$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa File: 04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa (raw, json) Hash identifier: y2a8mEsHEpjqJ/7v+z+sAIOZQASV2kXlcq335nL99fo= Subject key identifier: 5A:60:DE:1D:B5:3C:FA:E2:65:4E:6F:79:7B:3E:48:AE:EB:E2:71:B2 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F432858495ABEC3177B020033BC7AD600 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 53841 IP address blocks: 2605:8900:1000::/36 maxlen: 36 2605:8900:3000::/36 maxlen: 36 2605:8900:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c3:17:7b:02:00:33:bc:7a:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=d1e3d5b6-c14c-4d71-a356-7d1c8a3d96cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:95:31:ad:99:b1:33:a5:19:d5:db:56:88:f2: b1:27:13:64:fb:32:49:dc:4a:1a:d2:7f:62:cc:82: 03:a2:5b:65:2e:26:b0:2e:7a:35:e3:ba:15:ac:94: be:8b:f2:8d:db:8e:b6:63:4c:5d:8a:7d:43:06:1e: 71:97:c8:ad:49:ab:90:fc:86:e9:b1:9a:f0:d8:95: 1d:92:f7:bc:b8:5e:8d:76:01:e0:d9:b3:6e:6d:bc: d1:45:9e:f1:aa:1e:ef:f0:30:38:eb:f4:af:db:0f: 0c:4d:0f:18:0f:91:5a:06:58:dd:89:a0:20:47:9d: 1a:50:9a:69:d4:0e:28:3e:f6:59:48:2a:e8:d4:99: c6:04:09:70:e5:75:d0:2d:d3:5c:db:24:78:5b:0c: bf:d7:91:d8:51:d6:37:c9:7d:7f:69:4f:c2:3c:89: 5f:0e:6a:e7:83:3b:30:10:10:9b:59:e0:0c:7a:08: f4:95:8b:ae:0b:54:2f:2b:9f:d1:7f:6a:0d:48:39: ee:30:5b:55:83:b1:de:d7:55:a9:4e:29:b3:2f:4a: bf:69:9f:98:37:45:3c:be:35:36:43:fb:9d:14:99: 52:38:20:6a:3f:3b:81:89:01:93:9e:a3:0d:39:18: 45:3c:e1:4b:eb:09:61:7e:aa:b6:08:e8:5d:b6:c4: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:60:DE:1D:B5:3C:FA:E2:65:4E:6F:79:7B:3E:48:AE:EB:E2:71:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv6: 2605:8900:1000::/36 2605:8900:3000::/36 2605:8900:5000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:fc:c5:b5:e9:94:5e:6b:28:40:7a:71:2d:b8:e3:10:7b:73: 48:0e:a1:b8:2d:db:56:6a:9a:64:55:c4:c7:82:1d:45:60:d9: 32:93:87:70:82:d6:15:a5:87:59:58:74:04:b7:bc:22:c9:bf: bd:a5:7a:6b:14:40:b0:04:f2:c3:35:ad:55:5c:04:10:ed:ee: ee:34:0f:10:0b:c0:ac:e0:3c:c3:56:58:b4:ab:4e:74:18:34: 88:85:55:2b:9f:42:29:29:4b:18:8c:e4:56:1d:6a:ea:e5:81: 4d:05:d8:0b:9e:bf:44:49:66:07:ef:e0:19:14:20:15:e1:bc: 9d:e4:0f:47:7c:85:c1:b4:80:bc:45:52:24:f0:d8:b1:21:f9: ad:24:d9:c7:70:3a:8d:4a:cb:ea:f7:88:7f:60:95:2b:d5:80: b4:89:1d:b7:20:77:1f:bd:13:18:d6:68:fe:63:07:58:86:60: bd:e6:16:1c:85:53:90:61:31:54:cf:d6:93:9b:a9:47:71:4b: 5b:e4:27:b5:9f:72:f6:0c:1b:24:87:76:ed:e4:f8:94:67:59: 89:f2:51:dc:42:25:bc:2a:90:1e:e0:20:a2:03:7b:a3:cb:bd: a0:7e:88:e0:8a:53:04:b0:45:92:14:aa:cc:cb:7c:4a:a2:77: 70:9b:b0:9b -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWElavsMXewIAM7x61gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZDFlM2Q1YjYtYzE0Yy00ZDcxLWEzNTYtN2QxYzhhM2Q5NmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupUxrZmxM6UZ1dtWiPKxJxNk+zJJ3Eoa0n9i zIIDoltlLiawLno147oVrJS+i/KN2462Y0xdin1DBh5xl8itSauQ/IbpsZrw2JUd kve8uF6NdgHg2bNubbzRRZ7xqh7v8DA46/Sv2w8MTQ8YD5FaBljdiaAgR50aUJpp 1A4oPvZZSCro1JnGBAlw5XXQLdNc2yR4Wwy/15HYUdY3yX1/aU/CPIlfDmrngzsw EBCbWeAMegj0lYuuC1QvK5/Rf2oNSDnuMFtVg7He11WpTimzL0q/aZ+YN0U8vjU2 Q/udFJlSOCBqPzuBiQGTnqMNORhFPOFL6wlhfqq2COhdtsS3tQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFFpg3h21PPriZU5veXs+SK7r4nGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMDRhYTZhMzAtZjc5Mi0z YjI0LWFkNjAtMTBhYTlmOWFlZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYEJgWJABAD BgQmBYkAMAMGBCYFiQBQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF/8xbXplF5rKEB6cS244xB7c0gOobgt 21ZqmmRVxMeCHUVg2TKTh3CC1hWlh1lYdAS3vCLJv72lemsUQLAE8sM1rVVcBBDt 7u40DxALwKzgPMNWWLSrTnQYNIiFVSufQikpSxiM5FYdaurlgU0F2Auev0RJZgfv 4BkUIBXhvJ3kD0d8hcG0gLxFUiTw2LEh+a0k2cdwOo1Ky+r3iH9glSvVgLSJHbcg dx+9ExjWaP5jB1iGYL3mFhyFU5BhMVTP1pObqUdxS1vkJ7WfcvYMGySHdu3k+JRn WYnyUdxCJbwqkB7gIKIDe6PLvaB+iOCKUwSwRZIUqszLfEqid3CbsJs= -----END CERTIFICATE-----Generated at Sun Apr 27 20:20:31 2025 by rpki-client