$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba689ea2-8193-3d48-a596-9e849474e75c.roa File: ba689ea2-8193-3d48-a596-9e849474e75c.roa (raw, json) Hash identifier: wONFz8t1UyNrgWOjZyT4wPvOHAN3wYtc5kjdLWd5ZWc= Subject key identifier: 14:48:52:5A:DD:24:32:FA:0E:07:2C:B0:DA:C1:9F:B0:39:D8:E4:FF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183B82AE9E6AE55A4025120 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba689ea2-8193-3d48-a596-9e849474e75c.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 36631 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:b8:2a:e9:e6:ae:55:a4:02:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=326912a9-a7f3-4104-8887-4726a2bddcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:71:b4:88:53:8f:ac:b1:1e:b5:33:c1:3a: 1c:4f:54:34:b2:17:7b:56:55:f0:30:a9:de:c5:a4: 66:ea:b3:3b:07:67:fb:a5:c7:39:eb:12:46:32:b1: 78:c6:a9:96:c2:3e:3f:85:c4:c5:5a:17:e1:e0:18: bb:e2:2c:a3:67:73:0d:79:b2:14:00:37:45:69:60: eb:6a:6b:28:c3:07:12:ae:8f:a4:48:5b:a0:00:ef: 2e:ed:f8:c2:70:ca:c1:b3:45:fa:09:c5:3d:29:c1: 16:64:b3:d7:68:6f:ff:21:c9:cf:07:ab:ea:65:3c: e2:a8:dd:b9:10:18:ac:62:aa:6b:fb:b0:43:a0:4e: 1e:ae:8a:3f:a8:93:c8:bd:d0:e7:02:4e:6f:2f:a8: 49:92:32:93:8b:f0:72:66:d5:23:87:24:2b:ff:82: 6c:bb:9b:5f:17:26:7e:4b:4b:8e:4f:26:9f:4c:3c: 88:cc:ef:34:46:53:7b:de:7e:9b:1e:5d:e4:0f:5a: 1c:87:09:89:09:b3:21:db:11:7e:83:96:c9:d9:3c: b4:35:f6:1a:47:31:9f:cc:e0:04:19:6e:22:56:e1: 43:80:b6:d8:66:be:74:96:b0:51:04:65:3e:3c:59: 80:02:ad:be:f9:d6:20:1a:50:e4:be:d5:7d:c1:38: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:48:52:5A:DD:24:32:FA:0E:07:2C:B0:DA:C1:9F:B0:39:D8:E4:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba689ea2-8193-3d48-a596-9e849474e75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:84:05:2e:e3:23:19:97:22:3d:09:5d:18:b2:d5:5f:8c:72: d3:73:09:87:32:d7:a6:0a:99:ab:74:5c:93:7b:31:e6:75:8f: cc:2d:b3:ed:43:8c:56:8f:4c:25:92:69:b4:72:a1:6f:88:bc: d1:26:c3:d2:55:11:ff:97:5e:a4:8c:74:b2:2c:cf:29:5b:e2: 74:bd:b5:a4:ab:b6:ed:ac:44:0e:8b:30:87:6b:49:97:8e:c4: 99:1e:0f:a0:39:08:7f:a0:01:03:1e:f2:f8:b7:43:06:b9:16: 12:8b:3a:75:c7:25:b2:5e:16:6d:71:38:33:99:c9:b4:fb:42: bf:44:99:e0:47:fe:74:1b:e0:13:12:6b:ba:ae:87:58:b2:70: ae:44:79:df:22:13:66:ff:24:31:f3:7d:ad:c7:13:8b:e6:74: 3c:34:c2:6b:ae:f2:df:30:83:4e:80:cf:82:e7:1d:30:b6:b3: a1:42:61:47:e4:1e:3b:d4:64:ae:2b:7f:9b:31:5f:5c:11:3c: 3c:6a:3b:6e:51:12:2a:42:1f:99:20:fc:a5:26:f6:8e:9c:03: 9d:41:1a:1c:4e:4e:0c:91:07:44:b8:83:67:a2:6f:d0:6e:c9: 32:d0:02:ac:6c:e7:bb:22:fa:b7:10:5e:0b:3c:38:c4:b9:75: c9:c8:f2:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhg7gq6eauVaQCUSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MzI2OTEyYTktYTdmMy00MTA0LTg4ODctNDcyNmEyYmRkY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/dxtIhTj6yxHrUzwTocT1Q0shd7VlXwMKne xaRm6rM7B2f7pcc56xJGMrF4xqmWwj4/hcTFWhfh4Bi74iyjZ3MNebIUADdFaWDr amsowwcSro+kSFugAO8u7fjCcMrBs0X6CcU9KcEWZLPXaG//IcnPB6vqZTziqN25 EBisYqpr+7BDoE4eroo/qJPIvdDnAk5vL6hJkjKTi/ByZtUjhyQr/4Jsu5tfFyZ+ S0uOTyafTDyIzO80RlN73n6bHl3kD1ochwmJCbMh2xF+g5bJ2Ty0NfYaRzGfzOAE GW4iVuFDgLbYZr50lrBRBGU+PFmAAq2++dYgGlDkvtV9wTi00QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBRIUlrdJDL6DgcssNrBn7A52OT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmE2ODllYTItODE5My0z ZDQ4LWE1OTYtOWU4NDk0NzRlNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALKEBS7jIxmXIj0JXRiy1V+MctNzCYcy16YKmat0XJN7MeZ1j8wt s+1DjFaPTCWSabRyoW+IvNEmw9JVEf+XXqSMdLIszylb4nS9taSrtu2sRA6LMIdr SZeOxJkeD6A5CH+gAQMe8vi3Qwa5FhKLOnXHJbJeFm1xODOZybT7Qr9EmeBH/nQb 4BMSa7quh1iycK5Eed8iE2b/JDHzfa3HE4vmdDw0wmuu8t8wg06Az4LnHTC2s6FC YUfkHjvUZK4rf5sxX1wRPDxqO25REipCH5kg/KUm9o6cA51BGhxOTgyRB0S4g2ei b9BuyTLQAqxs57si+rcQXgs8OMS5dcnI8ho= -----END CERTIFICATE-----Generated at Sun Apr 27 02:09:44 2025 by rpki-client