$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa File: 600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa (raw, json) Hash identifier: rdybZeTP+4EBEKAWZkk695W+5Z5rypU3m0hEaL+CKtw= Subject key identifier: 6D:7E:72:5C:3F:5C:3B:62:BB:15:89:3F:EC:F8:A7:18:D2:5B:AB:AC Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F43285849A61F4864751A45E2E28EF380 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 26258 IP address blocks: 2620:123:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:48:64:75:1a:45:e2:e2:8e:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=fa4f5cf2-728a-486c-85f0-f8ef1c68af2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:68:17:22:c6:a2:02:49:73:1a:b7:ff:eb: ee:48:c8:2e:00:80:f6:97:f0:c2:ba:bf:78:7d:45: b3:99:64:ec:3f:7e:f5:e1:c3:46:08:b3:f2:05:5f: 9c:5f:d0:32:89:fa:e6:55:d9:10:5e:1d:c3:8d:cf: a0:76:46:ae:da:be:fb:f4:27:63:80:13:12:80:2b: 0f:a4:a8:b4:18:eb:b9:b9:19:25:a9:0a:0d:cc:54: e9:33:da:a5:84:5d:6c:21:82:88:24:45:b2:9e:f5: fb:a6:7f:a8:82:59:3b:1b:98:35:95:f0:67:78:1f: 2b:80:3b:0e:5d:bc:1b:31:70:4a:1f:96:fb:44:e1: c0:ed:47:07:5d:3a:10:1a:bc:73:d9:75:2b:1b:3e: a7:ad:3f:e6:ed:37:37:2f:2c:c3:c4:3d:eb:c2:a3: d8:11:2e:68:25:5d:f7:e8:b1:80:84:76:1f:83:e9: 2f:01:02:30:12:f5:0f:70:ef:c4:99:ea:95:a2:b3: 6b:1b:13:16:c6:0e:78:0e:66:f5:5d:a7:a7:56:bc: d2:7d:8e:8e:5d:88:ec:9a:44:41:eb:24:f2:c1:5b: 61:73:3b:fc:ef:5a:71:0e:09:7e:c6:76:bb:53:65: fd:1c:28:41:c7:5c:a6:0c:8e:0a:36:ba:b5:e5:60: 30:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7E:72:5C:3F:5C:3B:62:BB:15:89:3F:EC:F8:A7:18:D2:5B:AB:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:c000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:5d:47:37:b3:8c:26:82:c7:e1:69:c3:64:ef:81:91:cc:3c: 3e:fa:00:6a:f5:17:a2:eb:af:3b:f8:00:ad:ec:e7:dd:4a:e8: fa:60:a4:0c:c2:51:a1:7d:56:f1:41:fd:19:43:39:a9:38:78: 6c:db:70:e6:e5:c5:70:c3:ac:84:74:db:b7:11:20:95:19:36: dd:f4:b4:bf:6d:4c:ed:eb:68:f4:39:9b:62:0b:26:ac:1a:e8: f5:3f:e7:1e:a8:79:4d:33:46:f4:45:c1:0a:23:eb:27:ec:4c: bb:4b:2c:28:3a:cb:b0:80:4f:fb:1d:a4:02:ff:67:9d:92:d0: ff:9d:51:05:f8:d3:3f:9a:07:29:5c:88:84:01:90:1b:47:ff: ac:9c:11:23:0e:a3:ee:f7:63:c2:50:3d:09:f3:c7:c6:b7:25: ce:68:28:28:ce:d9:f7:e8:f5:95:5a:c6:d5:36:0e:15:54:a5: 65:12:5c:26:e0:f3:90:c2:f0:d9:0d:3b:c1:ef:92:18:da:60: 17:9d:8e:d0:60:2a:fc:8c:54:47:7a:d0:0c:1c:cb:2c:28:3e: 19:df:ce:1c:53:34:4c:d8:d3:42:88:00:f5:ed:90:c9:ec:c4: ba:04:1e:bd:f5:7d:92:a4:75:6b:0a:5d:ad:87:4e:aa:cc:cb: 6a:a4:a5:e6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmmH0hkdRpF4uKO84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZmE0ZjVjZjItNzI4YS00ODZjLTg1ZjAtZjhlZjFjNjhhZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT5oFyLGogJJcxq3/+vuSMguAID2l/DCur94 fUWzmWTsP3714cNGCLPyBV+cX9AyifrmVdkQXh3Djc+gdkau2r779CdjgBMSgCsP pKi0GOu5uRklqQoNzFTpM9qlhF1sIYKIJEWynvX7pn+oglk7G5g1lfBneB8rgDsO XbwbMXBKH5b7ROHA7UcHXToQGrxz2XUrGz6nrT/m7Tc3LyzDxD3rwqPYES5oJV33 6LGAhHYfg+kvAQIwEvUPcO/EmeqVorNrGxMWxg54Dmb1XaenVrzSfY6OXYjsmkRB 6yTywVthczv871pxDgl+xna7U2X9HChBx1ymDI4KNrq15WAwTQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFG1+clw/XDtiuxWJP+z4pxjSW6usMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvNjAwMTU4ZTMtM2E5ZC0z MzRjLWIzYjgtMmU0Yjk0OTViMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABI8Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbV1HN7OMJoLH4WnDZO+Bkcw8PvoAavUXouuvO/gArezn3Uro+mCk DMJRoX1W8UH9GUM5qTh4bNtw5uXFcMOshHTbtxEglRk23fS0v21M7eto9DmbYgsm rBro9T/nHqh5TTNG9EXBCiPrJ+xMu0ssKDrLsIBP+x2kAv9nnZLQ/51RBfjTP5oH KVyIhAGQG0f/rJwRIw6j7vdjwlA9CfPHxrclzmgoKM7Z9+j1lVrG1TYOFVSlZRJc JuDzkMLw2Q07we+SGNpgF52O0GAq/IxUR3rQDBzLLCg+Gd/OHFM0TNjTQogA9e2Q yezEugQevfV9kqR1awpdrYdOqszLaqSl5g== -----END CERTIFICATE-----Generated at Sun Apr 27 02:06:39 2025 by rpki-client