$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa File: b0c012f4-baa2-3789-9ae9-0736d044aafe.roa (raw, json) Hash identifier: nQ4fRD1QBkth756u+BTReK+8mY0iR6BjVodaLbG+KpM= Subject key identifier: 98:2B:F7:14:F7:8B:AB:D4:4A:42:CB:43:24:D7:4E:A2:B9:3B:E0:77 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584950F95F46B3B76899105C8580 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 27281 IP address blocks: 2620:116:800a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:5f:46:b3:b7:68:99:10:5c:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=e3a7bdc3-3d81-45be-ba8d-e77c55248d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:31:40:1b:26:c2:47:f0:a5:78:f3:19:6d:1d: d2:db:3f:1f:4a:8d:2b:fb:fd:e5:3d:8f:da:2f:91: 29:89:3f:76:f5:df:65:dd:44:95:00:51:8c:d3:f4: 34:f4:82:5a:a6:ca:d6:01:cb:d1:60:b8:be:eb:2b: ea:0e:e2:2f:5a:60:15:5a:09:c8:0d:27:93:93:b8: df:d6:1e:e5:12:0f:9c:26:76:bd:f1:d3:cf:33:27: a0:cb:88:55:48:b8:d4:13:c7:d8:0e:73:a1:01:46: cb:67:a6:ee:d6:84:d9:f0:f2:c9:c2:e6:4d:9b:b1: 64:75:3b:c0:be:13:40:f8:8f:ad:25:c7:dd:69:ea: d2:2b:35:59:1d:ba:8a:1e:7e:68:3a:4d:11:d4:e7: 4c:6f:a8:21:07:ea:07:ab:5c:33:35:2b:f7:26:26: b2:51:6d:62:82:c7:13:a8:0c:f7:e0:cc:33:ce:74: cd:1b:34:e4:1e:38:4a:1f:80:b1:06:83:f7:05:1b: 36:2f:1b:33:b6:49:d2:69:0d:a3:16:22:e6:ed:2e: a0:dc:ba:1e:f9:bd:b8:11:88:6a:ab:1a:6e:59:d2: 6c:6a:e5:1e:4a:43:4c:b4:64:2b:5a:6b:80:9e:19: a2:e8:10:91:80:37:5b:5c:5d:62:40:6b:16:49:b8: 39:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2B:F7:14:F7:8B:AB:D4:4A:42:CB:43:24:D7:4E:A2:B9:3B:E0:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d4:71:16:a7:cf:c4:d7:85:0f:8a:63:a8:c5:be:00:0f:c6: 4a:01:1c:9e:b7:d4:52:2c:32:2a:ca:62:1b:82:32:67:46:ea: d6:69:ce:9e:f4:e4:e0:cf:2f:80:a8:a2:55:18:84:5b:25:c8: 11:57:ee:a2:5f:74:a2:ce:39:f2:07:bf:aa:bb:fb:8a:30:ff: 75:08:a2:4c:62:c3:b9:81:45:44:e2:9b:1b:8a:61:c4:88:22: c0:a8:5c:95:70:82:90:bf:e2:dc:a1:b6:8b:2f:9d:d8:bf:c6: ee:f9:82:63:6e:a3:33:e3:bd:d2:ab:0d:e0:da:e6:77:9a:80: f0:d5:e4:a0:92:62:dc:12:79:c0:a1:06:39:1d:27:cf:38:30: 41:23:d0:22:0c:f3:50:32:4e:a6:5f:97:05:a2:af:7d:05:52: 20:e0:82:21:94:e8:79:a8:bf:8c:51:dd:15:a4:83:52:f1:c8: d8:03:e9:eb:3b:aa:e3:42:79:91:3d:b5:fa:19:79:08:f6:d7: 1e:0d:ae:c9:38:7d:ca:22:6c:89:e6:0b:b7:61:2b:af:26:53: 82:15:97:9a:49:26:6b:7f:1d:3d:9b:67:e7:e9:66:cf:31:c1: a8:f0:7e:b1:b5:60:0a:3f:b0:0b:b9:2c:18:2b:75:c3:1b:9a: 77:18:93:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElQ+V9Gs7domRBchYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk ZTNhN2JkYzMtM2Q4MS00NWJlLWJhOGQtZTc3YzU1MjQ4ZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjFAGybCR/ClePMZbR3S2z8fSo0r+/3lPY/a L5EpiT929d9l3USVAFGM0/Q09IJapsrWAcvRYLi+6yvqDuIvWmAVWgnIDSeTk7jf 1h7lEg+cJna98dPPMyegy4hVSLjUE8fYDnOhAUbLZ6bu1oTZ8PLJwuZNm7FkdTvA vhNA+I+tJcfdaerSKzVZHbqKHn5oOk0R1OdMb6ghB+oHq1wzNSv3JiayUW1igscT qAz34MwzznTNGzTkHjhKH4CxBoP3BRs2LxsztknSaQ2jFiLm7S6g3Loe+b24EYhq qxpuWdJsauUeSkNMtGQrWmuAnhmi6BCRgDdbXF1iQGsWSbg51wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJgr9xT3i6vUSkLLQyTXTqK5O+B3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvYjBjMDEyZjQtYmFhMi0z Nzg5LTlhZTktMDczNmQwNDRhYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGnUcRanz8TXhQ+KY6jFvgAPxkoBHJ631FIsMirKYhuCMmdG6tZp zp705ODPL4CoolUYhFslyBFX7qJfdKLOOfIHv6q7+4ow/3UIokxiw7mBRUTimxuK YcSIIsCoXJVwgpC/4tyhtosvndi/xu75gmNuozPjvdKrDeDa5neagPDV5KCSYtwS ecChBjkdJ884MEEj0CIM81AyTqZflwWir30FUiDggiGU6Hmov4xR3RWkg1LxyNgD 6es7quNCeZE9tfoZeQj21x4Nrsk4fcoibInmC7dhK68mU4IVl5pJJmt/HT2bZ+fp Zs8xwajwfrG1YAo/sAu5LBgrdcMbmncYk3w= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:26 2025 by rpki-client