$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa File: fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa (raw, json) Hash identifier: e99VFC5nc9fxHULoaqpDXPUhnncMGKmDqjeQX0hn/Ns= Subject key identifier: D3:41:F6:87:2A:25:A1:52:63:61:6F:FE:2C:D4:A4:CE:77:7E:57:6F Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F43285849B14A07054F3B5A06BA51DAE0 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 27299 IP address blocks: 2620:10a:8001::/48 maxlen: 48 2620:10a:8002::/48 maxlen: 48 2620:10a:8004::/48 maxlen: 48 2620:10a:8023::/48 maxlen: 48 2620:10a:80d1::/48 maxlen: 48 2620:10a:80d4::/48 maxlen: 48 2620:10a:80f1::/48 maxlen: 48 2620:10a:80f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:07:05:4f:3b:5a:06:ba:51:da:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=0e46cf46-b678-47b7-a4cc-84acecfd68f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f6:ab:a3:8e:0a:75:49:b3:d3:8c:de:9c:1b: 69:9f:12:9c:38:05:34:fd:c4:20:91:f4:a7:b7:01: 4b:91:27:09:84:e7:ed:60:4b:5e:53:26:84:57:fb: 3c:be:09:67:8f:d8:a8:88:7f:a9:5e:b3:8f:90:a1: d4:5d:35:c8:cf:2e:89:c6:7e:f2:9c:24:42:bd:75: 31:2d:db:c3:c3:0a:0c:d2:b6:b8:ec:56:a2:f8:1c: 13:f2:ea:1a:24:62:23:5f:06:c5:bf:ed:51:2a:ba: a5:62:6b:4f:bf:d0:52:fe:34:d6:c7:30:7d:8e:b8: f7:b6:b7:79:58:fd:14:aa:4b:84:6f:3b:26:66:6b: 27:83:aa:8e:10:f7:28:79:38:94:f8:5e:bd:fb:2d: 69:4f:5b:35:d1:18:86:72:72:ef:2f:0a:66:76:5c: 80:da:ea:5c:b5:ab:f7:b3:a2:be:2f:fb:c3:73:5f: 16:bc:3c:c6:37:82:08:50:8a:0f:52:3b:3f:b8:e3: af:ad:5e:31:00:8a:69:b9:a1:99:01:05:3e:21:dc: 03:6a:02:5a:5c:66:2b:d8:14:4b:a5:51:8a:f6:a9: fb:24:51:f4:c7:a1:66:fe:d8:b3:9c:c6:3f:be:5c: 0d:67:56:b4:aa:74:da:13:ec:4e:a5:dd:7c:5c:f2: f7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:41:F6:87:2A:25:A1:52:63:61:6F:FE:2C:D4:A4:CE:77:7E:57:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:10a:8001::-2620:10a:8002:ffff:ffff:ffff:ffff:ffff 2620:10a:8004::/48 2620:10a:8023::/48 2620:10a:80d1::/48 2620:10a:80d4::/48 2620:10a:80f1::/48 2620:10a:80f4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:fc:84:45:11:2e:c9:8f:0e:70:16:60:d0:71:c2:d3:38:0c: 81:24:42:75:98:d6:d0:ae:36:52:07:55:a0:03:86:da:e3:94: 16:fa:11:8c:4c:0b:ed:ac:08:d2:c4:0e:d5:92:9d:aa:8b:3b: db:5e:5f:eb:5e:d9:a2:5b:b5:e7:6b:67:d1:e6:7b:4f:fd:fb: 7d:cd:0c:a0:90:da:54:78:b8:e8:50:a2:f8:58:5b:c8:49:33: 1c:3e:2a:6b:dc:b4:29:76:e1:c9:a3:38:d7:ba:93:6a:30:85: 58:66:ef:57:0d:f7:3e:b1:b2:40:b0:45:a8:15:36:2c:aa:97: 6d:3d:f9:54:89:a8:29:32:a3:5a:28:23:00:43:d1:3b:35:18: 76:68:29:0d:43:64:d7:0c:4d:45:e0:61:94:67:41:59:f0:fa: 06:13:db:38:85:48:24:32:fb:46:ec:c2:af:d4:31:de:79:d5: 61:d0:e4:ca:74:ca:20:2d:69:42:2e:2f:dc:07:74:a1:82:f6: ee:95:9b:3f:24:94:8c:15:da:16:ba:ad:14:7b:fb:b1:a3:b4: 61:f3:40:ef:9f:76:09:ab:aa:ab:d0:e8:34:10:e8:f0:0c:e8: 6d:39:f4:1e:b6:5a:9c:da:19:85:89:f7:c1:4a:2a:21:55:4d: 01:23:5b:59 -----BEGIN CERTIFICATE----- MIIGhzCCBW+gAwIBAgIUAQ0Mn0MoWEmxSgcFTztaBrpR2uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MGU0NmNmNDYtYjY3OC00N2I3LWE0Y2MtODRhY2VjZmQ2OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/aro44KdUmz04zenBtpnxKcOAU0/cQgkfSn twFLkScJhOftYEteUyaEV/s8vglnj9ioiH+pXrOPkKHUXTXIzy6Jxn7ynCRCvXUx LdvDwwoM0ra47Fai+BwT8uoaJGIjXwbFv+1RKrqlYmtPv9BS/jTWxzB9jrj3trd5 WP0UqkuEbzsmZmsng6qOEPcoeTiU+F69+y1pT1s10RiGcnLvLwpmdlyA2upctav3 s6K+L/vDc18WvDzGN4IIUIoPUjs/uOOvrV4xAIppuaGZAQU+IdwDagJaXGYr2BRL pVGK9qn7JFH0x6Fm/tiznMY/vlwNZ1a0qnTaE+xOpd18XPL30QIDAQABo4IDmTCC A5UwHQYDVR0OBBYEFNNB9ocqJaFSY2Fv/izUpM53fldvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvZmE0Nzg1NzctMTllNS0z YmI2LWI3ZDgtYTJjYmNmMjVhM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAAjBKMBIDBwAmIAEK gAEDBwAmIAEKgAIDBwAmIAEKgAQDBwAmIAEKgCMDBwAmIAEKgNEDBwAmIAEKgNQD BwAmIAEKgPEDBwAmIAEKgPQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAePyERREuyY8OcBZg0HHC0zgMgSRC dZjW0K42UgdVoAOG2uOUFvoRjEwL7awI0sQO1ZKdqos7215f617Zolu152tn0eZ7 T/37fc0MoJDaVHi46FCi+FhbyEkzHD4qa9y0KXbhyaM417qTajCFWGbvVw33PrGy QLBFqBU2LKqXbT35VImoKTKjWigjAEPROzUYdmgpDUNk1wxNReBhlGdBWfD6BhPb OIVIJDL7RuzCr9Qx3nnVYdDkynTKIC1pQi4v3Ad0oYL27pWbPySUjBXaFrqtFHv7 saO0YfNA7592Cauqq9DoNBDo8AzobTn0HrZanNoZhYn3wUoqIVVNASNbWQ== -----END CERTIFICATE-----Generated at Tue May 6 11:01:24 2025 by rpki-client