$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa File: 1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa (raw, json) Hash identifier: +i79RRxtmP/63Ztg1PKUVg2ZnTOkG+tCw/rPSHfBO7Y= Subject key identifier: 8D:3A:DF:68:54:30:DB:3F:69:7C:1C:AA:B6:B9:34:92:57:7A:60:68 Certificate issuer: /CN=1d25e0e4-3256-419b-9e99-0f045d2a1125 Certificate serial: 010D0C9F4328584A1465611D9CA5EF05DD53ED80 Authority key identifier: E0:41:83:40:9B:53:F0:4A:26:F2:03:CA:E0:7B:11:29:54:E7:A4:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 25776 IP address blocks: 2620:0:2b20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:61:1d:9c:a5:ef:05:dd:53:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d25e0e4-3256-419b-9e99-0f045d2a1125 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=5b61684b-c23d-4b55-9134-1df29340e7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a1:74:d5:83:c6:8f:40:8f:3d:db:c2:a3:ce: 44:51:62:34:39:ad:26:03:f8:db:29:80:7b:08:f5: d8:1c:6d:4f:10:a0:e4:23:dd:80:60:34:68:ed:23: b9:7b:1c:60:bf:be:99:9f:1f:24:7e:72:34:28:8c: 21:6a:05:9d:b0:f7:ac:a9:8e:d7:1a:cf:5f:33:0a: 6f:a4:e7:db:a9:58:d7:ab:25:27:13:d9:14:68:98: d8:27:77:55:c4:c2:a0:93:5c:0d:36:2b:79:5c:15: 86:f1:f5:c0:a5:58:58:57:a0:c8:20:0b:67:0b:07: 7c:f5:c8:a6:67:a9:85:0a:b7:59:b3:0b:6b:66:77: b9:6e:65:2d:07:d4:f7:74:25:e7:eb:75:6b:6f:b6: 62:fa:0d:ac:79:0b:6f:82:9c:53:ce:fa:11:ea:43: 00:34:ad:ff:de:23:8b:6f:7f:9a:91:a9:34:4c:86: e5:42:75:21:27:b7:89:48:86:d5:ed:4a:31:c9:a5: a2:c7:c8:07:6f:cb:04:3b:b5:8f:b0:97:ab:2a:21: 3e:b7:57:16:80:79:dd:05:e3:f2:ff:d2:47:cb:b7: 9d:b7:2c:15:b5:1c:3c:0f:c9:dd:c1:9e:bd:8f:3a: 17:f1:e4:30:70:b0:17:ec:34:43:46:59:1e:7a:af: b0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3A:DF:68:54:30:DB:3F:69:7C:1C:AA:B6:B9:34:92:57:7A:60:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.crl X509v3 Authority Key Identifier: keyid:E0:41:83:40:9B:53:F0:4A:26:F2:03:CA:E0:7B:11:29:54:E7:A4:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:2b20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a4:a0:d0:39:30:56:5b:e2:00:c9:70:6c:c4:1a:10:01:51: 99:c5:4b:5c:8e:e2:88:ce:dc:3c:7a:ab:3a:71:aa:73:25:43: bc:be:3c:d2:7b:84:19:0f:6e:f4:09:8c:95:7c:84:96:76:87: 92:06:49:e8:ee:d1:83:ec:dc:8e:ec:ca:94:1c:99:b7:85:76: 41:2d:e2:bf:0b:1a:e7:27:3b:a3:71:5e:67:87:94:34:e5:c7: 82:79:4f:5a:65:b8:4b:d9:21:0a:65:76:77:28:45:50:ce:6e: 8b:c5:65:31:9f:d8:ed:33:1b:68:48:9c:fc:23:e1:01:7d:5c: 57:a9:07:a8:52:e3:08:84:4f:c2:63:5d:00:d4:db:a4:66:8d: 61:91:46:60:fe:6f:34:07:8d:e9:32:8f:20:14:fc:6e:f3:82: 8e:6d:1d:c1:e1:98:89:54:ba:b8:ed:5b:25:b5:a7:8c:22:9f: 95:d1:39:10:6b:f0:07:84:c2:c9:a6:0e:db:08:13:b2:2d:0b: 72:c8:64:62:03:74:88:b6:dc:1f:f5:04:ff:57:f8:8f:44:91: 17:a0:2a:e9:c4:d8:e7:95:27:cf:0d:8c:c8:fd:50:08:7c:ef: a8:d1:96:d0:83:2c:d6:80:57:6f:85:90:92:bf:cf:27:31:8d: 3d:ea:05:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZWEdnKXvBd1T7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyNWUwZTQtMzI1Ni00MTliLTllOTktMGYwNDVkMmEx MTI1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NWI2MTY4NGItYzIzZC00YjU1LTkxMzQtMWRmMjkzNDBlN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKF01YPGj0CPPdvCo85EUWI0Oa0mA/jbKYB7 CPXYHG1PEKDkI92AYDRo7SO5exxgv76Znx8kfnI0KIwhagWdsPesqY7XGs9fMwpv pOfbqVjXqyUnE9kUaJjYJ3dVxMKgk1wNNit5XBWG8fXApVhYV6DIIAtnCwd89cim Z6mFCrdZswtrZne5bmUtB9T3dCXn63Vrb7Zi+g2seQtvgpxTzvoR6kMANK3/3iOL b3+akak0TIblQnUhJ7eJSIbV7UoxyaWix8gHb8sEO7WPsJerKiE+t1cWgHndBePy /9JHy7edtywVtRw8D8ndwZ69jzoX8eQwcLAX7DRDRlkeeq+wFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI0632hUMNs/aXwcqra5NJJXemBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDI1 ZTBlNC0zMjU2LTQxOWItOWU5OS0wZjA0NWQyYTExMjUvMWExYzhjZDQtODZkNy0z YzM0LWJiZWItOWMxZTRiNjMyMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyNWUwZTQtMzI1Ni00MTliLTll OTktMGYwNDVkMmExMTI1LzFkMjVlMGU0LTMyNTYtNDE5Yi05ZTk5LTBmMDQ1ZDJh MTEyNS5jcmwwHwYDVR0jBBgwFoAU4EGDQJtT8Eom8gPK4HsRKVTnpJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDI1ZTBlNC0zMjU2LTQxOWItOWU5OS0wZjA0 NWQyYTExMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAACsg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHmkoNA5MFZb4gDJcGzEGhABUZnFS1yO4ojO3Dx6qzpxqnMlQ7y+ PNJ7hBkPbvQJjJV8hJZ2h5IGSeju0YPs3I7sypQcmbeFdkEt4r8LGucnO6NxXmeH lDTlx4J5T1pluEvZIQpldncoRVDObovFZTGf2O0zG2hInPwj4QF9XFepB6hS4wiE T8JjXQDU26RmjWGRRmD+bzQHjekyjyAU/G7zgo5tHcHhmIlUurjtWyW1p4win5XR ORBr8AeEwsmmDtsIE7ItC3LIZGIDdIi23B/1BP9X+I9EkRegKunE2OeVJ88NjMj9 UAh876jRltCDLNaAV2+FkJK/zycxjT3qBSM= -----END CERTIFICATE-----Generated at Sun Jun 15 23:05:02 2025 by rpki-client