$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa File: b5060e1b-5649-3da3-90ed-6368bf81760a.roa (raw, json) Hash identifier: Fo1HXGJHVRrBh9SVuHPijFylvEf3E/fwl0kFPpZpeY4= Subject key identifier: 77:D0:DD:EB:80:7A:E0:5A:00:5F:EC:9A:F5:29:BF:98:16:BF:06:4E Certificate issuer: /CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Certificate serial: 010D0C9F43285849B9AA046062518E8E7CC66C00 Authority key identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 14228 IP address blocks: 2620:d5:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:04:60:62:51:8e:8e:7c:c6:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=079c0ba4-93c3-4a55-af1c-d3a05e9ace0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:71:a3:27:0f:c6:7a:c9:30:01:4d:d5:51:a5: ed:1b:a1:b0:b9:19:45:98:6b:db:f6:33:e0:aa:03: d4:2d:98:ce:b9:06:81:67:16:a8:fb:d3:b4:80:f4: b0:a3:bd:ab:22:35:a0:03:78:aa:00:0a:30:a0:e7: 93:8f:45:09:97:cf:3d:80:2a:31:3c:3a:99:b9:34: 46:b1:8f:5f:16:9f:d8:e1:d9:63:50:6b:56:c6:fa: b7:98:0d:37:a9:e3:10:66:17:c7:17:37:0c:19:76: 28:58:e6:e6:b6:82:65:98:1a:2c:c1:7a:cf:63:53: f5:a0:b6:f4:1d:80:82:a0:78:b4:71:3a:6f:aa:22: 7b:2b:ac:e2:f7:b2:5a:85:b1:d9:eb:94:86:26:db: 31:12:dd:f4:f8:1d:ac:ba:33:c6:03:70:93:26:ab: 79:ee:65:da:25:98:f8:4d:53:a2:56:26:61:20:4a: 57:c0:b4:8a:84:ef:8e:c3:03:9d:cc:e4:f4:20:e4: 80:d0:72:ee:fb:0b:c1:ac:00:cb:e0:26:24:cf:f1: a8:eb:54:0a:7c:34:e5:17:fc:95:df:92:0e:29:1d: bf:9d:3b:84:61:a1:77:a8:a8:52:01:0d:2d:d6:83: ac:91:17:b7:8f:a7:12:ad:8c:be:b9:06:76:4a:8f: e9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D0:DD:EB:80:7A:E0:5A:00:5F:EC:9A:F5:29:BF:98:16:BF:06:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl X509v3 Authority Key Identifier: keyid:F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer sbgp-ipAddrBlock: critical IPv6: 2620:d5:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b9:93:16:22:9e:d5:71:07:80:ed:32:a8:f9:d5:49:35:4b: 1b:3f:4d:ac:17:1e:fa:59:78:2d:38:16:de:dc:45:5c:71:c6: 89:67:e9:41:c7:d5:91:8a:db:de:ae:58:91:d1:d8:3b:10:01: ae:9c:53:a3:0d:93:ec:bd:b3:7e:48:af:52:c1:c9:ef:b5:9f: 81:16:40:c4:9f:33:42:28:d4:c7:d2:8c:d4:85:ff:00:57:72: ed:37:6b:5f:42:e9:07:e0:2e:a7:57:2c:b9:c5:90:19:72:41: 5a:c9:69:fe:1e:b6:ea:76:70:5e:e5:a9:b1:86:0c:98:ff:40: d1:09:c7:54:8d:20:3c:ea:f4:4d:12:34:f6:4b:0c:ce:4a:81: de:0d:e0:e0:8e:b1:78:94:ac:80:9d:71:91:3e:fa:f6:d1:da: b2:e6:c4:e9:78:1d:14:4f:01:98:09:a6:b0:4e:b3:e9:70:59: f9:4d:a3:89:97:37:d1:9c:56:c1:9e:8f:dc:a3:c2:48:d2:bf: 35:59:b1:e2:a5:e5:f6:e5:dd:9f:16:be:5d:0a:48:7d:80:3c: f1:a9:3c:4c:9d:34:85:a1:c4:90:62:c6:f3:f1:82:35:e4:35: 5a:07:eb:58:54:04:09:1f:8e:52:8e:a0:91:56:8c:90:0c:6d: 19:c8:91:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm5qgRgYlGOjnzGbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U2NWM2MTAtZmE0OS00ZDdiLWEyZTctNjkxMjRmMWU1 Yzg1MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk MDc5YzBiYTQtOTNjMy00YTU1LWFmMWMtZDNhMDVlOWFjZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHGjJw/GeskwAU3VUaXtG6GwuRlFmGvb9jPg qgPULZjOuQaBZxao+9O0gPSwo72rIjWgA3iqAAowoOeTj0UJl889gCoxPDqZuTRG sY9fFp/Y4dljUGtWxvq3mA03qeMQZhfHFzcMGXYoWObmtoJlmBoswXrPY1P1oLb0 HYCCoHi0cTpvqiJ7K6zi97JahbHZ65SGJtsxEt30+B2sujPGA3CTJqt57mXaJZj4 TVOiViZhIEpXwLSKhO+OwwOdzOT0IOSA0HLu+wvBrADL4CYkz/Go61QKfDTlF/yV 35IOKR2/nTuEYaF3qKhSAQ0t1oOskRe3j6cSrYy+uQZ2So/pswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHfQ3euAeuBaAF/smvUpv5gWvwZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTY1 YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEyNGYxZTVjODUvYjUwNjBlMWItNTY0OS0z ZGEzLTkwZWQtNjM2OGJmODE3NjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U2NWM2MTAtZmE0OS00ZDdiLWEy ZTctNjkxMjRmMWU1Yzg1LzNlNjVjNjEwLWZhNDktNGQ3Yi1hMmU3LTY5MTI0ZjFl NWM4NS5jcmwwHwYDVR0jBBgwFoAU8UDtM/qZ+uZow0I3AcJrTGquNSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTY1YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEy NGYxZTVjODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA1UAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB+5kxYintVxB4DtMqj51Uk1Sxs/TawXHvpZeC04Ft7cRVxxxoln 6UHH1ZGK296uWJHR2DsQAa6cU6MNk+y9s35Ir1LBye+1n4EWQMSfM0Io1MfSjNSF /wBXcu03a19C6QfgLqdXLLnFkBlyQVrJaf4etup2cF7lqbGGDJj/QNEJx1SNIDzq 9E0SNPZLDM5Kgd4N4OCOsXiUrICdcZE++vbR2rLmxOl4HRRPAZgJprBOs+lwWflN o4mXN9GcVsGej9yjwkjSvzVZseKl5fbl3Z8Wvl0KSH2APPGpPEydNIWhxJBixvPx gjXkNVoH61hUBAkfjlKOoJFWjJAMbRnIke0= -----END CERTIFICATE-----Generated at Mon May 5 17:56:16 2025 by rpki-client