$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa File: 69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa (raw, json) Hash identifier: KJn6nG0LmHwh/Opex7d2cEMAtMBMtpxs/zCJIyvyZOg= Subject key identifier: D8:A5:0A:07:5E:FC:11:4D:38:05:11:0B:29:16:CA:B9:C9:9C:49:37 Certificate issuer: /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c Certificate serial: 010D0C9F432858490CB16A778F70FC467BCBCB00 Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 16509 IP address blocks: 2620:121:5070::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:6a:77:8f:70:fc:46:7b:cb:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=672d06aa-6542-4622-9a0a-9a98850e9078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:50:0c:eb:72:0f:79:48:b3:af:1c:cc:d5:f7: 5c:bb:23:f2:0e:b1:dc:75:ee:6d:64:c3:8f:ea:4d: a0:bb:00:14:31:64:6d:58:41:2b:e1:a3:ae:d9:fb: 70:88:89:6a:ec:a3:c8:60:53:43:a4:6c:c9:b2:c4: d5:84:2a:db:d2:75:7e:2a:61:0f:9a:3f:c4:dd:12: 61:cd:e1:1f:57:9b:7e:1f:ec:41:8c:52:8a:88:42: f2:e6:4e:0a:23:97:f0:3f:83:9f:a4:7d:f7:83:b1: 7d:50:8f:76:f9:2c:0a:a0:ac:0d:fd:18:b0:d9:8b: 72:1e:be:f1:84:12:c6:02:4c:8f:c7:76:80:e3:7d: 4a:bd:64:e6:a4:00:92:5d:96:82:28:af:bc:9a:5a: 96:86:75:fd:77:c4:6e:15:c3:5e:57:31:25:f2:f7: 98:66:e5:50:4b:c8:a4:3c:1f:ff:6e:da:72:4d:0d: c5:c6:1b:26:08:88:34:f0:84:97:d0:b9:47:25:0c: 8c:6c:9c:9f:6e:1d:da:62:e5:90:44:aa:84:d5:6b: de:8b:86:d5:1b:5e:1b:ca:90:cb:0d:de:98:8f:88: 3e:d3:eb:e9:0c:16:bb:7d:15:d6:fa:1c:98:bb:d4: de:61:77:f1:87:e1:38:b9:2d:a6:b0:90:8b:fe:83: 7f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A5:0A:07:5E:FC:11:4D:38:05:11:0B:29:16:CA:B9:C9:9C:49:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl X509v3 Authority Key Identifier: keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer sbgp-ipAddrBlock: critical IPv6: 2620:121:5070::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ee:0e:f1:c1:30:34:17:71:44:44:46:c4:e8:fe:ca:82:ac: 93:92:4d:2e:99:45:a5:7c:5b:cd:c2:3b:1a:0a:5e:43:f5:59: d0:b1:6c:92:19:2f:8c:99:36:d0:85:cb:23:b2:3c:f4:08:c4: 3c:7e:e6:8f:2a:53:bf:dc:82:9c:79:cf:14:37:50:4e:10:38: 73:62:c5:90:4b:09:f0:63:b9:3d:47:b9:01:97:d9:27:95:59: c7:6f:4c:56:97:16:c7:ba:11:99:23:ac:fb:c5:83:9c:02:b5: b9:ed:4a:df:86:5a:ca:a6:a8:a5:99:9f:3c:dd:35:74:aa:ba: e5:a0:55:89:94:94:b6:49:7a:0d:f3:7f:02:80:d1:87:7a:f6: ab:0e:3b:1f:7f:d5:ea:82:60:38:9c:ac:92:ab:a1:c1:09:e9: f2:15:2e:7a:ee:b5:ee:21:1e:c3:67:1a:17:8a:a1:23:cd:06: 4f:c7:49:30:07:da:f0:d4:82:8f:fa:18:8a:d2:8e:f7:73:62: db:9f:d9:fe:d7:00:31:a3:00:11:63:92:73:ea:2d:f5:44:e6: 82:83:b3:cf:07:ac:85:fe:c9:f2:1a:c2:75:b1:6b:e9:5f:a9: 71:7a:e9:9f:b0:1d:67:f7:4b:57:d2:99:59:35:44:38:ea:e9: f3:32:74:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsWp3j3D8RnvLywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEyZmY5YzctY2VkOC00Y2MyLWIzZDUtYWRmMTg1OWE4 MDhjMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk NjcyZDA2YWEtNjU0Mi00NjIyLTlhMGEtOWE5ODg1MGU5MDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FAM63IPeUizrxzM1fdcuyPyDrHcde5tZMOP 6k2guwAUMWRtWEEr4aOu2ftwiIlq7KPIYFNDpGzJssTVhCrb0nV+KmEPmj/E3RJh zeEfV5t+H+xBjFKKiELy5k4KI5fwP4OfpH33g7F9UI92+SwKoKwN/Riw2YtyHr7x hBLGAkyPx3aA431KvWTmpACSXZaCKK+8mlqWhnX9d8RuFcNeVzEl8veYZuVQS8ik PB//btpyTQ3FxhsmCIg08ISX0LlHJQyMbJyfbh3aYuWQRKqE1Wvei4bVG14bypDL Dd6Yj4g+0+vpDBa7fRXW+hyYu9TeYXfxh+E4uS2msJCL/oN/8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNilCgde/BFNOAURCykWyrnJnEk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJm ZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYxODU5YTgwOGMvNjliZWQwYzctMDU5Ni0z YTA3LWI3YjktY2U3MmIxYTk1Y2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDEyZmY5YzctY2VkOC00Y2MyLWIz ZDUtYWRmMTg1OWE4MDhjL2QxMmZmOWM3LWNlZDgtNGNjMi1iM2Q1LWFkZjE4NTlh ODA4Yy5jcmwwHwYDVR0jBBgwFoAUWs2/uXCApKrzjrhYKRFBB5zu/dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJmZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYx ODU5YTgwOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABIVBw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHHuDvHBMDQXcURERsTo/sqCrJOSTS6ZRaV8W83COxoKXkP1WdCx bJIZL4yZNtCFyyOyPPQIxDx+5o8qU7/cgpx5zxQ3UE4QOHNixZBLCfBjuT1HuQGX 2SeVWcdvTFaXFse6EZkjrPvFg5wCtbntSt+GWsqmqKWZnzzdNXSquuWgVYmUlLZJ eg3zfwKA0Yd69qsOOx9/1eqCYDicrJKrocEJ6fIVLnrute4hHsNnGheKoSPNBk/H STAH2vDUgo/6GIrSjvdzYtuf2f7XADGjABFjknPqLfVE5oKDs88HrIX+yfIawnWx a+lfqXF66Z+wHWf3S1fSmVk1RDjq6fMydAo= -----END CERTIFICATE-----Generated at Sat Apr 26 17:40:02 2025 by rpki-client