$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87baad77-56c2-38ac-890e-c80105e502bd.roa File: 87baad77-56c2-38ac-890e-c80105e502bd.roa (raw, json) Hash identifier: SZh0IqjZJGKljWPsVRP7tX3Dxit0BkeAu0/H2LBwbG8= Subject key identifier: E0:6C:14:65:8B:DC:24:3E:3B:1B:7B:3D:34:FF:59:8B:79:3A:A1:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA7CC6FEAAFAFFB8828300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87baad77-56c2-38ac-890e-c80105e502bd.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 25485 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:7c:c6:fe:aa:fa:ff:b8:82:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=275c87b9-95c4-4f66-b6b4-24e818a174b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:55:d6:39:85:fd:b6:3a:70:16:dc:70:5d: f8:d3:fd:ca:ea:8d:01:0a:87:da:be:95:1b:cf:a3: 19:c2:f9:ac:63:b1:30:93:58:77:6b:3e:6f:65:1d: d3:c2:5c:1e:16:ab:06:c6:12:10:fb:39:46:d0:f8: ec:b7:96:0d:56:71:98:c2:6f:8d:90:da:13:0b:01: 8d:57:cc:e0:ca:ba:4c:ad:48:84:f8:88:b4:72:1b: 9a:f9:11:27:22:f4:00:5f:7f:3c:be:b2:25:61:1a: a0:f0:ac:2a:f9:31:eb:80:4f:d3:d8:a0:c6:ab:fb: 4b:db:b1:50:3a:79:e4:b0:42:db:7c:38:72:5f:f3: 23:4f:be:aa:45:19:c4:2e:af:0a:51:a6:dd:5b:7d: 8c:eb:85:80:77:fc:38:f0:9a:65:fa:67:8d:20:f4: ea:b4:5e:e8:0b:69:46:f5:1b:ac:4a:f6:dd:31:bb: 63:a6:70:9e:e2:44:c0:d5:e2:67:a1:3b:c7:9e:7a: 3a:3d:dc:9a:62:2e:cc:13:30:f4:15:64:ed:da:b8: 15:5b:42:a5:ae:5c:79:e1:5f:b6:2f:52:ea:5b:53: 78:52:3e:26:94:48:c9:13:03:ae:95:9b:7e:b4:55: 61:ba:be:57:a7:6e:76:64:bb:d2:a5:db:bd:bc:bf: c5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6C:14:65:8B:DC:24:3E:3B:1B:7B:3D:34:FF:59:8B:79:3A:A1:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87baad77-56c2-38ac-890e-c80105e502bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7d:8a:4d:75:0e:ab:45:f1:ed:84:83:96:5b:d8:9f:2d:83: 01:af:3d:a0:36:b0:83:af:c0:d1:5e:64:51:31:92:74:f5:65: fe:09:1b:65:aa:81:bd:5e:d5:37:3f:79:0d:a0:2f:42:45:94: 45:88:ab:c6:c0:9c:26:55:77:3f:29:b3:3d:a5:06:ec:bf:c3: be:ed:7f:35:5a:9c:3d:0a:47:96:b7:e2:4a:52:59:52:4e:e8: cd:f1:51:8e:67:4b:e9:8d:94:4b:f0:ab:71:12:4b:41:3b:f2: e7:08:bf:fa:77:4e:dc:af:79:a3:97:d4:da:7d:e1:f7:ec:cb: a9:5b:f1:dd:3e:0e:b5:ae:c6:1c:48:e9:ad:7d:41:c0:ba:4b: 0e:46:b2:f0:50:90:06:f8:75:70:86:aa:27:a9:f9:fc:b3:5e: 31:76:56:a5:12:a8:b3:1f:37:7b:fa:4a:69:5e:2a:db:c3:5d: b1:df:19:76:2c:1b:9b:2b:a0:1e:24:e6:98:77:3d:2d:d4:42: 4f:65:ee:aa:df:8a:8e:4a:54:a5:ac:31:3d:35:5b:79:20:50: 1f:25:71:6c:f3:05:31:71:81:40:01:4b:7d:d9:77:ac:c4:15: 0c:a6:8b:7a:9d:0a:38:8e:4c:d8:ec:87:40:0d:ee:45:fa:c9: d8:23:0f:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnr6nzG/qr6/7iCgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk Mjc1Yzg3YjktOTVjNC00ZjY2LWI2YjQtMjRlODE4YTE3NGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYFV1jmF/bY6cBbccF340/3K6o0BCofavpUb z6MZwvmsY7Ewk1h3az5vZR3TwlweFqsGxhIQ+zlG0Pjst5YNVnGYwm+NkNoTCwGN V8zgyrpMrUiE+Ii0chua+REnIvQAX388vrIlYRqg8Kwq+THrgE/T2KDGq/tL27FQ OnnksELbfDhyX/MjT76qRRnELq8KUabdW32M64WAd/w48Jpl+meNIPTqtF7oC2lG 9RusSvbdMbtjpnCe4kTA1eJnoTvHnno6PdyaYi7MEzD0FWTt2rgVW0Klrlx54V+2 L1LqW1N4Uj4mlEjJEwOulZt+tFVhur5Xp252ZLvSpdu9vL/FuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOBsFGWL3CQ+Oxt7PTT/WYt5OqErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODdiYWFkNzctNTZjMi0z OGFjLTg5MGUtYzgwMTA1ZTUwMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGl9ik11DqtF8e2Eg5Zb2J8tgwGvPaA2sIOvwNFeZFExknT1Zf4J G2Wqgb1e1Tc/eQ2gL0JFlEWIq8bAnCZVdz8psz2lBuy/w77tfzVanD0KR5a34kpS WVJO6M3xUY5nS+mNlEvwq3ESS0E78ucIv/p3TtyveaOX1Np94ffsy6lb8d0+DrWu xhxI6a19QcC6Sw5GsvBQkAb4dXCGqiep+fyzXjF2VqUSqLMfN3v6SmleKtvDXbHf GXYsG5sroB4k5ph3PS3UQk9l7qrfio5KVKWsMT01W3kgUB8lcWzzBTFxgUABS33Z d6zEFQymi3qdCjiOTNjsh0AN7kX6ydgjD5Q= -----END CERTIFICATE-----Generated at Sun Jun 8 13:40:50 2025 by rpki-client