$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/952792ae-3d78-36fe-8518-3e73e2e83906.roa File: 952792ae-3d78-36fe-8518-3e73e2e83906.roa (raw, json) Hash identifier: ASGVJvv0KmCXF5XOz+CbopkmqeQA4mFIJ5FDvYh0dAo= Subject key identifier: A3:43:61:45:2A:95:0E:18:64:7B:81:19:B1:7D:67:35:E2:22:C9:70 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584953C411C98F087C7292F89F80 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/952792ae-3d78-36fe-8518-3e73e2e83906.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 25645 IP address blocks: 2605:8300:1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:11:c9:8f:08:7c:72:92:f8:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=8dd75a56-aff7-492a-b8f9-a23c48f78832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c3:49:50:4c:0f:7e:57:4a:50:d0:ee:b2:3f: 30:d9:52:4d:b2:51:b5:a2:74:d4:36:3a:c8:f5:5c: ba:25:6d:1d:e6:6a:c5:af:a5:a9:67:d4:77:08:2b: e1:a3:ca:f1:31:b1:b8:31:c2:cd:7c:5c:3a:47:7c: eb:d0:26:77:3e:4e:ca:7f:63:1d:a3:3c:93:96:ef: ce:9c:21:a4:c2:f8:6d:8f:96:de:ad:53:ec:95:3f: 5c:51:c3:52:d7:5a:f2:39:3e:ba:16:17:08:87:f4: 56:0c:be:92:ca:e9:c8:89:19:d3:ed:01:74:df:df: c2:1b:20:02:ec:63:a5:de:72:96:9a:f8:a3:f2:59: 50:d9:80:5c:b4:83:66:b0:7a:3a:a1:89:47:0b:bd: a7:36:80:ae:6d:40:ec:25:57:23:9c:6a:10:67:46: 0a:27:63:5e:71:97:db:d3:01:e0:16:ce:b4:2f:d5: af:90:fe:bb:5d:63:73:54:11:e6:8c:c4:75:06:7d: ea:23:e0:2a:29:55:9f:5b:7a:2c:b9:25:6d:84:85: 6b:bf:cc:18:db:18:0c:58:87:46:99:ac:86:33:b4: 50:92:55:14:0a:67:50:f4:0a:0c:a1:cd:03:7b:c4: 30:3f:cf:4f:e8:09:b1:c2:3f:9f:25:d2:bd:9e:92: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:43:61:45:2A:95:0E:18:64:7B:81:19:B1:7D:67:35:E2:22:C9:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/952792ae-3d78-36fe-8518-3e73e2e83906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv6: 2605:8300:1a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e9:94:06:c1:5d:6d:3d:91:38:ea:85:bc:29:ef:94:c0:2f: a5:a7:84:c6:e3:fc:25:8e:6d:18:f5:a6:57:16:a1:65:ba:76: 16:88:dd:18:69:bd:92:3d:27:00:19:cf:8f:3f:3d:1b:34:6e: b9:ca:85:a0:61:c4:c5:ec:5f:27:61:36:40:a0:4c:58:66:b5: ad:7c:f2:e7:9a:06:c3:ad:81:01:61:89:c5:0a:c9:f8:de:d6: 77:f7:32:64:66:a1:2c:1f:d3:9d:cb:0b:f0:ef:47:83:cf:15: 73:f9:c9:cd:da:ca:77:34:fd:9b:2c:fa:d7:9f:c4:13:e3:53: 79:4c:28:34:90:12:ec:01:22:e4:8e:64:d1:8e:75:9f:a9:94: b6:60:58:58:b7:b3:df:ca:95:ab:73:48:47:ca:bf:b4:03:8a: c0:ae:56:27:6c:67:a0:d6:36:d1:a0:31:c9:95:e1:41:50:9c: 19:db:e6:d8:d1:73:b1:80:3a:fb:7c:0c:67:24:b4:44:41:f7: 1c:de:db:68:44:83:43:1c:35:89:1a:ab:a2:67:92:10:fd:3a: d2:f7:16:ea:52:e1:a0:0d:f2:f6:fe:b4:12:20:e6:82:3a:02: 9f:b4:24:b4:bf:01:15:ca:24:b2:e0:c7:ef:e1:45:23:83:f1: 36:ad:4b:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElTxBHJjwh8cpL4n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk OGRkNzVhNTYtYWZmNy00OTJhLWI4ZjktYTIzYzQ4Zjc4ODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsNJUEwPfldKUNDusj8w2VJNslG1onTUNjrI 9Vy6JW0d5mrFr6WpZ9R3CCvho8rxMbG4McLNfFw6R3zr0CZ3Pk7Kf2MdozyTlu/O nCGkwvhtj5berVPslT9cUcNS11ryOT66FhcIh/RWDL6SyunIiRnT7QF039/CGyAC 7GOl3nKWmvij8llQ2YBctINmsHo6oYlHC72nNoCubUDsJVcjnGoQZ0YKJ2NecZfb 0wHgFs60L9WvkP67XWNzVBHmjMR1Bn3qI+AqKVWfW3osuSVthIVrv8wY2xgMWIdG mayGM7RQklUUCmdQ9AoMoc0De8QwP89P6Amxwj+fJdK9npLazQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKNDYUUqlQ4YZHuBGbF9ZzXiIslwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvOTUyNzkyYWUtM2Q3OC0z NmZlLTg1MTgtM2U3M2UyZTgzOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWDAAAa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABXplAbBXW09kTjqhbwp75TAL6WnhMbj/CWObRj1plcWoWW6dhaI 3RhpvZI9JwAZz48/PRs0brnKhaBhxMXsXydhNkCgTFhmta188ueaBsOtgQFhicUK yfje1nf3MmRmoSwf053LC/DvR4PPFXP5yc3aync0/Zss+tefxBPjU3lMKDSQEuwB IuSOZNGOdZ+plLZgWFi3s9/KlatzSEfKv7QDisCuVidsZ6DWNtGgMcmV4UFQnBnb 5tjRc7GAOvt8DGcktERB9xze22hEg0McNYkaq6JnkhD9OtL3FupS4aAN8vb+tBIg 5oI6Ap+0JLS/ARXKJLLgx+/hRSOD8TatSy8= -----END CERTIFICATE-----Generated at Mon Apr 28 16:03:45 2025 by rpki-client