$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa File: 519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa (raw, json) Hash identifier: o86p5zkS8ju27niq3FacsQKKuiPpwXUT7qz5nP7WIcI= Subject key identifier: 6C:39:A2:7F:C3:45:AE:F0:0E:5C:62:9A:20:CB:05:7C:B1:5F:17:C2 Certificate issuer: /CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Certificate serial: 010D0C9F432858498CFF158FF17295BD176CE880 Authority key identifier: 45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 399844 IP address blocks: 2620:68:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:15:8f:f1:72:95:bd:17:6c:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=9ede4c17-c1d3-4e18-b16e-fffeef4a54bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fc:71:93:c8:ae:ad:d6:9a:f1:65:f1:81:10: 4d:19:28:cc:49:a4:b4:f3:57:eb:d2:04:54:62:3c: 51:ef:eb:a6:f9:db:92:03:2d:1d:75:9e:11:75:2a: 17:0f:a1:df:73:b9:40:2c:be:b9:c4:1b:bd:f5:d9: dc:e9:c1:24:68:d1:d7:70:19:dc:ac:d9:f4:93:de: 8f:d0:8b:fb:c4:dd:99:28:ed:c9:1c:88:fe:4d:a3: cb:17:45:84:5f:78:c1:fc:a6:19:97:e5:18:f9:f2: d7:3c:c5:ad:47:a2:13:91:ff:1c:dc:c1:72:eb:a6: da:7f:5e:b3:df:f7:8f:f7:c4:b9:9a:dc:0c:40:a0: 1a:77:34:ac:1f:bb:c3:a7:72:8c:d0:39:9b:2d:86: e3:a9:c7:9b:07:9b:d2:38:aa:f3:dc:8c:77:9b:7f: 46:02:8d:be:bc:a3:78:fa:9f:ae:fe:2f:8a:f0:4a: 4e:e6:ec:78:df:c0:39:b6:58:47:70:f0:20:91:27: 8d:b6:20:4c:0c:b7:85:7b:f6:96:a2:c0:c5:e0:40: ce:34:3d:4e:a1:76:02:c8:19:93:9c:a5:b4:ac:bd: 3b:e7:8f:34:f4:06:40:af:54:76:20:0e:d7:04:0c: 0d:b5:4f:d4:4a:a2:5a:d6:f3:13:47:84:ae:b3:7a: c0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:39:A2:7F:C3:45:AE:F0:0E:5C:62:9A:20:CB:05:7C:B1:5F:17:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl X509v3 Authority Key Identifier: keyid:45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer sbgp-ipAddrBlock: critical IPv6: 2620:68:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:32:74:73:dc:38:fe:55:2a:36:1f:fa:3b:df:28:5c:be:d8: 62:a6:5c:92:20:bb:8f:b2:ba:2e:18:54:2b:47:bf:75:91:d6: 0b:f2:58:d0:cd:33:9b:77:88:96:a1:95:8d:f8:1b:ea:c2:c7: 73:b3:2c:b4:db:d6:d4:da:fc:62:5c:ef:0f:55:0e:d2:b7:9e: 61:44:6e:11:07:44:21:b2:f7:10:5f:d1:d4:1a:ae:dc:17:47: 99:bb:ed:e6:aa:76:dd:f9:02:d8:bf:45:42:6a:79:01:c8:7e: bd:10:56:1a:85:8b:c7:bc:c1:e0:1e:09:37:b4:f4:cd:4f:77: 89:37:e3:3b:f3:1d:c7:a4:54:55:43:d3:a7:11:79:75:4f:78: a8:c4:b8:85:ad:12:28:a6:5c:54:a9:23:70:17:ff:94:eb:04: 76:ee:ad:49:e7:d8:9a:e5:29:c1:d5:df:68:fd:b6:a7:57:54: 67:5f:b9:0f:d2:f7:1c:4a:34:9b:d1:36:fc:e8:28:4a:58:dc: 85:75:4e:6e:be:e4:b7:b1:f2:be:b2:61:29:c5:b1:79:a3:0e: 62:1b:9e:98:89:b3:a1:79:e1:31:51:f4:26:16:6e:af:ca:ba: 8d:ac:11:e4:7e:45:31:9b:14:9e:89:98:e2:7a:0b:da:be:b8: 69:b2:28:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmM/xWP8XKVvRds6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1YTM5ZDEtNDAwZC00MjNhLTg5YzQtMzdmN2YxYTE0 NWYyMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk OWVkZTRjMTctYzFkMy00ZTE4LWIxNmUtZmZmZWVmNGE1NGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivxxk8iurdaa8WXxgRBNGSjMSaS081fr0gRU YjxR7+um+duSAy0ddZ4RdSoXD6Hfc7lALL65xBu99dnc6cEkaNHXcBncrNn0k96P 0Iv7xN2ZKO3JHIj+TaPLF0WEX3jB/KYZl+UY+fLXPMWtR6ITkf8c3MFy66baf16z 3/eP98S5mtwMQKAadzSsH7vDp3KM0DmbLYbjqcebB5vSOKrz3Ix3m39GAo2+vKN4 +p+u/i+K8EpO5ux438A5tlhHcPAgkSeNtiBMDLeFe/aWosDF4EDOND1OoXYCyBmT nKW0rL0754809AZAr1R2IA7XBAwNtU/USqJa1vMTR4Sus3rAoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGw5on/DRa7wDlximiDLBXyxXxfCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVh MzlkMS00MDBkLTQyM2EtODljNC0zN2Y3ZjFhMTQ1ZjIvNTE5ZWQxY2YtZGE3Yy0z ZjgwLWFiZDEtZDhlNGFkOWQ4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1YTM5ZDEtNDAwZC00MjNhLTg5 YzQtMzdmN2YxYTE0NWYyL2Y5NWEzOWQxLTQwMGQtNDIzYS04OWM0LTM3ZjdmMWEx NDVmMi5jcmwwHwYDVR0jBBgwFoAURY6JtDIFjVgZin8jAUv2Hx3NRHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVhMzlkMS00MDBkLTQyM2EtODljNC0zN2Y3 ZjFhMTQ1ZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAaCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGYydHPcOP5VKjYf+jvfKFy+2GKmXJIgu4+yui4YVCtHv3WR1gvy WNDNM5t3iJahlY34G+rCx3OzLLTb1tTa/GJc7w9VDtK3nmFEbhEHRCGy9xBf0dQa rtwXR5m77eaqdt35Ati/RUJqeQHIfr0QVhqFi8e8weAeCTe09M1Pd4k34zvzHcek VFVD06cReXVPeKjEuIWtEiimXFSpI3AX/5TrBHburUnn2JrlKcHV32j9tqdXVGdf uQ/S9xxKNJvRNvzoKEpY3IV1Tm6+5Lex8r6yYSnFsXmjDmIbnpiJs6F54TFR9CYW bq/Kuo2sEeR+RTGbFJ6JmOJ6C9q+uGmyKO0= -----END CERTIFICATE-----Generated at Tue Apr 29 09:36:59 2025 by rpki-client