$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa File: e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa (raw, json) Hash identifier: qWkE0XSWN6Q/ENpoBcPOgAGKqI3mSBK8ITs811haHCo= Subject key identifier: 0C:34:CB:B8:61:13:39:82:A4:75:96:05:82:04:29:7C:4A:CF:E5:9A Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019 Certificate serial: 010D0C9F43285849C20A031B43FCBE86D7B735C0 Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 22191 IP address blocks: 2604:1dc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:03:1b:43:fc:be:86:d7:b7:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=33e8f7d8-1aed-417f-95aa-0af0d9323ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:56:1e:44:96:95:47:60:03:d8:2e:65:ea:02: 4e:c8:f4:54:2a:a6:41:21:8f:fc:79:7f:93:2a:12: 35:03:7e:40:55:6d:8e:db:c2:47:f9:f5:98:0f:7f: 1c:b8:8d:08:9b:32:5c:19:df:6e:81:8d:f0:d9:09: d2:b0:32:58:d9:fb:56:5a:5b:eb:a5:65:ef:10:ff: 19:54:00:3c:b0:87:8a:f3:60:6e:c2:2f:e5:74:8c: 2a:92:c1:d0:a7:b5:83:a3:d9:50:07:ae:4c:25:c8: 1e:70:5b:c6:27:42:68:3e:be:8c:25:4c:2e:d6:e5: 7f:d0:a4:be:e1:1a:34:55:57:10:ed:88:c1:66:d4: c7:ff:d2:69:6a:21:1c:e2:11:64:92:d3:46:6a:22: dc:f1:fa:a3:9f:3e:bb:a9:69:d5:50:68:47:48:7f: 59:d2:59:c6:c0:b4:84:a6:64:08:2d:dc:50:b7:a4: ae:83:9c:f2:d5:84:fb:94:09:f5:16:49:de:34:01: 5e:b6:aa:e5:53:41:24:d0:29:69:9d:81:77:c8:dc: ee:8a:ae:9c:83:42:02:ad:23:48:bf:46:fa:bd:c9: 50:02:f7:a1:96:5e:08:e0:a2:2d:39:7b:5f:95:e0: ff:26:84:28:ce:9b:a2:76:bf:29:f2:fe:4a:61:3f: da:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:34:CB:B8:61:13:39:82:A4:75:96:05:82:04:29:7C:4A:CF:E5:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl X509v3 Authority Key Identifier: keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer sbgp-ipAddrBlock: critical IPv6: 2604:1dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:9d:da:b0:9c:50:5f:ff:fb:24:3f:78:67:5f:ee:8a:61:56: 43:ec:8f:30:6f:fa:88:f7:f3:17:7d:15:c3:58:05:39:8d:13: 42:b6:3d:19:92:51:4d:bf:04:29:5e:72:5d:3a:e6:ea:51:5a: e4:67:88:76:75:d7:24:c5:91:79:10:a7:a3:ca:cf:2e:41:f2: 15:ce:4d:62:6d:e0:92:40:d2:91:4e:a0:3b:1d:a1:00:6b:e9: a9:bf:53:c3:5a:cf:40:36:51:ee:63:fd:97:79:aa:a1:8c:6a: 17:5f:55:42:61:1a:e8:20:5b:f3:f0:84:fc:23:47:c5:bf:f8: 59:1a:ea:8b:7c:50:41:9e:bb:fd:14:5a:db:c6:a7:bc:48:0f: 3a:67:09:42:f5:29:ff:80:eb:81:de:72:39:ca:b4:89:2e:12: 3a:b3:87:62:96:b6:20:00:b4:31:3f:36:9a:55:8b:d8:aa:d5: 77:f8:2e:1e:9c:c7:36:3e:7f:32:5f:31:61:11:8c:49:2a:60: 63:a7:a3:82:2c:96:ea:01:00:5e:43:64:21:d5:50:65:e8:84: a8:ed:f8:1b:45:79:6e:1b:75:46:03:95:31:5c:08:85:e7:a3: 91:2c:40:66:c5:05:6e:9c:87:b5:00:c7:6f:52:de:84:73:53: 1a:db:b4:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnCCgMbQ/y+hte3NcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1 MDE5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MzNlOGY3ZDgtMWFlZC00MTdmLTk1YWEtMGFmMGQ5MzIzYWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklYeRJaVR2AD2C5l6gJOyPRUKqZBIY/8eX+T KhI1A35AVW2O28JH+fWYD38cuI0ImzJcGd9ugY3w2QnSsDJY2ftWWlvrpWXvEP8Z VAA8sIeK82Buwi/ldIwqksHQp7WDo9lQB65MJcgecFvGJ0JoPr6MJUwu1uV/0KS+ 4Ro0VVcQ7YjBZtTH/9JpaiEc4hFkktNGaiLc8fqjnz67qWnVUGhHSH9Z0lnGwLSE pmQILdxQt6Sug5zy1YT7lAn1FkneNAFetqrlU0Ek0ClpnYF3yNzuiq6cg0ICrSNI v0b6vclQAvehll4I4KItOXtfleD/JoQozpuidr8p8v5KYT/aKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAw0y7hhEzmCpHWWBYIEKXxKz+WaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIy MTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvZThmNDUxMGMtNWRlNi0z ZjFlLThlNmMtOGE0Zjg5MGEyNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjMyMjE3ZTEtMjQ3My00OWE1LTkx OWUtMDhlMTg5NmM1MDE5L2IzMjIxN2UxLTI0NzMtNDlhNS05MTllLTA4ZTE4OTZj NTAxOS5jcmwwHwYDVR0jBBgwFoAUSK4N+KDXdJBYpFq1I6Zut7HAd7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUx ODk2YzUwMTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQdwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQADndqwnFBf//skP3hnX+6KYVZD7I8wb/qI9/MXfRXDWAU5jRNCtj0Z klFNvwQpXnJdOubqUVrkZ4h2ddckxZF5EKejys8uQfIVzk1ibeCSQNKRTqA7HaEA a+mpv1PDWs9ANlHuY/2XeaqhjGoXX1VCYRroIFvz8IT8I0fFv/hZGuqLfFBBnrv9 FFrbxqe8SA86ZwlC9Sn/gOuB3nI5yrSJLhI6s4dilrYgALQxPzaaVYvYqtV3+C4e nMc2Pn8yXzFhEYxJKmBjp6OCLJbqAQBeQ2Qh1VBl6ISo7fgbRXluG3VGA5UxXAiF 56ORLEBmxQVunIe1AMdvUt6Ec1Ma27Rp -----END CERTIFICATE-----Generated at Sun May 11 05:26:58 2025 by rpki-client