$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/c4d65091-7a9e-3ca3-a54c-5cbb7930d2be.roa File: c4d65091-7a9e-3ca3-a54c-5cbb7930d2be.roa (raw, json) Hash identifier: tCbUZKr/hEfodExktWdClo+lBHWDHIo9165W+6ICgcc= Subject key identifier: 90:07:F3:11:55:F5:FB:D1:C8:0A:C7:84:59:9E:92:3B:95:03:C1:9E Certificate issuer: /CN=a53cd081-f6e5-4e71-868d-a1c11921321d Certificate serial: 010D0C9F4328584957F3F67E7E970200FE384300 Authority key identifier: F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/c4d65091-7a9e-3ca3-a54c-5cbb7930d2be.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 2620:122:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:f6:7e:7e:97:02:00:fe:38:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53cd081-f6e5-4e71-868d-a1c11921321d Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=4227ec40-f9eb-44ec-b5f4-bef682aca042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:54:f3:aa:3f:f5:b3:1b:6c:a7:9c:13:4b: c8:22:64:6c:43:07:ab:58:9a:02:17:b3:2f:7f:9c: 10:26:34:99:7d:93:f5:ba:1f:a0:ca:49:09:33:fb: 4a:c1:e1:67:53:fd:02:4d:63:16:d7:2d:45:14:e1: e6:76:db:5d:aa:fb:0d:e0:ad:2b:e3:9b:c3:cd:55: 6e:89:1c:89:e8:e3:09:ef:b8:c6:45:42:6a:24:94: 06:0a:26:5c:ef:28:8c:a5:03:80:8e:1b:f9:9a:62: 57:d4:f0:33:04:d4:8c:d7:72:31:1a:bb:bf:cc:2b: 96:59:af:e3:57:2e:6b:15:5d:22:1a:12:6e:77:71: 68:f8:6a:e6:4c:81:37:66:76:6e:db:a7:a4:df:36: db:62:fe:c0:ec:57:14:34:ff:2f:ad:31:84:4e:cb: 9f:88:84:a2:c6:cf:e2:82:5d:72:83:41:08:40:3c: 0c:a7:6f:ff:fc:b6:3b:65:c5:04:49:38:31:34:90: 3e:b9:c8:76:d5:38:f3:2b:d9:94:1e:49:78:b7:cd: 94:31:5a:a2:e3:b5:96:51:b6:f1:21:a8:ea:3b:15: 54:2f:df:82:f8:c9:de:33:b4:e2:b7:b6:36:f6:ac: 0b:7c:5b:98:fa:7e:b8:63:77:1e:d8:0f:af:a3:7a: 71:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:07:F3:11:55:F5:FB:D1:C8:0A:C7:84:59:9E:92:3B:95:03:C1:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/c4d65091-7a9e-3ca3-a54c-5cbb7930d2be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl X509v3 Authority Key Identifier: keyid:F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer sbgp-ipAddrBlock: critical IPv6: 2620:122:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0f:0f:b0:c0:73:73:cd:9c:74:b2:6c:14:38:d5:48:29:db: 76:2c:62:cb:b4:79:2c:06:15:50:a1:6e:ba:d5:72:7f:25:66: e9:f7:62:2c:ce:29:e3:f1:1c:f1:72:cb:20:5f:d0:08:78:c1: 44:04:68:05:a6:b2:92:81:65:8c:28:b2:db:e0:d8:97:95:69: af:49:b0:13:12:98:4b:df:e5:98:60:2b:4e:8d:35:31:eb:ff: bc:04:d2:1d:1c:b8:27:06:f2:27:60:c2:56:ac:2e:e2:02:ef: 45:81:0b:0f:d6:38:57:5c:5b:42:1a:36:95:d7:fc:db:32:35: c1:f9:ed:a6:67:9c:f3:a2:ac:7e:4d:88:a6:b2:62:ee:20:e7: 98:82:6a:b8:12:e5:f2:cc:61:f6:80:11:56:bc:95:ec:d6:b2: 24:7b:13:15:4a:59:5e:0c:51:af:8e:c6:3f:62:dd:c9:e3:e5: 30:81:cb:1a:2d:ef:42:f1:8a:7d:db:34:d9:fe:56:83:a1:78: fe:6d:96:c5:c4:37:91:1a:87:7d:19:46:a0:57:82:9d:1c:a0: c6:ef:5a:3d:5c:12:fa:f2:c2:8f:43:b0:3d:2e:1d:5b:0a:13: 0f:c7:57:36:70:c0:13:31:ae:30:13:2f:f3:b5:ca:0d:0e:1a: fa:d3:69:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElX8/Z+fpcCAP44QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzY2QwODEtZjZlNS00ZTcxLTg2OGQtYTFjMTE5MjEz MjFkMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NDIyN2VjNDAtZjllYi00NGVjLWI1ZjQtYmVmNjgyYWNhMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIVU86o/9bMbbKecE0vIImRsQwerWJoCF7Mv f5wQJjSZfZP1uh+gykkJM/tKweFnU/0CTWMW1y1FFOHmdttdqvsN4K0r45vDzVVu iRyJ6OMJ77jGRUJqJJQGCiZc7yiMpQOAjhv5mmJX1PAzBNSM13IxGru/zCuWWa/j Vy5rFV0iGhJud3Fo+GrmTIE3ZnZu26ek3zbbYv7A7FcUNP8vrTGETsufiISixs/i gl1yg0EIQDwMp2///LY7ZcUESTgxNJA+uch21TjzK9mUHkl4t82UMVqi47WWUbbx IajqOxVUL9+C+MneM7Tit7Y29qwLfFuY+n64Y3ce2A+vo3pxKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJAH8xFV9fvRyArHhFmekjuVA8GeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNTNj ZDA4MS1mNmU1LTRlNzEtODY4ZC1hMWMxMTkyMTMyMWQvYzRkNjUwOTEtN2E5ZS0z Y2EzLWE1NGMtNWNiYjc5MzBkMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTUzY2QwODEtZjZlNS00ZTcxLTg2 OGQtYTFjMTE5MjEzMjFkL2E1M2NkMDgxLWY2ZTUtNGU3MS04NjhkLWExYzExOTIx MzIxZC5jcmwwHwYDVR0jBBgwFoAU+c47QoJ3T6uNXqPojUlPKYGHe/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNTNjZDA4MS1mNmU1LTRlNzEtODY4ZC1hMWMx MTkyMTMyMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABIvAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABIPD7DAc3PNnHSybBQ41Ugp23YsYsu0eSwGFVChbrrVcn8lZun3 YizOKePxHPFyyyBf0Ah4wUQEaAWmspKBZYwostvg2JeVaa9JsBMSmEvf5ZhgK06N NTHr/7wE0h0cuCcG8idgwlasLuIC70WBCw/WOFdcW0IaNpXX/NsyNcH57aZnnPOi rH5NiKayYu4g55iCargS5fLMYfaAEVa8lezWsiR7ExVKWV4MUa+Oxj9i3cnj5TCB yxot70Lxin3bNNn+VoOheP5tlsXEN5Eah30ZRqBXgp0coMbvWj1cEvrywo9DsD0u HVsKEw/HVzZwwBMxrjATL/O1yg0OGvrTaRA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:13 2025 by rpki-client