$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa File: 1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa (raw, json) Hash identifier: AL2AmdhFrQW1D85HWSd4rDch7NLhlcZ9VK9vpbh234g= Subject key identifier: 21:B1:A1:31:BA:5B:7A:03:91:05:9D:6A:8B:BE:E9:21:A9:F5:4D:D5 Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Certificate serial: 010D0C9F43285849519DAC18D40AF58157AF5F80 Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa Signing time: Wed 26 Mar 2025 18:31:59 +0000 ROA not before: Wed 26 Mar 2025 18:31:59 +0000 ROA not after: Tue 24 Jun 2025 18:31:59 +0000 asID: 16509 IP address blocks: 2602:faca:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:9d:ac:18:d4:0a:f5:81:57:af:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Validity Not Before: Mar 26 18:31:59 2025 GMT Not After : Jun 24 18:31:59 2025 GMT Subject: CN=6d32ad71-e3fc-474a-b8a3-b789d077ae16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:af:7b:de:25:d2:a7:a7:e4:9f:52:15:76:c1: 32:7b:93:eb:89:39:42:51:e9:88:69:00:44:52:f9: 24:9d:ca:86:0e:fb:d4:d8:e6:e8:35:3e:72:24:86: 07:59:b9:50:37:7a:db:dd:62:a0:9e:d9:c1:aa:ce: 60:73:ec:6a:29:90:c5:00:d3:e0:44:fd:43:91:91: 57:72:53:26:51:9d:a4:00:70:4a:be:53:87:56:ae: 12:4e:e2:0e:1d:f3:0a:1f:b8:41:19:6f:c4:21:41: cd:aa:33:aa:49:83:b7:cf:bd:57:f9:08:a3:a3:06: 86:93:7d:db:5a:fe:42:2b:46:fe:99:7c:3a:0d:41: 83:d2:d7:27:cb:d8:36:4d:08:a0:1c:68:dd:b9:c3: 4e:2e:4a:c9:96:dd:f4:10:33:36:ee:0d:ae:b4:dc: 13:a9:c7:37:9e:94:7d:24:9d:1f:6c:4b:a0:f4:a6: d7:e7:d5:db:26:8e:1e:36:29:c3:e2:2a:08:38:c6: 23:30:04:3b:20:24:d6:ef:70:ba:e4:b3:5b:e0:be: 06:92:2f:88:99:a2:4d:ca:e7:14:ab:bc:21:d4:c3: d4:5a:36:a0:fc:37:5a:52:14:11:57:64:6d:a8:69: 4f:e9:5f:a5:6d:31:e5:cf:29:7f:a7:13:78:2a:56: a0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B1:A1:31:BA:5B:7A:03:91:05:9D:6A:8B:BE:E9:21:A9:F5:4D:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl X509v3 Authority Key Identifier: keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:faca:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:5b:5c:39:4e:b9:bc:f5:02:ea:74:13:c5:f8:f0:93:e3:2d: ec:1e:fa:c2:f1:68:42:7a:ed:6d:6a:e6:cd:f2:9d:3b:d0:f6: 91:9a:2f:0f:26:17:fe:49:c7:de:8c:da:28:73:3f:31:65:be: f9:1b:ed:31:51:9d:9d:19:35:2a:37:55:f4:44:53:bc:3a:5c: e5:00:4e:78:2e:46:96:7a:35:75:3b:3e:7e:86:85:2c:78:c3: 39:e2:ad:07:36:b6:f3:bf:9c:6e:4e:e4:86:06:1d:96:2c:a8: 22:f3:09:7e:9b:81:da:4f:52:af:dc:51:4b:af:da:60:cb:84: 94:97:57:2d:57:f5:4b:b9:23:98:ed:9d:84:09:71:5d:88:75: 1f:d1:e3:b5:38:cb:2f:2b:b1:01:24:c8:31:6e:df:c6:eb:f9: 4e:4e:1e:80:4a:fd:2b:75:82:ca:44:f9:0e:dc:7c:52:57:b0: 1c:5c:64:95:bd:30:dc:f0:d5:94:3e:a4:54:d9:b1:09:47:a1: 4c:d3:82:b0:1a:ca:4e:7a:36:20:bc:25:cd:57:dc:ee:25:d7: 0c:be:d6:fe:fd:fe:9e:73:3b:94:41:af:d7:6a:a9:64:82:f1: c1:39:0d:4d:57:57:45:90:81:da:e8:ef:7a:32:7d:b2:15:0d: 93:df:6f:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElRnawY1Ar1gVevX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0 OWY4MB4XDTI1MDMyNjE4MzE1OVoXDTI1MDYyNDE4MzE1OVowLzEtMCsGA1UEAxMk NmQzMmFkNzEtZTNmYy00NzRhLWI4YTMtYjc4OWQwNzdhZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq973iXSp6fkn1IVdsEye5PriTlCUemIaQBE UvkkncqGDvvU2OboNT5yJIYHWblQN3rb3WKgntnBqs5gc+xqKZDFANPgRP1DkZFX clMmUZ2kAHBKvlOHVq4STuIOHfMKH7hBGW/EIUHNqjOqSYO3z71X+QijowaGk33b Wv5CK0b+mXw6DUGD0tcny9g2TQigHGjducNOLkrJlt30EDM27g2utNwTqcc3npR9 JJ0fbEug9KbX59XbJo4eNinD4ioIOMYjMAQ7ICTW73C65LNb4L4Gki+ImaJNyucU q7wh1MPUWjag/DdaUhQRV2RtqGlP6V+lbTHlzyl/pxN4Klag9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCGxoTG6W3oDkQWdaou+6SGp9U3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvMWRiNTlhZGYtMWMzZi0z MDVkLWJhMTEtN2NmZDAxZmMyNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4 NjM0YTQ5ZjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6ygEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIRbXDlOubz1Aup0E8X48JPjLewe+sLxaEJ67W1q5s3ynTvQ9pGa Lw8mF/5Jx96M2ihzPzFlvvkb7TFRnZ0ZNSo3VfREU7w6XOUATnguRpZ6NXU7Pn6G hSx4wznirQc2tvO/nG5O5IYGHZYsqCLzCX6bgdpPUq/cUUuv2mDLhJSXVy1X9Uu5 I5jtnYQJcV2IdR/R47U4yy8rsQEkyDFu38br+U5OHoBK/St1gspE+Q7cfFJXsBxc ZJW9MNzw1ZQ+pFTZsQlHoUzTgrAayk56NiC8Jc1X3O4l1wy+1v79/p5zO5RBr9dq qWSC8cE5DU1XV0WQgdro73oyfbIVDZPfb0o= -----END CERTIFICATE-----Generated at Tue May 6 03:05:52 2025 by rpki-client