$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/d8e3845c-489e-34ef-886c-d05badd37cd6.roa File: d8e3845c-489e-34ef-886c-d05badd37cd6.roa (raw, json) Hash identifier: jvqnS+cxLNRB2tNNDwehfnYBA1aLFM/PNFY/Aq9I9SI= Subject key identifier: A7:34:F1:99:AF:4C:11:E7:AA:36:88:B6:5E:FA:B7:DB:E6:4E:E4:5B Certificate issuer: /CN=7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf Certificate serial: 010D0C9F43285849350E998C5F332F2D888F4800 Authority key identifier: B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/d8e3845c-489e-34ef-886c-d05badd37cd6.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 36427 IP address blocks: 2620:8e:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:99:8c:5f:33:2f:2d:88:8f:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=e574d1af-7d1a-40dd-821b-a1173d39f37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fe:da:36:9e:83:f3:ac:e2:27:a8:08:4f:ee: 9c:02:95:6a:77:5a:65:fb:11:31:d8:87:5b:7a:53: db:ed:10:f5:55:40:13:89:ce:b0:48:4a:37:8f:97: 35:e0:ba:7c:a2:d2:07:74:90:df:80:b3:67:c3:7d: 71:45:cc:17:68:78:43:5c:9a:fd:65:8a:b9:42:9e: 35:f8:3f:df:af:28:c4:b5:b4:65:ff:5c:87:9f:3d: e1:33:d7:f9:9f:19:23:a8:00:ce:46:a3:93:fc:58: ca:3a:83:a6:f4:a5:c8:e8:84:da:d6:f1:5f:ad:d4: 78:cc:8b:53:25:ab:1c:0d:7a:c8:7b:b9:12:2e:b9: 96:83:23:7f:bf:eb:60:5a:2f:b2:13:f4:6b:5b:8e: 1b:5b:e6:6a:59:5c:45:22:49:24:1d:d1:cf:9d:03: d7:1f:17:86:ef:d6:29:22:66:92:22:c6:43:2a:13: 82:ce:d5:54:52:2e:84:c6:bd:7b:bf:6f:b5:38:b3: 6f:25:94:0c:8d:21:28:e0:90:27:33:09:5e:45:34: 67:58:aa:b8:8e:e9:a8:54:ca:f9:ef:c4:91:5a:5a: 71:03:09:5e:cb:8e:e6:82:60:ad:fb:70:47:48:ec: cd:c8:48:66:60:04:cc:27:05:f1:da:ec:3d:af:e8: 87:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:34:F1:99:AF:4C:11:E7:AA:36:88:B6:5E:FA:B7:DB:E6:4E:E4:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/d8e3845c-489e-34ef-886c-d05badd37cd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.crl X509v3 Authority Key Identifier: keyid:B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer sbgp-ipAddrBlock: critical IPv6: 2620:8e:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:9d:69:f0:74:58:3f:0f:ec:87:54:18:5d:08:de:d0:f7:35: 54:ea:30:72:d7:30:e0:00:cb:77:50:35:d0:51:15:08:70:6e: bf:eb:60:97:25:bd:bb:3b:ca:73:3e:fc:28:d8:94:9b:be:63: 37:46:b7:bd:f1:29:c5:7a:8d:54:b7:c2:90:26:a2:63:25:f9: 13:17:cc:10:76:63:d2:ee:20:60:9e:dc:ec:97:0d:9c:a5:58: 57:36:ac:dd:71:e1:da:fb:fd:1d:81:d3:10:70:64:63:7c:20: 4a:f9:14:d6:23:74:d1:00:da:aa:60:86:e8:2d:f9:9d:26:fe: 7e:57:cf:1c:c4:70:25:3b:fb:ff:df:ea:57:c8:0f:3e:a4:fe: 79:e1:4f:e9:f9:7a:ba:ca:49:60:1e:3c:ab:3d:e3:58:83:92: fd:2c:bc:9c:38:b6:1d:bf:aa:e4:37:f9:10:53:19:df:08:64: 34:c6:ea:49:4a:01:b0:f3:3d:7f:20:93:b1:6a:2e:64:e6:73: f1:98:7a:5c:2d:cc:d4:96:d5:63:3d:b4:54:12:da:6d:f1:1f: fd:b6:89:45:1c:af:50:9a:38:58:09:f0:48:9b:1a:c9:1e:79: aa:68:f0:9b:5a:0b:7e:8f:fa:7d:c3:ce:5a:6f:d5:2a:d5:36: 3d:1d:5b:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1DpmMXzMvLYiPSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5MGU0ZDUtYjgzOC00YWU3LWI3YzgtOGFhYTRlMTgz ZmFmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZTU3NGQxYWYtN2QxYS00MGRkLTgyMWItYTExNzNkMzlmMzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv7aNp6D86ziJ6gIT+6cApVqd1pl+xEx2Idb elPb7RD1VUATic6wSEo3j5c14Lp8otIHdJDfgLNnw31xRcwXaHhDXJr9ZYq5Qp41 +D/fryjEtbRl/1yHnz3hM9f5nxkjqADORqOT/FjKOoOm9KXI6ITa1vFfrdR4zItT JascDXrIe7kSLrmWgyN/v+tgWi+yE/RrW44bW+ZqWVxFIkkkHdHPnQPXHxeG79Yp ImaSIsZDKhOCztVUUi6Exr17v2+1OLNvJZQMjSEo4JAnMwleRTRnWKq4jumoVMr5 78SRWlpxAwley47mgmCt+3BHSOzNyEhmYATMJwXx2uw9r+iHrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKc08ZmvTBHnqjaItl76t9vmTuRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZTkw ZTRkNS1iODM4LTRhZTctYjdjOC04YWFhNGUxODNmYWYvZDhlMzg0NWMtNDg5ZS0z NGVmLTg4NmMtZDA1YmFkZDM3Y2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2U5MGU0ZDUtYjgzOC00YWU3LWI3 YzgtOGFhYTRlMTgzZmFmLzdlOTBlNGQ1LWI4MzgtNGFlNy1iN2M4LThhYWE0ZTE4 M2ZhZi5jcmwwHwYDVR0jBBgwFoAUtwbhskEzXgljaRvsnfOvg4MjUcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ZTkwZTRkNS1iODM4LTRhZTctYjdjOC04YWFh NGUxODNmYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAjoAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAadafB0WD8P7IdUGF0I3tD3NVTqMHLXMOAAy3dQNdBRFQhwbr/r YJclvbs7ynM+/CjYlJu+YzdGt73xKcV6jVS3wpAmomMl+RMXzBB2Y9LuIGCe3OyX DZylWFc2rN1x4dr7/R2B0xBwZGN8IEr5FNYjdNEA2qpghugt+Z0m/n5XzxzEcCU7 +//f6lfIDz6k/nnhT+n5errKSWAePKs941iDkv0svJw4th2/quQ3+RBTGd8IZDTG 6klKAbDzPX8gk7FqLmTmc/GYelwtzNSW1WM9tFQS2m3xH/22iUUcr1CaOFgJ8Eib Gskeeapo8JtaC36P+n3Dzlpv1SrVNj0dW/E= -----END CERTIFICATE-----Generated at Thu May 8 15:24:11 2025 by rpki-client