$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa File: 34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa (raw, json) Hash identifier: L+AbanZvrS53mqPBqAwqG5Mch8ZGjj3NkpjSOCo03fg= Subject key identifier: 54:47:F6:C9:5D:C2:6D:50:58:15:88:7E:D7:E7:4D:0D:97:1D:30:90 Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F432858490E16C92AF58A293ED516DB80 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 8075 IP address blocks: 2606:e540:c00::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:c9:2a:f5:8a:29:3e:d5:16:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=3317360d-7aca-41e0-bc5c-8bbc52898124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1d:b0:aa:4b:c6:3d:6b:51:fc:5a:9c:c2:da: e5:6b:37:58:7b:98:b6:51:1c:e1:02:20:75:dd:9f: 44:2c:84:e9:34:90:29:f3:d9:57:22:cf:5d:41:e7: c7:f1:87:59:37:7c:0f:9a:9b:22:59:9f:24:34:15: 67:fc:b8:d8:5d:57:4d:22:fb:b8:2d:38:b6:64:c7: c3:81:3f:cb:fd:39:47:71:63:de:1c:43:66:f3:a5: f6:3c:23:c1:ad:3b:6d:57:bd:28:00:2a:42:51:aa: a6:96:e5:62:06:5a:6f:b5:75:0d:2e:d7:47:33:2b: 7b:df:ce:70:ef:60:cf:1a:b8:a1:c5:fd:74:6c:9a: a3:e6:e7:3b:a5:f1:30:ef:8f:37:6d:c6:60:bd:c6: 51:68:65:33:e5:5a:ce:23:e6:be:a7:e6:61:f4:71: f5:0c:e9:1a:ac:eb:5e:20:88:76:58:2f:4b:e4:53: e3:ec:cf:26:b0:17:23:39:cb:0e:84:f4:85:4f:00: 43:6f:16:c9:35:3c:4c:db:78:ea:8b:ad:97:2e:66: 20:d4:69:e3:07:14:44:c6:03:bb:af:95:0d:00:8d: b5:e9:45:5c:1f:72:e2:f1:b4:7c:3d:fa:2f:8e:82: b5:62:5c:be:3a:fd:6f:95:29:93:74:1a:7e:1c:2a: aa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:47:F6:C9:5D:C2:6D:50:58:15:88:7E:D7:E7:4D:0D:97:1D:30:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540:c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:33:dd:f4:07:c7:54:c1:dc:d2:cd:f4:8e:44:49:29:fd:55: 5b:80:92:bb:98:8b:36:18:7b:81:74:e8:01:4b:32:b3:f6:e5: fa:0f:b6:f0:15:75:07:0c:a5:1a:04:18:e9:5c:c6:58:c1:f0: 95:a5:46:03:61:ce:10:72:b5:1d:ac:88:2f:c5:30:7c:c1:0d: 88:8a:33:23:1d:77:dd:d0:03:6f:57:f4:e5:c3:00:78:63:a3: 7f:6b:6c:f0:cf:85:07:21:7a:61:e5:52:31:e1:45:95:af:d6: 73:c8:24:0d:0c:b1:5b:e5:64:af:b8:92:6e:52:bf:3e:90:f8: d5:39:6d:aa:42:95:f9:19:32:c5:c3:ae:3f:3d:d3:14:bf:4b: af:8f:39:54:48:83:85:a8:38:17:78:e1:c6:1e:89:3e:79:2f: 14:65:b2:b3:d0:ef:82:a3:c0:1e:4c:a8:f1:73:1a:65:48:24: 20:fb:7c:08:19:61:e0:07:02:0a:71:56:6c:28:c6:80:44:d7: b5:96:f0:29:fc:da:50:66:c7:b0:57:84:ae:a1:66:83:84:71: c1:36:bf:1a:c6:ea:c2:f7:b7:c4:bb:59:6a:3d:8c:f7:98:7f: 83:be:26:90:df:49:f6:05:8c:04:e5:22:fe:16:a8:8a:d6:df: 9a:60:6a:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkOFskq9YopPtUW24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MzMxNzM2MGQtN2FjYS00MWUwLWJjNWMtOGJiYzUyODk4MTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR2wqkvGPWtR/FqcwtrlazdYe5i2URzhAiB1 3Z9ELITpNJAp89lXIs9dQefH8YdZN3wPmpsiWZ8kNBVn/LjYXVdNIvu4LTi2ZMfD gT/L/TlHcWPeHENm86X2PCPBrTttV70oACpCUaqmluViBlpvtXUNLtdHMyt7385w 72DPGrihxf10bJqj5uc7pfEw7483bcZgvcZRaGUz5VrOI+a+p+Zh9HH1DOkarOte IIh2WC9L5FPj7M8msBcjOcsOhPSFTwBDbxbJNTxM23jqi62XLmYg1GnjBxRExgO7 r5UNAI216UVcH3Li8bR8PfovjoK1Yly+Ov1vlSmTdBp+HCqq1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFRH9sldwm1QWBWIftfnTQ2XHTCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvMzRjZTFlMjItZDgwYi0z Mzk0LTk3NGItZWQ1ZTJiYThjNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgblQAwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD4z3fQHx1TB3NLN9I5ESSn9VVuAkruYizYYe4F06AFLMrP25foP tvAVdQcMpRoEGOlcxljB8JWlRgNhzhBytR2siC/FMHzBDYiKMyMdd93QA29X9OXD AHhjo39rbPDPhQchemHlUjHhRZWv1nPIJA0MsVvlZK+4km5Svz6Q+NU5bapClfkZ MsXDrj890xS/S6+POVRIg4WoOBd44cYeiT55LxRlsrPQ74KjwB5MqPFzGmVIJCD7 fAgZYeAHAgpxVmwoxoBE17WW8Cn82lBmx7BXhK6hZoOEccE2vxrG6sL3t8S7WWo9 jPeYf4O+JpDfSfYFjATlIv4WqIrW35pgaj4= -----END CERTIFICATE-----Generated at Thu May 8 14:47:16 2025 by rpki-client