$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa File: d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa (raw, json) Hash identifier: phtDrMsp3Vlqe/h6RReRKyU4XgtBd/uaJWNeQqlymQo= Subject key identifier: 52:20:E8:E4:8C:3C:FC:AB:C8:BF:69:C1:0D:EE:6D:39:1A:BB:8E:D1 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F43285849CE9A6623F7BC14239752EC80 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 21743 IP address blocks: 2620:b9:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:66:23:f7:bc:14:23:97:52:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=74791ccb-6d04-4cb7-874e-0a4172d95935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:d4:c5:3c:8a:fc:fd:20:fc:2a:43:ea:44: c1:30:81:5a:be:cf:ee:46:32:78:1d:4e:cd:06:38: c9:0b:d7:5c:cc:28:7e:e1:dd:14:e8:b1:90:c0:01: 58:8d:9f:35:63:e1:de:96:b9:14:70:dd:06:80:7c: ef:d5:3a:24:28:e9:51:1c:97:99:7d:fa:f0:73:3d: 1a:36:03:c1:4a:75:b4:3a:2e:52:2f:10:b3:58:4d: 9d:bc:58:be:f3:06:8a:af:19:f1:19:d0:d6:ff:39: 3d:b6:41:2c:9f:b9:73:fd:f7:f4:17:a6:22:05:98: 54:da:cd:94:02:10:1b:9e:58:76:0b:bd:c1:7e:8c: 99:2f:3a:01:cf:60:d4:0e:46:1a:e0:2d:fa:3a:83: c9:e4:eb:fe:5e:e7:a2:af:a9:74:00:c6:ee:62:f6: 8f:57:31:cf:c6:f3:d5:12:29:b5:5f:a5:7b:30:1f: 7d:7a:a3:4a:82:5a:06:86:e4:32:85:b6:eb:83:d6: 2b:2b:eb:3e:4a:d7:20:ed:b5:e5:e2:0b:13:33:c2: d8:c0:3d:c3:c1:18:9e:91:42:9d:4d:76:d2:82:44: 4a:91:ea:67:83:51:f5:4c:d4:ca:f5:d2:18:77:6d: f9:45:08:52:4a:8c:c6:cd:2e:a5:96:7f:16:97:55: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:20:E8:E4:8C:3C:FC:AB:C8:BF:69:C1:0D:EE:6D:39:1A:BB:8E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv6: 2620:b9:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ce:eb:ce:f3:68:8f:82:14:bf:a9:e7:4b:7a:a8:9e:1b:b9: 59:04:11:36:df:d7:75:a0:b4:e9:a9:a1:d3:98:74:57:73:16: 22:82:33:55:e2:62:c4:5f:54:ec:88:06:3a:a5:1c:c1:50:d2: 75:d2:06:32:a9:5e:a3:56:e6:49:65:33:dd:1e:f4:f2:57:8a: 92:ca:59:9c:43:14:11:c2:e6:44:b6:90:31:b6:6b:34:92:80: 99:a1:77:b1:3f:bc:fb:31:53:5e:29:89:e5:e2:b0:14:0c:40: 76:b0:54:48:f0:60:b8:22:e8:7e:ec:be:c5:3e:9d:a3:2a:bc: 6d:9c:c5:02:72:c3:37:9c:42:c2:30:1c:2f:4e:3a:ef:88:25: 5c:bd:5d:50:0d:96:03:1c:ca:e1:b0:bd:4e:e2:e2:39:33:6d: b6:a8:b3:c8:fd:ed:f4:45:bc:2c:49:50:6b:84:db:23:2d:1e: 6f:b1:28:0b:14:68:c7:4a:d2:20:0e:8b:23:17:ec:99:c2:ac: 83:14:77:12:90:d8:20:af:c2:3c:c8:c2:39:74:dd:a9:22:7e: dc:9f:cd:08:b1:75:0d:7f:b9:18:a5:f4:51:72:8e:7d:a2:ca: 01:16:36:f1:ab:79:5d:79:45:2e:d6:6c:5f:a1:09:ea:7d:32: 5f:a4:20:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmmYj97wUI5dS7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NzQ3OTFjY2ItNmQwNC00Y2I3LTg3NGUtMGE0MTcyZDk1OTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8bUxTyK/P0g/CpD6kTBMIFavs/uRjJ4HU7N BjjJC9dczCh+4d0U6LGQwAFYjZ81Y+HelrkUcN0GgHzv1TokKOlRHJeZffrwcz0a NgPBSnW0Oi5SLxCzWE2dvFi+8waKrxnxGdDW/zk9tkEsn7lz/ff0F6YiBZhU2s2U AhAbnlh2C73BfoyZLzoBz2DUDkYa4C36OoPJ5Ov+Xueir6l0AMbuYvaPVzHPxvPV Eim1X6V7MB99eqNKgloGhuQyhbbrg9YrK+s+Stcg7bXl4gsTM8LYwD3DwRiekUKd TXbSgkRKkepng1H1TNTK9dIYd235RQhSSozGzS6lln8Wl1VQ1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFIg6OSMPPyryL9pwQ3ubTkau47RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZDY4Y2FhODItN2VlMy0z YjU3LWE4ZjktOTAyNjJkMzc5MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAueAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEDO687zaI+CFL+p50t6qJ4buVkEETbf13WgtOmpodOYdFdzFiKC M1XiYsRfVOyIBjqlHMFQ0nXSBjKpXqNW5kllM90e9PJXipLKWZxDFBHC5kS2kDG2 azSSgJmhd7E/vPsxU14pieXisBQMQHawVEjwYLgi6H7svsU+naMqvG2cxQJywzec QsIwHC9OOu+IJVy9XVANlgMcyuGwvU7i4jkzbbaos8j97fRFvCxJUGuE2yMtHm+x KAsUaMdK0iAOiyMX7JnCrIMUdxKQ2CCvwjzIwjl03akiftyfzQixdQ1/uRil9FFy jn2iygEWNvGreV15RS7WbF+hCep9Ml+kIME= -----END CERTIFICATE-----Generated at Sun Jun 15 13:09:48 2025 by rpki-client