$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1ece9b12-0d51-3831-9ce3-ffac34c75e24.roa File: 1ece9b12-0d51-3831-9ce3-ffac34c75e24.roa (raw, json) Hash identifier: EZ/R6sZ9Dw2H4EDG2rkHI1P1oK7gD65kqlaLHs1b6G0= Subject key identifier: C5:B1:5A:9C:B2:58:94:59:31:1D:D9:75:00:6F:B3:D6:30:A7:80:69 Certificate issuer: /CN=2531a4ba-6abc-447c-add8-67edc3c483ab Certificate serial: 010D0C9F432858495ABEE1C4DB3D8A90F36F49C0 Authority key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1ece9b12-0d51-3831-9ce3-ffac34c75e24.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 395585 IP address blocks: 2620:12a:c001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e1:c4:db:3d:8a:90:f3:6f:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2531a4ba-6abc-447c-add8-67edc3c483ab Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=af1572e7-01c9-42fa-b9d7-44cc8cc70add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:6a:18:49:2e:ea:0b:97:37:b9:03:6f:20: de:d7:17:3a:c4:79:c0:37:41:d9:68:7d:8c:a0:b5: bf:d2:ce:5a:c6:ac:0f:f8:55:ad:16:e1:b0:13:de: cf:55:56:74:c7:92:7c:92:65:3d:e2:e9:26:b7:f2: b2:4c:10:16:e6:17:ba:2b:cb:21:97:21:44:c9:d6: 13:10:cd:13:a0:eb:ee:c6:a6:6a:6f:3f:f3:63:b3: dd:df:1e:de:b8:08:11:00:b5:db:05:38:cf:c2:bc: 98:80:ac:fc:45:1f:5e:92:b9:34:d1:3b:63:bd:cc: 9a:d6:9d:81:df:0f:2b:ce:91:29:d8:30:b3:09:d2: f0:25:b8:36:8a:3a:5f:ef:20:55:c6:d5:60:6c:0a: f4:e7:cf:33:af:18:ad:d8:c8:2d:66:d3:1d:d6:5f: 91:87:32:68:6a:a0:7c:33:ef:5d:e2:73:79:52:1f: 3a:32:23:12:b9:83:6a:02:15:e6:42:24:71:b7:2c: 04:2e:9e:39:b4:36:65:72:40:03:9a:fd:39:89:a7: 85:6e:25:81:6a:7b:51:90:a5:d5:9f:f1:79:6d:81: 9e:d7:c7:9f:38:43:d2:80:36:e0:ef:6a:21:d3:c4: 87:17:3c:0d:1d:e9:81:6a:d6:81:a3:a9:dc:e7:50: 14:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B1:5A:9C:B2:58:94:59:31:1D:D9:75:00:6F:B3:D6:30:A7:80:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1ece9b12-0d51-3831-9ce3-ffac34c75e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl X509v3 Authority Key Identifier: keyid:9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer sbgp-ipAddrBlock: critical IPv6: 2620:12a:c001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5c:27:15:24:08:4f:ff:f2:c7:74:04:e5:5d:11:9d:91:77: 68:e3:fa:6c:1a:38:69:36:0d:fb:db:5b:17:a4:d1:49:d4:d1: 64:34:33:d9:a0:47:cb:7d:b0:f1:ea:30:0c:6a:19:7a:b1:a3: 3d:32:2b:78:c0:0c:60:66:31:a0:6c:75:35:bb:08:19:7d:4c: e5:2b:54:ab:83:2c:f8:36:4c:0e:8c:30:02:e2:3e:58:6c:60: 2f:4e:b6:98:5e:3d:d1:ba:b0:92:15:f1:f3:7d:e5:2a:64:db: dd:cb:6b:63:d0:ce:60:21:7e:de:e5:88:57:89:c9:86:60:aa: 59:94:ac:fc:00:4a:09:d3:e7:93:5b:48:8c:d1:9d:d5:09:1b: bd:39:f6:4b:11:a6:da:46:2a:f2:2b:e3:ec:82:f4:09:ce:da: 80:2f:08:8d:f1:e9:89:22:f5:f4:03:9c:60:77:e8:61:ca:d7: 78:24:18:25:96:ea:2f:63:43:39:66:dc:be:a1:58:a4:3b:c0: 95:0b:6b:32:ce:c7:a4:9c:6a:5d:54:5d:9a:8f:18:44:1e:60: a1:e7:d7:b0:24:97:a3:a1:a2:88:c1:78:04:34:34:54:3e:a1: bd:5c:8a:37:05:73:42:1a:88:6e:30:e3:e4:55:ef:18:59:e8: c0:07:84:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElavuHE2z2KkPNvScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzMWE0YmEtNmFiYy00NDdjLWFkZDgtNjdlZGMzYzQ4 M2FiMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk YWYxNTcyZTctMDFjOS00MmZhLWI5ZDctNDRjYzhjYzcwYWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUdqGEku6guXN7kDbyDe1xc6xHnAN0HZaH2M oLW/0s5axqwP+FWtFuGwE97PVVZ0x5J8kmU94ukmt/KyTBAW5he6K8shlyFEydYT EM0ToOvuxqZqbz/zY7Pd3x7euAgRALXbBTjPwryYgKz8RR9ekrk00Ttjvcya1p2B 3w8rzpEp2DCzCdLwJbg2ijpf7yBVxtVgbAr0588zrxit2MgtZtMd1l+RhzJoaqB8 M+9d4nN5Uh86MiMSuYNqAhXmQiRxtywELp45tDZlckADmv05iaeFbiWBantRkKXV n/F5bYGe18efOEPSgDbg72oh08SHFzwNHemBataBo6nc51AUQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMWxWpyyWJRZMR3ZdQBvs9Ywp4BpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNTMx YTRiYS02YWJjLTQ0N2MtYWRkOC02N2VkYzNjNDgzYWIvMWVjZTliMTItMGQ1MS0z ODMxLTljZTMtZmZhYzM0Yzc1ZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjUzMWE0YmEtNmFiYy00NDdjLWFk ZDgtNjdlZGMzYzQ4M2FiLzI1MzFhNGJhLTZhYmMtNDQ3Yy1hZGQ4LTY3ZWRjM2M0 ODNhYi5jcmwwHwYDVR0jBBgwFoAUnjqfdPlsZO1jn6yB8uQ3Qy72OwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNTMxYTRiYS02YWJjLTQ0N2MtYWRkOC02N2Vk YzNjNDgzYWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKsAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACBcJxUkCE//8sd0BOVdEZ2Rd2jj+mwaOGk2DfvbWxek0UnU0WQ0 M9mgR8t9sPHqMAxqGXqxoz0yK3jADGBmMaBsdTW7CBl9TOUrVKuDLPg2TA6MMALi PlhsYC9OtphePdG6sJIV8fN95Spk293La2PQzmAhft7liFeJyYZgqlmUrPwASgnT 55NbSIzRndUJG7059ksRptpGKvIr4+yC9AnO2oAvCI3x6Yki9fQDnGB36GHK13gk GCWW6i9jQzlm3L6hWKQ7wJULazLOx6Scal1UXZqPGEQeYKHn17Akl6OhoojBeAQ0 NFQ+ob1cijcFc0IaiG4w4+RV7xhZ6MAHhII= -----END CERTIFICATE-----Generated at Fri Apr 4 16:14:23 2025 by rpki-client