$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/1e62cea0-b758-350e-8198-1006787cdbd5.roa File: 1e62cea0-b758-350e-8198-1006787cdbd5.roa (raw, json) Hash identifier: 9wuKUlIC/+KDk8p0unA54fbdd3XQRh8jzvhr+v2Q02Q= Subject key identifier: CA:32:8A:29:E8:F4:07:72:88:29:0B:0A:A8:A8:42:51:D4:E8:B2:7C Certificate issuer: /CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940 Certificate serial: 010D0C9F43285849CE9A3DDFE0CE55B07ED8D160 Authority key identifier: F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/1e62cea0-b758-350e-8198-1006787cdbd5.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 19747 IP address blocks: 2620:131:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:3d:df:e0:ce:55:b0:7e:d8:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=d1bca9df-aad0-476b-b4d9-c2514578d6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:22:4f:87:dc:82:58:21:0b:19:7f:27:65:4f: c5:31:0a:27:37:ca:6e:0c:6a:fd:2a:40:d2:ed:83: 02:1c:c0:ed:dc:0f:4a:a1:82:4f:dc:be:8a:19:d0: 73:3a:ff:4e:66:04:4e:96:c7:34:c4:bd:08:c1:33: b4:52:26:ec:08:a2:ff:8b:21:b1:97:90:6e:5f:12: 2b:05:73:84:e8:b8:f7:8f:48:e1:66:24:e5:6a:c2: 93:53:10:e9:9e:21:55:b8:57:b3:96:84:8f:d6:16: b7:09:33:34:32:1b:64:d3:c7:4d:3a:55:9b:1a:bd: e3:9f:db:a2:71:81:4e:7e:a4:b8:38:ad:d0:e2:a2: 7c:41:19:c1:4f:51:46:64:e7:10:b9:7e:b5:65:e9: 5e:7a:62:aa:4e:fd:ba:a5:71:d0:2e:b5:8d:38:0e: aa:c7:3c:a0:ca:de:03:ec:b5:df:f6:10:71:d6:00: 59:53:25:7c:40:93:95:7a:da:d9:ac:c2:9a:98:8e: 3e:6c:9f:6b:9d:4b:2d:f7:f6:34:53:d3:dd:1d:c6: 94:5d:f4:48:f1:f6:75:ce:98:07:28:32:94:af:79: c0:cf:34:33:13:0d:d8:46:6d:2f:2f:4a:f7:dc:bf: 32:a3:1d:4f:7f:ec:47:61:25:e6:ae:a4:8c:36:f5: 63:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:32:8A:29:E8:F4:07:72:88:29:0B:0A:A8:A8:42:51:D4:E8:B2:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/1e62cea0-b758-350e-8198-1006787cdbd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl X509v3 Authority Key Identifier: keyid:F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer sbgp-ipAddrBlock: critical IPv6: 2620:131:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e4:a7:c9:9f:74:4e:3a:04:31:fb:e2:93:e7:c8:9d:59:95: 5f:2c:0c:e9:1a:44:88:7a:e8:0c:67:11:2d:64:bb:c7:84:43: 4f:06:25:86:c8:45:04:0c:e0:a8:93:19:36:ee:63:5d:38:f7: 82:99:4f:1c:62:20:66:22:6c:66:6b:eb:82:50:23:66:ae:ea: c6:0b:dc:b8:15:bf:41:59:b6:01:1f:98:56:ec:f8:e0:47:ba: 54:cf:4a:ac:73:c3:04:68:b2:c4:9e:48:6f:07:fc:84:1e:c0: d4:97:42:7b:0e:1b:34:4a:94:e4:8d:4a:62:3f:11:1d:05:07: a0:99:f7:d4:6e:7e:39:63:f6:91:6d:e3:b2:2c:cd:b3:85:f6: d1:b6:8f:4a:2c:b3:60:bb:da:7f:d8:ae:b2:4a:3c:64:f2:e8: 6e:b1:00:05:90:48:5c:b4:86:ee:9a:8a:15:93:4e:f0:2e:53: 21:46:b4:0a:8d:06:37:d1:dd:bd:ee:f5:77:c1:6c:04:75:9a: 47:f2:9c:e8:ee:3f:69:b6:3f:d9:50:45:6b:a8:5a:a7:44:35: 2c:d6:11:37:ca:cf:8f:00:5b:2d:0b:5f:99:c1:7d:da:20:5a: 86:72:1c:e0:7d:b0:1b:2f:70:d6:94:91:54:fd:12:f8:9a:89: c1:77:02:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmj3f4M5VsH7Y0WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliMDAxM2ItYWE4Zi00MWJmLWE2ZjktMGIxYzA3MmY1 OTQwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZDFiY2E5ZGYtYWFkMC00NzZiLWI0ZDktYzI1MTQ1NzhkNmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iJPh9yCWCELGX8nZU/FMQonN8puDGr9KkDS 7YMCHMDt3A9KoYJP3L6KGdBzOv9OZgROlsc0xL0IwTO0UibsCKL/iyGxl5BuXxIr BXOE6Lj3j0jhZiTlasKTUxDpniFVuFezloSP1ha3CTM0Mhtk08dNOlWbGr3jn9ui cYFOfqS4OK3Q4qJ8QRnBT1FGZOcQuX61ZeleemKqTv26pXHQLrWNOA6qxzygyt4D 7LXf9hBx1gBZUyV8QJOVetrZrMKamI4+bJ9rnUst9/Y0U9PdHcaUXfRI8fZ1zpgH KDKUr3nAzzQzEw3YRm0vL0r33L8yox1Pf+xHYSXmrqSMNvVj1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMoyiino9AdyiCkLCqioQlHU6LJ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOWIw MDEzYi1hYThmLTQxYmYtYTZmOS0wYjFjMDcyZjU5NDAvMWU2MmNlYTAtYjc1OC0z NTBlLTgxOTgtMTAwNjc4N2NkYmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjliMDAxM2ItYWE4Zi00MWJmLWE2 ZjktMGIxYzA3MmY1OTQwL2I5YjAwMTNiLWFhOGYtNDFiZi1hNmY5LTBiMWMwNzJm NTk0MC5jcmwwHwYDVR0jBBgwFoAU9yw4cAI09lqb56K3XUux6UQcdBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOWIwMDEzYi1hYThmLTQxYmYtYTZmOS0wYjFj MDcyZjU5NDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABMTAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD7kp8mfdE46BDH74pPnyJ1ZlV8sDOkaRIh66AxnES1ku8eEQ08G JYbIRQQM4KiTGTbuY10494KZTxxiIGYibGZr64JQI2au6sYL3LgVv0FZtgEfmFbs +OBHulTPSqxzwwRossSeSG8H/IQewNSXQnsOGzRKlOSNSmI/ER0FB6CZ99Rufjlj 9pFt47IszbOF9tG2j0oss2C72n/YrrJKPGTy6G6xAAWQSFy0hu6aihWTTvAuUyFG tAqNBjfR3b3u9XfBbAR1mkfynOjuP2m2P9lQRWuoWqdENSzWETfKz48AWy0LX5nB fdogWoZyHOB9sBsvcNaUkVT9EviaicF3Aqw= -----END CERTIFICATE-----Generated at Sun Jun 8 12:31:10 2025 by rpki-client