$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa File: 1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa (raw, json) Hash identifier: B6fXRdi+vTZ6227HsISFK9fnVnkwzabbgc9Y9rEI5qE= Subject key identifier: 4C:B9:8F:2E:0D:8C:40:16:25:88:CE:0F:3F:7C:2B:61:9A:C7:1E:C2 Certificate issuer: /CN=f357e341-9d26-4129-b5e8-c23c09471ee7 Certificate serial: 010D0C9F43285849C0A4E3E40A790EE78D105B00 Authority key identifier: E8:96:BE:52:65:9E:06:78:DF:65:AD:F8:A7:03:20:A4:4E:FD:7F:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 32244 IP address blocks: 2620:139:5002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e3:e4:0a:79:0e:e7:8d:10:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f357e341-9d26-4129-b5e8-c23c09471ee7 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=04f10cd0-3a6b-4d08-84ef-c441ade46915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c9:63:df:38:12:03:7f:e2:e8:af:f2:07:28: 74:73:67:9b:6b:68:06:bb:e4:05:39:6d:18:5f:c0: 03:8a:ff:14:c0:08:88:c2:60:64:18:42:9a:d2:21: 6d:4f:bd:f9:ce:15:57:84:f9:a5:f6:af:23:27:6c: c7:2d:18:b4:9e:86:8e:8b:d1:d2:7b:3b:2c:3c:d6: 17:b6:d8:f7:38:d4:91:85:77:ea:1d:60:92:52:9d: 94:ad:6d:b5:1d:c3:3d:96:0b:e5:a1:bb:d6:b1:c3: 1e:4f:bb:6f:9a:ef:1a:92:c2:72:56:1e:f9:a9:77: f4:52:49:c5:a8:3f:79:b2:d4:f5:7d:03:9a:95:88: 27:1d:22:ad:78:2b:ce:de:f1:4c:70:fa:6f:21:49: bc:c8:f0:75:b8:64:3c:d8:be:33:a2:34:7d:ea:c5: 77:0f:87:e6:bd:8e:77:6d:6f:f5:4d:26:39:3e:63: c0:db:88:d6:27:b4:2f:ab:2d:f1:0b:b3:68:d8:4f: c4:42:f2:34:61:c5:e8:a3:4d:7d:48:36:e8:c7:a1: 79:02:6a:72:d9:c5:80:21:ad:52:7c:cb:21:d5:30: 6c:b5:b6:9e:6e:2a:e1:9f:9c:bf:55:08:8e:6a:ac: 69:1a:ed:cd:44:fa:5a:e8:dc:71:98:ba:c6:db:2f: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B9:8F:2E:0D:8C:40:16:25:88:CE:0F:3F:7C:2B:61:9A:C7:1E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.crl X509v3 Authority Key Identifier: keyid:E8:96:BE:52:65:9E:06:78:DF:65:AD:F8:A7:03:20:A4:4E:FD:7F:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer sbgp-ipAddrBlock: critical IPv6: 2620:139:5002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b3:21:64:a0:79:d0:e2:46:36:00:0e:dc:0a:64:c1:a2:fc: 2f:cf:0c:52:31:47:b8:6d:4b:0d:36:1f:fa:1e:31:23:79:82: 78:8c:55:71:50:b2:04:56:08:ac:0e:8f:a3:0c:c7:ff:04:0e: f3:21:90:33:7d:05:ae:80:80:80:cb:5c:42:19:e3:d1:3a:8d: e6:f3:a1:95:c3:17:ac:9b:a5:73:ce:27:ef:83:1b:fd:a1:b1: 6b:0d:ea:ad:bc:c6:50:9e:4f:1c:a4:e4:ab:45:38:b2:86:7b: 70:a7:89:b9:f8:f9:e9:1d:63:21:a4:4c:13:e5:7d:77:c4:a6: bc:e0:4b:38:ec:33:d8:e4:1e:61:d8:ae:3e:f9:33:5c:62:76: 9a:a1:5c:46:7a:d4:e2:75:29:8f:2e:20:5a:7a:d4:c9:8b:95: 8f:f1:c6:2b:04:8e:b8:6c:79:c0:b5:dd:a9:a4:ce:86:55:4e: 89:45:03:bc:ea:91:4d:ee:a3:09:70:5f:27:2c:dd:19:09:c0: f9:e0:72:9f:10:9f:0e:4b:83:89:ff:1c:a5:31:eb:42:3d:af: 93:d6:db:5a:73:68:e8:b5:6b:54:51:da:4c:61:6b:4b:36:2a: 79:9c:f4:4e:35:4c:12:c1:cd:36:31:2d:08:e9:0e:60:d9:b1: d7:b0:bc:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnApOPkCnkO540QWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM1N2UzNDEtOWQyNi00MTI5LWI1ZTgtYzIzYzA5NDcx ZWU3MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MDRmMTBjZDAtM2E2Yi00ZDA4LTg0ZWYtYzQ0MWFkZTQ2OTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8lj3zgSA3/i6K/yByh0c2eba2gGu+QFOW0Y X8ADiv8UwAiIwmBkGEKa0iFtT735zhVXhPml9q8jJ2zHLRi0noaOi9HSezssPNYX ttj3ONSRhXfqHWCSUp2UrW21HcM9lgvlobvWscMeT7tvmu8aksJyVh75qXf0UknF qD95stT1fQOalYgnHSKteCvO3vFMcPpvIUm8yPB1uGQ82L4zojR96sV3D4fmvY53 bW/1TSY5PmPA24jWJ7Qvqy3xC7No2E/EQvI0YcXoo019SDbox6F5Ampy2cWAIa1S fMsh1TBstbaebirhn5y/VQiOaqxpGu3NRPpa6NxxmLrG2y/dQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEy5jy4NjEAWJYjODz98K2Gaxx7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzU3 ZTM0MS05ZDI2LTQxMjktYjVlOC1jMjNjMDk0NzFlZTcvMWEyZjk2YTQtY2JmMy0z YjE4LTg5ZGUtODk3MjlhZjE2YWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM1N2UzNDEtOWQyNi00MTI5LWI1 ZTgtYzIzYzA5NDcxZWU3L2YzNTdlMzQxLTlkMjYtNDEyOS1iNWU4LWMyM2MwOTQ3 MWVlNy5jcmwwHwYDVR0jBBgwFoAU6Ja+UmWeBnjfZa34pwMgpE79fy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzU3ZTM0MS05ZDI2LTQxMjktYjVlOC1jMjNj MDk0NzFlZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABOVAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEqzIWSgedDiRjYADtwKZMGi/C/PDFIxR7htSw02H/oeMSN5gniM VXFQsgRWCKwOj6MMx/8EDvMhkDN9Ba6AgIDLXEIZ49E6jebzoZXDF6ybpXPOJ++D G/2hsWsN6q28xlCeTxyk5KtFOLKGe3Cnibn4+ekdYyGkTBPlfXfEprzgSzjsM9jk HmHYrj75M1xidpqhXEZ61OJ1KY8uIFp61MmLlY/xxisEjrhsecC13amkzoZVTolF A7zqkU3uowlwXycs3RkJwPngcp8Qnw5Lg4n/HKUx60I9r5PW21pzaOi1a1RR2kxh a0s2Knmc9E41TBLBzTYxLQjpDmDZsdewvPg= -----END CERTIFICATE-----Generated at Sun Jun 8 09:02:33 2025 by rpki-client