$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa File: aaf7d372-4189-3790-9dca-61a125a2f0df.roa (raw, json) Hash identifier: elz2OfD8/hpqd9YuQ9og9MOkqaU+RuyV6Paj9tC12r8= Subject key identifier: 97:9A:9F:C2:E3:9B:BD:02:53:C8:BC:56:A9:0E:08:ED:41:78:40:E2 Certificate issuer: /CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Certificate serial: 010D0C9F43285849D594E69D8879CAAAEB7686C0 Authority key identifier: 4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 395184 IP address blocks: 2620:0:950::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e6:9d:88:79:ca:aa:eb:76:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=076d26aa-c7e5-468f-a560-eb389fe93996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:cb:a4:6a:3f:b6:54:67:25:df:5f:af:f9: ab:ef:ee:da:68:ce:23:14:64:a2:06:d5:05:6b:ce: 36:32:fd:3c:81:00:71:ae:1e:55:c3:e2:2d:82:bf: 78:b8:ce:74:9f:e4:45:c7:e1:94:b3:f0:16:91:fa: 68:d5:55:b4:7f:03:ec:d0:22:ba:e7:02:09:c4:cf: 89:f1:ef:18:00:04:01:b7:2f:e2:94:17:c2:fc:1f: 2a:6e:68:2a:56:11:6b:df:7b:ae:8a:e8:11:ae:82: 1d:63:53:b5:5c:c7:9f:56:62:56:20:cf:80:0d:62: a2:27:c9:7d:b6:b2:c6:e3:5c:65:9a:02:77:41:75: 5a:0e:28:a2:c2:b5:ba:d6:b3:63:76:1d:08:23:1a: 05:09:02:94:74:7b:fd:2a:e8:51:e7:9c:b6:12:e4: e6:e9:97:64:a6:c4:ac:66:bc:0b:b2:1d:cd:da:ea: 4b:f7:37:23:56:c7:c1:37:1a:04:4f:29:31:eb:cf: b9:36:21:53:95:2d:7f:03:00:d9:ac:35:02:ff:09: 65:dd:db:72:05:61:62:84:9b:ae:1e:c0:6d:76:fd: c0:f2:aa:88:dc:3c:66:1e:9d:88:9a:35:bb:36:06: 0d:f1:03:24:8c:0d:e4:a3:44:62:fd:7a:5a:a1:3c: 7f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9A:9F:C2:E3:9B:BD:02:53:C8:BC:56:A9:0E:08:ED:41:78:40:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl X509v3 Authority Key Identifier: keyid:4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:950::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:07:1a:d4:9b:36:f6:c9:7f:93:a0:45:d6:d4:a9:7f:98:71: c4:4e:74:a8:16:50:56:97:d6:42:92:c5:f9:9e:f2:73:0a:38: 8b:32:76:01:dc:ce:a5:96:2d:e1:d6:20:68:93:69:70:88:cd: 8d:ec:9e:aa:f9:e7:34:8a:f7:ef:1c:4f:57:b1:3c:58:41:f9: af:fd:70:50:d7:44:dc:b8:24:d9:b3:b9:54:80:4e:84:61:83: 61:6f:0a:a3:91:77:f6:aa:9e:99:d1:f0:23:8c:d6:c1:14:6c: c0:62:07:84:53:e5:46:df:ff:c4:c1:97:e5:52:1b:61:d4:3d: ea:ed:3b:b6:37:49:92:a7:06:c9:41:4a:39:58:74:46:07:46: 92:60:5a:cb:35:35:ee:82:e0:9e:b2:55:71:0a:a0:8b:94:59: 58:e7:42:4e:35:13:50:11:6b:93:f7:ad:da:28:84:b8:91:40: fe:6a:1c:ff:4d:93:86:76:ef:9f:42:bc:2c:0e:41:29:b3:fb: 52:4a:3c:d3:43:c3:5f:1a:68:e5:3b:fd:3c:58:c5:99:3d:a6: dc:52:b5:04:57:64:33:5d:ec:29:1a:07:a4:1e:05:b0:9c:f4: 70:25:b3:59:b6:ff:14:84:2d:21:bb:5a:0c:d5:e8:e5:d9:19: e4:0f:39:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnVlOadiHnKqut2hsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmYTc0N2YtMGU1My00NjU0LTkxM2QtZWJlNGFlOGY0 NTNiMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MDc2ZDI2YWEtYzdlNS00NjhmLWE1NjAtZWIzODlmZTkzOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuzLpGo/tlRnJd9fr/mr7+7aaM4jFGSiBtUF a842Mv08gQBxrh5Vw+Itgr94uM50n+RFx+GUs/AWkfpo1VW0fwPs0CK65wIJxM+J 8e8YAAQBty/ilBfC/B8qbmgqVhFr33uuiugRroIdY1O1XMefVmJWIM+ADWKiJ8l9 trLG41xlmgJ3QXVaDiiiwrW61rNjdh0IIxoFCQKUdHv9KuhR55y2EuTm6ZdkpsSs ZrwLsh3N2upL9zcjVsfBNxoETykx68+5NiFTlS1/AwDZrDUC/wll3dtyBWFihJuu HsBtdv3A8qqI3DxmHp2ImjW7NgYN8QMkjA3ko0Ri/XpaoTx/cwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJean8Ljm70CU8i8VqkOCO1BeEDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Zh NzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0YWU4ZjQ1M2IvYWFmN2QzNzItNDE4OS0z NzkwLTlkY2EtNjFhMTI1YTJmMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNmYTc0N2YtMGU1My00NjU0LTkx M2QtZWJlNGFlOGY0NTNiLzIzZmE3NDdmLTBlNTMtNDY1NC05MTNkLWViZTRhZThm NDUzYi5jcmwwHwYDVR0jBBgwFoAUSwdwRApk96QQSipYgQSFwcmx7kUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2ZhNzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0 YWU4ZjQ1M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAlQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB0HGtSbNvbJf5OgRdbUqX+YccROdKgWUFaX1kKSxfme8nMKOIsy dgHczqWWLeHWIGiTaXCIzY3snqr55zSK9+8cT1exPFhB+a/9cFDXRNy4JNmzuVSA ToRhg2FvCqORd/aqnpnR8COM1sEUbMBiB4RT5Ubf/8TBl+VSG2HUPertO7Y3SZKn BslBSjlYdEYHRpJgWss1Ne6C4J6yVXEKoIuUWVjnQk41E1ARa5P3rdoohLiRQP5q HP9Nk4Z2759CvCwOQSmz+1JKPNNDw18aaOU7/TxYxZk9ptxStQRXZDNd7CkaB6Qe BbCc9HAls1m2/xSELSG7WgzV6OXZGeQPObE= -----END CERTIFICATE-----Generated at Mon Jun 9 07:13:30 2025 by rpki-client