$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/1b3d7787-c8b1-3b18-9b4c-2d7088e04ce3.roa File: 1b3d7787-c8b1-3b18-9b4c-2d7088e04ce3.roa (raw, json) Hash identifier: 5BI3dtlhM+eG/19+chPk/uYbikVbdxdkbaK1Ebrcbtg= Subject key identifier: FD:D3:97:CB:7A:04:DE:7C:56:CB:46:25:7A:34:CD:AE:0A:E1:2A:2F Certificate issuer: /CN=50de7142-1147-4734-8a6c-9f603bd048cc Certificate serial: 010D0C9F4328584A0D6A9507BA97DE66CB241E00 Authority key identifier: D2:77:26:5D:18:58:4B:D9:CF:D4:6A:91:6B:A0:9E:97:D0:2D:CC:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/1b3d7787-c8b1-3b18-9b4c-2d7088e04ce3.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 40138 IP address blocks: 2620:95:4000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/50de7142-1147-4734-8a6c-9f603bd048cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/50de7142-1147-4734-8a6c-9f603bd048cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:95:07:ba:97:de:66:cb:24:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50de7142-1147-4734-8a6c-9f603bd048cc Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=63fdd3d6-f4e2-478c-a783-ad2f44ced547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:b1:c5:03:3d:59:d9:c6:9b:32:89:5e:5c: f8:a8:03:77:68:d1:83:2a:04:cf:8b:b9:d2:b4:73: ac:ef:b7:2a:e5:0f:d5:82:2e:b4:f1:6e:2f:42:5f: 1b:9e:13:61:05:be:c2:a8:d2:77:1a:ac:e3:92:9d: b1:2c:d0:cb:60:85:0d:eb:f2:de:71:0d:d7:8a:23: 33:72:06:49:54:4c:51:e9:9a:c1:98:3d:dc:bc:0e: 54:e5:6c:6f:79:26:f2:d9:14:31:57:87:64:07:d6: 2b:c4:a0:2a:3f:f1:b2:35:2e:4c:74:1e:5d:14:42: 08:6d:a2:54:c0:e1:b9:79:0d:42:f9:87:2f:12:85: 61:9e:24:c9:0b:01:b5:9f:88:28:7c:77:10:d4:ce: 4b:fd:83:e7:bd:3c:f6:e0:be:64:07:0c:dc:73:3e: bb:f7:d8:a8:3a:e6:a5:a0:e8:5f:35:c0:6b:9c:ad: 43:40:29:a6:97:0b:de:34:63:07:1e:98:a0:93:3d: 4f:a5:cd:dd:a2:80:6b:92:bf:8e:f9:a2:4c:bd:71: 8f:6c:5b:b7:22:54:f5:45:45:04:93:6f:6f:0c:65: 5e:61:9b:49:ad:13:92:8a:f9:4e:39:ff:04:fd:f5: f1:50:5f:b1:92:95:1e:77:bd:16:15:31:3d:a8:b0: 90:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D3:97:CB:7A:04:DE:7C:56:CB:46:25:7A:34:CD:AE:0A:E1:2A:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/1b3d7787-c8b1-3b18-9b4c-2d7088e04ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/50de7142-1147-4734-8a6c-9f603bd048cc.crl X509v3 Authority Key Identifier: keyid:D2:77:26:5D:18:58:4B:D9:CF:D4:6A:91:6B:A0:9E:97:D0:2D:CC:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc.cer sbgp-ipAddrBlock: critical IPv6: 2620:95:4000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6d:b1:6b:6c:cf:34:21:60:40:f6:dc:2e:fd:fe:fd:05:3c: 17:c6:d5:3b:35:3a:75:b2:2a:a1:76:05:34:56:bd:40:0c:82: 27:4f:35:ba:57:e1:f7:0c:60:59:78:81:9d:f8:39:8e:c9:4f: e1:56:71:bb:ce:8c:71:f1:4b:54:2c:91:00:b1:f9:07:f8:34: 81:24:d3:ed:f5:ae:3f:05:33:49:c6:ae:a7:cb:3b:82:1a:1f: ee:b1:54:f7:df:f4:eb:2f:ef:4b:8c:ba:4c:43:b0:4f:42:06: 0c:1e:97:23:c5:8d:84:ae:df:50:51:b0:4d:bd:b6:ae:73:a7: a4:d3:d7:88:d0:60:ee:36:67:62:32:d1:a6:bb:3e:87:6f:07: 8c:ea:38:19:5f:a6:4a:18:ed:b6:29:49:0b:5e:cf:02:2c:01: 5c:4b:eb:a5:80:1a:71:c0:d4:25:08:b1:1d:49:f9:ea:4f:ee: ae:aa:b1:9a:7d:5a:40:fe:32:af:20:07:36:b9:a3:7b:55:53: b9:14:51:cb:d5:73:45:1b:39:10:9a:ef:60:7a:a1:cc:48:ea: b7:9f:2c:f1:0d:b5:b8:91:a1:e2:fc:5e:25:b2:05:2f:4b:82: 66:8e:cd:72:a0:90:2d:3b:80:95:6a:00:d0:06:22:1b:a1:14: ef:7b:68:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoNapUHupfeZsskHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkZTcxNDItMTE0Ny00NzM0LThhNmMtOWY2MDNiZDA0 OGNjMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk NjNmZGQzZDYtZjRlMi00NzhjLWE3ODMtYWQyZjQ0Y2VkNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgaxxQM9WdnGmzKJXlz4qAN3aNGDKgTPi7nS tHOs77cq5Q/Vgi608W4vQl8bnhNhBb7CqNJ3Gqzjkp2xLNDLYIUN6/LecQ3XiiMz cgZJVExR6ZrBmD3cvA5U5WxveSby2RQxV4dkB9YrxKAqP/GyNS5MdB5dFEIIbaJU wOG5eQ1C+YcvEoVhniTJCwG1n4gofHcQ1M5L/YPnvTz24L5kBwzccz6799ioOual oOhfNcBrnK1DQCmmlwveNGMHHpigkz1Ppc3dooBrkr+O+aJMvXGPbFu3IlT1RUUE k29vDGVeYZtJrROSivlOOf8E/fXxUF+xkpUed70WFTE9qLCQSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP3Tl8t6BN58VstGJXo0za4K4SovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MGRl NzE0Mi0xMTQ3LTQ3MzQtOGE2Yy05ZjYwM2JkMDQ4Y2MvMWIzZDc3ODctYzhiMS0z YjE4LTliNGMtMmQ3MDg4ZTA0Y2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTBkZTcxNDItMTE0Ny00NzM0LThh NmMtOWY2MDNiZDA0OGNjLzUwZGU3MTQyLTExNDctNDczNC04YTZjLTlmNjAzYmQw NDhjYy5jcmwwHwYDVR0jBBgwFoAU0ncmXRhYS9nP1GqRa6Cel9AtzGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81MGRlNzE0Mi0xMTQ3LTQ3MzQtOGE2Yy05ZjYw M2JkMDQ4Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAlUAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADxtsWtszzQhYED23C79/v0FPBfG1Ts1OnWyKqF2BTRWvUAMgidP NbpX4fcMYFl4gZ34OY7JT+FWcbvOjHHxS1QskQCx+Qf4NIEk0+31rj8FM0nGrqfL O4IaH+6xVPff9Osv70uMukxDsE9CBgwelyPFjYSu31BRsE29tq5zp6TT14jQYO42 Z2Iy0aa7PodvB4zqOBlfpkoY7bYpSQtezwIsAVxL66WAGnHA1CUIsR1J+epP7q6q sZp9WkD+Mq8gBza5o3tVU7kUUcvVc0UbORCa72B6ocxI6refLPENtbiRoeL8XiWy BS9LgmaOzXKgkC07gJVqANAGIhuhFO97aMc= -----END CERTIFICATE-----Generated at Mon Jun 16 11:52:41 2025 by rpki-client