$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa File: 503a28c0-4f23-38d6-94cd-f22d4c077e71.roa (raw, json) Hash identifier: RySO9CdZtctp4Cn8NUhJ4jOQkVT7yP1SwKwS1Sd9W1Q= Subject key identifier: DA:A2:35:5D:78:D3:E6:19:76:F3:DF:99:8E:DC:3C:E8:B4:81:16:8E Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F43285849446931A6EE9CBDE8460A6D80 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 30242 IP address blocks: 2620:84:c000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:31:a6:ee:9c:bd:e8:46:0a:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=35b1b3a4-f47b-48d9-a1af-735b98c5603d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:36:8d:56:e9:d8:90:34:f2:90:6c:bc:9b:37: 6d:5c:7e:a5:24:95:b5:23:64:25:9a:44:48:54:e9: d6:dc:28:76:05:4c:6c:24:13:9e:59:54:77:41:80: c3:3f:fd:45:57:31:ad:bc:3b:cd:5b:25:eb:c3:81: 3d:f1:2e:56:33:71:97:d7:58:f1:0d:f2:15:3d:bc: ab:55:10:69:1f:a4:3a:b6:24:4c:21:79:18:a6:53: f4:fb:3c:2d:47:c9:0a:3b:99:95:a0:79:75:ef:df: c4:a2:e0:0a:38:31:3f:fb:17:cd:81:ed:eb:d6:4c: 42:b6:5a:3c:2d:4a:f1:74:b8:b4:71:23:71:43:20: 39:3e:fa:6c:0c:ff:17:eb:69:52:14:e7:c2:91:4f: 55:21:9b:5d:7a:04:1a:7c:19:a6:95:2c:33:65:a7: 7f:6a:ec:4e:53:34:45:93:42:c7:6e:8e:9f:a3:19: c3:f0:c0:1f:fb:bd:f4:fb:e8:94:46:e1:9a:80:48: 2d:75:78:91:cf:dc:36:4d:c6:ad:a3:80:fe:2d:75: d8:62:12:46:86:1b:20:96:cc:9a:0a:82:23:00:af: b4:b0:ba:59:cc:6b:33:c9:69:fa:51:ae:04:1a:80: a4:32:8b:2e:a3:a5:54:0b:59:28:da:f6:b2:c8:67: e4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A2:35:5D:78:D3:E6:19:76:F3:DF:99:8E:DC:3C:E8:B4:81:16:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv6: 2620:84:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:b8:72:dd:2e:96:5a:5b:90:52:28:ff:0a:ad:62:d6:c2:1d: dc:58:37:46:6c:89:a3:61:d0:3e:73:f9:f3:ee:df:5d:6b:5b: 37:00:bc:19:42:48:a7:cf:06:ce:df:7e:2f:a6:dd:6b:dc:53: d3:1d:89:8e:a7:ff:8c:7b:db:e3:9e:fc:97:8c:40:85:aa:4c: d7:af:d5:e3:6c:54:fa:9a:96:65:cf:bb:b0:c0:d9:2a:82:ab: d2:12:77:a6:76:47:63:6d:c6:4d:a6:e3:c7:9b:28:20:0a:48: 5f:20:62:ae:ea:2a:0e:32:b4:22:18:44:f5:90:a4:1d:84:de: 72:ca:18:31:0c:ed:60:97:00:73:59:db:c4:7f:cd:a9:3c:9d: 31:3b:3e:81:a9:a7:c7:f3:25:5c:3b:0c:87:a1:af:83:0a:b3: 3f:1f:df:cb:e8:f7:71:dd:31:82:aa:93:3a:11:2e:09:8e:75: c1:ac:a7:80:dd:2f:52:fe:32:b8:6f:55:b6:ba:81:41:40:d3: c1:3d:c5:05:dc:63:9d:ed:1e:7b:27:b7:e2:39:1f:3d:bf:bd: 05:a1:b2:b2:4c:e4:11:3d:2e:82:14:b8:cd:06:5b:09:da:3c: 3f:0d:38:0e:8d:2b:65:ea:c7:53:7f:7c:ed:b7:9a:7c:bc:48: c8:ea:d4:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaTGm7py96EYKbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MzViMWIzYTQtZjQ3Yi00OGQ5LWExYWYtNzM1Yjk4YzU2MDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTaNVunYkDTykGy8mzdtXH6lJJW1I2QlmkRI VOnW3Ch2BUxsJBOeWVR3QYDDP/1FVzGtvDvNWyXrw4E98S5WM3GX11jxDfIVPbyr VRBpH6Q6tiRMIXkYplP0+zwtR8kKO5mVoHl179/EouAKODE/+xfNge3r1kxCtlo8 LUrxdLi0cSNxQyA5PvpsDP8X62lSFOfCkU9VIZtdegQafBmmlSwzZad/auxOUzRF k0LHbo6foxnD8MAf+730++iURuGagEgtdXiRz9w2Tcato4D+LXXYYhJGhhsglsya CoIjAK+0sLpZzGszyWn6Ua4EGoCkMosuo6VUC1ko2vayyGfk/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNqiNV140+YZdvPfmY7cPOi0gRaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvNTAzYTI4YzAtNGYyMy0z OGQ2LTk0Y2QtZjIyZDRjMDc3ZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAhMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJO4ct0ullpbkFIo/wqtYtbCHdxYN0ZsiaNh0D5z+fPu311rWzcA vBlCSKfPBs7ffi+m3WvcU9MdiY6n/4x72+Oe/JeMQIWqTNev1eNsVPqalmXPu7DA 2SqCq9ISd6Z2R2Ntxk2m48ebKCAKSF8gYq7qKg4ytCIYRPWQpB2E3nLKGDEM7WCX AHNZ28R/zak8nTE7PoGpp8fzJVw7DIehr4MKsz8f38vo93HdMYKqkzoRLgmOdcGs p4DdL1L+MrhvVba6gUFA08E9xQXcY53tHnsnt+I5Hz2/vQWhsrJM5BE9LoIUuM0G WwnaPD8NOA6NK2Xqx1N/fO23mny8SMjq1Io= -----END CERTIFICATE-----Generated at Sat Apr 5 12:34:36 2025 by rpki-client