$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/12fd7a2a-fa17-3ec2-83e3-17b185260ffd.roa File: 12fd7a2a-fa17-3ec2-83e3-17b185260ffd.roa (raw, json) Hash identifier: iysntk7QwwHOYlPdqWG/ynW4KsBVZKshfnLTVX5oyUg= Subject key identifier: 23:02:54:3B:62:71:60:20:F7:BF:7A:16:89:08:05:B0:26:52:CB:DE Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584950F9646721A9639B5B511300 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/12fd7a2a-fa17-3ec2-83e3-17b185260ffd.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 14618 IP address blocks: 2620:116:800b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:64:67:21:a9:63:9b:5b:51:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=f2725f88-4d50-4a4c-befe-e7bd19d2fd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:8d:50:81:cd:19:17:c2:d6:d7:80:7c:30: 16:1a:da:1d:d2:22:61:be:ca:2f:f4:66:d4:2d:b7: 7f:f1:ab:d3:2b:67:f4:4b:ab:86:a8:1a:56:87:2d: 6b:83:00:96:8b:12:51:4b:64:4c:f0:14:d0:f8:d4: 24:97:f6:d5:85:ed:67:a9:6b:64:74:97:6d:8c:09: 28:bb:09:f5:c6:71:a8:93:87:ce:40:d2:11:c2:bf: ab:ff:06:8c:9e:f2:2c:c5:93:a2:e2:9f:f4:e5:a2: d7:5e:90:35:75:b4:e1:e9:e5:36:ec:e6:33:d8:21: f5:42:b1:3d:d8:c3:1e:d6:b9:95:88:05:8c:21:fc: b1:97:6c:8f:9b:db:eb:3c:a5:05:fd:52:56:83:27: a3:e8:05:59:5a:78:8b:bc:c5:4b:c0:ed:99:8a:1d: ea:cc:39:c0:7b:6e:74:57:32:14:eb:05:02:7d:80: ac:a4:0b:ef:ab:61:fd:49:4d:4c:95:86:08:7e:32: 79:f9:12:59:44:a5:3d:ec:2b:49:fe:54:f4:ce:1d: 10:c2:d7:52:ce:b2:d8:60:3b:29:09:84:bb:e1:38: c9:50:41:89:9e:87:74:84:de:ef:9c:0f:50:97:c1: ed:1e:f0:d4:fc:ce:b0:ca:b1:c3:cf:e1:bb:db:8b: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:02:54:3B:62:71:60:20:F7:BF:7A:16:89:08:05:B0:26:52:CB:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/12fd7a2a-fa17-3ec2-83e3-17b185260ffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c1:36:d4:ea:e6:64:ec:e7:9b:96:92:1e:4a:39:01:68:81: 45:cf:b7:2a:28:1e:ef:5c:65:6e:06:2c:2c:0e:1f:8e:90:eb: 19:d7:dd:8c:2f:4a:c2:fe:4a:43:83:36:04:68:2f:9a:80:7d: e3:71:bd:0d:6f:56:fd:23:8c:d8:c7:28:59:80:15:1c:9a:f1: df:b7:2c:8d:7c:69:e6:4b:93:a9:c3:6b:0a:03:18:af:b3:e9: fc:1b:a4:f0:7f:d6:80:12:43:87:a9:f2:0e:8b:9a:14:f1:23: ed:03:83:3b:38:32:96:c9:0f:46:7e:c1:89:28:0d:b8:44:20: 29:7c:81:bc:19:67:e0:9e:62:2c:a5:0e:ed:60:98:ee:20:38: 3c:ac:69:ee:14:1a:19:f8:9d:c4:df:b6:79:7c:14:4d:be:0b: 5f:f2:60:5a:57:b0:06:e8:21:7d:83:7b:2a:d9:c2:e4:44:a3: aa:b7:ae:64:32:c0:dc:2e:b6:cc:35:51:74:0b:0f:d1:f2:db: 07:41:d7:2d:59:38:15:cd:8b:a9:fe:c8:83:03:61:65:1b:ef: a2:86:f8:b6:47:ae:2a:9d:5a:68:fc:14:26:15:64:e7:ab:3e: 27:a6:82:67:92:20:f1:1b:92:19:55:49:93:16:85:8a:b7:32: eb:c7:ca:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElQ+WRnIaljm1tREwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk ZjI3MjVmODgtNGQ1MC00YTRjLWJlZmUtZTdiZDE5ZDJmZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDGNUIHNGRfC1teAfDAWGtod0iJhvsov9GbU Lbd/8avTK2f0S6uGqBpWhy1rgwCWixJRS2RM8BTQ+NQkl/bVhe1nqWtkdJdtjAko uwn1xnGok4fOQNIRwr+r/waMnvIsxZOi4p/05aLXXpA1dbTh6eU27OYz2CH1QrE9 2MMe1rmViAWMIfyxl2yPm9vrPKUF/VJWgyej6AVZWniLvMVLwO2Zih3qzDnAe250 VzIU6wUCfYCspAvvq2H9SU1MlYYIfjJ5+RJZRKU97CtJ/lT0zh0QwtdSzrLYYDsp CYS74TjJUEGJnod0hN7vnA9Ql8HtHvDU/M6wyrHDz+G724v+2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCMCVDticWAg9796FokIBbAmUsveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMTJmZDdhMmEtZmExNy0z ZWMyLTgzZTMtMTdiMTg1MjYwZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI7BNtTq5mTs55uWkh5KOQFogUXPtyooHu9cZW4GLCwOH46Q6xnX 3YwvSsL+SkODNgRoL5qAfeNxvQ1vVv0jjNjHKFmAFRya8d+3LI18aeZLk6nDawoD GK+z6fwbpPB/1oASQ4ep8g6LmhTxI+0Dgzs4MpbJD0Z+wYkoDbhEICl8gbwZZ+Ce YiylDu1gmO4gODysae4UGhn4ncTftnl8FE2+C1/yYFpXsAboIX2DeyrZwuREo6q3 rmQywNwutsw1UXQLD9Hy2wdB1y1ZOBXNi6n+yIMDYWUb76KG+LZHriqdWmj8FCYV ZOerPiemgmeSIPEbkhlVSZMWhYq3MuvHyu0= -----END CERTIFICATE-----Generated at Fri Apr 4 23:32:48 2025 by rpki-client