$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/662fdf12-14b1-3e5f-bafc-fbadee4de3ee.roa File: 662fdf12-14b1-3e5f-bafc-fbadee4de3ee.roa (raw, json) Hash identifier: Q7/Kt6JGPyVcBF4MldGcm9u5jQOjnpCh+6ANlK9OqTE= Subject key identifier: 74:50:A6:92:EC:C7:D1:01:B7:4C:F6:33:2E:6A:56:49:1C:CB:FA:73 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584950F95F99A5CAD9105381AF80 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/662fdf12-14b1-3e5f-bafc-fbadee4de3ee.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 27281 IP address blocks: 2620:116:800c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:5f:99:a5:ca:d9:10:53:81:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=5111dc2f-163f-4c15-893c-a8fd4a049a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f4:eb:3f:86:41:ed:70:43:e0:f5:5b:41:58: 8b:a2:69:45:98:10:da:61:24:f0:db:bc:5e:d3:cc: a7:74:d2:aa:43:31:73:85:4f:08:89:77:b6:38:7c: c3:74:d5:ce:32:99:a8:f2:a2:d8:a3:36:d2:48:41: a6:a7:9f:17:be:08:9f:90:b4:d2:95:02:2c:d2:01: c6:04:eb:ea:30:ee:53:dc:ae:e2:9a:e8:d9:d7:52: c0:cd:f6:84:77:fb:7e:91:71:0f:de:d0:1d:39:40: bd:bd:c5:aa:40:56:ab:57:ba:c4:bd:c0:44:c3:64: a3:5a:00:26:dc:e3:fb:1e:bf:25:f5:86:23:17:d5: d9:41:3a:24:11:9e:83:4e:06:f1:5b:68:e0:73:fb: 33:f0:5e:cc:55:f6:4e:0a:65:c8:65:2e:9c:56:af: 40:9b:bf:f3:5e:77:2e:54:13:81:e5:13:d4:7e:25: 73:ff:22:7f:52:8a:3c:0c:57:2e:51:7e:59:96:9a: 3a:d0:30:34:9b:84:fe:27:9a:7a:45:5f:3d:f2:3c: fa:b2:84:3e:d4:6c:cb:6e:0e:ad:e4:75:55:a5:22: 4f:e6:5c:1b:9f:7d:36:13:31:3e:d1:fc:01:d2:b7: 2d:17:bf:89:d9:4b:85:a4:36:94:58:95:aa:82:00: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:50:A6:92:EC:C7:D1:01:B7:4C:F6:33:2E:6A:56:49:1C:CB:FA:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/662fdf12-14b1-3e5f-bafc-fbadee4de3ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:e3:b9:71:86:42:5c:7c:42:36:e6:5a:b9:dd:26:2f:aa:04: 02:c2:0e:49:f5:e9:69:df:ab:e7:19:3f:6c:df:4c:01:ac:ff: 57:eb:dd:bd:f6:ce:ae:01:0d:84:54:5d:a4:94:de:3d:90:2b: 5d:62:6f:d0:d0:41:73:f0:2f:31:08:47:7a:d7:23:c9:93:d1: 9e:86:ee:b5:62:bc:bf:f5:68:06:63:23:2b:f3:93:3b:9d:ec: 5d:ef:ae:80:72:02:34:d8:01:05:a0:a1:b3:fb:21:9c:1e:de: 24:03:3b:78:7f:d7:61:38:46:5e:a6:19:90:76:4d:db:98:d6: 9b:ae:0d:13:36:15:47:02:29:c5:45:f7:9f:a1:27:9e:c4:0c: 66:f7:8b:0a:12:d3:6c:61:f0:92:1a:06:c7:aa:da:44:c8:21: b1:58:ec:cd:98:b3:5a:50:92:a5:00:8e:2d:4f:36:a2:a9:3a: a7:18:a9:92:15:77:f7:b5:d6:64:db:ff:aa:9a:f0:22:c0:03: d0:fd:cd:9d:fa:0f:75:75:d6:a4:69:9e:ba:f1:51:81:43:14: 09:c4:55:11:c1:1c:55:6b:71:1e:1d:e8:fe:72:f6:fb:f0:9b: 2a:4c:00:cf:37:2d:d7:c9:b8:e2:5f:44:74:5c:4c:e9:8d:d4: c2:f0:f6:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElQ+V+ZpcrZEFOBr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk NTExMWRjMmYtMTYzZi00YzE1LTg5M2MtYThmZDRhMDQ5YTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfTrP4ZB7XBD4PVbQViLomlFmBDaYSTw27xe 08yndNKqQzFzhU8IiXe2OHzDdNXOMpmo8qLYozbSSEGmp58XvgifkLTSlQIs0gHG BOvqMO5T3K7imujZ11LAzfaEd/t+kXEP3tAdOUC9vcWqQFarV7rEvcBEw2SjWgAm 3OP7Hr8l9YYjF9XZQTokEZ6DTgbxW2jgc/sz8F7MVfZOCmXIZS6cVq9Am7/zXncu VBOB5RPUfiVz/yJ/Uoo8DFcuUX5Zlpo60DA0m4T+J5p6RV898jz6soQ+1GzLbg6t 5HVVpSJP5lwbn302EzE+0fwB0rctF7+J2UuFpDaUWJWqggDkhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHRQppLsx9EBt0z2My5qVkkcy/pzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvNjYyZmRmMTItMTRiMS0z ZTVmLWJhZmMtZmJhZGVlNGRlM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKDjuXGGQlx8QjbmWrndJi+qBALCDkn16Wnfq+cZP2zfTAGs/1fr 3b32zq4BDYRUXaSU3j2QK11ib9DQQXPwLzEIR3rXI8mT0Z6G7rVivL/1aAZjIyvz kzud7F3vroByAjTYAQWgobP7IZwe3iQDO3h/12E4Rl6mGZB2TduY1puuDRM2FUcC KcVF95+hJ57EDGb3iwoS02xh8JIaBseq2kTIIbFY7M2Ys1pQkqUAji1PNqKpOqcY qZIVd/e11mTb/6qa8CLAA9D9zZ36D3V11qRpnrrxUYFDFAnEVRHBHFVrcR4d6P5y 9vvwmypMAM83LdfJuOJfRHRcTOmN1MLw9oA= -----END CERTIFICATE-----Generated at Sat Apr 5 12:17:50 2025 by rpki-client