$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa File: 2505f67b-6fa0-3842-b151-ace4058d830a.roa (raw, json) Hash identifier: nlpRp79HuH4pXN8VHSztMn5EqC3IxH8lL/4eEMHD1DI= Subject key identifier: D3:DE:5F:0E:42:65:B6:3C:91:EC:5B:45:4D:E6:46:EB:3F:C9:B5:08 Certificate issuer: /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5 Certificate serial: 010D0C9F4328584957F3F21E79A1134E31BB7A40 Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 809 IP address blocks: 2620:13b:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:f2:1e:79:a1:13:4e:31:bb:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=63824797-4559-44e7-b88d-fce873861676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:16:c4:57:df:88:38:bd:3f:8d:7d:e9:3f: a6:ea:55:1c:b6:fc:45:7a:23:20:cb:72:6d:61:90: 69:94:85:12:98:16:84:c8:6f:c8:cc:91:96:ef:58: 65:ec:29:4c:48:a4:99:60:fc:f8:5f:7d:0a:8c:46: 01:9c:e2:51:51:e5:25:c2:c4:c7:9b:df:f6:0e:ff: c9:d8:c0:0b:ef:ad:af:b4:62:ca:07:cd:67:66:32: 2b:54:f8:f5:db:c7:21:cb:0f:dd:1b:ee:56:16:e5: 60:e4:39:c8:1b:71:ae:00:ec:84:e0:12:78:cf:df: a4:3a:3d:67:f9:b2:04:0c:34:1c:86:1e:20:f1:7d: 91:ed:3d:c9:36:65:22:1f:a1:dc:23:67:b6:35:e2: f9:f4:8e:a0:4f:67:ab:d1:3f:01:8b:e4:b1:29:57: 9e:9d:12:c6:78:e7:a5:fb:80:a0:92:ea:2f:b6:e1: 15:f2:32:34:39:d6:1a:84:df:db:1f:c9:e3:95:2b: 32:4f:18:1f:f6:ae:54:fa:30:e1:a4:96:34:af:1b: a1:11:09:5f:9d:d2:55:ac:ff:b1:88:48:8e:01:da: 55:de:8f:f1:6c:26:e6:c9:5f:d2:02:68:2a:f5:3a: c4:8e:64:1d:9f:dd:cb:a0:2f:fc:a5:e9:2c:6b:aa: 0b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DE:5F:0E:42:65:B6:3C:91:EC:5B:45:4D:E6:46:EB:3F:C9:B5:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl X509v3 Authority Key Identifier: keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer sbgp-ipAddrBlock: critical IPv6: 2620:13b:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:78:ff:1e:0a:18:12:b4:75:aa:2d:c3:87:4a:6e:95:65:97: e3:5e:bb:54:db:53:57:95:43:d8:1d:63:35:e7:a6:70:b6:58: 0c:6b:55:07:7c:79:a6:be:9c:f5:a3:e9:46:8f:91:85:ce:27: 58:87:ed:04:91:a4:fc:ea:7f:e5:60:6a:c6:94:30:f1:2c:a1: 47:1f:e1:77:41:a2:a0:1a:b0:cb:29:86:8c:a9:59:0d:6f:7f: f4:8f:f6:2c:50:aa:ad:4b:ea:97:1b:27:44:b8:42:5e:95:62: aa:42:e4:c1:c5:e8:97:c2:00:f6:b4:7e:13:33:e4:25:c4:ac: cc:a0:2b:ff:54:16:db:f4:0d:7a:31:08:42:a5:42:ac:cf:2e: ab:1b:11:90:c1:dd:82:75:60:04:d4:b0:a9:0c:ec:25:35:52: 3a:d6:fc:27:15:ad:d8:66:01:98:5e:88:7f:07:fd:8c:d7:84: 95:1d:91:e6:11:8e:1e:50:1e:93:fc:1c:46:09:22:4e:b3:73: 35:29:67:7f:76:c5:25:3a:70:bc:cc:0b:74:3f:10:5d:6b:0f: a4:d2:87:d4:4d:26:1b:4c:b8:fa:af:bc:d7:0b:3b:4a:83:d7: f5:35:b4:69:81:4d:c4:d1:cc:10:40:79:66:d2:16:92:be:20: ff:f1:a0:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElX8/IeeaETTjG7ekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBkNGE1MTAtMTQ2OC00NmU4LWJlYWYtZTY2ODFhMTE5 MGM1MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NjM4MjQ3OTctNDU1OS00NGU3LWI4OGQtZmNlODczODYxNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZQWxFffiDi9P4196T+m6lUctvxFeiMgy3Jt YZBplIUSmBaEyG/IzJGW71hl7ClMSKSZYPz4X30KjEYBnOJRUeUlwsTHm9/2Dv/J 2MAL762vtGLKB81nZjIrVPj128chyw/dG+5WFuVg5DnIG3GuAOyE4BJ4z9+kOj1n +bIEDDQchh4g8X2R7T3JNmUiH6HcI2e2NeL59I6gT2er0T8Bi+SxKVeenRLGeOel +4CgkuovtuEV8jI0OdYahN/bH8njlSsyTxgf9q5U+jDhpJY0rxuhEQlfndJVrP+x iEiOAdpV3o/xbCbmyV/SAmgq9TrEjmQdn93LoC/8peksa6oLQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNPeXw5CZbY8kexbRU3mRus/ybUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMGQ0 YTUxMC0xNDY4LTQ2ZTgtYmVhZi1lNjY4MWExMTkwYzUvMjUwNWY2N2ItNmZhMC0z ODQyLWIxNTEtYWNlNDA1OGQ4MzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzBkNGE1MTAtMTQ2OC00NmU4LWJl YWYtZTY2ODFhMTE5MGM1L2MwZDRhNTEwLTE0NjgtNDZlOC1iZWFmLWU2NjgxYTEx OTBjNS5jcmwwHwYDVR0jBBgwFoAUZ9+WYAuMnyKzgx5Kvt/kHjFCrqowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMGQ0YTUxMC0xNDY4LTQ2ZTgtYmVhZi1lNjY4 MWExMTkwYzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABOwAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH14/x4KGBK0daotw4dKbpVll+Neu1TbU1eVQ9gdYzXnpnC2WAxr VQd8eaa+nPWj6UaPkYXOJ1iH7QSRpPzqf+VgasaUMPEsoUcf4XdBoqAasMsphoyp WQ1vf/SP9ixQqq1L6pcbJ0S4Ql6VYqpC5MHF6JfCAPa0fhMz5CXErMygK/9UFtv0 DXoxCEKlQqzPLqsbEZDB3YJ1YATUsKkM7CU1UjrW/CcVrdhmAZheiH8H/YzXhJUd keYRjh5QHpP8HEYJIk6zczUpZ392xSU6cLzMC3Q/EF1rD6TSh9RNJhtMuPqvvNcL O0qD1/U1tGmBTcTRzBBAeWbSFpK+IP/xoMc= -----END CERTIFICATE-----Generated at Sat Apr 12 16:24:33 2025 by rpki-client