$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/9051a4c1-e0cc-3c99-b06f-6125fd4e2008.roa File: 9051a4c1-e0cc-3c99-b06f-6125fd4e2008.roa (raw, json) Hash identifier: DCJ/aBEzkVDyjK4ihm7hGFWl7CGBbyPgWaGWeLCtCjw= Subject key identifier: 49:2C:6A:C5:6F:E6:99:66:21:BA:F3:A9:1E:5D:5B:E3:B3:C7:BA:33 Certificate issuer: /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785 Certificate serial: 010D0C9F43285849BDDA2EEBCC4D725AF662A880 Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/9051a4c1-e0cc-3c99-b06f-6125fd4e2008.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 47065 IP address blocks: 2620:33:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2e:eb:cc:4d:72:5a:f6:62:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=0e5bdf46-be16-4d06-8a9a-531e4b1ab42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:3b:4b:46:b7:4a:ca:f9:ad:cb:d6:1c:7e: 42:27:f2:3c:fa:da:37:91:9f:b3:5c:d2:58:8e:85: 18:c0:64:60:9e:0a:26:52:65:72:51:09:fa:ee:f3: 89:2f:9f:72:2d:ce:e1:1f:e3:70:ec:c9:7a:7d:d3: 51:70:1a:b2:61:83:3e:20:a2:f5:81:a1:5d:e6:60: 5e:0a:2e:bf:09:e8:44:0e:41:47:2f:b4:a8:cc:c8: 08:d2:42:41:00:80:31:5d:66:69:92:c8:7b:31:16: 7c:e4:3d:6f:27:e5:38:79:9b:f8:91:e2:28:26:cb: 8c:2b:51:c2:cb:f4:62:78:8a:1c:58:03:14:8a:7f: d7:87:d3:b8:06:3e:19:42:3e:b7:c4:95:89:e7:4b: 72:61:ef:0c:91:3e:f6:16:6c:22:61:94:c2:66:5e: a8:9f:36:02:52:eb:80:3d:a2:65:00:ad:5a:95:68: c7:33:0c:a4:68:9d:ec:47:6d:b6:01:2d:d8:b2:3b: d2:46:fb:37:d2:63:c1:91:6a:24:64:88:be:d7:e5: 66:33:04:25:11:c3:80:aa:68:69:ac:23:1c:9e:ea: 76:d6:b8:d5:89:c1:7f:03:b1:e0:8a:80:e2:1f:aa: 69:f3:49:95:37:c4:6d:e2:05:5e:93:4a:c8:64:63: 8f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2C:6A:C5:6F:E6:99:66:21:BA:F3:A9:1E:5D:5B:E3:B3:C7:BA:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/9051a4c1-e0cc-3c99-b06f-6125fd4e2008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl X509v3 Authority Key Identifier: keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer sbgp-ipAddrBlock: critical IPv6: 2620:33:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6d:0c:ee:82:15:b4:7e:74:80:c3:ef:b5:97:cb:fb:93:57: f4:02:7a:81:c2:8e:8f:4e:8b:d5:5a:e4:a2:23:8d:b5:14:cc: b3:0e:69:c1:17:88:80:77:52:91:3b:0a:96:f5:5d:37:dc:7b: 12:6e:93:3b:24:42:ec:1b:4d:91:08:55:dc:fe:7f:e8:de:10: 8a:3e:07:28:a1:25:c7:e0:69:c1:86:d3:d1:66:d2:89:95:db: fb:8d:90:9e:3d:ef:f1:29:47:18:23:84:7e:56:70:2e:12:66: e0:ee:0d:1a:3d:b2:75:3d:5c:9f:d6:24:51:50:f1:75:fd:b2: 69:08:f1:f3:79:34:1d:20:d2:64:83:84:65:1a:41:61:02:65: af:c5:84:d6:cc:91:40:34:96:e8:45:0e:f6:a8:38:c8:71:b6: d9:99:16:80:1a:96:4f:de:02:55:4f:7c:6c:46:9b:b7:05:db: 38:42:86:90:bc:fc:44:7a:06:a3:fc:ce:ae:a6:35:a5:c1:c2: 1e:7e:71:f8:c9:17:1b:35:86:a8:66:4c:6e:e9:08:3b:c6:6d: a3:99:6f:11:dd:22:f3:69:62:a1:3d:ab:d5:99:a7:e8:a7:28: 70:ed:2d:7f:5c:aa:35:5d:26:12:15:b0:b7:2e:42:8b:7d:cd: 9d:c3:d1:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm92i7rzE1yWvZiqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg1YjA0ZmYtNDBkOS00YmY3LThkMzgtNGRlMGM1NGJi Nzg1MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MGU1YmRmNDYtYmUxNi00ZDA2LThhOWEtNTMxZTRiMWFiNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuc7S0a3Ssr5rcvWHH5CJ/I8+to3kZ+zXNJY joUYwGRgngomUmVyUQn67vOJL59yLc7hH+Nw7Ml6fdNRcBqyYYM+IKL1gaFd5mBe Ci6/CehEDkFHL7SozMgI0kJBAIAxXWZpksh7MRZ85D1vJ+U4eZv4keIoJsuMK1HC y/RieIocWAMUin/Xh9O4Bj4ZQj63xJWJ50tyYe8MkT72FmwiYZTCZl6onzYCUuuA PaJlAK1alWjHMwykaJ3sR222AS3YsjvSRvs30mPBkWokZIi+1+VmMwQlEcOAqmhp rCMcnup21rjVicF/A7HgioDiH6pp80mVN8Rt4gVek0rIZGOPbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEksasVv5plmIbrzqR5dW+Ozx7ozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lODVi MDRmZi00MGQ5LTRiZjctOGQzOC00ZGUwYzU0YmI3ODUvOTA1MWE0YzEtZTBjYy0z Yzk5LWIwNmYtNjEyNWZkNGUyMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTg1YjA0ZmYtNDBkOS00YmY3LThk MzgtNGRlMGM1NGJiNzg1L2U4NWIwNGZmLTQwZDktNGJmNy04ZDM4LTRkZTBjNTRi Yjc4NS5jcmwwHwYDVR0jBBgwFoAU1r/j/S2QSWGv4ekJP7iPLOTjBlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lODViMDRmZi00MGQ5LTRiZjctOGQzOC00ZGUw YzU0YmI3ODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAM8AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB5tDO6CFbR+dIDD77WXy/uTV/QCeoHCjo9Oi9Va5KIjjbUUzLMO acEXiIB3UpE7Cpb1XTfcexJukzskQuwbTZEIVdz+f+jeEIo+ByihJcfgacGG09Fm 0omV2/uNkJ497/EpRxgjhH5WcC4SZuDuDRo9snU9XJ/WJFFQ8XX9smkI8fN5NB0g 0mSDhGUaQWECZa/FhNbMkUA0luhFDvaoOMhxttmZFoAalk/eAlVPfGxGm7cF2zhC hpC8/ER6BqP8zq6mNaXBwh5+cfjJFxs1hqhmTG7pCDvGbaOZbxHdIvNpYqE9q9WZ p+inKHDtLX9cqjVdJhIVsLcuQot9zZ3D0ZA= -----END CERTIFICATE-----Generated at Sun May 4 21:30:19 2025 by rpki-client