$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa File: 05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa (raw, json) Hash identifier: mlnCS92+KPyWyDr/LI3exIAbf2VLhxs+RDocSYGmC1Y= Subject key identifier: C2:DA:65:5F:32:37:2F:FE:34:69:9E:D5:38:0D:1B:A5:F0:F2:A9:1F Certificate issuer: /CN=9531f556-030e-49b4-a31b-60b469425432 Certificate serial: 010D0C9F43285849E225309563F13D2202DC5D00 Authority key identifier: 4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 8075 IP address blocks: 2620:bc:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:30:95:63:f1:3d:22:02:dc:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9531f556-030e-49b4-a31b-60b469425432 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=43136fd9-36e7-435a-8159-017f72304fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c5:0a:f7:35:fc:d5:7a:73:cf:09:74:59:5d: b6:df:62:f8:f9:2e:ce:25:f0:78:8e:dc:44:19:21: 45:15:74:14:82:5d:a7:b8:d3:ba:82:7e:65:80:59: 20:dd:51:af:7f:df:b6:b5:ed:a0:da:47:bb:e2:ca: 64:9e:ab:d8:78:77:24:df:93:59:76:6f:89:13:ca: 4f:5a:dd:2d:1a:e2:ee:95:51:40:9b:61:08:f7:e2: cd:43:63:b4:a4:82:10:9e:3e:68:55:00:05:09:d1: 13:3f:18:a0:35:62:9f:77:65:aa:a1:a2:33:79:75: d3:86:07:9f:16:07:cf:c0:64:43:96:5d:06:fc:e5: 5f:58:f8:e5:cc:33:07:1c:d9:0a:2e:c6:51:f9:5d: 74:a2:d5:69:8c:bd:6d:0f:70:90:6c:33:a0:5b:cf: 07:d0:1e:35:1e:66:f0:e8:49:be:ea:1f:d5:62:94: c4:77:c5:b3:a2:46:dd:13:4d:5b:b8:d0:69:22:2d: 58:bf:9a:52:a9:e4:9d:7b:e9:5c:2d:05:bd:e2:86: fb:fb:2f:5e:89:7a:37:92:cd:b6:9c:c6:4b:27:64: 36:f5:28:af:a5:0c:08:00:56:b1:76:af:24:f1:91: eb:92:8e:68:af:41:8c:a7:8f:65:3f:69:22:57:e8: 10:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DA:65:5F:32:37:2F:FE:34:69:9E:D5:38:0D:1B:A5:F0:F2:A9:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.crl X509v3 Authority Key Identifier: keyid:4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer sbgp-ipAddrBlock: critical IPv6: 2620:bc:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a3:d5:4e:b8:cd:75:87:1c:2c:c0:64:2e:90:c2:5e:e9:4a: b9:1c:b2:7f:ef:0e:d9:59:24:2f:eb:dd:68:4b:2b:06:e3:6d: 81:c2:a7:2e:4a:1d:f5:3c:36:f9:31:27:08:e5:b9:8a:dc:c2: 99:3e:41:c0:f1:a4:c9:5c:d1:cd:61:73:b8:ac:45:fd:3f:f6: a8:15:93:14:79:96:ba:99:c2:77:16:6a:b7:8e:e6:0a:22:ea: b2:c0:8b:8d:e1:95:d6:c7:5c:05:6e:08:db:6b:51:31:62:43: 75:de:b9:76:ba:38:a4:1a:ed:5f:22:e4:52:30:69:31:3d:82: e4:a4:98:16:ad:70:3e:30:bb:39:a3:67:cf:a8:fa:f6:24:88: 78:02:c3:c9:53:2e:36:8a:9d:1f:2b:83:6d:78:a4:42:c6:a7: 64:df:c4:56:93:93:82:f1:b9:d9:78:a5:6d:a0:90:98:fc:4e: a1:63:b4:34:dc:6c:e2:79:c8:f2:f5:5d:3c:93:2f:43:e0:83: c8:39:ff:74:84:d4:ef:d1:39:74:26:61:59:18:05:eb:86:dc: e7:2b:b1:0a:57:7b:45:06:8d:7f:f5:7b:18:62:24:a3:fe:17: 23:ea:7c:40:8a:41:d3:0c:5a:26:b3:17:6a:13:d1:fc:4e:78: b3:63:3b:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEniJTCVY/E9IgLcXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTUzMWY1NTYtMDMwZS00OWI0LWEzMWItNjBiNDY5NDI1 NDMyMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NDMxMzZmZDktMzZlNy00MzVhLTgxNTktMDE3ZjcyMzA0ZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MUK9zX81Xpzzwl0WV2232L4+S7OJfB4jtxE GSFFFXQUgl2nuNO6gn5lgFkg3VGvf9+2te2g2ke74spknqvYeHck35NZdm+JE8pP Wt0tGuLulVFAm2EI9+LNQ2O0pIIQnj5oVQAFCdETPxigNWKfd2WqoaIzeXXThgef FgfPwGRDll0G/OVfWPjlzDMHHNkKLsZR+V10otVpjL1tD3CQbDOgW88H0B41Hmbw 6Em+6h/VYpTEd8WzokbdE01buNBpIi1Yv5pSqeSde+lcLQW94ob7+y9eiXo3ks22 nMZLJ2Q29SivpQwIAFaxdq8k8ZHrko5or0GMp49lP2kiV+gQ+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMLaZV8yNy/+NGme1TgNG6Xw8qkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NTMx ZjU1Ni0wMzBlLTQ5YjQtYTMxYi02MGI0Njk0MjU0MzIvMDVjNmQyMGUtYTJiZS0z ZTg2LWFhYzctZDI0YzJhNTVlMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTUzMWY1NTYtMDMwZS00OWI0LWEz MWItNjBiNDY5NDI1NDMyLzk1MzFmNTU2LTAzMGUtNDliNC1hMzFiLTYwYjQ2OTQy NTQzMi5jcmwwHwYDVR0jBBgwFoAUTqJQJ94jCWWBsX033oBeBXwIvEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NTMxZjU1Ni0wMzBlLTQ5YjQtYTMxYi02MGI0 Njk0MjU0MzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAvCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACyj1U64zXWHHCzAZC6Qwl7pSrkcsn/vDtlZJC/r3WhLKwbjbYHC py5KHfU8NvkxJwjluYrcwpk+QcDxpMlc0c1hc7isRf0/9qgVkxR5lrqZwncWareO 5goi6rLAi43hldbHXAVuCNtrUTFiQ3XeuXa6OKQa7V8i5FIwaTE9guSkmBatcD4w uzmjZ8+o+vYkiHgCw8lTLjaKnR8rg214pELGp2TfxFaTk4Lxudl4pW2gkJj8TqFj tDTcbOJ5yPL1XTyTL0Pgg8g5/3SE1O/ROXQmYVkYBeuG3OcrsQpXe0UGjX/1exhi JKP+FyPqfECKQdMMWiazF2oT0fxOeLNjO9A= -----END CERTIFICATE-----Generated at Mon Jun 16 00:11:04 2025 by rpki-client