$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/2c2f2002-b19b-3f29-a667-5eca934bdc03.roa File: 2c2f2002-b19b-3f29-a667-5eca934bdc03.roa (raw, json) Hash identifier: VgUZgBFFojJ48wV3m6DDan8sct3nlKo/lvprgmo2qow= Subject key identifier: 94:E0:11:F3:E1:2B:D3:97:82:91:44:E3:15:01:9E:8F:77:FE:D2:20 Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd Certificate serial: 010D0C9F43285849ED4FD624D769A65273A70220 Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/2c2f2002-b19b-3f29-a667-5eca934bdc03.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 3573 IP address blocks: 2610:b0:41d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:d6:24:d7:69:a6:52:73:a7:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=99a0ad6d-973f-435f-9634-7f28d6747f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:80:cd:70:b4:21:5a:db:25:da:44:fe:a8:a8: 30:9c:78:7d:43:dc:d6:59:f2:5b:40:08:4d:5d:4a: 50:7e:48:0e:05:ce:b6:60:f4:fc:1f:de:f7:7e:2c: e8:98:96:b5:28:bb:94:2f:d7:2c:35:b7:2b:51:19: c3:b4:fc:dd:c3:ed:5b:d2:72:ba:15:64:d8:3b:c2: 6d:29:5c:a6:09:18:41:36:ce:b7:f3:60:d5:75:e9: 78:0d:85:22:9d:60:08:c7:8f:cc:d9:41:79:3e:99: 9a:9f:41:4e:55:95:7a:5c:b2:9c:03:00:19:c2:32: 5f:de:ba:88:f4:f9:3c:1c:7b:b4:05:f5:f4:f9:32: a2:27:75:fa:68:33:ab:69:4c:78:ff:73:a9:de:21: c5:6e:1f:2d:db:fa:71:fe:5a:08:de:06:cb:5f:eb: 5c:09:f7:35:06:ff:75:5f:96:a8:16:52:01:df:22: d9:bc:10:ac:04:75:d1:a4:82:cb:7f:ee:36:47:40: c9:49:24:e3:09:12:d2:4d:c8:ab:92:22:aa:39:af: d6:c5:2f:c0:8b:38:8b:e3:43:54:2b:48:a0:40:d9: b1:74:99:66:eb:89:ca:07:61:31:49:d0:db:42:7b: df:68:ce:43:27:e2:56:9e:71:ab:92:ee:a5:37:eb: 65:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E0:11:F3:E1:2B:D3:97:82:91:44:E3:15:01:9E:8F:77:FE:D2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/2c2f2002-b19b-3f29-a667-5eca934bdc03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl X509v3 Authority Key Identifier: keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer sbgp-ipAddrBlock: critical IPv6: 2610:b0:41d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:fb:10:9c:9b:72:b8:b7:e2:c2:4d:cc:7f:4d:97:c9:1c:e9: 77:24:64:70:df:5b:89:86:50:33:2d:3b:aa:e9:97:3e:a5:c2: 32:c9:80:d0:3f:f4:7e:f8:13:5a:b0:8c:e5:3c:ba:76:6d:ef: 8c:a8:f6:97:50:37:84:f5:dd:e6:b1:6d:75:cc:63:5f:c3:88: 86:eb:08:e9:32:56:ff:f8:48:54:55:58:9d:69:cb:1a:be:3b: 5a:96:0b:f2:f6:c6:0d:8d:88:7b:c1:6e:f0:d5:5b:9a:f3:cf: 04:d1:1f:45:36:b4:81:6c:88:dc:bd:74:06:6f:ab:96:bf:ef: 5c:6d:d5:3b:4b:c4:78:75:bd:94:f4:0e:ed:5c:38:63:8b:69: f5:8f:9a:fc:d9:80:90:85:23:cf:c7:bb:97:f0:4a:9b:5b:b8: f9:72:a7:26:6f:2c:63:0a:6b:01:6f:2d:6d:a7:23:ef:3c:64: 7d:bd:f7:dd:37:4a:9a:95:a2:49:ac:17:6b:af:f2:fd:09:be: d6:78:07:a7:03:07:8f:c7:21:bf:4a:20:08:93:88:d3:39:88: 59:64:61:8a:2a:d8:6d:f9:0b:6c:a7:73:7b:f6:56:bd:33:c3: df:5e:cf:56:dc:41:e8:68:0e:82:a3:71:18:e8:85:e7:c2:ed: f8:b3:c0:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEntT9Yk12mmUnOnAiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNjg4ZTgtMzQyNS00ZTU4LWEyMzktOTQ5NTA4YTlm NmRkMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk OTlhMGFkNmQtOTczZi00MzVmLTk2MzQtN2YyOGQ2NzQ3ZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4DNcLQhWtsl2kT+qKgwnHh9Q9zWWfJbQAhN XUpQfkgOBc62YPT8H973fizomJa1KLuUL9csNbcrURnDtPzdw+1b0nK6FWTYO8Jt KVymCRhBNs6382DVdel4DYUinWAIx4/M2UF5Ppman0FOVZV6XLKcAwAZwjJf3rqI 9Pk8HHu0BfX0+TKiJ3X6aDOraUx4/3Op3iHFbh8t2/px/loI3gbLX+tcCfc1Bv91 X5aoFlIB3yLZvBCsBHXRpILLf+42R0DJSSTjCRLSTcirkiKqOa/WxS/AiziL40NU K0igQNmxdJlm64nKB2ExSdDbQnvfaM5DJ+JWnnGrku6lN+tlgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJTgEfPhK9OXgpFE4xUBno93/tIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2 ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1MDhhOWY2ZGQvMmMyZjIwMDItYjE5Yi0z ZjI5LWE2NjctNWVjYTkzNGJkYzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIzNjg4ZTgtMzQyNS00ZTU4LWEy MzktOTQ5NTA4YTlmNmRkL2FiMzY4OGU4LTM0MjUtNGU1OC1hMjM5LTk0OTUwOGE5 ZjZkZC5jcmwwHwYDVR0jBBgwFoAUSGhyRWQu7rfRTImqv5GHGU2TmdswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1 MDhhOWY2ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAsEHY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE/7EJybcri34sJNzH9Nl8kc6XckZHDfW4mGUDMtO6rplz6lwjLJ gNA/9H74E1qwjOU8unZt74yo9pdQN4T13eaxbXXMY1/DiIbrCOkyVv/4SFRVWJ1p yxq+O1qWC/L2xg2NiHvBbvDVW5rzzwTRH0U2tIFsiNy9dAZvq5a/71xt1TtLxHh1 vZT0Du1cOGOLafWPmvzZgJCFI8/Hu5fwSptbuPlypyZvLGMKawFvLW2nI+88ZH29 9903SpqVokmsF2uv8v0JvtZ4B6cDB4/HIb9KIAiTiNM5iFlkYYoq2G35C2ync3v2 Vr0zw99ez1bcQehoDoKjcRjohefC7fizwKs= -----END CERTIFICATE-----Generated at Sat Jun 7 06:03:11 2025 by rpki-client