$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa File: 9012ed63-878a-3814-ab32-db7d7578b57a.roa (raw, json) Hash identifier: cJY2xJd8uy0daI2iKcl1z5S0XiePydL9i1yORTrzRbw= Subject key identifier: A3:DC:B7:8E:E7:BE:C6:D9:91:5D:35:6F:C3:01:E8:2F:90:A9:D7:09 Certificate issuer: /CN=bb3e1744-5186-489a-9b86-cb31cef73874 Certificate serial: 010D0C9F4328584A03A54D20E9B36833BA0C8534 Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 2620:20:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4d:20:e9:b3:68:33:ba:0c:85:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=e326caac-52d5-4035-8c64-2ccf6a3fad84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:8d:c8:36:d4:e1:94:f3:74:6b:a2:0b:c6: 8a:0e:1d:5b:9a:dd:90:e9:de:bc:59:e7:fd:f5:99: 9b:1a:fd:aa:1c:d4:3d:d3:19:e5:6d:11:a8:d8:1d: 45:0c:39:0d:0b:a7:a9:49:0b:1c:76:fa:22:41:e8: 3f:b1:fe:e7:1d:57:c3:7f:f1:59:a6:5d:9a:b7:20: ef:3e:20:fd:5f:d8:21:70:e4:ef:30:77:c7:60:54: c6:fd:72:64:af:f1:cd:67:5d:cc:74:38:e7:3f:6b: bd:7a:dc:e7:78:7f:67:8a:b3:44:64:78:6e:64:07: 88:45:03:d7:bc:7a:52:1d:1c:e9:6c:06:1a:c5:8d: d3:ef:c7:0b:10:c8:65:0e:3d:ab:76:3d:9b:f7:5d: 13:25:e6:49:3e:28:f9:f5:22:f2:95:87:3e:7d:46: 69:95:8b:9b:36:e0:92:db:6d:30:1a:79:6c:52:f9: e3:02:81:48:e9:50:8a:2e:1b:69:24:ab:de:31:54: c9:71:cd:d5:85:bc:70:77:c0:1d:c7:2a:e7:00:e3: 5b:5a:e2:f8:ec:5a:42:17:41:9f:7f:36:9a:4b:54: be:07:4c:f8:e8:21:a1:1d:93:a4:cf:ea:45:46:d5: 15:f9:68:3d:34:0f:f3:2e:8e:11:90:72:db:32:6a: 9a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DC:B7:8E:E7:BE:C6:D9:91:5D:35:6F:C3:01:E8:2F:90:A9:D7:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl X509v3 Authority Key Identifier: keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer sbgp-ipAddrBlock: critical IPv6: 2620:20:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ed:21:60:98:bc:d4:74:ed:67:ad:fb:52:ad:3e:3d:8d:3e: e8:d6:b1:05:79:80:df:92:82:04:5a:2a:35:55:03:98:d4:10: 16:2e:c0:8d:d3:35:2e:c2:0e:76:77:e7:fe:a9:dd:75:3a:6a: e0:a3:05:25:25:b1:d6:a8:aa:f7:b8:bb:c4:8b:b8:ec:86:26: 1e:02:77:b9:d8:82:23:b6:1b:de:7a:bf:47:11:bd:ca:36:05: 80:f8:6e:cb:33:76:34:f3:f4:a6:15:7c:48:65:5d:e9:c0:51: 45:cb:27:fe:a2:7c:9b:50:38:64:20:d8:77:42:90:4a:6d:0f: 16:0c:60:e4:a5:67:18:97:3e:46:f8:9d:7b:a6:61:b7:38:f5: ac:71:e4:b4:88:47:86:50:47:3c:fc:36:17:67:fd:6a:7d:3b: 8d:08:fe:e6:b0:99:62:29:36:f9:86:95:37:42:bd:a2:f3:c2: 37:4d:d1:b9:58:16:bd:ce:16:b7:04:89:0c:ab:a8:b6:a7:e7: 44:4c:2b:73:35:ca:d6:af:61:60:9b:f2:ea:19:eb:c7:41:52: 47:ce:51:96:75:f8:f9:fe:37:ed:6f:f7:f8:1c:0e:77:02:db: c8:52:a8:74:b1:11:a4:3a:6c:24:14:bf:83:30:d7:8d:10:57: 73:57:ef:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoDpU0g6bNoM7oMhTQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzZTE3NDQtNTE4Ni00ODlhLTliODYtY2IzMWNlZjcz ODc0MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZTMyNmNhYWMtNTJkNS00MDM1LThjNjQtMmNjZjZhM2ZhZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKqNyDbU4ZTzdGuiC8aKDh1bmt2Q6d68Wef9 9ZmbGv2qHNQ90xnlbRGo2B1FDDkNC6epSQscdvoiQeg/sf7nHVfDf/FZpl2atyDv PiD9X9ghcOTvMHfHYFTG/XJkr/HNZ13MdDjnP2u9etzneH9nirNEZHhuZAeIRQPX vHpSHRzpbAYaxY3T78cLEMhlDj2rdj2b910TJeZJPij59SLylYc+fUZplYubNuCS 220wGnlsUvnjAoFI6VCKLhtpJKveMVTJcc3Vhbxwd8AdxyrnAONbWuL47FpCF0Gf fzaaS1S+B0z46CGhHZOkz+pFRtUV+Wg9NA/zLo4RkHLbMmqa0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKPct47nvsbZkV01b8MB6C+QqdcJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNl MTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMxY2VmNzM4NzQvOTAxMmVkNjMtODc4YS0z ODE0LWFiMzItZGI3ZDc1NzhiNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIzZTE3NDQtNTE4Ni00ODlhLTli ODYtY2IzMWNlZjczODc0L2JiM2UxNzQ0LTUxODYtNDg5YS05Yjg2LWNiMzFjZWY3 Mzg3NC5jcmwwHwYDVR0jBBgwFoAUbyzGqshcjILtCQXJ5a0Pmc4eB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNlMTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMx Y2VmNzM4NzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADrtIWCYvNR07Wet+1KtPj2NPujWsQV5gN+SggRaKjVVA5jUEBYu wI3TNS7CDnZ35/6p3XU6auCjBSUlsdaoqve4u8SLuOyGJh4Cd7nYgiO2G956v0cR vco2BYD4bsszdjTz9KYVfEhlXenAUUXLJ/6ifJtQOGQg2HdCkEptDxYMYOSlZxiX Pkb4nXumYbc49axx5LSIR4ZQRzz8Nhdn/Wp9O40I/uawmWIpNvmGlTdCvaLzwjdN 0blYFr3OFrcEiQyrqLan50RMK3M1ytavYWCb8uoZ68dBUkfOUZZ1+Pn+N+1v9/gc DncC28hSqHSxEaQ6bCQUv4Mw140QV3NX7+4= -----END CERTIFICATE-----Generated at Sun Jun 15 07:21:51 2025 by rpki-client