$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa File: deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa (raw, json) Hash identifier: K2d50kL6DTAGqNbCWfWnphFkxL2raDtW47vD28d9BsU= Subject key identifier: 63:ED:0F:BF:2D:A7:98:FE:DB:1E:C7:23:9D:78:32:77:0E:4F:AD:E0 Certificate issuer: /CN=1fb001d4-3a2b-436f-a572-51822a315945 Certificate serial: 010D0C9F43285849D1650631D65129B50D5FAC00 Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 395363 IP address blocks: 2620:129:6020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:06:31:d6:51:29:b5:0d:5f:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=eaa9b4cc-123d-4544-864c-5f33ee89a612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:45:f9:9f:4e:4d:d2:7f:39:0a:2a:b0:fe: fc:b7:01:5e:ed:8a:fa:c3:06:8c:80:ff:6d:6b:72: c7:0e:64:12:d7:b4:ae:3d:7e:80:07:8a:a9:d6:a8: 5a:1e:29:d3:30:d2:e8:8a:76:74:43:16:3b:71:47: 82:99:2c:54:73:84:c5:c6:04:0d:49:4d:ac:46:88: 3d:69:4b:f2:46:6f:56:b1:26:76:24:3e:ab:13:39: e3:31:da:19:bd:7b:eb:ba:86:d7:14:bb:92:90:03: 7e:ed:3b:88:f0:ef:7b:76:17:f4:75:ea:ae:c2:76: b7:82:2d:12:de:0f:43:86:42:64:18:5c:13:3d:df: 9c:93:b0:05:7c:6a:a1:fd:f9:03:e9:f2:35:49:02: 62:ee:2f:1e:42:98:ff:ab:72:c3:72:76:31:ab:18: d7:29:95:7d:bf:72:c8:ed:5e:c9:96:f9:f4:25:c7: 69:4b:aa:6e:93:96:cb:a5:42:5a:72:15:89:9e:d4: 86:a9:73:2d:fe:63:ee:24:7b:0e:33:ed:37:f7:97: a1:91:b2:4c:c8:6b:06:cc:aa:d8:a7:6f:88:ff:48: 91:6b:50:dd:8c:75:aa:1e:5b:28:c4:9e:d3:58:e9: a6:6b:ef:18:27:b1:d3:55:3e:f5:45:b6:09:95:45: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:ED:0F:BF:2D:A7:98:FE:DB:1E:C7:23:9D:78:32:77:0E:4F:AD:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl X509v3 Authority Key Identifier: keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer sbgp-ipAddrBlock: critical IPv6: 2620:129:6020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:e2:95:18:62:25:74:d8:cf:ac:8c:4d:0c:73:0d:1b:0e:03: b1:e6:45:37:98:6c:60:b9:c2:01:2c:e8:4b:81:b5:30:04:0e: 16:60:bf:94:91:83:c4:08:3e:1d:e1:b1:42:45:45:3e:1e:f4: 67:4b:1a:31:0d:77:88:f1:5a:19:8b:1c:42:dd:b5:0c:51:bb: 03:ef:42:22:6f:44:a4:de:be:0c:f0:63:b9:2b:3b:c4:c1:9f: 58:b1:df:01:a9:c4:09:a3:1d:e0:74:4b:dd:94:71:de:1f:49: 48:0b:20:ab:fe:00:81:9c:f1:c4:86:7f:48:19:b7:7c:36:a2: a4:9b:d8:48:6a:4f:8b:c8:43:13:95:68:bf:7f:e2:98:18:cd: f9:f9:61:46:93:30:86:d1:5f:dc:81:39:fb:66:56:7e:1c:65: 63:16:8a:e9:e4:9c:c7:66:52:02:d6:ab:33:1c:93:64:3a:c5: 01:c7:3d:91:e3:54:54:22:2c:67:b6:8e:18:05:00:8e:65:a2: 12:eb:a0:ad:d9:b1:91:7e:84:7e:cd:dc:13:17:fe:7b:1b:d1: 45:c3:72:01:7d:4c:61:e4:07:b9:f3:19:43:3d:47:bd:a1:67: 15:18:da:12:a5:ea:a8:25:8b:72:0b:c2:83:8e:f5:f4:00:f8: 20:bf:8b:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnRZQYx1lEptQ1frAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZiMDAxZDQtM2EyYi00MzZmLWE1NzItNTE4MjJhMzE1 OTQ1MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZWFhOWI0Y2MtMTIzZC00NTQ0LTg2NGMtNWYzM2VlODlhNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW5F+Z9OTdJ/OQoqsP78twFe7Yr6wwaMgP9t a3LHDmQS17SuPX6AB4qp1qhaHinTMNLoinZ0QxY7cUeCmSxUc4TFxgQNSU2sRog9 aUvyRm9WsSZ2JD6rEznjMdoZvXvruobXFLuSkAN+7TuI8O97dhf0dequwna3gi0S 3g9DhkJkGFwTPd+ck7AFfGqh/fkD6fI1SQJi7i8eQpj/q3LDcnYxqxjXKZV9v3LI 7V7Jlvn0JcdpS6puk5bLpUJachWJntSGqXMt/mPuJHsOM+0395ehkbJMyGsGzKrY p2+I/0iRa1DdjHWqHlsoxJ7TWOmma+8YJ7HTVT71RbYJlUUj+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGPtD78tp5j+2x7HI514MncOT63gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIw MDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgyMmEzMTU5NDUvZGViNDcxMjItMTBjYS0z YTQ0LWFhMTYtY2JjOWI2MWFmZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWZiMDAxZDQtM2EyYi00MzZmLWE1 NzItNTE4MjJhMzE1OTQ1LzFmYjAwMWQ0LTNhMmItNDM2Zi1hNTcyLTUxODIyYTMx NTk0NS5jcmwwHwYDVR0jBBgwFoAUdKd9Tqw3iqgM0MIrTF1vWza8INEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIwMDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgy MmEzMTU5NDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKWAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALPilRhiJXTYz6yMTQxzDRsOA7HmRTeYbGC5wgEs6EuBtTAEDhZg v5SRg8QIPh3hsUJFRT4e9GdLGjENd4jxWhmLHELdtQxRuwPvQiJvRKTevgzwY7kr O8TBn1ix3wGpxAmjHeB0S92Ucd4fSUgLIKv+AIGc8cSGf0gZt3w2oqSb2EhqT4vI QxOVaL9/4pgYzfn5YUaTMIbRX9yBOftmVn4cZWMWiunknMdmUgLWqzMck2Q6xQHH PZHjVFQiLGe2jhgFAI5lohLroK3ZsZF+hH7N3BMX/nsb0UXDcgF9TGHkB7nzGUM9 R72hZxUY2hKl6qgli3ILwoOO9fQA+CC/i4Y= -----END CERTIFICATE-----Generated at Fri Jun 6 16:46:06 2025 by rpki-client