$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa File: 99c569cb-49e3-3b55-8f14-63e32d1466d6.roa (raw, json) Hash identifier: 83d902n/jtdxo5Dyeoj9phWzza+agngWuRAZ6jPJoqs= Subject key identifier: 23:B1:90:AB:4D:34:5A:4A:D4:BB:EB:0B:4C:3D:40:3A:83:8B:55:A5 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F43285848D0ABB6B590E5971E3FB0B080 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 32771 IP address blocks: 2620:111:800b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b6:b5:90:e5:97:1e:3f:b0:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=fb48329c-0225-4aa6-818e-9eab8e43df61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:9f:93:5f:a7:bd:c0:65:ef:5b:52:79:01: f3:2d:b6:55:7f:7a:1c:02:c9:a8:3f:18:98:ea:21: 28:a8:11:c5:77:0b:a4:73:42:40:96:3b:4e:d4:d1: aa:c4:94:58:2e:00:50:9d:03:04:6d:02:f9:8f:96: a1:df:62:56:83:b4:d1:6c:4b:f1:31:5c:89:33:88: 70:eb:50:f9:90:c3:e3:0f:c3:37:3f:0d:a6:68:91: 1d:1c:e0:12:f0:29:af:76:f3:f4:b7:83:e5:2e:40: 71:ef:41:a5:c6:a8:4f:da:bf:26:eb:af:78:37:0b: 05:de:46:b2:26:6a:49:62:5b:10:04:5f:38:57:d9: 0b:f8:ba:3b:c4:c5:48:ee:8b:af:13:78:79:46:21: 01:c8:10:60:78:c8:49:a4:dd:a6:c2:7e:50:eb:a2: 5c:01:cb:77:69:c5:55:36:d9:2c:c3:6e:49:01:0b: 1c:53:69:a2:96:3a:65:04:9e:ee:5e:c8:cb:af:33: 66:20:03:79:33:5e:6a:af:0e:d9:01:0e:69:66:76: ef:ad:a0:8e:56:1d:d4:69:f7:9d:45:e9:54:d9:9e: 09:bc:a4:c3:98:fd:04:7d:e2:a9:51:1d:e5:96:fc: fd:ff:74:38:b3:b0:ac:5e:74:23:d6:6d:ad:3a:03: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B1:90:AB:4D:34:5A:4A:D4:BB:EB:0B:4C:3D:40:3A:83:8B:55:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:800b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:31:b4:d9:a6:92:31:a1:28:41:e6:21:80:40:ff:69:29:b2: be:93:ba:21:0e:69:a2:25:fc:81:d4:67:32:73:8c:52:a7:12: cd:6a:33:6f:71:ea:3b:d1:88:d8:f3:81:16:ab:47:97:a5:4d: b5:04:32:66:b7:43:8d:9b:1a:6e:40:99:7f:d0:54:30:2e:b9: da:6b:ae:b1:b4:e2:a8:9c:98:aa:35:0e:da:63:9d:6d:38:e0: 15:d3:26:ff:6c:0a:08:04:ee:3b:26:6e:a2:78:97:53:4d:26: a6:12:0c:b0:12:cf:7d:ef:d7:2a:be:7f:82:17:e6:c4:b1:5d: 3a:02:e2:52:f0:9d:a5:b5:75:e5:dd:1a:3c:1f:cb:9d:aa:11: 1b:9b:c1:23:23:6e:73:f8:6f:01:2b:d4:9d:ab:0b:83:1e:01: 99:27:40:0e:62:73:8c:88:d1:89:44:1d:b7:3f:bc:ab:25:3d: d7:94:ed:cd:c0:d6:45:2b:2b:ca:00:e2:63:51:f4:15:16:3b: 89:26:20:9c:23:b8:4e:bb:da:65:42:94:76:bd:a4:ec:33:cb: a1:11:a4:34:da:ef:07:7c:40:d6:7b:10:1c:0c:41:83:4c:80: 37:58:2b:90:8b:e5:73:22:cd:7f:e1:66:d4:50:91:b7:e9:59: ed:7b:35:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjQq7a1kOWXHj+wsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk ZmI0ODMyOWMtMDIyNS00YWE2LTgxOGUtOWVhYjhlNDNkZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiqfk1+nvcBl71tSeQHzLbZVf3ocAsmoPxiY 6iEoqBHFdwukc0JAljtO1NGqxJRYLgBQnQMEbQL5j5ah32JWg7TRbEvxMVyJM4hw 61D5kMPjD8M3Pw2maJEdHOAS8CmvdvP0t4PlLkBx70GlxqhP2r8m6694NwsF3kay JmpJYlsQBF84V9kL+Lo7xMVI7ouvE3h5RiEByBBgeMhJpN2mwn5Q66JcAct3acVV Ntksw25JAQscU2miljplBJ7uXsjLrzNmIAN5M15qrw7ZAQ5pZnbvraCOVh3Uafed RelU2Z4JvKTDmP0EfeKpUR3llvz9/3Q4s7CsXnQj1m2tOgP/5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCOxkKtNNFpK1LvrC0w9QDqDi1WlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvOTljNTY5Y2ItNDllMy0z YjU1LThmMTQtNjNlMzJkMTQ2NmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABoxtNmmkjGhKEHmIYBA/2kpsr6TuiEOaaIl/IHUZzJzjFKnEs1q M29x6jvRiNjzgRarR5elTbUEMma3Q42bGm5AmX/QVDAuudprrrG04qicmKo1Dtpj nW044BXTJv9sCggE7jsmbqJ4l1NNJqYSDLASz33v1yq+f4IX5sSxXToC4lLwnaW1 deXdGjwfy52qERubwSMjbnP4bwEr1J2rC4MeAZknQA5ic4yI0YlEHbc/vKslPdeU 7c3A1kUrK8oA4mNR9BUWO4kmIJwjuE672mVClHa9pOwzy6ERpDTa7wd8QNZ7EBwM QYNMgDdYK5CL5XMizX/hZtRQkbfpWe17Nf0= -----END CERTIFICATE-----Generated at Fri Apr 11 21:27:57 2025 by rpki-client