$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/8fb3012a-d947-3398-947d-9744cdd32093.roa File: 8fb3012a-d947-3398-947d-9744cdd32093.roa (raw, json) Hash identifier: P9z3TQvm+r54zWRgGEU8n6NDq9eocUQM6wknuxLx3vw= Subject key identifier: CB:6B:37:C1:93:D1:C4:C5:94:9D:B0:EC:76:76:90:79:72:0B:D3:A7 Certificate issuer: /CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3 Certificate serial: 010D0C9F432858499DBF2A7FFEDCF9247EB8E000 Authority key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/8fb3012a-d947-3398-947d-9744cdd32093.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16509 IP address blocks: 2605:2c40:400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2a:7f:fe:dc:f9:24:7e:b8:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=f1dd916b-0e27-46aa-a191-8ce5cd5afcba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:10:a4:18:9c:74:c2:01:cc:82:19:e3:53: 32:f9:b5:9b:f4:a1:4e:7e:55:b8:f4:0d:7a:70:4b: 0b:63:24:57:a2:2b:c9:a2:b9:34:00:ea:44:c5:ea: 67:39:27:9d:80:20:8c:13:34:5a:8a:33:76:4a:8f: f8:6c:67:5b:b1:1b:33:b9:2c:f3:06:75:7e:44:57: fc:62:5a:9f:f0:9d:ad:84:91:1e:c5:5e:a7:05:b9: e0:45:af:04:02:9a:8e:70:4f:b8:62:f1:e5:de:64: f4:06:0d:87:a9:3b:b1:33:74:70:f6:49:e1:a6:a7: c0:52:c6:07:be:99:3d:b1:0f:a5:a7:11:af:27:32: c3:66:f7:51:45:fd:a8:10:57:43:0b:2b:a9:73:3d: d3:42:2b:3d:fc:0d:9c:5e:af:61:11:54:40:b1:8e: 54:5f:ba:04:a4:93:43:89:e5:17:32:77:be:ed:cd: 2b:54:87:86:ad:68:fd:9c:fe:6b:d7:76:50:27:a1: f7:63:b0:ef:db:26:e0:90:e7:30:b9:08:33:ae:6d: c7:6c:19:2e:de:7e:bb:ad:09:cd:ab:38:e8:32:34: c6:a8:f5:83:88:25:7f:80:58:7f:19:11:3c:fc:4e: 2e:5c:10:93:0a:20:61:32:39:b8:82:cd:de:52:de: da:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6B:37:C1:93:D1:C4:C5:94:9D:B0:EC:76:76:90:79:72:0B:D3:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/8fb3012a-d947-3398-947d-9744cdd32093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl X509v3 Authority Key Identifier: keyid:F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer sbgp-ipAddrBlock: critical IPv6: 2605:2c40:400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:0d:dd:4d:b8:a7:b2:fb:9c:49:4c:b0:82:87:9d:3b:d1:49: c9:39:74:5e:15:12:8f:43:53:08:82:eb:1d:45:e1:de:6e:f3: 9b:4f:d9:6a:9c:97:cd:d2:da:da:25:31:f0:1b:4c:17:b7:d8: e5:6d:65:62:e5:61:4c:1d:d2:2e:db:e5:79:85:cb:f3:44:53: db:d5:eb:ca:da:27:78:11:18:5a:73:27:c6:23:12:78:a2:b1: ba:ce:e5:1c:33:ac:ef:2f:a2:1c:ad:db:a5:c7:f4:8e:69:8e: 1a:2c:76:99:59:23:53:3f:a2:7b:c0:18:42:4b:e0:73:db:8b: 69:12:6e:56:be:85:0f:3b:5a:32:79:27:4e:03:19:01:30:39: 8f:e7:29:64:11:30:c3:25:29:7e:b9:b9:e4:b1:fd:06:ba:63: 9d:87:70:13:d1:a1:60:52:3f:3b:63:27:30:08:27:59:99:07: ab:80:c7:ce:cd:b8:39:0d:b3:a3:a7:54:37:6a:8f:30:0d:b3: ad:fa:3b:e8:f9:57:c9:08:c0:74:81:71:52:5c:2b:ba:34:c1: 16:21:34:16:56:c4:bc:18:7f:27:69:04:4d:09:08:d6:82:29: 8a:1e:33:e8:61:e8:34:29:ac:b9:19:73:31:a7:60:7a:74:2c: 34:39:2f:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdvyp//tz5JH644AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhYTE1NjctODlhOS00Y2U0LThiZDctZTYyNDk5OTA5 MWUzMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZjFkZDkxNmItMGUyNy00NmFhLWExOTEtOGNlNWNkNWFmY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCcQpBicdMIBzIIZ41My+bWb9KFOflW49A16 cEsLYyRXoivJork0AOpExepnOSedgCCMEzRaijN2So/4bGdbsRszuSzzBnV+RFf8 Ylqf8J2thJEexV6nBbngRa8EApqOcE+4YvHl3mT0Bg2HqTuxM3Rw9knhpqfAUsYH vpk9sQ+lpxGvJzLDZvdRRf2oEFdDCyupcz3TQis9/A2cXq9hEVRAsY5UX7oEpJND ieUXMne+7c0rVIeGrWj9nP5r13ZQJ6H3Y7Dv2ybgkOcwuQgzrm3HbBku3n67rQnN qzjoMjTGqPWDiCV/gFh/GRE8/E4uXBCTCiBhMjm4gs3eUt7arQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMtrN8GT0cTFlJ2w7HZ2kHlyC9OnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOWFh MTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0OTk5MDkxZTMvOGZiMzAxMmEtZDk0Ny0z Mzk4LTk0N2QtOTc0NGNkZDMyMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzlhYTE1NjctODlhOS00Y2U0LThi ZDctZTYyNDk5OTA5MWUzL2M5YWExNTY3LTg5YTktNGNlNC04YmQ3LWU2MjQ5OTkw OTFlMy5jcmwwHwYDVR0jBBgwFoAU9uKd3POYaXwTuehSHUAHiB0hTQgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOWFhMTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0 OTk5MDkxZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgUsQAQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADIN3U24p7L7nElMsIKHnTvRSck5dF4VEo9DUwiC6x1F4d5u85tP 2Wqcl83S2tolMfAbTBe32OVtZWLlYUwd0i7b5XmFy/NEU9vV68raJ3gRGFpzJ8Yj EniisbrO5RwzrO8vohyt26XH9I5pjhosdplZI1M/onvAGEJL4HPbi2kSbla+hQ87 WjJ5J04DGQEwOY/nKWQRMMMlKX65ueSx/Qa6Y52HcBPRoWBSPztjJzAIJ1mZB6uA x87NuDkNs6OnVDdqjzANs636O+j5V8kIwHSBcVJcK7o0wRYhNBZWxLwYfydpBE0J CNaCKYoeM+hh6DQprLkZczGnYHp0LDQ5L0E= -----END CERTIFICATE-----Generated at Sat Jun 14 06:30:24 2025 by rpki-client