$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa File: 7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa (raw, json) Hash identifier: BKMr8wGtSlygoWbMgzP1HOUfoRz1AZ8aL86tg/DxfXM= Subject key identifier: 7C:2B:D3:A8:DC:9A:B0:62:39:49:C7:DF:29:95:CF:41:D4:55:D1:0F Certificate issuer: /CN=7a870649-61cf-4a59-a195-226a35c00514 Certificate serial: 010D0C9F43285849CBCFA980C1783D0A033DDF10 Authority key identifier: 89:32:94:27:6F:E0:A0:38:82:E5:3D:D9:29:B6:C7:33:5E:86:C0:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 1224 IP address blocks: 2620:0:c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a9:80:c1:78:3d:0a:03:3d:df:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a870649-61cf-4a59-a195-226a35c00514 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=5f87e3ec-409b-4150-9e15-e519d56437fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:41:6c:76:f4:41:c4:a1:5e:70:d7:da:c6:8d: 86:18:62:ed:a6:df:11:b4:f6:73:67:dc:f8:c4:75: 94:a1:91:40:fd:be:73:05:4a:16:4c:24:a1:64:e7: d1:12:23:45:dd:a0:79:53:f0:92:e7:c6:e2:c2:c7: cc:f6:9f:35:c6:f0:a4:2f:c3:ec:47:9e:01:f6:13: 45:55:7e:1b:02:96:c8:7b:50:9b:c4:28:e0:c3:f3: f1:67:70:4a:29:5d:8e:83:9f:bf:55:ac:ff:80:03: 17:7f:9f:29:a7:dd:09:27:48:0e:05:9f:19:81:2f: fc:d8:f0:0c:65:9a:dd:b9:10:f9:06:aa:05:2d:60: 9c:2c:b9:09:f0:55:d7:97:17:0d:da:05:9a:bd:e0: 91:fc:dc:46:f0:f7:32:e1:89:c4:b3:f1:39:aa:da: d0:da:48:60:8f:86:43:b5:5e:d3:fa:43:be:d4:d2: 7b:46:05:a0:bb:30:9b:19:a2:cf:11:67:dd:a1:e9: ea:6b:16:ba:d0:16:fe:00:02:94:65:85:35:e8:f7: 50:0d:8f:bc:44:d1:af:7b:5f:88:9c:3b:fa:ec:e3: 60:27:a0:2c:40:b6:ed:75:d7:b8:89:9a:ac:dd:4a: 4a:88:ae:eb:f9:7f:8c:b5:d7:96:73:39:b1:b3:eb: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2B:D3:A8:DC:9A:B0:62:39:49:C7:DF:29:95:CF:41:D4:55:D1:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.crl X509v3 Authority Key Identifier: keyid:89:32:94:27:6F:E0:A0:38:82:E5:3D:D9:29:B6:C7:33:5E:86:C0:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:c80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:58:84:88:4d:3a:54:9f:3f:4e:16:11:37:8b:ac:02:d9:ec: 94:14:26:5c:e3:7e:7a:57:18:1a:68:fc:0a:9a:67:92:be:e9: 16:c5:11:20:5f:3a:aa:ab:b2:85:63:52:39:d0:f2:f3:0e:58: ea:9e:6f:bd:7e:d7:0f:69:27:4f:32:32:7b:8a:2b:af:0e:96: fb:44:dd:6d:bd:09:88:91:a1:1c:c2:07:57:30:41:9a:ac:ed: 0a:56:3d:7b:80:44:62:28:21:73:13:c0:35:fd:35:7d:e1:11: 4d:94:ce:23:0a:79:f1:5f:ce:e6:4f:f0:f9:d7:91:2d:2e:25: 0e:f9:d8:1a:64:85:23:65:f3:44:46:84:b8:54:c1:bf:ce:ad: e9:75:21:aa:ce:ab:cd:3e:0e:6b:3e:67:ae:f7:c1:3f:9c:71: 51:28:fb:84:39:d2:38:22:31:97:a0:c3:81:95:3b:fb:60:e5: 9e:26:16:9d:7f:37:fd:8c:98:55:f3:5c:63:12:16:17:18:07: 1c:a0:ee:6e:8a:78:56:b9:5a:44:94:6b:cf:ad:29:91:ee:ee: a6:00:01:c4:6f:9c:a5:bf:5c:54:1e:1b:ae:1d:0a:e3:fa:6b: 4a:04:aa:5e:8a:d7:43:ac:cd:16:fc:c0:e1:09:f2:8b:99:44: 49:6a:ad:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnLz6mAwXg9CgM93xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E4NzA2NDktNjFjZi00YTU5LWExOTUtMjI2YTM1YzAw NTE0MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NWY4N2UzZWMtNDA5Yi00MTUwLTllMTUtZTUxOWQ1NjQzN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kFsdvRBxKFecNfaxo2GGGLtpt8RtPZzZ9z4 xHWUoZFA/b5zBUoWTCShZOfREiNF3aB5U/CS58biwsfM9p81xvCkL8PsR54B9hNF VX4bApbIe1CbxCjgw/PxZ3BKKV2Og5+/Vaz/gAMXf58pp90JJ0gOBZ8ZgS/82PAM ZZrduRD5BqoFLWCcLLkJ8FXXlxcN2gWaveCR/NxG8Pcy4YnEs/E5qtrQ2khgj4ZD tV7T+kO+1NJ7RgWguzCbGaLPEWfdoenqaxa60Bb+AAKUZYU16PdQDY+8RNGve1+I nDv67ONgJ6AsQLbtdde4iZqs3UpKiK7r+X+MtdeWczmxs+spSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHwr06jcmrBiOUnH3ymVz0HUVdEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YTg3 MDY0OS02MWNmLTRhNTktYTE5NS0yMjZhMzVjMDA1MTQvN2EzMGYzZjQtOWUyNi0z Yzk2LTk2NzItMjljNmU2OTVlYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2E4NzA2NDktNjFjZi00YTU5LWEx OTUtMjI2YTM1YzAwNTE0LzdhODcwNjQ5LTYxY2YtNGE1OS1hMTk1LTIyNmEzNWMw MDUxNC5jcmwwHwYDVR0jBBgwFoAUiTKUJ2/goDiC5T3ZKbbHM16GwEwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YTg3MDY0OS02MWNmLTRhNTktYTE5NS0yMjZh MzVjMDA1MTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAyA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFdYhIhNOlSfP04WETeLrALZ7JQUJlzjfnpXGBpo/AqaZ5K+6RbF ESBfOqqrsoVjUjnQ8vMOWOqeb71+1w9pJ08yMnuKK68OlvtE3W29CYiRoRzCB1cw QZqs7QpWPXuARGIoIXMTwDX9NX3hEU2UziMKefFfzuZP8PnXkS0uJQ752BpkhSNl 80RGhLhUwb/Orel1IarOq80+Dms+Z673wT+ccVEo+4Q50jgiMZegw4GVO/tg5Z4m Fp1/N/2MmFXzXGMSFhcYBxyg7m6KeFa5WkSUa8+tKZHu7qYAAcRvnKW/XFQeG64d CuP6a0oEql6K10OszRb8wOEJ8ouZRElqrWE= -----END CERTIFICATE-----Generated at Mon May 12 17:46:16 2025 by rpki-client