$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa File: 2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa (raw, json) Hash identifier: FItfA9BfCHdOpE0Nnkbjp7UJTrJ21/KisBWRkFC+IEA= Subject key identifier: CD:A1:C6:D3:EB:B6:43:5D:BB:8A:76:BA:C0:16:5D:79:C2:6C:35:73 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F43285848F3911C0C06AD8D7A9D8B2780 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa Signing time: Fri 21 Feb 2025 02:00:39 +0000 ROA not before: Fri 21 Feb 2025 02:00:39 +0000 ROA not after: Thu 22 May 2025 01:00:39 +0000 asID: 27281 IP address blocks: 2620:116:8083::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f3:91:1c:0c:06:ad:8d:7a:9d:8b:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Feb 21 02:00:39 2025 GMT Not After : May 22 01:00:39 2025 GMT Subject: CN=b0e819ba-3e5a-4075-bb25-db3d3295a2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:49:3f:2f:7e:67:a4:21:28:6e:e9:b7:34:b1: ab:9f:3e:94:b1:af:f5:f6:9a:cf:61:c5:2a:4c:a1: 6c:4d:fa:88:73:ac:1f:ee:ac:ab:63:d8:f4:7b:30: 75:65:65:00:c7:16:11:21:08:fc:2a:27:2c:f7:a4: 18:0a:c7:ad:6a:35:57:d2:37:1c:d2:b2:60:d6:57: 17:73:99:e4:37:03:c7:6e:4c:06:a0:92:66:08:33: 7f:a1:ef:b6:ee:73:1b:ad:c8:76:b3:84:8c:c8:86: 5d:91:f3:77:4b:ee:57:58:67:ba:d4:86:51:3c:a7: 02:05:1e:5e:7d:c1:02:a0:08:d2:21:8f:ca:4d:53: a8:ff:b6:2b:42:c4:cb:e4:53:db:8f:cd:8f:9b:61: b8:34:db:cd:78:8e:1e:b7:25:46:44:4b:1c:81:e5: 1d:5b:ed:17:6b:64:c8:a0:8c:35:9c:4d:fe:16:1c: 6b:0d:c9:96:ec:d4:b3:01:52:bd:b7:87:85:17:f4: 56:54:96:d1:1f:1f:63:c3:43:ed:08:fe:43:e5:b0: b0:40:92:3e:46:de:03:d8:8b:b1:f4:cd:00:c0:93: 7b:c7:4c:4c:51:9a:e5:b4:ca:e9:65:0d:54:32:3b: 59:2a:5d:0d:66:fc:e8:5d:5d:5c:97:21:14:ec:17: b8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A1:C6:D3:EB:B6:43:5D:BB:8A:76:BA:C0:16:5D:79:C2:6C:35:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:8083::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:14:f3:5d:96:c3:e4:85:c3:bf:70:b1:33:64:d1:1d:93:c6: c1:5b:94:8a:f0:3f:c6:03:3c:4a:41:eb:44:41:e0:5c:86:fb: 19:4e:bf:61:01:cf:ff:64:92:48:ac:ef:3a:92:8f:3e:b1:c8: 38:23:15:c0:50:fe:7e:bb:15:a8:05:7a:98:e2:72:2d:b8:c9: c9:6d:14:e9:94:5d:9c:07:b4:21:58:51:84:40:5b:fb:4b:9a: ee:6a:26:e7:09:8d:11:da:4c:80:72:0c:ec:32:7c:a8:73:27: 6c:95:db:ff:a8:26:c7:7b:ef:59:ef:fd:14:6c:20:5e:11:f1: 6f:27:e4:c9:a5:59:fc:a4:11:3e:5d:ad:7d:ea:39:0b:fb:8a: 25:fa:d2:a3:8e:b0:a2:12:b3:b5:72:ee:90:9c:8d:5e:32:dc: 8c:57:a0:d5:01:d9:f2:c9:9a:8e:d6:4f:61:cc:96:6d:f2:76: b2:41:51:25:75:77:20:0c:73:d8:a1:86:74:a1:f1:f3:66:cb: ec:51:64:d4:c2:0d:62:91:f8:7d:2a:db:47:e2:6b:c6:e8:e6: d1:cb:00:df:ea:a4:8c:4c:39:4d:ca:53:78:ad:e0:6b:f1:ae: e3:39:91:a7:54:9c:ac:02:ce:46:b1:a0:85:57:1f:03:43:88: f6:11:3f:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjzkRwMBq2Nep2LJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDIyMTAyMDAzOVoXDTI1MDUyMjAxMDAzOVowLzEtMCsGA1UEAxMk YjBlODE5YmEtM2U1YS00MDc1LWJiMjUtZGIzZDMyOTVhMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kk/L35npCEobum3NLGrnz6Usa/19prPYcUq TKFsTfqIc6wf7qyrY9j0ezB1ZWUAxxYRIQj8Kics96QYCsetajVX0jcc0rJg1lcX c5nkNwPHbkwGoJJmCDN/oe+27nMbrch2s4SMyIZdkfN3S+5XWGe61IZRPKcCBR5e fcECoAjSIY/KTVOo/7YrQsTL5FPbj82Pm2G4NNvNeI4etyVGREscgeUdW+0Xa2TI oIw1nE3+FhxrDcmW7NSzAVK9t4eFF/RWVJbRHx9jw0PtCP5D5bCwQJI+Rt4D2Iux 9M0AwJN7x0xMUZrltMrpZQ1UMjtZKl0NZvzoXV1clyEU7Be4PQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM2hxtPrtkNdu4p2usAWXXnCbDVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMmNiMWMzODMtMGEzMC0z NzllLThhODEtMzFmNTNmOTRlMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoCD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB8U812Ww+SFw79wsTNk0R2TxsFblIrwP8YDPEpB60RB4FyG+xlO v2EBz/9kkkis7zqSjz6xyDgjFcBQ/n67FagFepjici24ycltFOmUXZwHtCFYUYRA W/tLmu5qJucJjRHaTIByDOwyfKhzJ2yV2/+oJsd771nv/RRsIF4R8W8n5MmlWfyk ET5drX3qOQv7iiX60qOOsKISs7Vy7pCcjV4y3IxXoNUB2fLJmo7WT2HMlm3ydrJB USV1dyAMc9ihhnSh8fNmy+xRZNTCDWKR+H0q20fia8bo5tHLAN/qpIxMOU3KU3it 4GvxruM5kadUnKwCzkaxoIVXHwNDiPYRPyA= -----END CERTIFICATE-----Generated at Sun Apr 27 06:10:42 2025 by rpki-client