$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/39fc107a-067e-33f3-b40f-4050eee42228.roa File: 39fc107a-067e-33f3-b40f-4050eee42228.roa (raw, json) Hash identifier: D2PLYSTtt/JKM/K+2wZCfBJjd5bTtOYW0aAdQKU6Bt4= Subject key identifier: AA:61:5D:8F:6C:6D:57:07:79:30:C1:21:12:2B:D1:73:4B:81:42:D2 Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Certificate serial: 010D0C9F43285849A4BA4A7E0A70E65E5230C900 Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/39fc107a-067e-33f3-b40f-4050eee42228.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 393732 IP address blocks: 2620:11d:500f::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4a:7e:0a:70:e6:5e:52:30:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d99219a3-6cf1-49b9-a31e-51445de4e23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:55:66:d1:78:f3:68:1a:4c:cf:07:c7:28:2f: 98:80:52:86:6e:f4:fc:70:09:69:5f:07:89:42:36: 14:34:43:ed:bd:f7:b5:36:f8:36:a5:5d:6f:f8:c9: 7c:ca:63:d7:35:d2:f8:fa:de:ac:3e:0b:92:97:5b: 37:ef:5b:cf:8f:64:a6:a2:2b:31:9c:99:1d:91:be: b9:28:18:02:5b:d9:72:99:1d:7a:f8:d8:f0:9a:1b: b6:b1:0d:3f:04:fb:e9:03:64:d1:ff:ea:86:c9:de: 90:48:b7:57:7e:8f:be:79:4e:dd:b7:2c:0a:c5:b2: 2a:bd:b5:d3:f5:3b:34:56:aa:33:da:e7:ac:65:42: 32:ca:6b:7f:ad:2b:ad:82:62:8e:8d:8f:18:d6:72: 99:f1:10:3c:76:85:3c:eb:93:a3:52:67:5f:be:e0: 14:1b:b1:b6:c1:9f:e9:02:5f:93:d6:36:0f:6d:18: a9:f2:e0:c0:1a:52:07:e2:83:ed:14:94:79:f2:41: d7:e9:15:e1:b3:2e:28:b7:41:62:ab:7d:95:e4:bc: b2:67:f4:79:18:06:0d:b9:83:0e:f7:fc:82:74:b9: 6b:3e:97:32:7c:81:1c:a0:44:9b:77:46:ed:7f:a6: 72:a8:8e:ad:0c:45:cb:f4:16:ee:cd:b8:2f:53:01: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:61:5D:8F:6C:6D:57:07:79:30:C1:21:12:2B:D1:73:4B:81:42:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/39fc107a-067e-33f3-b40f-4050eee42228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl X509v3 Authority Key Identifier: keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer sbgp-ipAddrBlock: critical IPv6: 2620:11d:500f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c8:ca:a5:6a:43:ba:9b:a8:18:1f:f8:3c:11:d9:81:69:58: 50:db:64:f2:6b:44:fa:c5:04:8a:48:1c:cb:ec:38:68:47:42: a5:1d:ac:3d:f8:6d:d3:6c:65:d2:8e:6d:f6:57:74:93:f0:76: f9:72:1c:23:10:6f:f7:e8:92:12:a9:06:6c:6c:dc:0f:49:29: 88:78:ed:41:f5:46:3e:2b:f3:ec:a0:62:10:30:c5:4d:4e:48: 5d:69:fb:d7:f6:28:36:83:5c:b2:2f:14:b1:fc:61:13:cb:e3: 4b:ca:9b:83:24:af:e5:2d:49:3f:3e:65:19:58:28:26:20:19: 5b:36:b5:24:de:cf:a7:78:a5:4a:9b:5a:a8:4a:33:ed:1c:c2: 96:8c:e9:46:4e:db:b7:6a:81:10:8b:72:b4:bc:d7:b5:6d:d6: ec:e9:8b:06:b9:c9:c7:14:44:69:3c:b8:9d:45:3d:70:4a:56: 75:e0:25:4b:ab:4f:17:7f:1e:b4:f6:34:66:ea:a3:2c:81:bf: ef:9c:ff:00:2f:85:27:e6:c5:f7:6e:3c:a3:e9:4a:79:56:a4: e9:d6:83:b1:2e:9b:96:3b:da:ac:6c:09:06:3f:0a:a2:61:8e: 19:3f:1a:31:ed:83:70:da:b6:c8:4a:4f:c4:82:f6:a0:a3:5d: d2:d3:97:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkukp+CnDmXlIwyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3 MzA2MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDk5MjE5YTMtNmNmMS00OWI5LWEzMWUtNTE0NDVkZTRlMjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylVm0XjzaBpMzwfHKC+YgFKGbvT8cAlpXweJ QjYUNEPtvfe1Nvg2pV1v+Ml8ymPXNdL4+t6sPguSl1s371vPj2SmoisxnJkdkb65 KBgCW9lymR16+Njwmhu2sQ0/BPvpA2TR/+qGyd6QSLdXfo++eU7dtywKxbIqvbXT 9Ts0Vqoz2uesZUIyymt/rSutgmKOjY8Y1nKZ8RA8doU865OjUmdfvuAUG7G2wZ/p Al+T1jYPbRip8uDAGlIH4oPtFJR58kHX6RXhsy4ot0Fiq32V5LyyZ/R5GAYNuYMO 9/yCdLlrPpcyfIEcoESbd0btf6ZyqI6tDEXL9BbuzbgvUwFT6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKphXY9sbVcHeTDBIRIr0XNLgULSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvMzlmYzEwN2EtMDY3ZS0z M2YzLWI0MGYtNDA1MGVlZTQyMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABHVAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH3IyqVqQ7qbqBgf+DwR2YFpWFDbZPJrRPrFBIpIHMvsOGhHQqUd rD34bdNsZdKObfZXdJPwdvlyHCMQb/fokhKpBmxs3A9JKYh47UH1Rj4r8+ygYhAw xU1OSF1p+9f2KDaDXLIvFLH8YRPL40vKm4Mkr+UtST8+ZRlYKCYgGVs2tSTez6d4 pUqbWqhKM+0cwpaM6UZO27dqgRCLcrS817Vt1uzpiwa5yccURGk8uJ1FPXBKVnXg JUurTxd/HrT2NGbqoyyBv++c/wAvhSfmxfduPKPpSnlWpOnWg7Eum5Y72qxsCQY/ CqJhjhk/GjHtg3DatshKT8SC9qCjXdLTl5U= -----END CERTIFICATE-----Generated at Tue Apr 29 01:55:28 2025 by rpki-client