$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce1a6d02-2095-35b1-b89d-03f020480026.roa File: ce1a6d02-2095-35b1-b89d-03f020480026.roa (raw, json) Hash identifier: bFBO4kyxNQ1VNQ5BrPK2Fh1sBu/X41FlsvTk90FMDFo= Subject key identifier: FE:A9:CE:CF:F1:1C:FF:65:5C:D6:78:15:61:0A:FC:2B:0F:2F:C0:DB Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F43285849C20A15785A7C2239998B3998 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce1a6d02-2095-35b1-b89d-03f020480026.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 237 IP address blocks: 2001:468:2620::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:15:78:5a:7c:22:39:99:8b:39:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=eae98c3a-d0d2-4556-bbf2-379562b2b62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ae:9d:0e:dd:8c:0d:8b:a0:f8:de:dc:70:26: 8e:c7:96:49:ff:dc:82:b7:70:52:57:0a:de:bc:16: 37:9c:7b:bb:fd:85:bd:0f:a8:21:7a:9e:dd:5c:47: 3f:06:9e:fb:51:7f:d1:10:28:51:cd:a3:55:50:db: 3e:29:83:cd:c7:30:dd:94:f0:89:e8:f0:3a:db:64: b1:a7:d0:63:c6:78:4f:a7:3d:8f:79:58:b5:e4:b3: ca:40:94:99:21:0a:68:b1:5b:d1:42:60:5c:95:a1: d5:b1:ff:fa:1a:bf:e6:28:ef:9d:78:0f:92:e0:be: 12:61:d9:bd:14:5b:f2:54:58:ef:80:78:bd:9f:a5: 35:03:75:56:dc:14:d5:64:7a:d4:84:60:df:7c:07: 2b:02:e1:a1:9a:68:b3:5d:b8:4e:6f:04:1b:62:93: 94:4a:c0:0d:cd:a3:34:1f:86:65:ef:8a:b3:5a:e4: 98:1e:b1:a5:de:b4:ad:74:a4:a9:08:db:90:c9:5d: 8a:b2:ac:19:d7:52:4a:6a:33:a9:b5:f0:2b:98:4d: a6:0c:fa:f2:a2:e9:2f:45:bf:34:6f:6e:ad:a7:5f: 6c:e1:67:b4:1f:52:bf:00:21:40:d3:26:9a:85:5a: 3c:18:0f:ac:58:75:cf:f5:c5:4b:7d:62:24:da:86: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A9:CE:CF:F1:1C:FF:65:5C:D6:78:15:61:0A:FC:2B:0F:2F:C0:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce1a6d02-2095-35b1-b89d-03f020480026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:2620::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:df:77:57:a8:9a:01:b3:c4:2d:81:e3:15:75:79:ef:f7:88: a2:e5:f1:58:8b:fa:d2:60:0a:c2:e7:5a:68:c1:6e:6d:34:73: 70:32:68:07:e8:71:6d:9f:b9:71:72:fd:12:18:b7:96:05:ec: 7b:1b:79:cf:5b:d3:4b:93:46:38:a3:a5:13:7b:6c:39:5c:d7: e7:99:20:b6:3c:51:dd:90:ed:8a:e6:81:ac:b9:4c:a2:a6:39: 39:98:ed:51:ee:40:8e:19:11:05:a5:cf:2a:13:6a:f5:7f:6a: 89:ac:36:7b:83:a3:30:33:6c:49:bb:5f:a9:97:4a:61:5e:a5: 49:7a:0d:a9:71:cd:cf:c1:84:81:b9:77:69:00:0c:75:3f:40: 66:be:21:75:64:d2:2c:3f:5a:b9:ef:ad:44:30:0b:2b:35:ef: 55:e4:45:c5:49:ce:cd:76:91:22:c7:23:4e:8d:11:f4:73:ed: 61:46:68:84:ad:3c:a4:63:27:a3:bf:01:7e:f3:08:3f:d2:40: 92:10:dd:04:64:46:05:57:47:fd:ef:0a:01:ca:a8:69:10:64: 4a:5a:7d:55:5d:50:aa:86:f1:e5:5b:6b:e0:78:85:0f:6f:c5: 25:cf:e7:d8:00:bb:5f:01:22:07:33:21:d8:5e:ac:bc:93:fb: f5:c9:05:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnCChV4WnwiOZmLOZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZWFlOThjM2EtZDBkMi00NTU2LWJiZjItMzc5NTYyYjJiNjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK6dDt2MDYug+N7ccCaOx5ZJ/9yCt3BSVwre vBY3nHu7/YW9D6ghep7dXEc/Bp77UX/REChRzaNVUNs+KYPNxzDdlPCJ6PA622Sx p9BjxnhPpz2PeVi15LPKQJSZIQposVvRQmBclaHVsf/6Gr/mKO+deA+S4L4SYdm9 FFvyVFjvgHi9n6U1A3VW3BTVZHrUhGDffAcrAuGhmmizXbhObwQbYpOUSsANzaM0 H4Zl74qzWuSYHrGl3rStdKSpCNuQyV2KsqwZ11JKajOptfArmE2mDPryoukvRb80 b26tp19s4We0H1K/ACFA0yaahVo8GA+sWHXP9cVLfWIk2oZsQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP6pzs/xHP9lXNZ4FWEK/CsPL8DbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvY2UxYTZkMDItMjA5NS0z NWIxLWI4OWQtMDNmMDIwNDgwMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaCYg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEHfd1eomgGzxC2B4xV1ee/3iKLl8ViL+tJgCsLnWmjBbm00c3Ay aAfocW2fuXFy/RIYt5YF7Hsbec9b00uTRjijpRN7bDlc1+eZILY8Ud2Q7Yrmgay5 TKKmOTmY7VHuQI4ZEQWlzyoTavV/aomsNnuDozAzbEm7X6mXSmFepUl6Dalxzc/B hIG5d2kADHU/QGa+IXVk0iw/WrnvrUQwCys171XkRcVJzs12kSLHI06NEfRz7WFG aIStPKRjJ6O/AX7zCD/SQJIQ3QRkRgVXR/3vCgHKqGkQZEpafVVdUKqG8eVba+B4 hQ9vxSXP59gAu18BIgczIdherLyT+/XJBes= -----END CERTIFICATE-----Generated at Sun May 11 21:45:50 2025 by rpki-client