$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/cf45ddb3-0f8c-3c53-8a70-234d1caa12e0.roa File: cf45ddb3-0f8c-3c53-8a70-234d1caa12e0.roa (raw, json) Hash identifier: KtPSCHoaDZ3dFWS/WC+I9WM2hIdLYSa5vBa6GJ7tRx8= Subject key identifier: 21:14:A5:7F:4A:0B:06:FA:41:EA:0A:60:86:66:DB:6B:50:E1:A2:8F Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584950F964BBB4A1760763BB4000 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/cf45ddb3-0f8c-3c53-8a70-234d1caa12e0.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 27281 IP address blocks: 2620:116:800e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:64:bb:b4:a1:76:07:63:bb:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=de594029-92cc-47a0-861f-a81c41341ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:36:8a:3b:5b:34:92:1c:bb:b3:7b:b7:6a:86: 09:ff:fa:c9:88:de:88:3f:ef:56:50:cb:27:03:22: da:b5:58:79:03:6b:a4:30:4b:cc:a2:25:4c:4c:74: b9:d3:88:0f:62:96:b2:a7:d9:c9:63:94:ba:c5:8d: 15:6d:f2:4e:ee:18:a8:dc:43:b7:63:b8:ef:96:64: 90:1a:69:da:29:2c:b8:1c:af:0a:6c:82:22:8a:17: 2f:d0:3c:7e:dd:ae:8f:06:40:ff:a2:d8:f1:9a:0c: 71:24:c3:4e:16:b2:fe:a3:bc:5c:5d:4e:1d:a6:16: f6:88:7a:0d:5a:1a:b3:b0:64:52:23:14:15:47:d7: 7f:6f:7d:c9:18:20:a6:af:99:41:77:8b:2d:cb:fc: d2:e0:1e:34:3b:a2:57:4c:75:b5:2c:ea:da:93:eb: dc:97:f6:98:08:c9:21:58:04:9c:36:90:de:1c:0f: ac:91:69:05:fd:02:68:b0:b5:63:77:30:eb:c9:b4: af:06:b1:c1:ca:98:b7:50:0f:17:40:ee:87:08:71: 47:aa:a9:a7:c9:a7:c7:45:20:5c:5a:eb:4d:6d:2e: 07:69:1a:e3:47:dd:51:f9:81:be:53:32:97:bd:17: 51:e7:14:47:da:aa:34:ab:41:f6:8d:a8:a1:72:09: 96:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:14:A5:7F:4A:0B:06:FA:41:EA:0A:60:86:66:DB:6B:50:E1:A2:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/cf45ddb3-0f8c-3c53-8a70-234d1caa12e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b7:5e:3f:b1:11:3a:d3:52:87:03:bc:22:c9:70:66:96:f9: f1:32:53:19:57:83:c5:44:14:e5:22:a9:dc:58:65:c9:bd:b9: 1f:ac:dc:7f:08:a1:cb:fc:7e:67:52:98:00:70:53:2d:13:af: 99:8a:b2:ed:49:85:56:00:49:fc:9b:95:53:59:f1:d6:bb:d4: 5d:d8:cb:51:6f:2f:43:40:27:a6:a0:c6:ad:38:91:f7:d8:8e: 88:f8:13:94:dc:d4:3e:5e:8e:41:f7:4f:d9:30:ac:91:de:7c: 28:8a:5f:70:ff:07:ec:7d:8e:9a:ad:22:78:88:83:27:bb:5a: 2d:94:81:98:ac:b0:d6:26:08:77:1f:12:05:db:4a:d2:08:cd: 7c:87:96:45:4c:12:42:5c:29:b1:8b:fe:05:b0:9a:8a:21:bf: d6:92:2d:aa:0c:7e:87:3a:bc:69:6e:60:87:ea:7b:a6:85:f5: 7b:5b:4e:28:eb:6f:65:02:79:c4:13:05:4b:17:1f:e7:f1:53: 07:ef:35:31:00:6f:ce:be:36:4e:94:a7:cf:0c:cb:ab:e5:d2: c1:2e:10:0f:88:db:3f:a0:18:f6:63:e9:3a:07:f0:3e:43:13: 33:77:0f:76:a4:89:b1:00:93:41:9c:3c:69:45:86:73:18:59: 57:00:a0:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElQ+WS7tKF2B2O7QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk ZGU1OTQwMjktOTJjYy00N2EwLTg2MWYtYTgxYzQxMzQxZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDaKO1s0khy7s3u3aoYJ//rJiN6IP+9WUMsn AyLatVh5A2ukMEvMoiVMTHS504gPYpayp9nJY5S6xY0VbfJO7hio3EO3Y7jvlmSQ GmnaKSy4HK8KbIIiihcv0Dx+3a6PBkD/otjxmgxxJMNOFrL+o7xcXU4dphb2iHoN WhqzsGRSIxQVR9d/b33JGCCmr5lBd4sty/zS4B40O6JXTHW1LOrak+vcl/aYCMkh WAScNpDeHA+skWkF/QJosLVjdzDrybSvBrHBypi3UA8XQO6HCHFHqqmnyafHRSBc WutNbS4HaRrjR91R+YG+UzKXvRdR5xRH2qo0q0H2jaihcgmWuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCEUpX9KCwb6QeoKYIZm22tQ4aKPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvY2Y0NWRkYjMtMGY4Yy0z YzUzLThhNzAtMjM0ZDFjYWExMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJC3Xj+xETrTUocDvCLJcGaW+fEyUxlXg8VEFOUiqdxYZcm9uR+s 3H8Iocv8fmdSmABwUy0Tr5mKsu1JhVYASfyblVNZ8da71F3Yy1FvL0NAJ6agxq04 kffYjoj4E5Tc1D5ejkH3T9kwrJHefCiKX3D/B+x9jpqtIniIgye7Wi2UgZissNYm CHcfEgXbStIIzXyHlkVMEkJcKbGL/gWwmoohv9aSLaoMfoc6vGluYIfqe6aF9Xtb Tijrb2UCecQTBUsXH+fxUwfvNTEAb86+Nk6Up88My6vl0sEuEA+I2z+gGPZj6ToH 8D5DEzN3D3akibEAk0GcPGlFhnMYWVcAoBE= -----END CERTIFICATE-----Generated at Sun Apr 27 03:11:04 2025 by rpki-client