$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/8c597e11-eb29-399d-b46f-7483f6a0ef0c.roa File: 8c597e11-eb29-399d-b46f-7483f6a0ef0c.roa (raw, json) Hash identifier: IW3mEb5W9L/3bZrrwAWZUvtPahJsnlDf8OWpvrCgaBo= Subject key identifier: 42:F9:67:5F:81:9E:5E:B4:BB:2C:D1:6B:58:A9:5A:B5:11:4D:EA:66 Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977 Certificate serial: 010D0C9F43285849D16502947269FE7D7C542080 Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/8c597e11-eb29-399d-b46f-7483f6a0ef0c.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 398549 IP address blocks: 2605:dd40:8224::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:02:94:72:69:fe:7d:7c:54:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=c44cd7fe-77ba-4425-8644-412246340c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:1c:83:3f:8f:3a:08:bb:10:0d:84:68:04: 2a:8e:66:8d:c9:ce:76:86:d2:41:5c:78:62:e9:10: 9c:cc:fc:62:0b:65:44:72:1c:b8:66:2a:c0:0d:07: 4a:0b:6e:38:62:a4:7b:a7:23:0d:f3:25:91:29:ec: 54:95:f8:c8:7e:11:b8:c6:2e:7b:c2:bb:d2:25:e8: fa:14:d3:96:72:a8:07:25:aa:14:2a:1f:ac:92:64: 32:be:6f:5f:73:2e:77:70:61:80:38:99:69:fa:eb: 32:b7:60:7d:cf:e7:b6:2e:e3:19:53:45:7e:41:42: 1a:87:58:fa:95:39:53:ee:a4:af:42:a7:cf:eb:dc: 86:fb:77:82:da:35:4e:86:fa:2e:2d:ab:d9:6c:1a: 7b:b4:8b:22:4c:a0:12:c4:dc:2a:1a:98:c9:04:cc: 51:5d:d0:88:40:ec:a1:ce:df:18:24:6d:97:17:35: 57:5d:fd:4c:23:06:0a:93:8a:d5:7c:26:5c:71:b1: c4:69:f9:6a:84:e7:16:c3:c6:fa:24:bb:2e:fc:8e: f0:d1:ae:ef:82:c2:3b:09:2f:95:fa:9c:e7:d3:af: 14:da:8b:24:2e:c3:22:20:0d:f0:a7:ba:eb:27:ec: 82:6d:fa:7e:b5:58:fa:c9:10:d4:38:19:2b:6f:f2: 88:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F9:67:5F:81:9E:5E:B4:BB:2C:D1:6B:58:A9:5A:B5:11:4D:EA:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/8c597e11-eb29-399d-b46f-7483f6a0ef0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl X509v3 Authority Key Identifier: keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer sbgp-ipAddrBlock: critical IPv6: 2605:dd40:8224::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:20:e2:ec:d1:08:f8:c0:3b:fc:10:41:7d:7f:35:8a:5c:70: 76:f4:03:7f:83:7a:e2:0e:fc:33:5a:aa:df:c8:bc:c9:84:98: a1:00:0a:ce:96:84:24:b3:e0:7f:99:7f:13:cb:bd:19:71:5b: 29:26:06:6b:ad:23:af:fc:cb:96:21:3e:b6:d1:18:18:e0:96: 65:35:18:56:7c:63:52:b5:0b:63:9a:03:a3:22:4a:56:a4:8f: 96:43:df:32:39:ab:da:0c:e1:b8:30:ab:18:b8:ff:76:7d:f3: e3:8e:c6:f5:8e:03:4f:b3:81:6e:c6:8b:7b:77:91:82:85:b5: 09:12:29:cf:7f:30:40:28:5e:86:c5:5b:2b:45:85:cb:b6:13: 66:e9:3d:04:34:61:b2:34:2f:92:d9:51:9d:96:4f:58:f7:16: 86:50:e4:63:3a:7c:c2:40:bf:60:b9:28:40:d7:85:02:23:9d: 5e:63:63:81:9d:bd:15:5d:06:c7:41:be:60:37:58:70:50:c2: 9c:a7:fa:d7:90:e5:82:11:94:b1:f9:8b:0f:62:f2:2a:35:bf: 42:7f:19:0a:fa:68:11:a9:87:aa:20:62:3b:d4:a7:3b:cf:d5: ff:4c:ab:7b:b1:f2:c0:aa:fe:90:46:92:67:27:47:9f:c7:b4: 06:5a:d1:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnRZQKUcmn+fXxUIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4 OTc3MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk YzQ0Y2Q3ZmUtNzdiYS00NDI1LTg2NDQtNDEyMjQ2MzQwYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9Qcgz+POgi7EA2EaAQqjmaNyc52htJBXHhi 6RCczPxiC2VEchy4ZirADQdKC244YqR7pyMN8yWRKexUlfjIfhG4xi57wrvSJej6 FNOWcqgHJaoUKh+skmQyvm9fcy53cGGAOJlp+usyt2B9z+e2LuMZU0V+QUIah1j6 lTlT7qSvQqfP69yG+3eC2jVOhvouLavZbBp7tIsiTKASxNwqGpjJBMxRXdCIQOyh zt8YJG2XFzVXXf1MIwYKk4rVfCZccbHEaflqhOcWw8b6JLsu/I7w0a7vgsI7CS+V +pzn068U2oskLsMiIA3wp7rrJ+yCbfp+tVj6yRDUOBkrb/KI2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEL5Z1+Bnl60uyzRa1ipWrURTepmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvOGM1OTdlMTEtZWIyOS0z OTlkLWI0NmYtNzQ4M2Y2YTBlZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4 ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXdQIIk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABgg4uzRCPjAO/wQQX1/NYpccHb0A3+DeuIO/DNaqt/IvMmEmKEA Cs6WhCSz4H+ZfxPLvRlxWykmBmutI6/8y5YhPrbRGBjglmU1GFZ8Y1K1C2OaA6Mi Slakj5ZD3zI5q9oM4bgwqxi4/3Z98+OOxvWOA0+zgW7Gi3t3kYKFtQkSKc9/MEAo XobFWytFhcu2E2bpPQQ0YbI0L5LZUZ2WT1j3FoZQ5GM6fMJAv2C5KEDXhQIjnV5j Y4GdvRVdBsdBvmA3WHBQwpyn+teQ5YIRlLH5iw9i8io1v0J/GQr6aBGph6ogYjvU pzvP1f9Mq3ux8sCq/pBGkmcnR5/HtAZa0Tc= -----END CERTIFICATE-----Generated at Sun May 11 15:42:46 2025 by rpki-client