$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/34f989d0-e7bf-31f8-907f-6a2bc2d1097e.roa File: 34f989d0-e7bf-31f8-907f-6a2bc2d1097e.roa (raw, json) Hash identifier: zQYqKp3LsMf+sM3KJpsbLO5u3X3ms9rTznfLlfwDDoM= Subject key identifier: C6:BF:BF:D8:63:62:93:BD:5B:37:A6:EF:A0:94:37:6F:35:AA:11:C6 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F432858495ABED5880D8AB44DCD5968B0 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/34f989d0-e7bf-31f8-907f-6a2bc2d1097e.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 36040 IP address blocks: 2620:11a:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:d5:88:0d:8a:b4:4d:cd:59:68:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=be97fa71-bbc9-4025-bdf2-71a42167df91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:14:0b:58:fa:3a:de:24:4c:78:06:cf:65: ce:7c:e2:46:e0:45:a5:c0:1a:79:75:63:7c:a4:ed: 35:87:fa:d4:91:12:1d:dd:6d:88:71:11:68:fd:4d: a6:53:65:bd:cd:11:4a:c5:b3:da:21:b8:ce:22:11: 0b:e3:f4:f4:ca:44:6e:d6:75:db:09:6c:e3:d3:23: fa:19:da:26:ec:3d:95:a7:39:6d:a3:26:87:b0:fe: 22:eb:61:3c:ca:02:72:44:01:f0:e5:62:f3:24:bf: 50:89:6d:a2:fe:de:36:9a:c3:8b:e1:fc:ca:73:05: 0a:82:93:cb:f4:4d:ef:16:ed:34:21:ea:52:63:b6: cd:32:cd:0d:73:4b:63:72:b9:c6:83:c2:89:ff:95: 79:52:dc:2f:cc:12:a8:08:3f:a2:9a:1f:c3:25:3e: 95:3a:67:42:11:3d:2c:e8:dc:b6:7a:bf:c9:de:e6: 23:62:19:78:78:fe:50:63:9e:7f:37:db:72:fc:dc: 06:b9:6b:59:25:be:7c:61:8e:5d:fe:c4:24:42:95: 33:01:28:2a:0c:64:a0:8f:bf:1d:0e:5f:6f:b8:45: 7e:9d:ea:d3:46:1a:45:10:da:f3:12:be:31:d6:2b: 6a:99:68:8f:93:e9:dd:ca:46:bb:73:fc:48:07:9d: 7d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BF:BF:D8:63:62:93:BD:5B:37:A6:EF:A0:94:37:6F:35:AA:11:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/34f989d0-e7bf-31f8-907f-6a2bc2d1097e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv6: 2620:11a:a000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:cf:a3:0a:5e:73:81:ab:a2:a4:03:a7:bb:08:6c:2b:57:d3: 69:67:f9:be:e2:13:93:fb:43:7b:5c:7d:46:1e:41:0d:fa:a5: 73:a2:93:a8:17:13:c1:3a:15:e8:97:b5:52:a3:9b:34:90:d8: 92:35:8b:4a:63:6b:30:49:b5:11:bf:e2:61:b1:49:f9:a2:43: 8d:00:8f:72:db:70:89:6b:3f:54:b2:de:23:88:0c:19:c8:88: 29:d4:24:f2:3d:3b:78:6e:8a:62:11:27:96:f8:ee:69:39:8e: 5c:57:28:c5:84:bc:b5:98:cd:09:11:61:52:4f:5a:dc:ab:90: 32:bf:9f:fd:1d:df:48:ee:92:d9:83:c5:53:34:dd:31:49:78: 1f:86:98:d1:c9:72:09:a0:dc:94:82:ce:f3:4c:1f:e7:50:a7: 75:2b:34:2f:f7:e0:1b:95:b8:7d:84:4a:96:ab:d1:00:aa:9b: 07:1c:40:d8:2d:15:5e:08:1b:6e:a6:bf:98:f6:66:50:3a:88: ce:a0:b1:25:44:f0:9d:64:f0:d8:3c:2f:17:62:87:36:fb:f0: c8:6c:28:c4:55:25:f5:aa:cf:81:14:b2:22:bc:2e:34:3e:7a: ce:de:3d:6e:07:1b:11:04:7f:aa:73:d6:48:f6:bf:c0:6e:ba: 0d:ed:d6:e5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElavtWIDYq0Tc1ZaLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk YmU5N2ZhNzEtYmJjOS00MDI1LWJkZjItNzFhNDIxNjdkZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4IUC1j6Ot4kTHgGz2XOfOJG4EWlwBp5dWN8 pO01h/rUkRId3W2IcRFo/U2mU2W9zRFKxbPaIbjOIhEL4/T0ykRu1nXbCWzj0yP6 Gdom7D2VpzltoyaHsP4i62E8ygJyRAHw5WLzJL9QiW2i/t42msOL4fzKcwUKgpPL 9E3vFu00IepSY7bNMs0Nc0tjcrnGg8KJ/5V5UtwvzBKoCD+imh/DJT6VOmdCET0s 6Ny2er/J3uYjYhl4eP5QY55/N9ty/NwGuWtZJb58YY5d/sQkQpUzASgqDGSgj78d Dl9vuEV+nerTRhpFENrzEr4x1itqmWiPk+ndyka7c/xIB519pwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMa/v9hjYpO9Wzem76CUN281qhHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMzRmOTg5ZDAtZTdiZi0z MWY4LTkwN2YtNmEyYmMyZDEwOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABGqAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAU8+jCl5zgauipAOnuwhsK1fTaWf5vuITk/tDe1x9Rh5BDfqlc6KT qBcTwToV6Je1UqObNJDYkjWLSmNrMEm1Eb/iYbFJ+aJDjQCPcttwiWs/VLLeI4gM GciIKdQk8j07eG6KYhEnlvjuaTmOXFcoxYS8tZjNCRFhUk9a3KuQMr+f/R3fSO6S 2YPFUzTdMUl4H4aY0clyCaDclILO80wf51CndSs0L/fgG5W4fYRKlqvRAKqbBxxA 2C0VXggbbqa/mPZmUDqIzqCxJUTwnWTw2DwvF2KHNvvwyGwoxFUl9arPgRSyIrwu ND56zt49bgcbEQR/qnPWSPa/wG66De3W5Q== -----END CERTIFICATE-----Generated at Sun Jun 15 05:00:12 2025 by rpki-client