$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa File: 21945cb7-acae-3edc-9a34-60c668bc2e9b.roa (raw, json) Hash identifier: ZMv2rZ2xnIaqVbXQ9n08FRPI7XwlEHfbR034araXCeI= Subject key identifier: C1:AC:47:E9:E4:6E:67:7D:81:1C:20:7D:62:D1:43:2E:3F:FC:2C:F6 Certificate issuer: /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd Certificate serial: 010D0C9F43285849C4D4BB328CDCA8DEDC6B9C40 Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 395287 IP address blocks: 2620:128:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:bb:32:8c:dc:a8:de:dc:6b:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=6a6447da-3a03-4eb4-869f-2095df11c7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:32:44:c4:35:eb:36:c6:6a:df:b3:d5:45:b4: 07:c4:73:96:21:a5:a9:69:50:f7:3f:d5:48:3b:29: ce:fa:8c:eb:d7:5c:3f:db:a9:2f:22:86:00:a6:6f: f5:8a:65:17:3d:60:53:77:cb:9f:b9:40:ad:15:82: 28:fe:77:4d:c1:fe:e3:5b:99:e0:24:00:70:14:73: b2:56:0f:1d:e5:fa:60:47:b3:b0:04:4b:38:9c:4e: 30:5a:b8:a5:66:f0:1d:de:72:ec:0d:9e:22:eb:2a: b2:73:2d:bf:1e:d1:ce:ac:c4:5c:17:82:2b:51:09: 0f:64:c5:f4:b4:a4:ce:43:17:f7:fb:a6:83:b8:d0: ba:98:77:46:cd:e3:b3:be:ad:5a:16:f5:2f:3a:ea: 19:e0:5e:89:ed:31:0d:82:de:eb:e1:20:60:e0:28: 52:e7:91:29:ad:49:fc:08:a6:d4:8d:37:f2:2e:2c: 8b:d9:39:30:50:60:cb:ad:60:c7:89:27:02:f8:52: db:41:d6:49:28:d5:d8:c4:30:7d:48:b1:db:75:8e: 16:d1:c0:f5:c7:52:68:ff:1c:ed:74:05:2f:3d:4b: 8c:39:81:d9:11:ce:4b:fb:d1:7d:ed:c8:4f:14:2b: a7:2c:de:53:e9:76:91:1c:97:fa:15:f2:78:1d:fd: 79:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AC:47:E9:E4:6E:67:7D:81:1C:20:7D:62:D1:43:2E:3F:FC:2C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl X509v3 Authority Key Identifier: keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer sbgp-ipAddrBlock: critical IPv6: 2620:128:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f5:62:49:a0:c6:0e:6f:55:46:0f:2d:20:43:5b:0d:0d:e3: 06:42:3a:22:93:40:34:a5:b7:1f:39:f5:28:af:d2:58:d9:9b: e4:d6:a5:0c:e6:90:51:b6:8d:ce:6c:3d:4d:ec:65:b8:d7:c2: c9:47:0e:7d:c6:d4:a8:b0:81:7c:cb:67:19:ca:6a:be:60:88: 47:b4:3d:21:39:d7:17:b9:a6:42:1b:53:d7:a6:ee:ce:1f:fa: 36:82:cc:15:e6:56:69:78:c7:95:76:a6:98:0b:00:3c:ef:2e: 80:c8:2d:0b:01:14:8d:ae:da:f8:81:1d:2d:cd:7d:0f:6c:b3: 7c:87:da:26:b7:9b:60:05:fe:12:e0:e4:65:41:2c:6b:c1:24: 0f:5b:5d:72:2a:45:eb:e9:81:85:d1:46:5e:5c:8e:76:b1:00: 02:70:c2:b0:5a:9f:40:0e:30:62:8d:8d:61:89:94:e5:e8:89: bb:3f:51:ea:6f:e6:70:12:87:2e:54:33:a5:d7:d7:7f:26:e9: b4:59:73:e5:3f:08:02:88:08:0c:bc:17:2b:b8:3e:a8:fc:28: 08:71:08:52:0a:3e:8e:6a:fd:fe:15:95:fc:d1:4b:63:92:bb: 24:3d:66:6b:68:25:0c:46:6f:22:80:cc:0a:a5:51:09:31:fa: 7e:77:71:00 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnE1LsyjNyo3txrnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzZGExY2EtYTMwMi00MzZhLWJkNWYtMGE1Yjc1YmFl YWRkMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NmE2NDQ3ZGEtM2EwMy00ZWI0LTg2OWYtMjA5NWRmMTFjN2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTJExDXrNsZq37PVRbQHxHOWIaWpaVD3P9VI OynO+ozr11w/26kvIoYApm/1imUXPWBTd8ufuUCtFYIo/ndNwf7jW5ngJABwFHOy Vg8d5fpgR7OwBEs4nE4wWrilZvAd3nLsDZ4i6yqycy2/HtHOrMRcF4IrUQkPZMX0 tKTOQxf3+6aDuNC6mHdGzeOzvq1aFvUvOuoZ4F6J7TENgt7r4SBg4ChS55EprUn8 CKbUjTfyLiyL2TkwUGDLrWDHiScC+FLbQdZJKNXYxDB9SLHbdY4W0cD1x1Jo/xzt dAUvPUuMOYHZEc5L+9F97chPFCunLN5T6XaRHJf6FfJ4Hf15KwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMGsR+nkbmd9gRwgfWLRQy4//Cz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYjNk YTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTViNzViYWVhZGQvMjE5NDVjYjctYWNhZS0z ZWRjLTlhMzQtNjBjNjY4YmMyZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWIzZGExY2EtYTMwMi00MzZhLWJk NWYtMGE1Yjc1YmFlYWRkL2FiM2RhMWNhLWEzMDItNDM2YS1iZDVmLTBhNWI3NWJh ZWFkZC5jcmwwHwYDVR0jBBgwFoAUMV8Eih+UqKCCJUdeQgChhx+oiTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYjNkYTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTVi NzViYWVhZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABKCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVfViSaDGDm9VRg8tIENbDQ3jBkI6IpNANKW3Hzn1KK/SWNmb5Nal DOaQUbaNzmw9TexluNfCyUcOfcbUqLCBfMtnGcpqvmCIR7Q9ITnXF7mmQhtT16bu zh/6NoLMFeZWaXjHlXammAsAPO8ugMgtCwEUja7a+IEdLc19D2yzfIfaJrebYAX+ EuDkZUEsa8EkD1tdcipF6+mBhdFGXlyOdrEAAnDCsFqfQA4wYo2NYYmU5eiJuz9R 6m/mcBKHLlQzpdfXfybptFlz5T8IAogIDLwXK7g+qPwoCHEIUgo+jmr9/hWV/NFL Y5K7JD1ma2glDEZvIoDMCqVRCTH6fndxAA== -----END CERTIFICATE-----Generated at Mon Jun 16 04:14:57 2025 by rpki-client