$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa File: 5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa (raw, json) Hash identifier: IF9zHvlfp6SEO7Q3pnc6yoiDjHmcJidEuFsc0zjBXdk= Subject key identifier: B1:38:6A:6D:4E:B0:E9:7A:91:AA:C4:FF:65:5D:4D:07:C4:E4:3B:DE Certificate issuer: /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9 Certificate serial: 010D0C9F432858494B640EA7A0770978E1E26D80 Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 396204 IP address blocks: 2620:22:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0e:a7:a0:77:09:78:e1:e2:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=d07460bc-60ba-46a4-ae36-77e6ea7fecfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bb:1b:4d:57:bc:c7:02:4a:20:33:66:f9:ca: 0f:22:49:b7:1e:e3:e1:e6:af:2f:cf:1e:0b:74:95: 1c:66:a7:11:1c:05:71:5b:cb:56:c2:96:83:e2:eb: 9a:02:ab:53:bd:f7:6f:18:20:99:36:35:e2:1f:f1: 58:cb:b4:cc:ca:2e:61:85:4f:f4:27:67:26:5d:6b: 88:0f:f6:75:0d:b6:1d:31:1d:85:a1:08:a2:12:01: ce:76:10:8a:49:84:24:9d:7a:ba:7f:cf:26:4e:b5: c4:8e:1a:c7:a9:fa:6c:49:03:6b:3b:0a:71:eb:c6: 36:46:c1:d7:bb:e6:d9:9d:49:e7:e3:96:3a:6c:48: 92:da:8a:af:ce:9f:22:9a:a5:b8:f3:17:e7:ad:b7: 0f:53:25:ee:48:b7:31:0b:72:98:74:2a:e8:bd:9a: 10:a1:1d:3c:df:87:87:7a:de:48:90:5a:3b:d5:52: 4d:af:f4:b6:c3:23:49:62:b7:96:7b:0f:be:42:fb: f1:e7:66:30:36:80:f1:df:3c:ca:34:ec:62:81:80: 6a:1b:bf:33:38:4c:e1:c6:83:d8:da:c0:03:69:e7: c5:fb:17:65:e6:62:61:28:de:6e:15:71:ac:3e:64: e0:1d:71:b3:d7:5a:b8:96:de:bf:15:e2:b0:83:c5: 09:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:38:6A:6D:4E:B0:E9:7A:91:AA:C4:FF:65:5D:4D:07:C4:E4:3B:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl X509v3 Authority Key Identifier: keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer sbgp-ipAddrBlock: critical IPv6: 2620:22:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:98:9e:23:fc:a0:a9:50:24:cc:50:d5:8b:f6:a4:03:35:95: 98:e1:64:19:9e:91:bb:22:b7:7c:c8:2c:af:a0:b7:5f:0e:b6: 6a:70:ec:eb:f9:80:9b:da:cd:88:59:72:09:7b:07:a1:cf:c8: 8b:0c:52:72:c6:70:30:31:54:8b:ca:2d:dd:11:04:c8:c2:2f: 77:5a:93:13:3a:5d:d2:81:01:01:61:cf:2f:18:7a:0e:b9:bd: c3:ff:c0:aa:51:9c:2b:fd:d5:14:c1:7b:1d:ce:c5:2f:e2:27: 7d:61:c0:9c:ca:c8:1d:0a:a5:37:c6:9a:45:7d:3f:b3:cc:b0: 3f:2c:2c:36:6e:36:8f:a3:bc:43:5e:c7:90:b5:02:29:e6:f3: ce:57:49:c4:af:52:f4:36:c8:07:fc:d8:96:8d:f9:78:20:1f: c8:2a:ec:9a:66:0d:62:58:6f:97:bf:24:7d:bd:e0:ba:15:76: 4e:83:95:c2:2f:2b:ab:cb:b8:09:56:9a:c3:5a:b4:f9:89:90: 0f:0f:22:51:56:d5:5e:64:09:bd:5e:25:e8:74:fe:22:57:aa: 61:01:b2:42:85:6f:ec:8e:4e:ed:4b:a9:4a:fc:07:67:af:b1: 88:60:3d:45:70:7c:ed:66:c6:cb:1d:34:50:10:8b:f0:9f:2e: 60:40:56:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElLZA6noHcJeOHibYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YzgzZmEtZmZjYi00YzE0LTllM2ItYzNmYTQwNTYx YWQ5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZDA3NDYwYmMtNjBiYS00NmE0LWFlMzYtNzdlNmVhN2ZlY2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrsbTVe8xwJKIDNm+coPIkm3HuPh5q8vzx4L dJUcZqcRHAVxW8tWwpaD4uuaAqtTvfdvGCCZNjXiH/FYy7TMyi5hhU/0J2cmXWuI D/Z1DbYdMR2FoQiiEgHOdhCKSYQknXq6f88mTrXEjhrHqfpsSQNrOwpx68Y2RsHX u+bZnUnn45Y6bEiS2oqvzp8imqW48xfnrbcPUyXuSLcxC3KYdCrovZoQoR0834eH et5IkFo71VJNr/S2wyNJYreWew++Qvvx52YwNoDx3zzKNOxigYBqG78zOEzhxoPY 2sADaefF+xdl5mJhKN5uFXGsPmTgHXGz11q4lt6/FeKwg8UJ1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLE4am1OsOl6karE/2VdTQfE5DveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YThj ODNmYS1mZmNiLTRjMTQtOWUzYi1jM2ZhNDA1NjFhZDkvNWIxNzQ5YjktNDMwYy0z M2RkLThiODYtNWRjOTI2OGVmYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGE4YzgzZmEtZmZjYi00YzE0LTll M2ItYzNmYTQwNTYxYWQ5LzhhOGM4M2ZhLWZmY2ItNGMxNC05ZTNiLWMzZmE0MDU2 MWFkOS5jcmwwHwYDVR0jBBgwFoAUjccdmxK7+UZwIdMaRkD1JyDt1ZgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YThjODNmYS1mZmNiLTRjMTQtOWUzYi1jM2Zh NDA1NjFhZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIqAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFaYniP8oKlQJMxQ1Yv2pAM1lZjhZBmekbsit3zILK+gt18Otmpw 7Ov5gJvazYhZcgl7B6HPyIsMUnLGcDAxVIvKLd0RBMjCL3dakxM6XdKBAQFhzy8Y eg65vcP/wKpRnCv91RTBex3OxS/iJ31hwJzKyB0KpTfGmkV9P7PMsD8sLDZuNo+j vENex5C1Ainm885XScSvUvQ2yAf82JaN+XggH8gq7JpmDWJYb5e/JH294LoVdk6D lcIvK6vLuAlWmsNatPmJkA8PIlFW1V5kCb1eJeh0/iJXqmEBskKFb+yOTu1LqUr8 B2evsYhgPUVwfO1mxssdNFAQi/CfLmBAVr4= -----END CERTIFICATE-----Generated at Fri Apr 11 21:11:06 2025 by rpki-client