$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa File: d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa (raw, json) Hash identifier: GPQ2za13cX1l5lOMGmooMmi0XawyUXaYM9yHEKhvHlk= Subject key identifier: CA:0C:67:9F:FA:06:67:96:89:E8:A5:14:04:33:8B:F2:65:FB:20:BD Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F43285849780F10D853BB24FE05019180 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 2610:e8:3180::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:10:d8:53:bb:24:fe:05:01:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=83a08332-d6a4-4e79-9707-c445ec68159e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3b:72:bc:84:64:7e:56:1b:18:e0:7a:ff:c4: a6:46:57:52:cf:a2:c2:50:5d:84:44:fe:32:73:9d: 53:3e:6a:cb:6d:c4:a8:74:b8:cc:30:ca:38:96:6b: f1:dd:56:2e:41:ee:1c:74:36:41:c6:96:bd:33:3d: bb:7c:c4:9e:e8:ed:3f:63:6f:ce:dc:41:8c:dc:6d: 18:d4:12:ad:e7:b9:47:20:fa:a5:67:3d:b8:0f:78: 73:49:68:50:7d:5d:3a:4d:72:ef:0a:35:69:8a:71: b8:62:40:0e:2e:b7:7c:f5:1e:91:5f:e6:50:af:71: cb:e4:6a:4d:a6:05:0e:43:e1:a7:8e:d6:83:b5:10: 6d:20:ff:40:b9:15:86:71:2d:1a:9f:07:1c:48:96: 2d:94:a3:33:8f:6e:c5:c5:54:6f:44:be:d4:07:a1: 1b:92:84:ee:ab:8a:56:d2:9c:07:3d:21:28:60:bb: 4b:b8:79:ee:fe:a2:5a:71:86:43:dd:16:98:22:5c: a0:b4:ac:76:06:ce:34:d1:21:e2:c8:6e:1a:aa:75: 49:ff:78:6b:e6:9d:d3:aa:80:3e:d2:ff:f7:13:04: 5e:c3:4f:d0:1f:bb:10:50:9b:f6:91:f9:0c:22:d2: 16:9c:19:35:18:21:99:1d:b7:c4:df:36:42:c7:68: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0C:67:9F:FA:06:67:96:89:E8:A5:14:04:33:8B:F2:65:FB:20:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv6: 2610:e8:3180::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:1c:ec:f6:9b:d1:5c:36:0a:44:54:3f:de:fe:6b:42:12:42: 3a:a1:29:cb:23:a6:b3:3e:83:b4:61:dc:92:88:57:d8:42:95: 56:04:14:cc:e9:36:fa:59:f1:e7:24:de:20:4c:ce:47:c2:30: a7:c4:9d:3d:83:09:9e:2b:2b:c7:1b:80:3b:b1:66:eb:bd:75: 7b:76:e5:a0:c7:9c:97:d0:25:77:62:bc:4b:77:77:6f:a0:a0: 8e:e8:9f:db:6f:42:43:b0:c3:dc:7e:db:11:66:a0:ab:57:1c: 43:80:41:d8:83:a2:7e:76:73:d6:a7:01:65:2a:1b:18:e0:c0: 32:cc:de:1f:0c:86:ba:a4:7d:82:ea:c5:12:a5:69:86:fe:46: 7b:38:ba:7a:71:77:02:f3:94:d3:9c:ce:cc:59:fa:08:48:cc: da:89:b3:59:8c:5d:3c:c0:9a:32:d6:92:7c:46:30:9f:18:99: 2d:54:93:9c:4b:85:c4:16:b7:a4:2a:c8:4a:8b:6f:41:72:fe: b5:26:33:e1:58:5b:34:65:e8:7d:41:7e:aa:b0:5a:cd:69:b0: 55:e3:42:60:16:fe:53:c6:5b:3c:a7:26:9c:8b:3d:1a:cf:77: ec:1a:28:b9:3a:a8:1b:72:ab:9c:3c:af:d2:f2:bc:64:75:c3: 77:79:49:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl4DxDYU7sk/gUBkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk ODNhMDgzMzItZDZhNC00ZTc5LTk3MDctYzQ0NWVjNjgxNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDtyvIRkflYbGOB6/8SmRldSz6LCUF2ERP4y c51TPmrLbcSodLjMMMo4lmvx3VYuQe4cdDZBxpa9Mz27fMSe6O0/Y2/O3EGM3G0Y 1BKt57lHIPqlZz24D3hzSWhQfV06TXLvCjVpinG4YkAOLrd89R6RX+ZQr3HL5GpN pgUOQ+GnjtaDtRBtIP9AuRWGcS0anwccSJYtlKMzj27FxVRvRL7UB6EbkoTuq4pW 0pwHPSEoYLtLuHnu/qJacYZD3RaYIlygtKx2Bs400SHiyG4aqnVJ/3hr5p3TqoA+ 0v/3EwRew0/QH7sQUJv2kfkMItIWnBk1GCGZHbfE3zZCx2isiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMoMZ5/6BmeWieilFAQzi/Jl+yC9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvZDA0ZGQ2ZjUtMzBmYi0z YmQ4LTkxNzgtMmVmNzBkMGFjZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAA6DGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI8c7Pab0Vw2CkRUP97+a0ISQjqhKcsjprM+g7Rh3JKIV9hClVYE FMzpNvpZ8eck3iBMzkfCMKfEnT2DCZ4rK8cbgDuxZuu9dXt25aDHnJfQJXdivEt3 d2+goI7on9tvQkOww9x+2xFmoKtXHEOAQdiDon52c9anAWUqGxjgwDLM3h8Mhrqk fYLqxRKlaYb+Rns4unpxdwLzlNOczsxZ+ghIzNqJs1mMXTzAmjLWknxGMJ8YmS1U k5xLhcQWt6QqyEqLb0Fy/rUmM+FYWzRl6H1BfqqwWs1psFXjQmAW/lPGWzynJpyL PRrPd+waKLk6qBtyq5w8r9LyvGR1w3d5Sdw= -----END CERTIFICATE-----Generated at Mon May 5 14:23:58 2025 by rpki-client