$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa File: fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa (raw, json) Hash identifier: Q1r+OfspNMTSvQ9hdYNZ83Vv3Ei+jc3z74TuPwLjmQo= Subject key identifier: 77:D5:2E:BA:FD:BA:1B:7C:98:D6:56:F5:EB:49:56:DF:21:96:B3:1D Certificate issuer: /CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940 Certificate serial: 010D0C9F43285849CE9A3DEF124A650A70BFEBC0 Authority key identifier: F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 58419 IP address blocks: 2620:131:3008::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:3d:ef:12:4a:65:0a:70:bf:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=65f9535c-5c7a-46f2-9220-f13c75fc5f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:28:9c:71:d6:31:5f:ad:77:2c:b0:48:53: e0:07:00:c5:a2:6e:5a:f5:23:8a:f3:d5:13:49:d7: 2d:58:72:46:40:65:06:82:68:e7:64:df:fd:6c:80: 10:fe:87:63:0c:c6:d1:43:c3:d2:e2:df:3f:16:08: d7:3a:de:65:ae:23:4c:36:ab:5a:2f:cb:df:dc:57: 49:94:9b:a9:69:73:4d:99:87:1a:16:79:89:28:3f: 90:e7:d2:ee:96:47:89:e7:bc:09:cc:b4:17:9d:93: c3:5a:dc:5b:04:f6:01:fd:c4:b2:ba:36:cb:b3:3b: 45:db:08:1f:a9:d1:fe:a6:cb:f1:94:c9:97:b8:bc: 38:3c:75:6e:8a:ca:bd:ae:90:8a:5d:0f:af:5a:4a: a7:f2:06:34:2e:c2:10:33:43:d0:a6:ab:a2:f0:57: 89:36:c6:72:ce:43:18:8c:f2:84:95:fa:31:bb:69: 20:61:31:1c:5e:56:74:fc:1b:e9:a1:e1:fc:75:29: a9:95:a1:4a:ee:8f:83:7a:7f:60:13:7b:f7:fe:cc: 01:96:f2:4e:c7:f2:b6:55:8f:26:29:08:62:18:78: 05:2c:58:17:30:4f:3c:3a:b9:3a:61:60:1a:3c:1e: 9e:ff:73:7a:79:86:b4:6a:17:c6:b9:cb:8b:a9:54: 4c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D5:2E:BA:FD:BA:1B:7C:98:D6:56:F5:EB:49:56:DF:21:96:B3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl X509v3 Authority Key Identifier: keyid:F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer sbgp-ipAddrBlock: critical IPv6: 2620:131:3008::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b2:1a:bd:36:4e:18:27:bb:0b:e5:ba:bb:d1:e0:d7:60:4b: 76:93:f2:20:4f:24:66:f1:58:db:24:12:14:3c:a5:bc:88:7c: 30:94:bc:a0:ae:d5:d6:66:e0:41:fe:75:ee:5f:7f:63:f2:c1: f5:36:3d:13:a4:f7:06:a3:0e:a2:51:c5:77:d6:aa:f0:b5:5a: ec:f6:02:42:ba:e7:d8:c4:3e:fe:71:d6:3a:2a:60:40:8a:6f: 8b:9d:1d:18:7b:0b:8f:4f:2b:98:c3:a7:02:84:4e:3a:52:de: 05:de:b0:85:7f:b5:1d:3d:f1:7c:8e:23:05:de:b1:c1:fe:22: d8:1c:e4:51:72:9a:61:6e:bf:d4:0b:9f:9e:9b:5f:27:27:fc: db:ab:b3:0e:de:53:27:9b:39:fe:a9:c5:1b:54:09:0c:3d:25: 12:28:28:11:fe:90:a2:20:7e:d0:e5:60:8e:00:7c:16:8c:2a: 17:d7:e0:bf:1c:77:94:0a:bc:59:31:1e:0f:88:b7:60:a9:14: de:94:cf:91:87:e2:86:b8:dc:f8:a6:64:54:bf:26:d8:d0:f3: 15:df:39:9b:85:4a:df:a3:7c:54:e3:46:84:12:3d:6d:84:5e: 80:35:9c:6e:b7:71:61:4e:ba:34:e0:6c:5d:d3:47:26:e0:28: d6:8f:9f:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmj3vEkplCnC/68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliMDAxM2ItYWE4Zi00MWJmLWE2ZjktMGIxYzA3MmY1 OTQwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NjVmOTUzNWMtNWM3YS00NmYyLTkyMjAtZjEzYzc1ZmM1ZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkconHHWMV+tdyywSFPgBwDFom5a9SOK89UT SdctWHJGQGUGgmjnZN/9bIAQ/odjDMbRQ8PS4t8/FgjXOt5lriNMNqtaL8vf3FdJ lJupaXNNmYcaFnmJKD+Q59LulkeJ57wJzLQXnZPDWtxbBPYB/cSyujbLsztF2wgf qdH+psvxlMmXuLw4PHVuisq9rpCKXQ+vWkqn8gY0LsIQM0PQpqui8FeJNsZyzkMY jPKElfoxu2kgYTEcXlZ0/BvpoeH8dSmplaFK7o+Den9gE3v3/swBlvJOx/K2VY8m KQhiGHgFLFgXME88Ork6YWAaPB6e/3N6eYa0ahfGucuLqVRMpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHfVLrr9uht8mNZW9etJVt8hlrMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOWIw MDEzYi1hYThmLTQxYmYtYTZmOS0wYjFjMDcyZjU5NDAvZmM0ZDdkYmQtOTYwNi0z ZjQzLTgzNjUtY2Y1NDQzMWFhNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjliMDAxM2ItYWE4Zi00MWJmLWE2 ZjktMGIxYzA3MmY1OTQwL2I5YjAwMTNiLWFhOGYtNDFiZi1hNmY5LTBiMWMwNzJm NTk0MC5jcmwwHwYDVR0jBBgwFoAU9yw4cAI09lqb56K3XUux6UQcdBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOWIwMDEzYi1hYThmLTQxYmYtYTZmOS0wYjFj MDcyZjU5NDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiABMTAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFCyGr02ThgnuwvlurvR4NdgS3aT8iBPJGbxWNskEhQ8pbyIfDCU vKCu1dZm4EH+de5ff2PywfU2PROk9wajDqJRxXfWqvC1Wuz2AkK659jEPv5x1joq YECKb4udHRh7C49PK5jDpwKETjpS3gXesIV/tR098XyOIwXescH+Itgc5FFymmFu v9QLn56bXycn/Nursw7eUyebOf6pxRtUCQw9JRIoKBH+kKIgftDlYI4AfBaMKhfX 4L8cd5QKvFkxHg+It2CpFN6Uz5GH4oa43PimZFS/JtjQ8xXfOZuFSt+jfFTjRoQS PW2EXoA1nG63cWFOujTgbF3TRybgKNaPn6E= -----END CERTIFICATE-----Generated at Sat Jun 7 21:16:25 2025 by rpki-client