$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83de6d87-6d27-3095-ad9e-0821ed09d617.roa File: 83de6d87-6d27-3095-ad9e-0821ed09d617.roa (raw, json) Hash identifier: ohJFY9wXNstVxWFy1tf1AGcXYyO4xxWBisp51E9L7JY= Subject key identifier: 2D:C3:0F:E2:53:71:FC:4C:52:E0:F3:A5:E6:56:3E:E8:C5:55:04:40 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA64031E4CC10ED2FFF100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83de6d87-6d27-3095-ad9e-0821ed09d617.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396564 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:64:03:1e:4c:c1:0e:d2:ff:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=2a28ae13-abbd-4e13-a654-3d70876621d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:df:5a:6d:82:cd:c4:b9:3b:a4:35:ea:b0: 47:84:54:98:de:b8:5a:e7:e5:d3:42:e8:da:e5:d0: 5a:7b:a6:01:78:c0:df:c7:8a:e1:9f:b9:85:22:de: 22:52:f7:f4:74:b3:ec:7a:62:da:5d:e5:b9:34:13: ce:38:54:05:92:67:a9:fb:95:e9:7a:be:26:fa:af: 93:81:96:fb:f7:54:cd:7e:e3:50:17:a2:76:3f:e4: ad:63:4c:14:b3:63:a6:14:f4:04:93:23:7a:70:f1: 42:b9:d1:1b:55:8f:56:1b:41:6f:60:68:19:04:6b: 9b:8f:f0:db:f4:a7:02:7e:bb:19:3f:d5:a5:71:e3: 5c:b2:4b:96:6a:20:f7:c7:ff:4a:bb:4c:72:b8:d0: 71:00:b5:6d:51:09:1b:f6:21:36:94:13:d1:9b:6d: 45:4a:95:bb:ae:2e:0a:b4:51:1c:0e:6a:2f:87:19: 52:5c:01:dd:0d:20:e4:f9:f2:0d:25:cf:54:55:2a: 0e:8e:53:e4:0e:a6:ce:91:ae:76:2a:d0:36:c7:50: 63:28:1e:02:54:6e:c8:1f:80:d6:b2:14:b2:a9:3e: 77:78:9c:d1:73:7b:32:d8:34:9b:6e:12:3f:36:37: 75:4f:de:5b:a5:bd:15:38:b5:a3:27:f0:6e:71:0b: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C3:0F:E2:53:71:FC:4C:52:E0:F3:A5:E6:56:3E:E8:C5:55:04:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83de6d87-6d27-3095-ad9e-0821ed09d617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:86:58:f2:3a:da:30:12:9f:5e:d9:16:75:f5:3a:5f:22:ca: 8f:83:3a:1f:b9:8a:f0:9e:b2:d4:d4:53:12:ea:3c:76:c6:81: 9f:79:28:47:ae:47:58:c7:15:59:7c:74:d5:bd:37:05:eb:d1: 3f:d0:c8:f1:1a:f1:94:64:68:0d:fc:6d:f4:19:93:b9:ae:04: 82:54:56:ac:e3:48:29:29:88:49:9e:17:0e:ed:93:89:4c:28: a4:eb:68:17:b8:d9:1e:e3:bf:fc:25:37:87:d4:cc:51:4a:f4: 4c:e2:91:20:26:d1:d1:4b:ff:ed:11:52:00:16:ef:a9:89:16: 29:e4:40:0e:a6:e7:60:0d:16:a1:5f:e6:99:ff:a2:b3:3f:b6: 0a:c4:de:19:90:08:37:92:8d:b3:9b:13:87:78:08:b0:ad:5d: 57:1f:48:72:96:41:d8:f8:52:ae:fe:cd:7c:b1:81:79:a4:ef: 7b:60:e4:2c:7d:7c:8f:58:de:10:6c:50:cd:ae:b4:a9:1c:a7: 3c:cf:8c:d3:d2:29:92:1c:ab:e8:08:c3:37:ed:fc:a1:52:df: b4:03:10:90:2d:5a:39:f9:38:57:12:c5:4b:9d:3d:98:10:a1: 9c:78:a5:ef:e7:15:36:69:ef:ed:fa:72:4c:a6:e4:6f:63:bf: 2a:e4:da:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnr6mQDHkzBDtL/8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MmEyOGFlMTMtYWJiZC00ZTEzLWE2NTQtM2Q3MDg3NjYyMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLrfWm2CzcS5O6Q16rBHhFSY3rha5+XTQuja 5dBae6YBeMDfx4rhn7mFIt4iUvf0dLPsemLaXeW5NBPOOFQFkmep+5Xper4m+q+T gZb791TNfuNQF6J2P+StY0wUs2OmFPQEkyN6cPFCudEbVY9WG0FvYGgZBGubj/Db 9KcCfrsZP9WlceNcskuWaiD3x/9Ku0xyuNBxALVtUQkb9iE2lBPRm21FSpW7ri4K tFEcDmovhxlSXAHdDSDk+fINJc9UVSoOjlPkDqbOka52KtA2x1BjKB4CVG7IH4DW shSyqT53eJzRc3sy2DSbbhI/Njd1T95bpb0VOLWjJ/BucQsY2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC3DD+JTcfxMUuDzpeZWPujFVQRAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODNkZTZkODctNmQyNy0z MDk1LWFkOWUtMDgyMWVkMDlkNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALeGWPI62jASn17ZFnX1Ol8iyo+DOh+5ivCestTUUxLqPHbGgZ95 KEeuR1jHFVl8dNW9NwXr0T/QyPEa8ZRkaA38bfQZk7muBIJUVqzjSCkpiEmeFw7t k4lMKKTraBe42R7jv/wlN4fUzFFK9EzikSAm0dFL/+0RUgAW76mJFinkQA6m52AN FqFf5pn/orM/tgrE3hmQCDeSjbObE4d4CLCtXVcfSHKWQdj4Uq7+zXyxgXmk73tg 5Cx9fI9Y3hBsUM2utKkcpzzPjNPSKZIcq+gIwzft/KFS37QDEJAtWjn5OFcSxUud PZgQoZx4pe/nFTZp7+36ckym5G9jvyrk2k0= -----END CERTIFICATE-----Generated at Mon Jun 9 02:05:53 2025 by rpki-client