebCWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgwZTY4ZDItNTg4My00MjMzLTlmMTctOTkyYTJjYTcx ZTJiMB4XDTI1MDQyOTE0NDE0OVoXDTI1MDcyODE0NDE0OVowLzEtMCsGA1UEAxMk ZmMwNmVkMTktMGRjYi00NTIyLWE2ZGUtZDg2N2UxMzAxZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsFnIBHzAw+78b6SS1BmU9uE2jN5gca8iXp3 UvAPtimDoQlSkG7Ogf2wYV+TUh44MD6EvSkEC1bmtjwGFtzQ9qnA9hEgISFdkiF4 afWgaIr8h+XgC2uzDJuL41LsdaQnENJ6Aeix7PJzqHV0QTPLs/cqodFwz7QoEPl5 r3itC5AmFNvxo6CY0nJEdffhIcNIlORp6f8oqdOBFJCbafKovQWmgrVf63aK2Rhj PHhlm6M4cfVTI0pse7kAdHzpnNK+rh4U7xcSNA5mUOCaIDXC6sBcKBgvaixs40zP iYhZCJ2c3ZbG9CFsMqdB/M7wzaOHHCMffe735UWMA5eESzROfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDVPvLQugh1WbvWpwje/14GExHf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODBl NjhkMi01ODgzLTQyMzMtOWYxNy05OTJhMmNhNzFlMmIvMDhjMzk4N2EtMTAxNi0z NTQ2LTlhOWYtNmRhNzJlZGYxYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDgwZTY4ZDItNTg4My00MjMzLTlm MTctOTkyYTJjYTcxZTJiLzQ4MGU2OGQyLTU4ODMtNDIzMy05ZjE3LTk5MmEyY2E3 MWUyYi5jcmwwHwYDVR0jBBgwFoAUJpseaAPDCWnjiuWVpz8zM2aKXwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODBlNjhkMi01ODgzLTQyMzMtOWYxNy05OTJh MmNhNzFlMmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRGAACq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMhas6e2YeYToPHQA/uFXMSU50tpdwVJrXCgRrMPieE8HUSV3ntf DOgFu9RkAs3Zac3qabqm0HamtHYhOIwcUxz8NQv+tyR47l+DdOFNvM9tEGC+6L7Q Uq7/9PRWjeDD+11Ug9rvDgVcZnt2nQGhpyGrNMqwvRroN83l66nbInyKy8fDyYtJ XdxM0ROetZ9jbVtV2qGN2U1BvfG0/KZtx1xAag3uga4VM2B+lsXFUhFalrPdQatO D+rLnBfLMgl/YiAVbi7XQq76VmcY/u+jiqRWEgQpBkEiPwc4i42ZD6QUj8iMlQ0K W3b0d8om7v33QaBrjvDp8IRfbtgyF7dZ1pc= -----END CERTIFICATE-----Generated at Sun May 11 10:26:20 2025 by rpki-client