$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/cb112d74-f99a-31dc-a229-9acf30983099.roa File: cb112d74-f99a-31dc-a229-9acf30983099.roa (raw, json) Hash identifier: vAu2SFFeoF1GHtoD2Opr2tlxzvBJXlEXJTYVQCaxDUo= Subject key identifier: A8:2F:59:17:81:2E:E2:CA:12:0E:F2:8D:74:25:37:30:F7:B2:F3:E2 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584950F96455CE61F1BB41FFBE00 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/cb112d74-f99a-31dc-a229-9acf30983099.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 16509 IP address blocks: 2620:116:800b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:64:55:ce:61:f1:bb:41:ff:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=e6268c3e-0f64-47fb-9406-80b9af6f0120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:96:79:73:00:cd:a2:ae:53:a0:03:a8:e0: 58:00:99:15:79:bf:b7:70:8f:6b:e2:f8:d4:e1:aa: 6c:49:b9:d9:f5:63:03:fa:89:19:31:d0:5a:12:08: 6a:a2:28:4a:7a:52:3a:2c:7c:0e:e7:eb:29:c4:cd: aa:5f:a9:59:92:9f:17:cd:88:90:b2:b0:e8:c6:7a: ec:e2:a4:ff:21:d2:38:98:83:55:b7:40:3b:ae:fd: 88:94:10:05:bf:48:c0:3c:6e:c6:ad:f0:53:b6:16: d1:11:3c:c3:88:d6:4a:be:e3:5a:f8:b4:11:57:30: dc:53:0a:af:79:89:62:eb:bf:24:bc:df:85:84:e2: 4c:66:5f:31:8d:70:82:7c:95:d4:c6:57:83:d5:a2: ac:9a:5b:79:4c:d3:fc:a9:50:cd:93:69:08:2c:2b: c5:9c:43:38:a5:e4:64:4c:af:12:c2:20:7a:c0:ec: f1:35:81:97:59:75:fd:73:ee:d1:79:7d:e6:cb:c0: ee:eb:0f:2b:96:e7:c5:2d:d7:df:00:da:d1:9c:91: 35:d0:a0:11:c3:95:15:64:8c:22:9d:db:7a:fd:d0: 46:b7:2f:08:b2:24:de:3b:50:81:94:2a:4a:43:17: 65:b7:63:93:b0:f9:22:a4:9d:fb:b5:42:7e:9b:33: 75:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2F:59:17:81:2E:E2:CA:12:0E:F2:8D:74:25:37:30:F7:B2:F3:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/cb112d74-f99a-31dc-a229-9acf30983099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:be:1d:f2:25:f4:ba:ed:e5:3d:d8:4e:28:7d:ed:a0:09:7e: 2d:63:d7:cf:81:43:a5:d6:5b:20:e6:51:c2:b2:33:80:bc:27: 7f:3a:6b:e4:b6:b3:66:12:16:0b:54:80:1a:d1:81:85:53:8f: 57:4d:fa:61:21:1e:d0:a0:05:b3:92:ab:7a:52:29:5c:38:c7: 61:1f:42:1f:14:b8:4f:15:1d:33:e6:5b:47:c9:41:d3:62:d1: ab:28:6a:49:24:71:55:40:c6:83:85:1b:e9:e3:3d:c7:09:78: 5e:64:02:36:62:c9:51:11:80:92:95:11:c3:fd:03:73:5b:c9: 6f:09:2f:8e:9d:40:36:be:f7:f8:26:d9:ae:a1:96:2a:f8:5b: bc:04:ad:e3:8c:15:08:b1:37:93:7e:7b:34:de:d1:77:c2:d9: ef:2e:41:de:2e:6c:ca:74:0b:40:88:92:c7:8a:25:04:94:1f: 00:97:76:dd:ac:0d:25:f4:ec:2b:b7:f1:59:55:74:96:24:6a: 75:3b:fd:f9:45:30:49:f7:5c:5b:04:4c:88:50:e2:fd:f4:0e: 1e:a2:b2:98:7c:d6:8c:c1:d1:0c:53:80:8f:1b:45:a2:3d:3e: da:6b:cd:2a:08:44:79:1e:d0:0d:6b:38:59:ab:5e:84:62:86: e7:b2:22:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElQ+WRVzmHxu0H/vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk ZTYyNjhjM2UtMGY2NC00N2ZiLTk0MDYtODBiOWFmNmYwMTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTqWeXMAzaKuU6ADqOBYAJkVeb+3cI9r4vjU 4apsSbnZ9WMD+okZMdBaEghqoihKelI6LHwO5+spxM2qX6lZkp8XzYiQsrDoxnrs 4qT/IdI4mINVt0A7rv2IlBAFv0jAPG7GrfBTthbRETzDiNZKvuNa+LQRVzDcUwqv eYli678kvN+FhOJMZl8xjXCCfJXUxleD1aKsmlt5TNP8qVDNk2kILCvFnEM4peRk TK8SwiB6wOzxNYGXWXX9c+7ReX3my8Du6w8rlufFLdffANrRnJE10KARw5UVZIwi ndt6/dBGty8IsiTeO1CBlCpKQxdlt2OTsPkipJ37tUJ+mzN1HwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKgvWReBLuLKEg7yjXQlNzD3svPiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvY2IxMTJkNzQtZjk5YS0z MWRjLWEyMjktOWFjZjMwOTgzMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFe+HfIl9Lrt5T3YTih97aAJfi1j18+BQ6XWWyDmUcKyM4C8J386 a+S2s2YSFgtUgBrRgYVTj1dN+mEhHtCgBbOSq3pSKVw4x2EfQh8UuE8VHTPmW0fJ QdNi0asoakkkcVVAxoOFG+njPccJeF5kAjZiyVERgJKVEcP9A3NbyW8JL46dQDa+ 9/gm2a6hlir4W7wEreOMFQixN5N+ezTe0XfC2e8uQd4ubMp0C0CIkseKJQSUHwCX dt2sDSX07Cu38VlVdJYkanU7/flFMEn3XFsETIhQ4v30Dh6isph81ozB0QxTgI8b RaI9PtprzSoIRHke0A1rOFmrXoRihueyIo0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:34 2025 by rpki-client