$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa File: eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa (raw, json) Hash identifier: rTS2HaHpgBPMchpTjBKkGsc0Wg1MA0wZ3yVP9JXsCt4= Subject key identifier: 33:59:86:6F:99:46:E2:09:0B:97:46:01:2A:6E:59:C3:11:45:E8:EF Certificate issuer: /CN=4f965035-760e-4232-a4c3-bc290fa7e325 Certificate serial: 010D0C9F43285849CBCF9546A0EAA8A0BC4FF000 Authority key identifier: 4F:53:AA:A6:82:E5:67:D0:28:69:98:61:76:F7:6E:EB:DB:83:C1:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 25656 IP address blocks: 2620:38:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:95:46:a0:ea:a8:a0:bc:4f:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f965035-760e-4232-a4c3-bc290fa7e325 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=e828d326-2cc5-41b2-b975-1b20df8ff825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d3:f0:f6:05:03:76:ae:b2:e3:54:55:33:82: 27:72:7b:d1:fa:38:db:7f:23:3b:1f:df:d7:f4:f7: 03:d9:ef:63:92:95:68:2e:1d:a4:21:ec:51:d6:42: b6:08:fe:fc:98:3a:85:58:da:c0:88:6c:2d:a7:6e: 83:8c:01:74:27:57:3e:04:c8:3b:09:64:00:c9:5b: 83:11:29:51:86:fb:93:26:37:fd:4e:a8:29:4c:6d: 6c:56:22:a4:8c:88:8b:94:1f:7d:32:19:3e:3e:59: 25:61:42:77:60:09:44:ef:f6:79:99:32:5a:1b:6d: 2c:dd:46:43:10:3e:6b:1b:ca:7f:92:91:b8:27:58: 68:82:41:67:7d:66:2d:3f:f1:0c:27:c4:f5:0c:bc: b3:f4:b9:34:bb:fd:41:10:11:8f:59:73:8d:d9:77: 17:94:12:be:5b:f6:47:be:8a:fe:37:c8:a8:01:a5: ac:1f:cc:96:13:c4:2e:57:19:dc:f5:5a:72:08:4c: e7:1d:bf:0c:1a:2a:22:f3:78:2e:d8:08:b8:47:7c: cf:80:45:53:14:8a:76:6f:84:3e:7a:e0:05:92:ea: 3c:6b:a1:56:d1:03:a6:ea:1b:d4:df:06:9a:5c:fc: 56:37:c4:af:9e:40:ee:a6:9e:c0:e3:0b:e5:6e:8f: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:59:86:6F:99:46:E2:09:0B:97:46:01:2A:6E:59:C3:11:45:E8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.crl X509v3 Authority Key Identifier: keyid:4F:53:AA:A6:82:E5:67:D0:28:69:98:61:76:F7:6E:EB:DB:83:C1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer sbgp-ipAddrBlock: critical IPv6: 2620:38:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2f:c1:fa:f6:fa:09:b2:e1:8d:bc:50:1f:56:bf:60:7d:6b: 65:11:3e:fb:1b:c5:14:c9:53:cc:5f:c0:fc:64:e6:53:b8:07: 04:e4:6f:42:7a:62:d6:61:d8:b8:8f:3c:00:2f:59:6c:c4:13: 8c:e0:04:22:2a:43:5b:5f:3d:a1:53:e6:94:d1:89:54:e4:d3: 61:88:86:aa:c5:1e:e4:46:79:8f:d2:e0:cd:ab:44:3c:44:d0: f1:c9:14:36:ef:df:b7:09:fc:37:8a:57:82:25:57:13:28:57: d1:0f:9b:a1:a0:01:06:ef:33:75:9b:8e:56:8b:2b:7a:2a:40: d2:09:e1:52:5b:6e:ce:87:b2:cc:9e:ef:e3:a5:9a:42:be:f6: 5c:70:c0:db:bc:db:30:61:0c:85:50:76:91:ab:3e:3c:38:cc: 9f:ee:04:9b:86:2f:79:3f:d4:18:ac:8d:14:6b:c9:fa:47:6c: 14:96:78:7a:26:18:ca:43:c3:d9:85:b1:b9:23:b3:d2:ff:e3: 7b:76:f7:35:5f:c9:f4:bc:55:c2:76:d1:1e:14:01:da:30:f2: 30:a3:e4:31:6f:a8:06:e8:08:37:8f:0a:4e:c3:ff:5f:58:37: 8d:96:58:dc:ac:84:7e:7a:9c:f9:a4:89:ac:54:28:a7:fa:48: 5d:63:30:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnLz5VGoOqooLxP8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5NjUwMzUtNzYwZS00MjMyLWE0YzMtYmMyOTBmYTdl MzI1MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZTgyOGQzMjYtMmNjNS00MWIyLWI5NzUtMWIyMGRmOGZmODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdPw9gUDdq6y41RVM4IncnvR+jjbfyM7H9/X 9PcD2e9jkpVoLh2kIexR1kK2CP78mDqFWNrAiGwtp26DjAF0J1c+BMg7CWQAyVuD ESlRhvuTJjf9TqgpTG1sViKkjIiLlB99Mhk+PlklYUJ3YAlE7/Z5mTJaG20s3UZD ED5rG8p/kpG4J1hogkFnfWYtP/EMJ8T1DLyz9Lk0u/1BEBGPWXON2XcXlBK+W/ZH vor+N8ioAaWsH8yWE8QuVxnc9VpyCEznHb8MGioi83gu2Ai4R3zPgEVTFIp2b4Q+ euAFkuo8a6FW0QOm6hvU3waaXPxWN8SvnkDupp7A4wvlbo9fhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDNZhm+ZRuIJC5dGASpuWcMRRejvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80Zjk2 NTAzNS03NjBlLTQyMzItYTRjMy1iYzI5MGZhN2UzMjUvZWFhNzE5YTAtNDQwMi0z NjdhLTlmZTYtZjdhZTI1ZGMyM2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGY5NjUwMzUtNzYwZS00MjMyLWE0 YzMtYmMyOTBmYTdlMzI1LzRmOTY1MDM1LTc2MGUtNDIzMi1hNGMzLWJjMjkwZmE3 ZTMyNS5jcmwwHwYDVR0jBBgwFoAUT1OqpoLlZ9AoaZhhdvdu69uDwVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80Zjk2NTAzNS03NjBlLTQyMzItYTRjMy1iYzI5 MGZhN2UzMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAOMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQvwfr2+gmy4Y28UB9Wv2B9a2URPvsbxRTJU8xfwPxk5lO4BwTk b0J6YtZh2LiPPAAvWWzEE4zgBCIqQ1tfPaFT5pTRiVTk02GIhqrFHuRGeY/S4M2r RDxE0PHJFDbv37cJ/DeKV4IlVxMoV9EPm6GgAQbvM3WbjlaLK3oqQNIJ4VJbbs6H ssye7+OlmkK+9lxwwNu82zBhDIVQdpGrPjw4zJ/uBJuGL3k/1BisjRRryfpHbBSW eHomGMpDw9mFsbkjs9L/43t29zVfyfS8VcJ20R4UAdow8jCj5DFvqAboCDePCk7D /19YN42WWNyshH56nPmkiaxUKKf6SF1jMMc= -----END CERTIFICATE-----Generated at Sun Jun 15 17:47:30 2025 by rpki-client