$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/e635d76f-d2d0-3af9-a38c-c806ec850321.roa File: e635d76f-d2d0-3af9-a38c-c806ec850321.roa (raw, json) Hash identifier: n3EDOo0p0+Jo1R0axYbcy5qC6byWIbNpnz60blwJhiY= Subject key identifier: 17:9E:FD:E6:31:EF:1E:F7:89:FC:6B:BD:87:13:2B:EF:FD:32:5D:48 Certificate issuer: /CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Certificate serial: 010D0C9F432858498CFF1F9C335575F0F183C240 Authority key identifier: 45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/e635d76f-d2d0-3af9-a38c-c806ec850321.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 397335 IP address blocks: 2620:68:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:1f:9c:33:55:75:f0:f1:83:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=3c28322a-a8b3-43ff-ba82-92f02cf42e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:93:79:6d:ae:b4:f5:3f:01:7b:e7:1a:21:4f: 4b:2a:70:fc:c3:34:15:4c:6a:a0:8a:9d:a6:42:f4: eb:45:95:f2:88:67:c8:4b:5c:9f:ee:5c:60:be:4d: a4:a5:83:38:a3:a2:ec:f8:47:15:30:32:e2:35:4c: 23:56:34:43:be:54:4f:ba:5b:57:f5:b1:22:e6:e8: 32:bf:8e:97:40:cd:17:63:bc:2c:c3:4f:ba:d3:05: cd:3a:14:36:bc:49:7f:b1:18:69:96:b4:d7:34:e8: 9e:c2:a7:a6:33:4a:6a:1f:61:e9:97:2c:73:fe:ef: 28:47:d9:7a:1c:65:b9:91:49:0d:77:3a:6d:b6:66: 99:4b:ee:a0:3a:86:f6:92:2d:c3:0b:31:e0:c5:a0: 86:4f:10:4a:ba:0a:b4:63:79:28:36:25:08:c5:f6: 03:08:a8:a6:b5:3c:94:67:24:b4:fd:f7:90:74:35: e5:5c:8f:25:37:1a:a9:8f:ce:02:67:91:75:8d:ef: 8c:c6:9c:3a:8c:e8:e1:3c:84:62:a7:5a:d2:61:62: 35:26:e0:8d:af:94:02:fc:35:d4:d7:41:6a:bd:85: 86:5d:ba:a4:e7:73:30:1b:aa:25:07:5e:ad:4a:b8: a4:ad:6e:bd:70:f9:54:5b:6b:65:43:9d:28:97:cb: ed:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9E:FD:E6:31:EF:1E:F7:89:FC:6B:BD:87:13:2B:EF:FD:32:5D:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/e635d76f-d2d0-3af9-a38c-c806ec850321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl X509v3 Authority Key Identifier: keyid:45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer sbgp-ipAddrBlock: critical IPv6: 2620:68:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ba:a9:29:0b:31:e9:55:25:4b:60:7c:c8:fc:dd:52:5d:66: 5a:b3:85:9b:88:05:df:cf:43:f2:fb:b4:a9:ef:7e:c4:4f:04: 28:cb:21:fe:55:6f:c0:e8:e6:73:82:c8:94:c9:37:a0:0a:0d: 6b:58:4c:ae:42:1a:e4:2d:7b:5d:65:22:7d:28:04:cd:ee:4b: e2:d9:c1:ad:c0:cf:f9:d4:ee:4a:5b:65:ba:e7:ef:5b:47:73: 50:b6:e9:90:c1:74:11:f6:9e:13:f9:02:cb:8c:15:68:c0:77: 1e:fc:96:e9:c0:5c:43:4c:c3:d4:a9:44:d5:2d:38:6e:28:9e: 52:50:8a:b1:e1:88:04:79:03:b1:96:da:b0:fc:c2:76:e6:9b: 2d:ba:31:9a:32:08:dd:8b:9a:7d:93:78:f2:1e:a5:49:bd:7c: db:1f:61:b4:f5:3b:78:c9:2b:63:c6:b2:91:12:d3:5c:1d:ec: 57:eb:37:8b:7d:d7:9a:8c:7e:b9:eb:cc:84:d3:4b:2a:88:83: f0:7f:73:d1:6f:dd:19:02:ec:18:f9:34:82:5a:41:13:f1:14: e4:3c:19:22:f3:59:56:1b:2d:24:84:55:2f:cf:99:58:37:90: 52:3c:28:26:1c:bb:34:6c:6f:a0:dd:2c:63:01:cd:6f:4a:5d: 98:67:0b:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmM/x+cM1V18PGDwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1YTM5ZDEtNDAwZC00MjNhLTg5YzQtMzdmN2YxYTE0 NWYyMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk M2MyODMyMmEtYThiMy00M2ZmLWJhODItOTJmMDJjZjQyZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5N5ba609T8Be+caIU9LKnD8wzQVTGqgip2m QvTrRZXyiGfIS1yf7lxgvk2kpYM4o6Ls+EcVMDLiNUwjVjRDvlRPultX9bEi5ugy v46XQM0XY7wsw0+60wXNOhQ2vEl/sRhplrTXNOiewqemM0pqH2Hplyxz/u8oR9l6 HGW5kUkNdzpttmaZS+6gOob2ki3DCzHgxaCGTxBKugq0Y3koNiUIxfYDCKimtTyU ZyS0/feQdDXlXI8lNxqpj84CZ5F1je+Mxpw6jOjhPIRip1rSYWI1JuCNr5QC/DXU 10FqvYWGXbqk53MwG6olB16tSrikrW69cPlUW2tlQ50ol8vt6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBee/eYx7x73ifxrvYcTK+/9Ml1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVh MzlkMS00MDBkLTQyM2EtODljNC0zN2Y3ZjFhMTQ1ZjIvZTYzNWQ3NmYtZDJkMC0z YWY5LWEzOGMtYzgwNmVjODUwMzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1YTM5ZDEtNDAwZC00MjNhLTg5 YzQtMzdmN2YxYTE0NWYyL2Y5NWEzOWQxLTQwMGQtNDIzYS04OWM0LTM3ZjdmMWEx NDVmMi5jcmwwHwYDVR0jBBgwFoAURY6JtDIFjVgZin8jAUv2Hx3NRHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVhMzlkMS00MDBkLTQyM2EtODljNC0zN2Y3 ZjFhMTQ1ZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAaCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEq6qSkLMelVJUtgfMj83VJdZlqzhZuIBd/PQ/L7tKnvfsRPBCjL If5Vb8Do5nOCyJTJN6AKDWtYTK5CGuQte11lIn0oBM3uS+LZwa3Az/nU7kpbZbrn 71tHc1C26ZDBdBH2nhP5AsuMFWjAdx78lunAXENMw9SpRNUtOG4onlJQirHhiAR5 A7GW2rD8wnbmmy26MZoyCN2Lmn2TePIepUm9fNsfYbT1O3jJK2PGspES01wd7Ffr N4t915qMfrnrzITTSyqIg/B/c9Fv3RkC7Bj5NIJaQRPxFOQ8GSLzWVYbLSSEVS/P mVg3kFI8KCYcuzRsb6DdLGMBzW9KXZhnC6w= -----END CERTIFICATE-----Generated at Sun Apr 20 12:19:43 2025 by rpki-client