$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ddf0459-f843-3d0f-bc57-57c25281c308.roa File: 3ddf0459-f843-3d0f-bc57-57c25281c308.roa (raw, json) Hash identifier: qsxtyYEOlRgBC6QIqaoBI1dq8tMqIGul0R2l3dC6kr0= Subject key identifier: 8A:7E:CE:A0:44:0E:FE:8B:CA:13:59:AD:F9:FE:76:68:0E:E8:E7:D3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA6D9FB2DC47EA4400CB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ddf0459-f843-3d0f-bc57-57c25281c308.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396571 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:6d:9f:b2:dc:47:ea:44:00:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=1bc5e806-39c1-4cc0-ad5a-10567a372e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cd:2d:6d:d9:9b:87:bf:20:60:e6:b2:04:f6: 65:f0:da:28:11:5d:84:cf:0c:eb:59:9d:fa:01:3c: 37:6c:01:10:4d:6c:45:13:ff:67:d6:c9:84:8d:35: 6f:cc:0c:7a:c3:55:0e:d4:2c:6b:c7:f2:61:c1:0d: 37:de:ef:99:56:82:69:32:3b:c0:07:22:23:6d:7b: 48:ea:f5:d8:02:74:19:0c:6e:04:62:e5:97:da:46: d8:d2:3d:79:ae:e1:a3:4c:4b:dd:78:6a:32:06:70: d7:13:12:1e:51:ee:c0:84:f2:81:8c:5c:92:47:2c: a8:bf:c1:c4:33:57:9f:6d:57:12:4d:f9:8a:04:e7: 70:15:52:ed:08:be:2c:86:fb:30:79:dd:a0:92:22: 4d:cf:18:1d:f1:39:bc:db:65:ad:3c:c0:9b:f6:e7: 92:a0:d3:ef:9f:23:2a:a5:c4:61:7d:48:ab:ff:13: 0a:ac:13:50:d0:c9:be:dc:c6:57:b9:c8:3a:08:8f: b9:78:d0:b5:bb:4c:39:9a:42:cc:3c:c6:f2:35:cf: 85:03:43:ba:e9:a6:1f:9c:f0:a4:69:63:e2:a9:b4: 75:9d:98:23:96:e9:fc:7e:74:91:eb:ce:c1:88:d2: 4f:6b:be:54:79:6a:1e:df:58:cc:72:c4:11:39:18: f9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7E:CE:A0:44:0E:FE:8B:CA:13:59:AD:F9:FE:76:68:0E:E8:E7:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ddf0459-f843-3d0f-bc57-57c25281c308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f0:8c:40:27:29:26:55:b4:47:a4:61:9a:9c:31:ad:57:1e: ee:71:d2:16:2d:3d:69:46:4b:8b:b3:ce:3c:73:3a:39:72:0c: 43:18:98:98:06:b0:71:a9:1b:0d:df:f8:cc:de:a5:89:2a:d1: 57:cc:5e:0f:bf:30:87:17:ca:16:d0:6e:b0:83:1e:f9:ae:e0: c2:e0:65:d3:39:0e:9b:71:4b:62:1d:b0:fc:92:bf:46:50:c0: b3:05:91:d1:d3:d2:22:44:45:a4:4a:0d:e4:bc:3e:63:26:7f: e6:d3:79:34:bf:21:37:ff:ed:99:58:56:8c:23:87:6d:08:29: 59:1d:5e:77:6a:d8:50:4a:c2:75:34:04:19:94:21:42:c6:b3: 8f:ed:4e:ec:87:84:f5:aa:d9:3a:82:8b:ab:f9:4c:03:7b:90: 03:a2:fb:04:ff:37:8d:76:6c:96:ce:6d:63:fc:6a:bb:f1:f0: 84:0e:09:0d:8d:04:61:8a:f0:c3:39:a1:fe:e5:1a:82:07:e4: 43:fc:3a:77:a0:a2:70:ab:47:f9:2a:b7:10:a5:ec:43:52:3a: 18:84:20:8a:79:98:26:eb:1f:82:dd:03:7a:81:04:b8:d7:10: e3:ce:3e:56:fd:63:32:aa:f9:28:41:3c:8f:05:e0:fd:fd:f4: 65:fd:19:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnr6m2fstxH6kQAy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MWJjNWU4MDYtMzljMS00Y2MwLWFkNWEtMTA1NjdhMzcyZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns0tbdmbh78gYOayBPZl8NooEV2EzwzrWZ36 ATw3bAEQTWxFE/9n1smEjTVvzAx6w1UO1Cxrx/JhwQ033u+ZVoJpMjvAByIjbXtI 6vXYAnQZDG4EYuWX2kbY0j15ruGjTEvdeGoyBnDXExIeUe7AhPKBjFySRyyov8HE M1efbVcSTfmKBOdwFVLtCL4shvswed2gkiJNzxgd8Tm822WtPMCb9ueSoNPvnyMq pcRhfUir/xMKrBNQ0Mm+3MZXucg6CI+5eNC1u0w5mkLMPMbyNc+FA0O66aYfnPCk aWPiqbR1nZgjlun8fnSR687BiNJPa75UeWoe31jMcsQRORj5gQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIp+zqBEDv6LyhNZrfn+dmgO6OfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2RkZjA0NTktZjg0My0z ZDBmLWJjNTctNTdjMjUyODFjMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbwjEAnKSZVtEekYZqcMa1XHu5x0hYtPWlGS4uzzjxzOjlyDEMY mJgGsHGpGw3f+MzepYkq0VfMXg+/MIcXyhbQbrCDHvmu4MLgZdM5DptxS2IdsPyS v0ZQwLMFkdHT0iJERaRKDeS8PmMmf+bTeTS/ITf/7ZlYVowjh20IKVkdXndq2FBK wnU0BBmUIULGs4/tTuyHhPWq2TqCi6v5TAN7kAOi+wT/N412bJbObWP8arvx8IQO CQ2NBGGK8MM5of7lGoIH5EP8OnegonCrR/kqtxCl7ENSOhiEIIp5mCbrH4LdA3qB BLjXEOPOPlb9YzKq+ShBPI8F4P399GX9GW8= -----END CERTIFICATE-----Generated at Fri Jun 6 19:35:29 2025 by rpki-client