$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/7be0dac1-55ee-31d6-a934-19a3cbc26463.roa File: 7be0dac1-55ee-31d6-a934-19a3cbc26463.roa (raw, json) Hash identifier: 5ghFGOSzhQXkXWwDbHvKNDIcPy0oNtcpaQI0GCxLWG0= Subject key identifier: C8:DB:D0:9A:F9:1F:E5:BD:B0:78:63:3C:82:47:44:98:C8:70:16:29 Certificate issuer: /CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Certificate serial: 010D0C9F43285849C0A4E5D85E6215CE43647E14 Authority key identifier: AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/7be0dac1-55ee-31d6-a934-19a3cbc26463.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 26457 IP address blocks: 2620:135:5002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e5:d8:5e:62:15:ce:43:64:7e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=e3d6a883-8e0e-40c4-b719-cd8fb4268abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7e:9a:f9:33:cd:d5:6d:67:cb:73:0f:89:df: 5d:dd:11:ba:ed:c4:49:ee:86:48:79:49:23:81:68: cc:0d:c7:b8:85:c0:66:4c:bf:dc:03:f0:fd:ba:b8: cd:32:60:6c:58:30:e2:16:9b:dd:e8:8b:8a:c3:db: 15:af:7c:b8:25:f4:32:5a:a6:44:8b:a8:98:e0:16: 5f:ce:8b:52:3c:b2:fd:a0:e5:0e:c9:98:9f:0a:ec: 2c:01:59:d3:a2:01:7e:d1:3b:68:88:fc:ff:2f:53: 70:37:ed:03:57:bb:91:67:bc:b0:26:52:46:0b:a7: 30:0e:6f:55:25:6d:38:ae:b3:06:7d:de:88:f5:71: 2d:3e:a7:9d:f9:8e:6a:69:68:b4:72:d3:68:bf:b1: 48:99:56:10:ef:94:c1:20:c6:de:f0:d2:4d:40:dd: 9d:b8:e3:00:c6:dd:c8:f4:11:e5:2a:ff:04:48:21: 82:ac:5f:fd:92:eb:89:eb:08:0b:3e:56:ca:70:fa: 21:74:55:26:ea:d1:e3:32:90:ba:65:e0:f9:7d:6b: 36:ca:95:2c:21:9a:3c:e4:34:d1:6b:67:6b:63:56: f2:ed:e7:cd:9b:af:e4:41:31:ff:b8:27:26:c8:d5: ff:07:7c:0a:12:c2:c7:8c:13:7c:5d:3a:a7:1c:65: 1e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DB:D0:9A:F9:1F:E5:BD:B0:78:63:3C:82:47:44:98:C8:70:16:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/7be0dac1-55ee-31d6-a934-19a3cbc26463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl X509v3 Authority Key Identifier: keyid:AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:5002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:e7:20:a7:18:a6:06:da:d4:8e:3d:d2:4b:f7:fc:bf:62:e4: 8c:ee:b2:84:4c:0b:e4:05:ff:9d:be:53:2f:2c:65:7d:fb:cf: 79:53:72:db:d5:db:e6:7f:35:ba:f5:f6:a6:0a:f2:06:16:bf: 07:d1:65:e0:75:a0:5a:e3:82:94:52:2b:6a:9e:e2:c5:a7:37: 99:84:a9:a3:3b:3d:c9:82:16:c9:7b:4c:b4:2d:e3:da:a4:1b: 45:4a:67:b9:92:38:48:24:d8:43:9e:39:5f:da:e2:9f:32:c2: 5a:27:06:0c:36:2c:91:c6:b1:08:2c:dd:6e:68:2a:e8:5e:4a: 33:6a:2f:c6:00:f1:f3:fc:36:ae:d0:fc:ed:d8:44:fa:ca:4b: 78:a7:77:7f:f3:65:6b:29:87:fe:c7:93:87:b0:af:7a:8f:d5: 76:3a:af:f6:1c:80:27:a1:6c:13:c1:af:88:86:08:28:ad:69: 3f:00:f5:2a:5d:ea:fe:44:2f:9d:86:2e:a1:30:31:c4:fb:04: cb:bd:92:0f:65:d1:fc:57:7e:8b:3a:0f:6e:5e:de:67:dc:3f: 75:31:40:d7:30:cc:da:f3:45:6f:14:3d:19:e6:84:c4:19:88: d0:1f:90:eb:fb:34:ee:72:95:62:05:ef:ae:ac:bb:1d:52:9f: c0:22:a3:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnApOXYXmIVzkNkfhQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4ZGRmNGEtYjc2Mi00MGUwLWFkNTgtYzhiMWE2M2Y0 NjJmMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZTNkNmE4ODMtOGUwZS00MGM0LWI3MTktY2Q4ZmI0MjY4YWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX6a+TPN1W1ny3MPid9d3RG67cRJ7oZIeUkj gWjMDce4hcBmTL/cA/D9urjNMmBsWDDiFpvd6IuKw9sVr3y4JfQyWqZEi6iY4BZf zotSPLL9oOUOyZifCuwsAVnTogF+0TtoiPz/L1NwN+0DV7uRZ7ywJlJGC6cwDm9V JW04rrMGfd6I9XEtPqed+Y5qaWi0ctNov7FImVYQ75TBIMbe8NJNQN2duOMAxt3I 9BHlKv8ESCGCrF/9kuuJ6wgLPlbKcPohdFUm6tHjMpC6ZeD5fWs2ypUsIZo85DTR a2drY1by7efNm6/kQTH/uCcmyNX/B3wKEsLHjBN8XTqnHGUe/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMjb0Jr5H+W9sHhjPIJHRJjIcBYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhk ZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIxYTYzZjQ2MmYvN2JlMGRhYzEtNTVlZS0z MWQ2LWE5MzQtMTlhM2NiYzI2NDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzg4ZGRmNGEtYjc2Mi00MGUwLWFk NTgtYzhiMWE2M2Y0NjJmL2M4OGRkZjRhLWI3NjItNDBlMC1hZDU4LWM4YjFhNjNm NDYyZi5jcmwwHwYDVR0jBBgwFoAUrjM9cNPHljH9gVsijdwOMQzpFOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhkZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIx YTYzZjQ2MmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABNVAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKznIKcYpgba1I490kv3/L9i5IzusoRMC+QF/52+Uy8sZX37z3lT ctvV2+Z/Nbr19qYK8gYWvwfRZeB1oFrjgpRSK2qe4sWnN5mEqaM7PcmCFsl7TLQt 49qkG0VKZ7mSOEgk2EOeOV/a4p8ywlonBgw2LJHGsQgs3W5oKuheSjNqL8YA8fP8 Nq7Q/O3YRPrKS3ind3/zZWsph/7Hk4ewr3qP1XY6r/YcgCehbBPBr4iGCCitaT8A 9Spd6v5EL52GLqEwMcT7BMu9kg9l0fxXfos6D25e3mfcP3UxQNcwzNrzRW8UPRnm hMQZiNAfkOv7NO5ylWIF766sux1Sn8Aio7M= -----END CERTIFICATE-----Generated at Sat May 10 10:19:19 2025 by rpki-client