$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa File: deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa (raw, json) Hash identifier: Re1KKFB16RzVjMx56NyE1plLUBOXwGZZz3dg/URk8oY= Subject key identifier: BC:60:8B:66:FC:DD:D6:A0:AA:B6:4B:E8:AE:32:87:FD:43:E5:C8:C8 Certificate issuer: /CN=1fb001d4-3a2b-436f-a572-51822a315945 Certificate serial: 010D0C9F43285848F22C6601D25000F5707C71A0 Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 395363 IP address blocks: 2620:129:6020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:66:01:d2:50:00:f5:70:7c:71:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=d693f0f0-4371-4112-a1cb-d023f4629f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:46:66:97:af:45:d1:94:9a:31:36:3c:a9: 4e:e6:9d:e4:2f:0a:4c:93:f0:4c:a0:3d:88:8f:24: 5d:4f:98:28:a3:54:c2:0d:ae:20:47:e9:5b:00:9c: 66:35:4e:23:90:55:83:1f:0a:f5:57:2d:4b:a8:99: 6f:ed:b8:3d:b8:76:eb:ce:b0:0d:d8:82:4b:ed:fb: 04:0d:56:3a:c4:21:33:ac:a3:ed:6f:bd:e4:e3:18: 5d:1e:08:f9:64:e2:db:84:6e:7b:2c:7d:16:25:4b: 08:6d:5e:c0:8c:07:4a:ad:e6:13:5c:e5:c8:b4:30: 07:e2:87:cd:3d:20:50:d0:de:4d:a6:33:6d:b9:4c: 92:e4:0c:76:17:53:56:c3:48:c2:84:5f:ba:0f:56: 17:96:f8:88:3d:32:72:06:b4:df:47:f9:0d:0a:f1: e5:34:a2:9a:a2:3b:f3:75:75:b0:ef:ee:96:f0:0b: ac:73:95:11:03:cd:9c:76:13:bb:24:5a:cc:05:05: ce:1e:e0:5a:f0:af:c1:b2:81:ed:6d:75:17:c2:36: a9:25:83:5f:dd:f1:68:1b:c8:17:2b:1a:c1:89:5f: df:90:3e:4c:9f:da:3e:ec:57:a6:26:1b:62:ac:4c: 49:99:e2:5c:61:1d:37:47:2b:be:ab:9b:12:41:c8: b9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:60:8B:66:FC:DD:D6:A0:AA:B6:4B:E8:AE:32:87:FD:43:E5:C8:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl X509v3 Authority Key Identifier: keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer sbgp-ipAddrBlock: critical IPv6: 2620:129:6020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b5:aa:b8:db:61:62:7b:6d:41:32:e9:b2:e7:06:7d:f0:06: d4:2b:b2:95:b1:54:ca:77:d9:d5:e2:ea:31:4e:f1:64:42:8f: 2c:48:dc:37:70:d1:0d:ee:07:33:27:37:71:03:8d:d5:a1:92: 00:ec:f4:1a:0f:91:d8:14:64:6a:3a:53:bb:e7:c0:6b:d3:b7: 59:31:a6:b8:f3:aa:e9:75:12:16:89:0a:d9:df:a5:37:f3:8f: 17:b8:27:d7:58:54:86:4b:b2:8c:e4:ec:1a:dd:d5:57:0c:fe: 35:18:b0:bd:22:8b:1d:43:04:53:bb:74:6a:0a:89:81:db:be: 2e:77:7b:64:40:f8:10:9e:a0:6a:ae:1f:40:0e:80:98:e0:c6: 54:e2:dd:c5:22:a4:30:57:a1:dc:d0:0b:4d:47:14:46:b6:72: 1b:3d:83:21:c3:8e:df:6b:d8:8d:a4:ee:31:96:87:aa:7b:d3: 39:6b:56:93:83:55:dd:e2:20:a5:49:e0:e2:9d:04:7e:0b:86: 82:66:e8:e6:17:3c:8c:22:d8:a2:ff:0a:c8:b7:f7:25:d0:a8: 25:20:84:54:be:34:3f:71:e9:b6:7d:47:fb:49:5d:87:29:eb: 81:3e:46:56:ef:af:86:cf:82:29:60:f4:58:2c:66:95:68:f7: 4d:4a:2c:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjyLGYB0lAA9XB8caAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZiMDAxZDQtM2EyYi00MzZmLWE1NzItNTE4MjJhMzE1 OTQ1MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDY5M2YwZjAtNDM3MS00MTEyLWExY2ItZDAyM2Y0NjI5ZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFNGZpevRdGUmjE2PKlO5p3kLwpMk/BMoD2I jyRdT5goo1TCDa4gR+lbAJxmNU4jkFWDHwr1Vy1LqJlv7bg9uHbrzrAN2IJL7fsE DVY6xCEzrKPtb73k4xhdHgj5ZOLbhG57LH0WJUsIbV7AjAdKreYTXOXItDAH4ofN PSBQ0N5NpjNtuUyS5Ax2F1NWw0jChF+6D1YXlviIPTJyBrTfR/kNCvHlNKKaojvz dXWw7+6W8Ausc5URA82cdhO7JFrMBQXOHuBa8K/BsoHtbXUXwjapJYNf3fFoG8gX KxrBiV/fkD5Mn9o+7FemJhtirExJmeJcYR03Ryu+q5sSQci5swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLxgi2b83dagqrZL6K4yh/1D5cjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIw MDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgyMmEzMTU5NDUvZGViNDcxMjItMTBjYS0z YTQ0LWFhMTYtY2JjOWI2MWFmZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWZiMDAxZDQtM2EyYi00MzZmLWE1 NzItNTE4MjJhMzE1OTQ1LzFmYjAwMWQ0LTNhMmItNDM2Zi1hNTcyLTUxODIyYTMx NTk0NS5jcmwwHwYDVR0jBBgwFoAUdKd9Tqw3iqgM0MIrTF1vWza8INEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIwMDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgy MmEzMTU5NDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKWAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKW1qrjbYWJ7bUEy6bLnBn3wBtQrspWxVMp32dXi6jFO8WRCjyxI 3Ddw0Q3uBzMnN3EDjdWhkgDs9BoPkdgUZGo6U7vnwGvTt1kxprjzqul1EhaJCtnf pTfzjxe4J9dYVIZLsozk7Brd1VcM/jUYsL0iix1DBFO7dGoKiYHbvi53e2RA+BCe oGquH0AOgJjgxlTi3cUipDBXodzQC01HFEa2chs9gyHDjt9r2I2k7jGWh6p70zlr VpODVd3iIKVJ4OKdBH4LhoJm6OYXPIwi2KL/Csi39yXQqCUghFS+ND9x6bZ9R/tJ XYcp64E+Rlbvr4bPgilg9FgsZpVo901KLAs= -----END CERTIFICATE-----Generated at Fri Mar 14 11:07:00 2025 by rpki-client