$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa File: 1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa (raw, json) Hash identifier: hQqk+rvxqMTUv/oALirfQ9cbQ/qTljQQbikV/mPEZ8A= Subject key identifier: 86:AC:24:E8:B1:31:55:16:AF:99:4A:1E:3A:CB:71:5F:AE:C9:98:E0 Certificate issuer: /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Certificate serial: 010D0C9F43285849955F1A0E6C27CD9E02E888C0 Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 394470 IP address blocks: 2620:25:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1a:0e:6c:27:cd:9e:02:e8:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=0dc8b9c1-cb7c-4bd4-b35f-86476c1f4af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:3e:32:28:26:5b:f7:26:f3:1f:75:3e:32: 27:7e:a1:fd:6b:0d:c5:e7:97:c2:86:57:ec:89:fe: d1:47:03:7a:d7:12:80:c8:ee:1d:ee:8e:81:70:ee: 72:e6:d1:cc:c5:cb:b2:9a:41:ae:40:02:10:fc:d8: cd:3a:53:ba:0b:02:22:cd:0e:f0:43:7d:5e:f6:63: e0:2e:4b:0c:c9:f9:24:db:71:5c:84:1d:a0:f0:85: 01:f8:4c:2f:58:d0:21:11:21:12:b4:92:8b:f4:9e: 4c:ef:2b:f8:51:89:c5:d1:da:ec:44:06:a3:9c:b7: 5e:ef:62:cf:c1:15:e3:43:a0:5a:50:36:eb:c3:44: a1:a4:33:76:85:02:5f:c1:b9:b5:72:5d:68:4f:dd: 0d:94:e4:8d:c6:d9:68:cf:fb:aa:f0:1e:32:38:52: 3c:63:63:73:e0:42:f6:ba:20:84:ba:77:fb:fa:25: b7:20:8e:17:ee:e1:bb:ab:5e:09:47:b1:f5:5c:d0: d8:d4:73:88:e9:dd:16:9f:ea:99:ed:d1:ed:a4:cb: 9b:e7:48:1c:11:61:f6:10:05:74:a5:ea:ae:ed:e8: 34:90:42:7c:f2:37:99:c3:d8:bb:50:e1:11:03:c2: 1f:0e:17:00:fa:94:7e:68:06:17:2d:c2:74:43:73: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AC:24:E8:B1:31:55:16:AF:99:4A:1E:3A:CB:71:5F:AE:C9:98:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl X509v3 Authority Key Identifier: keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer sbgp-ipAddrBlock: critical IPv6: 2620:25:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c4:a0:5c:13:47:91:b4:d2:2a:a7:8a:5e:7d:6a:bc:86:95: 75:34:6f:01:5a:04:a0:99:1a:37:0b:cf:c3:28:a9:2c:c7:1d: 5c:f3:52:07:f9:0c:61:58:71:44:cd:99:84:ea:82:96:8d:5f: 6c:78:e8:87:57:25:cd:04:fb:ee:36:55:ef:41:90:11:55:85: e7:00:e0:a8:85:9b:e0:02:1d:ab:3f:eb:0e:14:50:be:62:f7: f1:53:bc:f6:37:d4:bd:65:a0:9a:15:2c:22:91:f5:6a:7f:64: 3e:8c:e0:15:bf:44:db:78:f9:e2:39:5a:bf:95:d5:84:54:92: 6a:96:5d:49:10:ed:9c:55:79:05:2b:7e:58:04:e0:1c:da:30: d1:32:c6:14:8f:0e:ba:07:d3:d7:6e:a9:95:62:34:fe:b2:6d: 83:a8:1f:52:43:cf:b2:c1:17:02:aa:e1:b7:5d:c3:35:54:9d: 55:02:f2:82:db:82:ba:45:a1:f8:04:f8:2b:40:04:5f:fb:78: 11:f0:6f:77:54:1e:2f:81:3c:b9:f1:36:02:9d:87:0d:7e:be: c5:84:88:aa:79:98:9a:54:14:54:b0:ef:cd:7b:b5:21:ff:a6: 1a:2e:f6:4c:a1:ae:23:39:a3:42:2b:16:91:a3:8f:7b:d9:24: e0:be:2a:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmVXxoObCfNngLoiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIyMTI0YTgtZDZiNi00ODNlLTkyZGUtNjdmOGQ3OTc1 Y2M0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk MGRjOGI5YzEtY2I3Yy00YmQ0LWIzNWYtODY0NzZjMWY0YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+A+MigmW/cm8x91PjInfqH9aw3F55fChlfs if7RRwN61xKAyO4d7o6BcO5y5tHMxcuymkGuQAIQ/NjNOlO6CwIizQ7wQ31e9mPg LksMyfkk23FchB2g8IUB+EwvWNAhESEStJKL9J5M7yv4UYnF0drsRAajnLde72LP wRXjQ6BaUDbrw0ShpDN2hQJfwbm1cl1oT90NlOSNxtloz/uq8B4yOFI8Y2Nz4EL2 uiCEunf7+iW3II4X7uG7q14JR7H1XNDY1HOI6d0Wn+qZ7dHtpMub50gcEWH2EAV0 pequ7eg0kEJ88jeZw9i7UOERA8IfDhcA+pR+aAYXLcJ0Q3OqRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIasJOixMVUWr5lKHjrLcV+uyZjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjIx MjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4ZDc5NzVjYzQvMWMwMzRmODYtM2JjNy0z MzY5LThkNWUtMDE2YTlkOWNhYWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGIyMTI0YTgtZDZiNi00ODNlLTky ZGUtNjdmOGQ3OTc1Y2M0LzhiMjEyNGE4LWQ2YjYtNDgzZS05MmRlLTY3ZjhkNzk3 NWNjNC5jcmwwHwYDVR0jBBgwFoAUKVokfqKJm+K6LEmBT1XmY0qa+ugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YjIxMjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4 ZDc5NzVjYzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAJaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAzEoFwTR5G00iqnil59aryGlXU0bwFaBKCZGjcLz8MoqSzHHVzz Ugf5DGFYcUTNmYTqgpaNX2x46IdXJc0E++42Ve9BkBFVhecA4KiFm+ACHas/6w4U UL5i9/FTvPY31L1loJoVLCKR9Wp/ZD6M4BW/RNt4+eI5Wr+V1YRUkmqWXUkQ7ZxV eQUrflgE4BzaMNEyxhSPDroH09duqZViNP6ybYOoH1JDz7LBFwKq4bddwzVUnVUC 8oLbgrpFofgE+CtABF/7eBHwb3dUHi+BPLnxNgKdhw1+vsWEiKp5mJpUFFSw7817 tSH/phou9kyhriM5o0IrFpGjj3vZJOC+Kqw= -----END CERTIFICATE-----Generated at Mon Apr 28 12:37:36 2025 by rpki-client