$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b/beddf382-2311-342e-b8a8-3f1816a6040b.roa File: beddf382-2311-342e-b8a8-3f1816a6040b.roa (raw, json) Hash identifier: u2nc+XrGhpAtQD0dFXoO+JXfjcRg0EDFNLAjJflosq8= Subject key identifier: F3:76:91:71:86:A8:4A:90:52:A5:27:FE:6C:01:E3:74:52:11:C0:69 Certificate issuer: /CN=95c191b1-117b-432f-9f4c-3d2e1fcce27b Certificate serial: 010D0C9F432858499829C02E7D2A031A70B92E40 Authority key identifier: 66:35:5F:1F:DC:4D:D3:38:F9:35:F0:BE:E5:BE:BE:18:47:CF:48:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b/beddf382-2311-342e-b8a8-3f1816a6040b.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 18799 IP address blocks: 2620:d2:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b/95c191b1-117b-432f-9f4c-3d2e1fcce27b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b/95c191b1-117b-432f-9f4c-3d2e1fcce27b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c0:2e:7d:2a:03:1a:70:b9:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95c191b1-117b-432f-9f4c-3d2e1fcce27b Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=127a5159-0787-4d0a-8bbf-952c9b1fb407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:40:56:2f:80:6f:f6:47:b3:e6:23:cf:03: a8:c4:02:3f:09:20:83:31:14:7d:16:b2:05:a5:11: 57:a4:ed:97:a9:0a:21:45:6c:33:33:ec:2c:83:89: eb:4f:70:a9:64:a5:6e:74:20:d3:cf:42:32:41:dd: ec:b7:40:d2:9d:81:67:b4:61:e2:93:84:3b:c7:12: 0c:94:7d:f9:62:8b:da:2e:c1:45:3a:4e:e0:9e:43: 47:e8:f0:70:fc:ca:11:39:0f:9f:80:d9:3d:d7:e3: 85:65:43:7d:69:51:14:83:de:f1:a4:42:e8:04:79: ef:29:59:14:14:12:45:63:6e:08:da:10:c5:e9:e2: 2a:dd:6e:dd:e5:0e:7f:3c:6f:3b:70:3d:a9:a9:89: b5:b7:4c:74:43:c9:54:a2:d0:06:a8:9f:f5:1e:59: 9b:3a:07:14:66:49:2f:52:38:32:b6:cf:83:44:c5: 19:5a:49:b3:63:8b:84:3b:c4:76:53:71:d8:05:b0: 7a:fe:73:6e:a3:bc:83:ea:bc:fb:4f:0f:75:76:a5: 69:fc:a3:f8:da:6b:44:54:d5:59:d5:be:b6:e3:3f: 1e:29:0a:39:03:ac:19:eb:d5:9c:d2:f2:51:3e:ed: 81:32:55:c0:92:d6:4d:8c:5d:8e:fd:a1:0b:90:c5: 61:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:76:91:71:86:A8:4A:90:52:A5:27:FE:6C:01:E3:74:52:11:C0:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b/beddf382-2311-342e-b8a8-3f1816a6040b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b/95c191b1-117b-432f-9f4c-3d2e1fcce27b.crl X509v3 Authority Key Identifier: keyid:66:35:5F:1F:DC:4D:D3:38:F9:35:F0:BE:E5:BE:BE:18:47:CF:48:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b.cer sbgp-ipAddrBlock: critical IPv6: 2620:d2:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c4:60:22:ab:28:00:d1:3c:2f:97:9a:ac:19:46:41:7f:c8: 66:f4:48:1e:ed:99:9f:a5:a8:fb:80:58:a1:7b:20:ba:7c:70: f9:23:03:9e:54:14:36:be:2c:5a:51:42:7f:64:60:b7:50:fb: 63:b8:43:9b:8c:25:2c:4f:27:e3:2c:3d:fa:8b:9c:ee:10:fe: 50:c7:58:5e:21:3b:56:b7:a7:65:27:c1:5c:9d:78:20:8e:38: 48:6d:82:69:0c:d2:e5:a9:95:43:e7:90:67:f1:1e:f1:91:8f: 55:7d:be:76:8c:78:c7:ad:66:25:04:fb:39:86:98:87:ca:43: dd:02:4c:e9:da:7f:34:28:0a:18:cb:d6:a6:90:01:9d:ba:e0: 36:39:d2:bb:3d:82:40:1f:2f:9f:9d:32:0f:0c:64:b2:0e:37: 05:82:b6:15:a5:35:bf:1f:41:f5:a0:07:0e:d3:c8:58:5a:f6: e4:03:f7:7c:d9:81:63:75:6d:58:c7:4a:42:a2:6b:d6:b7:ae: 71:b0:a5:de:0a:0a:fe:7e:56:60:56:46:56:fe:5e:91:87:46: 70:e9:d1:c5:f6:37:4d:ee:c2:b6:3b:2c:f5:e9:ed:1b:c9:6f: 8a:fb:d7:d1:0c:6c:fd:46:2c:46:0e:d4:b4:46:97:f1:54:58: 85:5c:86:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmYKcAufSoDGnC5LkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVjMTkxYjEtMTE3Yi00MzJmLTlmNGMtM2QyZTFmY2Nl MjdiMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MTI3YTUxNTktMDc4Ny00ZDBhLThiYmYtOTUyYzliMWZiNDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxVAVi+Ab/ZHs+YjzwOoxAI/CSCDMRR9FrIF pRFXpO2XqQohRWwzM+wsg4nrT3CpZKVudCDTz0IyQd3st0DSnYFntGHik4Q7xxIM lH35YovaLsFFOk7gnkNH6PBw/MoROQ+fgNk91+OFZUN9aVEUg97xpELoBHnvKVkU FBJFY24I2hDF6eIq3W7d5Q5/PG87cD2pqYm1t0x0Q8lUotAGqJ/1HlmbOgcUZkkv Ujgyts+DRMUZWkmzY4uEO8R2U3HYBbB6/nNuo7yD6rz7Tw91dqVp/KP42mtEVNVZ 1b624z8eKQo5A6wZ69Wc0vJRPu2BMlXAktZNjF2O/aELkMVhZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPN2kXGGqEqQUqUn/mwB43RSEcBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NWMx OTFiMS0xMTdiLTQzMmYtOWY0Yy0zZDJlMWZjY2UyN2IvYmVkZGYzODItMjMxMS0z NDJlLWI4YTgtM2YxODE2YTYwNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTVjMTkxYjEtMTE3Yi00MzJmLTlm NGMtM2QyZTFmY2NlMjdiLzk1YzE5MWIxLTExN2ItNDMyZi05ZjRjLTNkMmUxZmNj ZTI3Yi5jcmwwHwYDVR0jBBgwFoAUZjVfH9xN0zj5NfC+5b6+GEfPSBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NWMxOTFiMS0xMTdiLTQzMmYtOWY0Yy0zZDJl MWZjY2UyN2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA0mAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEXEYCKrKADRPC+XmqwZRkF/yGb0SB7tmZ+lqPuAWKF7ILp8cPkj A55UFDa+LFpRQn9kYLdQ+2O4Q5uMJSxPJ+MsPfqLnO4Q/lDHWF4hO1a3p2UnwVyd eCCOOEhtgmkM0uWplUPnkGfxHvGRj1V9vnaMeMetZiUE+zmGmIfKQ90CTOnafzQo ChjL1qaQAZ264DY50rs9gkAfL5+dMg8MZLIONwWCthWlNb8fQfWgBw7TyFha9uQD 93zZgWN1bVjHSkKia9a3rnGwpd4KCv5+VmBWRlb+XpGHRnDp0cX2N03uwrY7LPXp 7RvJb4r719EMbP1GLEYO1LRGl/FUWIVchqY= -----END CERTIFICATE-----Generated at Tue Apr 29 18:34:09 2025 by rpki-client