$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/c7822478-01d5-3575-bcad-291a8f8c34fd.roa File: c7822478-01d5-3575-bcad-291a8f8c34fd.roa (raw, json) Hash identifier: ddGykgwnRTMwi7IvoOOvqOUL4wClbDTqVPfo/plYiyg= Subject key identifier: F0:41:14:A9:3A:1B:2B:47:4A:B0:66:2F:0B:BB:3B:18:AF:FB:E0:17 Certificate issuer: /CN=4ed29200-29c7-4b41-a912-206537f29d91 Certificate serial: 010D0C9F43285849C0A4DE17324C3A448F645088 Authority key identifier: A9:D3:33:AA:2F:83:8C:EB:ED:27:4F:F2:F0:DC:ED:3C:32:97:14:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/c7822478-01d5-3575-bcad-291a8f8c34fd.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 22512 IP address blocks: 2620:3d:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/4ed29200-29c7-4b41-a912-206537f29d91.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/4ed29200-29c7-4b41-a912-206537f29d91.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:de:17:32:4c:3a:44:8f:64:50:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed29200-29c7-4b41-a912-206537f29d91 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=f23c64a0-0331-4c61-98cd-b2dc7862c94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:70:4e:4f:55:7f:c2:af:4b:2c:c1:d8:65: 38:7a:6e:44:2e:78:a1:c9:65:3c:b1:09:62:d5:e3: 75:90:bf:ca:a8:cf:50:90:32:c8:fb:5a:c0:cb:a4: f8:fc:1d:6c:a2:d0:6d:7a:87:ab:25:83:12:1a:12: 10:03:d5:dc:a2:f2:ac:8d:30:36:dc:a1:52:e4:b6: 39:ab:f4:e8:11:a2:ef:1d:e2:85:05:f6:44:32:7f: 53:31:77:41:31:1c:e5:12:2d:7a:e8:be:33:16:d0: 70:53:42:62:f5:bd:52:65:d3:76:ae:23:22:1e:9b: 72:2e:46:b7:02:66:45:b1:d3:41:83:78:34:ae:f2: 61:bd:d0:4a:0d:9f:6f:3f:72:ab:dd:8d:da:30:c1: 42:22:4c:bd:ec:87:8d:0a:09:e1:78:11:b6:9f:c0: 42:8a:0e:14:0f:4d:e8:1e:81:44:3a:53:cc:f1:3d: f2:b8:fb:c4:67:26:4d:db:97:6b:b8:bf:15:41:7b: 47:31:15:17:c6:1b:8b:66:68:12:28:ff:d6:6b:ab: 29:e3:c4:d0:a5:5e:8a:09:8d:59:64:7f:9e:7b:f3: 99:00:8f:cc:5e:85:ce:c7:8a:82:cf:34:97:fb:b2: 8d:79:bf:d9:2e:dc:9f:88:91:51:72:dc:68:3f:3f: fd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:41:14:A9:3A:1B:2B:47:4A:B0:66:2F:0B:BB:3B:18:AF:FB:E0:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/c7822478-01d5-3575-bcad-291a8f8c34fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/4ed29200-29c7-4b41-a912-206537f29d91.crl X509v3 Authority Key Identifier: keyid:A9:D3:33:AA:2F:83:8C:EB:ED:27:4F:F2:F0:DC:ED:3C:32:97:14:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91.cer sbgp-ipAddrBlock: critical IPv6: 2620:3d:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:25:50:f3:d6:74:c1:b7:8a:b9:96:97:d4:20:de:c3:a5:ed: 75:4a:c1:51:81:02:5b:c9:fd:ff:6f:64:55:47:5a:37:29:5a: 7b:3a:1a:06:f1:21:5d:7a:35:43:22:3b:f9:e6:11:bc:fe:e7: d4:9a:d2:05:f8:e2:cf:0c:59:8a:f4:70:f6:ec:b3:71:f9:1d: 6a:8c:17:3f:5c:82:b9:47:c5:e4:83:eb:07:6e:e6:f4:38:3c: 6a:67:16:40:54:d1:fd:47:d0:f3:d6:26:61:4b:27:cd:25:45: e4:ad:58:99:73:b0:0f:46:9c:9b:04:e9:00:b5:d4:32:4c:62: b6:eb:cc:2c:c2:28:52:a7:f9:55:c3:85:c3:d2:03:fc:05:4f: fe:ef:e1:91:41:50:53:bc:7a:ec:be:db:ff:a1:0d:46:9e:03: 90:8e:d9:53:13:3f:8f:12:c2:be:7f:c1:3d:de:d2:8e:80:77: 64:c9:71:6d:8f:4f:09:eb:07:b6:ce:1e:0b:29:2a:55:b1:3d: 54:83:6a:cf:80:01:4a:6a:24:8f:59:4e:bf:07:1d:bf:9c:1a: d5:09:35:fd:bd:07:f2:f1:d9:09:1c:98:de:5f:50:7e:64:55: 0b:a5:da:b6:c5:d4:06:c0:c5:26:82:78:4a:dd:d9:6e:57:28: 71:10:bc:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnApN4XMkw6RI9kUIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVkMjkyMDAtMjljNy00YjQxLWE5MTItMjA2NTM3ZjI5 ZDkxMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZjIzYzY0YTAtMDMzMS00YzYxLTk4Y2QtYjJkYzc4NjJjOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/NwTk9Vf8KvSyzB2GU4em5ELnihyWU8sQli 1eN1kL/KqM9QkDLI+1rAy6T4/B1sotBteoerJYMSGhIQA9XcovKsjTA23KFS5LY5 q/ToEaLvHeKFBfZEMn9TMXdBMRzlEi166L4zFtBwU0Ji9b1SZdN2riMiHptyLka3 AmZFsdNBg3g0rvJhvdBKDZ9vP3Kr3Y3aMMFCIky97IeNCgnheBG2n8BCig4UD03o HoFEOlPM8T3yuPvEZyZN25druL8VQXtHMRUXxhuLZmgSKP/Wa6sp48TQpV6KCY1Z ZH+ee/OZAI/MXoXOx4qCzzSX+7KNeb/ZLtyfiJFRctxoPz/9xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPBBFKk6GytHSrBmLwu7Oxiv++AXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWQy OTIwMC0yOWM3LTRiNDEtYTkxMi0yMDY1MzdmMjlkOTEvYzc4MjI0NzgtMDFkNS0z NTc1LWJjYWQtMjkxYThmOGMzNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkMjkyMDAtMjljNy00YjQxLWE5 MTItMjA2NTM3ZjI5ZDkxLzRlZDI5MjAwLTI5YzctNGI0MS1hOTEyLTIwNjUzN2Yy OWQ5MS5jcmwwHwYDVR0jBBgwFoAUqdMzqi+DjOvtJ0/y8NztPDKXFHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWQyOTIwMC0yOWM3LTRiNDEtYTkxMi0yMDY1 MzdmMjlkOTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAPcAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALglUPPWdMG3irmWl9Qg3sOl7XVKwVGBAlvJ/f9vZFVHWjcpWns6 GgbxIV16NUMiO/nmEbz+59Sa0gX44s8MWYr0cPbss3H5HWqMFz9cgrlHxeSD6wdu 5vQ4PGpnFkBU0f1H0PPWJmFLJ80lReStWJlzsA9GnJsE6QC11DJMYrbrzCzCKFKn +VXDhcPSA/wFT/7v4ZFBUFO8euy+2/+hDUaeA5CO2VMTP48Swr5/wT3e0o6Ad2TJ cW2PTwnrB7bOHgspKlWxPVSDas+AAUpqJI9ZTr8HHb+cGtUJNf29B/Lx2QkcmN5f UH5kVQul2rbF1AbAxSaCeErd2W5XKHEQvP4= -----END CERTIFICATE-----Generated at Sun May 11 02:12:54 2025 by rpki-client