$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/47b86f2e-9a41-31e7-9b47-4e8398fe7a8e.roa File: 47b86f2e-9a41-31e7-9b47-4e8398fe7a8e.roa (raw, json) Hash identifier: /vYMmHZpiUqxkAUecQztxD9rn5P28LpD2/or4wZYM9w= Subject key identifier: BC:40:9E:5B:77:DE:C2:C0:4E:35:C3:78:7F:08:F6:92:17:38:64:BC Certificate issuer: /CN=837c453a-673f-4481-b4c4-21ece5899901 Certificate serial: 010D0C9F432858490401B748EEAE549E8EB00820 Authority key identifier: 5C:6F:74:D4:FE:AB:73:A7:EC:FC:13:4A:C5:E5:25:9D:48:14:38:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/47b86f2e-9a41-31e7-9b47-4e8398fe7a8e.roa Signing time: Wed 26 Feb 2025 23:20:31 +0000 ROA not before: Wed 26 Feb 2025 23:20:31 +0000 ROA not after: Tue 27 May 2025 22:20:31 +0000 asID: 46475 IP address blocks: 2620:a6:2002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/837c453a-673f-4481-b4c4-21ece5899901.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/837c453a-673f-4481-b4c4-21ece5899901.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:04:01:b7:48:ee:ae:54:9e:8e:b0:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=837c453a-673f-4481-b4c4-21ece5899901 Validity Not Before: Feb 26 23:20:31 2025 GMT Not After : May 27 22:20:31 2025 GMT Subject: CN=ea8e1d6b-24d1-463d-84fd-073a003a49ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:77:95:b7:b5:d0:8f:95:35:6b:5b:8a:cf: 5e:99:52:01:f5:03:d8:5a:90:62:a2:8c:1b:9e:59: 1e:e9:56:c6:55:6b:99:e6:be:77:38:f0:d5:01:c2: 8a:8b:c8:79:a4:58:6a:07:65:f4:d1:ca:4b:5d:48: d5:5a:16:cf:bd:92:05:89:5b:3a:8c:b2:18:33:50: ab:5d:0b:cf:a6:1e:60:fb:3d:28:46:a8:89:d4:7b: 7f:7e:f6:3e:53:ad:b1:53:39:7b:e6:bb:3c:0e:4e: f1:c5:84:30:06:a2:f7:fb:9a:4e:fe:ad:b5:97:e1: 13:52:c8:19:8b:87:19:d2:0d:d6:41:80:ce:87:f2: 61:32:26:ca:b8:b5:9e:aa:50:da:a3:49:f3:19:63: 83:b4:cd:29:b7:9c:c5:aa:fb:87:4d:80:43:f3:85: 33:50:23:cf:d2:cf:fa:c0:28:e0:4f:f9:80:e0:63: 5e:74:f1:f1:c7:18:d7:52:10:18:da:1a:6b:57:a5: 11:66:e1:e3:08:dd:08:7f:cd:eb:b2:9c:e8:2b:c4: ec:73:85:8d:a6:6a:b0:7e:cd:b0:b7:51:73:a2:bc: c4:02:10:2a:94:c8:9d:0c:32:bc:5b:29:09:f1:4a: f6:cc:b0:48:43:0a:db:6c:8a:14:e3:83:87:7d:e5: 20:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:40:9E:5B:77:DE:C2:C0:4E:35:C3:78:7F:08:F6:92:17:38:64:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/47b86f2e-9a41-31e7-9b47-4e8398fe7a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/837c453a-673f-4481-b4c4-21ece5899901.crl X509v3 Authority Key Identifier: keyid:5C:6F:74:D4:FE:AB:73:A7:EC:FC:13:4A:C5:E5:25:9D:48:14:38:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer sbgp-ipAddrBlock: critical IPv6: 2620:a6:2002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:65:57:34:1d:14:01:a1:70:2e:50:4d:97:7a:4e:c7:df:0e: 81:e2:79:ec:6a:db:6c:80:85:47:42:41:36:43:d4:8b:1d:cb: 64:34:5c:24:c5:56:61:31:f8:d5:ae:c3:5f:c8:09:f6:b1:e8: 29:46:34:81:49:6b:df:0e:ef:d4:be:e5:35:45:20:70:f8:51: 8c:7a:c2:ac:f7:7f:ba:a0:22:87:94:f1:d2:e0:62:41:b8:90: ec:ec:f8:5a:44:37:e9:70:e7:e0:c3:49:2c:f9:f0:33:3a:6f: 53:1c:fc:0a:49:38:fc:0c:a9:48:1d:0b:5b:a1:93:99:fe:85: 0c:1a:f8:b4:c5:ef:88:7a:6e:a3:c0:0d:1c:ff:d8:3a:bf:e9: 2e:c7:1d:1f:c9:5f:0a:ea:65:a9:8c:4b:24:eb:5e:d7:5e:81: ca:89:b4:fb:ce:5a:22:50:4d:63:84:87:8d:af:fe:c7:00:ff: 17:59:5a:16:f8:3f:0b:c4:25:8e:6f:f8:90:6c:4a:d9:be:11: 24:3f:92:a6:3c:6d:2d:28:93:6c:e8:e5:a0:f1:4d:25:62:da: e4:8e:d6:fe:c7:67:de:7f:2e:4b:e6:c4:12:f0:26:a0:fe:56: ef:4e:21:c3:32:ec:46:05:52:6e:84:93:21:13:2d:24:d9:70: 92:e9:67:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkEAbdI7q5Uno6wCCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM3YzQ1M2EtNjczZi00NDgxLWI0YzQtMjFlY2U1ODk5 OTAxMB4XDTI1MDIyNjIzMjAzMVoXDTI1MDUyNzIyMjAzMVowLzEtMCsGA1UEAxMk ZWE4ZTFkNmItMjRkMS00NjNkLTg0ZmQtMDczYTAwM2E0OWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi53lbe10I+VNWtbis9emVIB9QPYWpBioowb nlke6VbGVWuZ5r53OPDVAcKKi8h5pFhqB2X00cpLXUjVWhbPvZIFiVs6jLIYM1Cr XQvPph5g+z0oRqiJ1Ht/fvY+U62xUzl75rs8Dk7xxYQwBqL3+5pO/q21l+ETUsgZ i4cZ0g3WQYDOh/JhMibKuLWeqlDao0nzGWODtM0pt5zFqvuHTYBD84UzUCPP0s/6 wCjgT/mA4GNedPHxxxjXUhAY2hprV6URZuHjCN0If83rspzoK8Tsc4WNpmqwfs2w t1FzorzEAhAqlMidDDK8WykJ8Ur2zLBIQwrbbIoU44OHfeUgswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLxAnlt33sLATjXDeH8I9pIXOGS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Mzdj NDUzYS02NzNmLTQ0ODEtYjRjNC0yMWVjZTU4OTk5MDEvNDdiODZmMmUtOWE0MS0z MWU3LTliNDctNGU4Mzk4ZmU3YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODM3YzQ1M2EtNjczZi00NDgxLWI0 YzQtMjFlY2U1ODk5OTAxLzgzN2M0NTNhLTY3M2YtNDQ4MS1iNGM0LTIxZWNlNTg5 OTkwMS5jcmwwHwYDVR0jBBgwFoAUXG901P6rc6fs/BNKxeUlnUgUOOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzdjNDUzYS02NzNmLTQ0ODEtYjRjNC0yMWVj ZTU4OTk5MDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAApiAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEtlVzQdFAGhcC5QTZd6TsffDoHieexq22yAhUdCQTZD1Isdy2Q0 XCTFVmEx+NWuw1/ICfax6ClGNIFJa98O79S+5TVFIHD4UYx6wqz3f7qgIoeU8dLg YkG4kOzs+FpEN+lw5+DDSSz58DM6b1Mc/ApJOPwMqUgdC1uhk5n+hQwa+LTF74h6 bqPADRz/2Dq/6S7HHR/JXwrqZamMSyTrXtdegcqJtPvOWiJQTWOEh42v/scA/xdZ Whb4PwvEJY5v+JBsStm+ESQ/kqY8bS0ok2zo5aDxTSVi2uSO1v7HZ95/LkvmxBLw JqD+Vu9OIcMy7EYFUm6EkyETLSTZcJLpZ2k= -----END CERTIFICATE-----Generated at Sat May 10 10:45:23 2025 by rpki-client