$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa File: 2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa (raw, json) Hash identifier: fI6KwrJf2xLPJ9MSNQp1h380P7mo5i6NolqW4BpXL+c= Subject key identifier: FF:7B:80:19:6B:3A:D9:33:B4:6B:5E:5F:B0:0F:C0:EB:E7:0C:AA:76 Certificate issuer: /CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe Certificate serial: 010D0C9F43285849A354800AEC47AD10A95E9880 Authority key identifier: 5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 20206 IP address blocks: 2001:504:13a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:80:0a:ec:47:ad:10:a9:5e:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=d113f146-218b-4f9c-b50b-ea8ffa2df4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:17:40:50:d6:9e:85:8f:6d:73:79:58:0e:e4: 1c:0e:c3:a5:b6:d5:a3:4a:5a:ef:9f:fc:6f:36:bf: de:56:c0:29:b7:34:a8:45:82:ac:ae:47:5a:e9:f6: 72:3a:f5:56:09:51:6d:2b:49:2c:b0:89:97:0a:2f: 29:80:75:3f:93:88:5a:73:e7:17:3f:f5:35:b4:2b: ad:b4:21:ff:a2:96:24:ef:ad:89:e2:f3:c0:de:78: 48:31:b7:f2:11:c8:1c:1e:8e:66:fa:dc:54:90:20: 12:7e:a5:46:96:1e:82:00:ba:2b:dd:86:f5:bf:0d: bc:89:51:7b:13:d5:c5:03:4e:b8:e6:44:f4:19:f8: 59:ca:64:ed:e7:21:b0:49:6e:e2:6b:d5:e4:b8:9d: ab:cd:49:c0:14:47:1d:9f:a0:6e:8b:64:d4:0f:94: 66:0f:43:3d:fd:ec:e1:57:4c:84:9e:4b:7b:ef:e3: 13:9e:1b:57:9e:96:eb:d0:9f:a2:ab:b9:a3:70:c7: 32:cf:ba:60:54:4c:19:40:7d:61:f5:49:80:1b:d5: 6f:d5:e8:fa:5f:51:68:72:a2:a0:0e:5d:71:9b:cf: 33:9f:d3:fc:75:ee:26:03:57:e6:63:74:91:93:e0: c7:9b:10:ae:33:e9:92:5d:19:2b:58:ac:f5:97:66: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7B:80:19:6B:3A:D9:33:B4:6B:5E:5F:B0:0F:C0:EB:E7:0C:AA:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.crl X509v3 Authority Key Identifier: keyid:5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:13a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a5:2d:ca:f6:a0:19:cf:6c:ac:97:5d:1c:69:fa:f7:75:97: 69:38:99:05:1e:b1:5d:c5:42:8a:56:3f:ca:e0:c7:92:2c:9d: c7:47:9b:14:47:8b:cc:00:b0:d2:52:65:14:93:28:83:28:bd: c3:0c:6d:d6:54:ab:d9:68:2f:d6:54:f7:c9:e2:58:07:fd:c5: 46:76:c0:b7:a9:15:10:47:e1:de:10:2a:0d:49:d2:97:c6:dc: ac:ac:c6:2a:da:4c:1b:c3:24:ac:86:e6:c4:bb:e8:13:a7:c9: 79:fe:a5:6c:91:93:af:96:79:70:49:83:43:2a:3a:6b:39:b6: 5e:e0:71:8b:b6:5c:35:34:02:59:4b:96:86:47:c7:5a:c3:6f: 15:10:a7:e0:cd:b0:ae:0f:74:b7:a2:9d:e6:0e:21:72:26:21: 7c:bb:31:04:d4:51:02:9a:78:fd:4e:ba:f5:96:a2:0f:c8:de: f4:71:0e:6b:54:94:f0:92:70:e7:8e:0a:9a:54:28:b6:65:f7: 83:55:d5:5c:20:6a:78:a4:4d:67:6a:c3:ea:fd:f2:f6:f7:f8: d1:ca:55:40:84:40:86:34:66:ca:1f:c6:ff:e6:a4:2c:72:52: 63:9a:59:89:25:34:b5:da:89:9c:8b:08:42:27:d2:e2:17:b4: 48:71:84:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmjVIAK7EetEKlemIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM5ZDJhZWYtMmRkOS00Mzg3LWI0N2MtOThiYjkxMGU1 MmZlMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk ZDExM2YxNDYtMjE4Yi00ZjljLWI1MGItZWE4ZmZhMmRmNGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghdAUNaehY9tc3lYDuQcDsOlttWjSlrvn/xv Nr/eVsAptzSoRYKsrkda6fZyOvVWCVFtK0kssImXCi8pgHU/k4hac+cXP/U1tCut tCH/opYk762J4vPA3nhIMbfyEcgcHo5m+txUkCASfqVGlh6CALor3Yb1vw28iVF7 E9XFA0645kT0GfhZymTt5yGwSW7ia9XkuJ2rzUnAFEcdn6Bui2TUD5RmD0M9/ezh V0yEnkt77+MTnhtXnpbr0J+iq7mjcMcyz7pgVEwZQH1h9UmAG9Vv1ej6X1FocqKg Dl1xm88zn9P8de4mA1fmY3SRk+DHmxCuM+mSXRkrWKz1l2Z5owIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP97gBlrOtkztGteX7APwOvnDKp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYzlk MmFlZi0yZGQ5LTQzODctYjQ3Yy05OGJiOTEwZTUyZmUvMjI3OGVkNDgtZWJkNi0z NTI4LWI5N2ItYTFiMmFlYTgwZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmM5ZDJhZWYtMmRkOS00Mzg3LWI0 N2MtOThiYjkxMGU1MmZlL2JjOWQyYWVmLTJkZDktNDM4Ny1iNDdjLTk4YmI5MTBl NTJmZS5jcmwwHwYDVR0jBBgwFoAUXwy7Gy/tJSY7JZ7vyytJ4usJQNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYzlkMmFlZi0yZGQ5LTQzODctYjQ3Yy05OGJi OTEwZTUyZmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAE6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADClLcr2oBnPbKyXXRxp+vd1l2k4mQUesV3FQopWP8rgx5IsncdH mxRHi8wAsNJSZRSTKIMovcMMbdZUq9loL9ZU98niWAf9xUZ2wLepFRBH4d4QKg1J 0pfG3KysxiraTBvDJKyG5sS76BOnyXn+pWyRk6+WeXBJg0MqOms5tl7gcYu2XDU0 AllLloZHx1rDbxUQp+DNsK4PdLeineYOIXImIXy7MQTUUQKaeP1OuvWWog/I3vRx DmtUlPCScOeOCppUKLZl94NV1VwganikTWdqw+r98vb3+NHKVUCEQIY0Zsofxv/m pCxyUmOaWYklNLXaiZyLCEIn0uIXtEhxhK0= -----END CERTIFICATE-----Generated at Fri May 9 08:35:28 2025 by rpki-client