$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa File: a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa (raw, json) Hash identifier: gZ+aLQeP5PrRYAtnEy+YLo55d29xwC1kcsSBh+mHVrw= Subject key identifier: 04:EB:7E:0F:CE:09:CD:D1:11:5F:D3:6E:9E:6B:E0:69:3F:CE:BE:09 Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Certificate serial: 010D0C9F43285849A4BA4A95ED83BFB2F6DCAB00 Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 393732 IP address blocks: 2620:11d:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4a:95:ed:83:bf:b2:f6:dc:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f3e69f99-40f8-4596-9d18-f9a6490dece9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d5:28:55:43:03:07:62:1d:7a:ae:d5:3c:e0: cc:bd:05:da:3a:d9:ff:a1:2b:56:0b:1d:a5:84:0e: 16:8d:c5:8e:71:2d:39:d5:e7:11:41:d4:73:d9:8e: e2:28:0b:a0:ee:33:d1:46:ab:62:fc:b8:d5:6e:13: e8:04:65:df:a9:74:4d:93:3e:ec:ef:f8:fe:e2:fe: 16:e0:03:be:61:b9:14:57:b3:6c:9f:ed:d4:03:de: 71:d4:9c:ae:b1:64:04:3b:45:99:c5:a8:08:64:97: b3:d3:76:1e:92:5f:4c:a7:27:1e:99:0a:37:a4:a0: a2:61:6a:da:68:ee:ad:8c:dd:f1:af:4c:29:69:1a: 58:ad:c0:c2:0d:04:fc:fc:2a:a4:62:ec:af:ab:f7: 34:de:72:59:0d:32:89:0e:84:7c:ab:bc:03:ab:67: c4:85:7f:a0:62:6b:90:58:db:ad:2c:3b:98:98:95: 55:62:3b:15:7f:f0:94:ca:0d:30:9a:d6:88:5d:15: 4a:0f:12:43:eb:70:34:59:83:a5:9b:b0:7f:98:41: f6:63:54:c4:8f:66:04:49:36:d5:15:ca:a8:93:fe: f1:a5:b4:20:ab:a0:a5:80:ab:fb:65:8d:49:f2:d3: 83:c0:6d:69:35:a0:a1:2c:ce:52:01:0d:ad:f7:40: 6a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EB:7E:0F:CE:09:CD:D1:11:5F:D3:6E:9E:6B:E0:69:3F:CE:BE:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl X509v3 Authority Key Identifier: keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer sbgp-ipAddrBlock: critical IPv6: 2620:11d:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:83:da:34:df:c7:a7:e5:1f:11:2f:c9:d7:79:00:f4:54:f7: bb:c5:53:ff:ac:53:d3:62:14:77:68:72:0c:4b:83:9f:ce:30: 15:7d:a2:30:f4:cf:9b:cf:01:69:8a:38:2e:fa:ea:57:14:54: c5:c0:d1:cc:5c:f5:c3:cc:82:90:f5:a0:58:bb:d7:56:73:ae: 52:b2:cf:2a:9f:5a:66:01:ee:18:aa:42:9b:04:ee:08:61:ad: 10:46:72:b2:37:2e:d8:25:b4:78:0b:37:d5:34:56:c2:2a:67: ab:20:43:c9:a8:f3:ec:2d:b1:94:f2:68:2d:a7:fe:f9:92:4d: 18:90:2a:c1:23:9f:71:b1:e5:90:df:c2:23:3b:23:75:5e:f7: 23:6e:ba:69:62:af:70:2b:0f:b5:80:2c:7a:2a:b1:82:5d:95: 88:92:64:1a:df:5e:38:d5:d3:a8:5a:4b:ac:b7:b6:36:64:74: d7:37:87:10:5d:9c:ed:51:80:bb:fc:ee:89:8a:9a:e5:da:69: 90:7c:13:e9:a8:f5:c8:99:c7:5c:05:9e:cb:20:de:f4:e9:c2: af:04:dd:8a:91:03:1e:02:a9:60:34:85:69:6b:ab:29:f2:fd: bc:07:0c:5b:48:9e:35:b5:4d:46:83:c3:85:6e:7e:ba:79:26: 2d:72:f5:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkukqV7YO/svbcqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3 MzA2MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjNlNjlmOTktNDBmOC00NTk2LTlkMTgtZjlhNjQ5MGRlY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dUoVUMDB2Ideq7VPODMvQXaOtn/oStWCx2l hA4WjcWOcS051ecRQdRz2Y7iKAug7jPRRqti/LjVbhPoBGXfqXRNkz7s7/j+4v4W 4AO+YbkUV7Nsn+3UA95x1JyusWQEO0WZxagIZJez03Yekl9MpycemQo3pKCiYWra aO6tjN3xr0wpaRpYrcDCDQT8/CqkYuyvq/c03nJZDTKJDoR8q7wDq2fEhX+gYmuQ WNutLDuYmJVVYjsVf/CUyg0wmtaIXRVKDxJD63A0WYOlm7B/mEH2Y1TEj2YESTbV Fcqok/7xpbQgq6ClgKv7ZY1J8tODwG1pNaChLM5SAQ2t90BqnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFATrfg/OCc3REV/Tbp5r4Gk/zr4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvYTA2OWJhOTgtZWMwZi0z MTM1LWEwYWQtMWU4ZTgxZTljMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABHVAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACCD2jTfx6flHxEvydd5APRU97vFU/+sU9NiFHdocgxLg5/OMBV9 ojD0z5vPAWmKOC766lcUVMXA0cxc9cPMgpD1oFi711ZzrlKyzyqfWmYB7hiqQpsE 7ghhrRBGcrI3LtgltHgLN9U0VsIqZ6sgQ8mo8+wtsZTyaC2n/vmSTRiQKsEjn3Gx 5ZDfwiM7I3Ve9yNuumlir3ArD7WALHoqsYJdlYiSZBrfXjjV06haS6y3tjZkdNc3 hxBdnO1RgLv87omKmuXaaZB8E+mo9ciZx1wFnssg3vTpwq8E3YqRAx4CqWA0hWlr qyny/bwHDFtInjW1TUaDw4Vufrp5Ji1y9Rc= -----END CERTIFICATE-----Generated at Tue Apr 29 09:20:59 2025 by rpki-client