$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa File: 86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa (raw, json) Hash identifier: 3XETv3R/x8ddEcVbct8QBQt1KtSPVoLEDy/z/32Mz+M= Subject key identifier: 4F:35:53:EF:EB:4A:6B:F9:3E:8B:79:76:94:CA:0F:80:2D:F6:E5:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB1518A770DC59143D14000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 397200 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:51:8a:77:0d:c5:91:43:d1:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=9236c59f-5841-4eee-b535-252bfcafaf33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:b9:67:75:9d:ef:74:23:cc:0d:37:2b:b3: c0:85:88:28:6f:df:e2:7d:96:04:14:5e:16:45:96: 43:ee:1e:b9:8a:e8:fb:ac:a3:48:cc:33:d5:37:60: 38:da:ce:c7:d7:af:04:b5:f2:0e:4b:94:8a:d5:fa: a3:60:fb:ea:55:c7:2e:73:4f:50:49:1e:5b:ce:34: c9:7b:fd:a5:00:3f:1e:5b:15:9d:f8:df:25:80:01: 2f:ff:87:3c:c9:29:2b:6d:98:9f:87:19:76:65:08: f5:eb:74:33:21:cc:b0:ea:c0:11:60:3a:91:35:3f: 9c:c4:78:a2:b2:c3:dc:b5:c2:41:8b:ce:64:73:b4: bf:82:95:5f:6f:14:f0:1b:13:aa:3c:db:37:6f:1c: de:1c:5d:1e:4d:2c:e6:f7:84:4c:8f:5f:b6:a4:7b: 24:f5:e7:2b:96:a4:b4:78:63:71:84:62:b7:71:f2: d7:af:e1:a4:37:bb:7a:7d:1f:e0:d4:5b:5c:10:45: 2e:70:c2:5b:44:db:c6:93:25:9d:2e:8e:bb:0c:df: d0:33:ed:b9:1e:05:63:92:43:67:4a:19:7f:a4:11: 95:94:20:aa:ad:8c:8f:06:7a:8d:b3:a4:de:18:8e: d4:79:5d:82:e9:cc:d2:bb:6f:0a:88:1d:ee:55:33: 0f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:35:53:EF:EB:4A:6B:F9:3E:8B:79:76:94:CA:0F:80:2D:F6:E5:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:83:d7:61:f8:62:44:00:17:82:26:8c:38:1b:43:17:73:ce: 7f:bd:5f:85:67:92:3d:c4:32:32:a5:c5:67:e8:77:05:ee:15: f8:5a:ab:d1:a5:5a:44:1d:9c:ce:67:42:bc:ab:67:9e:a7:4c: b3:4d:77:a7:26:46:e7:a6:0d:31:72:51:97:76:72:2a:dd:a3: dc:3b:81:27:91:4a:97:12:95:e5:14:a1:be:7c:73:17:24:a2: 8d:7c:7d:34:bc:c9:41:12:48:55:68:3d:e1:bb:b2:b2:fa:df: 57:82:c2:1f:9e:4f:47:72:00:b9:b3:e1:c4:2e:2f:b5:12:1a: ce:ee:ce:51:95:20:14:63:aa:d9:78:e7:ea:2b:47:75:38:ef: e0:60:0f:d3:69:af:01:34:55:07:72:cb:ea:7f:ba:35:ad:f1: dc:5d:78:93:b1:24:b9:a4:35:cb:47:c9:38:1b:a9:3b:db:bf: da:05:c1:48:5a:12:31:f4:5d:20:95:34:ce:99:df:82:34:5a: c7:90:c7:b3:74:8e:d5:a1:0b:6a:8a:9e:c7:3d:80:08:d8:ec: 96:62:a0:e3:e8:f8:a1:5d:09:b9:31:34:7f:29:f5:76:a2:a1: 4b:34:c9:eb:6c:5c:52:ff:1a:46:c4:39:18:3a:1e:d0:43:6a: 4d:cf:b3:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsVGKdw3FkUPRQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk OTIzNmM1OWYtNTg0MS00ZWVlLWI1MzUtMjUyYmZjYWZhZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09S5Z3Wd73QjzA03K7PAhYgob9/ifZYEFF4W RZZD7h65iuj7rKNIzDPVN2A42s7H168EtfIOS5SK1fqjYPvqVccuc09QSR5bzjTJ e/2lAD8eWxWd+N8lgAEv/4c8ySkrbZifhxl2ZQj163QzIcyw6sARYDqRNT+cxHii ssPctcJBi85kc7S/gpVfbxTwGxOqPNs3bxzeHF0eTSzm94RMj1+2pHsk9ecrlqS0 eGNxhGK3cfLXr+GkN7t6fR/g1FtcEEUucMJbRNvGkyWdLo67DN/QM+25HgVjkkNn Shl/pBGVlCCqrYyPBnqNs6TeGI7UeV2C6czSu28KiB3uVTMPfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE81U+/rSmv5Pot5dpTKD4At9uWlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZiNjJkOTUtMWRkOS0z MmRlLWEzZmEtNGE5MmI0YTIyMzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL+D12H4YkQAF4ImjDgbQxdzzn+9X4Vnkj3EMjKlxWfodwXuFfha q9GlWkQdnM5nQryrZ56nTLNNd6cmRuemDTFyUZd2cirdo9w7gSeRSpcSleUUob58 cxckoo18fTS8yUESSFVoPeG7srL631eCwh+eT0dyALmz4cQuL7USGs7uzlGVIBRj qtl45+orR3U47+BgD9NprwE0VQdyy+p/ujWt8dxdeJOxJLmkNctHyTgbqTvbv9oF wUhaEjH0XSCVNM6Z34I0WseQx7N0jtWhC2qKnsc9gAjY7JZioOPo+KFdCbkxNH8p 9XaioUs0yetsXFL/GkbEORg6HtBDak3Ps9I= -----END CERTIFICATE-----Generated at Fri Apr 11 23:49:40 2025 by rpki-client