$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa File: 6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa (raw, json) Hash identifier: KEP7ryXFEheRtOTzyuX9mxHA15vK/n2Bn2TnJl55u5o= Subject key identifier: E5:BE:B1:C5:AF:D2:66:9F:DF:8A:22:43:8A:DA:A3:B1:EB:AA:16:58 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F43285849C4D4C6A15F4F6F3D86852080 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 210645 IP address blocks: 2602:2c9:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c6:a1:5f:4f:6f:3d:86:85:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=124abce0-6e2e-4ee4-8209-807a960a314f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:56:a5:20:e8:5d:b8:aa:c5:03:33:68:5d: 24:2d:75:11:d0:b5:7f:2a:51:bc:47:77:c3:55:e9: a0:bc:ba:fd:c2:d9:28:67:21:78:7e:1c:c3:d8:07: 59:ba:14:6f:9e:d7:bc:f9:e3:46:ae:19:79:2e:38: 10:a6:65:53:7d:7c:3f:78:38:08:ba:57:bb:3c:99: 5d:85:f8:4a:9a:5d:d3:90:13:9e:64:b7:f2:7d:4b: 5d:c4:43:13:66:a6:7b:2b:70:d5:c9:b0:c4:fa:16: 84:17:d9:dd:6e:29:1a:e5:62:1b:08:80:87:3a:97: 0d:f8:4e:2b:b8:11:11:1a:b1:a8:96:e4:80:76:17: 9e:0e:c0:fa:77:fd:a1:a3:24:4b:b4:06:7d:89:ad: b9:97:1a:18:1f:bc:9d:5a:1a:e9:92:08:45:ca:53: e9:7d:4a:30:39:65:03:42:46:97:f6:e6:21:12:91: d3:37:81:c6:6b:d0:6f:15:c3:d9:cf:dd:8f:2e:20: 31:4f:2d:d6:74:66:30:85:c4:32:1a:04:65:c3:d4: 8c:2c:c3:98:eb:06:f6:66:ca:f8:cd:8e:ee:d1:fc: 6d:32:b3:37:5c:73:b4:33:ab:a2:34:5a:72:39:a1: 1c:5c:1a:ed:8b:b6:d9:f5:f9:ef:3e:d2:62:99:7f: cf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BE:B1:C5:AF:D2:66:9F:DF:8A:22:43:8A:DA:A3:B1:EB:AA:16:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:cc:f5:fa:cb:e7:d0:f2:65:bc:9e:25:65:4c:0b:15:ff:32: ac:9a:8a:11:ce:51:4d:8e:71:62:1a:68:8e:63:4a:64:86:b8: d7:d1:cd:f5:4d:81:be:ef:99:ec:91:ba:cc:17:22:ce:b6:8d: be:fb:57:45:dd:9d:f8:5b:09:5b:0d:95:4e:35:52:06:7e:cf: a6:c9:84:fb:dd:88:d5:f6:56:8b:64:52:b9:dc:c6:24:81:c3: d2:ec:fa:94:5f:1f:c8:42:23:19:e7:af:75:57:1d:0d:49:37: d0:d3:a3:a2:7c:ee:81:d2:d1:6b:83:e2:47:cf:d9:30:a4:9f: f6:6b:70:73:2f:52:a6:ac:a6:ba:4f:e7:ff:94:fd:5f:46:5c: e8:02:de:fc:6d:89:9e:88:b0:6f:2a:ec:f2:97:f1:41:98:42: 3b:94:83:ac:73:7c:f9:de:d9:e6:e8:7f:bf:63:2b:f6:cb:3c: 9c:f1:69:db:58:1e:c8:c8:af:b3:51:07:05:05:31:da:12:83: e6:1b:4b:62:9f:89:08:36:d0:41:67:1b:5a:c4:fe:ab:9b:21: 8b:9c:3c:ca:71:60:73:45:8e:43:79:0f:74:ce:c7:6c:11:23: ab:13:87:4d:10:20:5e:d2:76:3c:31:19:b2:00:2d:b8:2a:76: c9:fe:c0:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnE1MahX09vPYaFIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MTI0YWJjZTAtNmUyZS00ZWU0LTgyMDktODA3YTk2MGEzMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRpWpSDoXbiqxQMzaF0kLXUR0LV/KlG8R3fD VemgvLr9wtkoZyF4fhzD2AdZuhRvnte8+eNGrhl5LjgQpmVTfXw/eDgIule7PJld hfhKml3TkBOeZLfyfUtdxEMTZqZ7K3DVybDE+haEF9ndbika5WIbCICHOpcN+E4r uBERGrGoluSAdheeDsD6d/2hoyRLtAZ9ia25lxoYH7ydWhrpkghFylPpfUowOWUD QkaX9uYhEpHTN4HGa9BvFcPZz92PLiAxTy3WdGYwhcQyGgRlw9SMLMOY6wb2Zsr4 zY7u0fxtMrM3XHO0M6uiNFpyOaEcXBrti7bZ9fnvPtJimX/PAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOW+scWv0maf34oiQ4rao7HrqhZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvNjQzOGI0ZjAtNjQ1Ny0z YjRhLWFkZDktNzhiNWVjNTdiMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHM9frL59DyZbyeJWVMCxX/MqyaihHOUU2OcWIaaI5jSmSGuNfR zfVNgb7vmeyRuswXIs62jb77V0XdnfhbCVsNlU41UgZ+z6bJhPvdiNX2VotkUrnc xiSBw9Ls+pRfH8hCIxnnr3VXHQ1JN9DTo6J87oHS0WuD4kfP2TCkn/ZrcHMvUqas prpP5/+U/V9GXOgC3vxtiZ6IsG8q7PKX8UGYQjuUg6xzfPne2ebof79jK/bLPJzx adtYHsjIr7NRBwUFMdoSg+YbS2KfiQg20EFnG1rE/qubIYucPMpxYHNFjkN5D3TO x2wRI6sTh00QIF7SdjwxGbIALbgqdsn+wAI= -----END CERTIFICATE-----Generated at Sat May 10 03:36:59 2025 by rpki-client