$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/855538ac-c152-3b18-a738-92a0aae00088.roa File: 855538ac-c152-3b18-a738-92a0aae00088.roa (raw, json) Hash identifier: ZGiD2TG7NWFXuUX1PsOkjPYRtBeLVhs6qc/LA35+TKE= Subject key identifier: 0C:0B:02:BC:BC:06:60:92:19:1F:C8:FD:13:58:8C:10:63:07:BE:FE Certificate issuer: /CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5 Certificate serial: 010D0C9F43285849350E86B54B80A900AEE489B0 Authority key identifier: B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/855538ac-c152-3b18-a738-92a0aae00088.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 2605:32c0:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:86:b5:4b:80:a9:00:ae:e4:89:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=98905c28-c3ac-419d-9465-b7c43060efdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:7f:58:8e:f6:1c:2b:23:a4:c1:44:29:b7: 08:f9:07:4c:c7:38:1e:dd:36:d7:85:5e:05:74:91: d1:60:e7:a6:2d:47:44:26:c1:e2:55:64:5b:ef:55: b7:c3:83:26:a7:cd:be:a8:56:5c:7d:4a:76:b7:b6: ff:c6:b1:4a:1c:79:44:8e:92:91:bd:90:71:12:b2: 72:b7:22:2b:6a:01:1e:cf:b9:ed:b1:c5:ee:34:28: 67:4b:88:66:cc:a9:91:5b:28:08:c8:0b:9a:c3:54: 83:28:bf:b3:8f:32:95:eb:47:79:10:8c:d0:38:56: cf:a9:9f:ad:9b:04:e9:67:88:bc:ef:ad:fc:a5:56: 8e:86:af:b5:a2:b2:d2:66:48:60:7c:b5:52:b3:87: d9:2a:a2:10:04:ef:02:f9:4e:5d:73:72:cf:6a:ba: 5c:c1:d0:95:2e:ec:5b:fb:d5:18:6d:e0:ce:fd:59: 07:99:75:4c:69:60:7f:4d:3c:f2:42:4c:69:9c:74: 33:a1:3a:40:69:99:34:41:99:52:ad:12:94:62:46: cf:5b:65:3e:2e:68:49:33:de:d1:83:45:1e:a3:9a: a2:35:01:61:ff:0a:09:dd:1c:16:3f:19:4c:54:d3: 8f:22:ef:b0:0c:a3:02:f2:4e:41:0e:03:06:34:69: ab:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:02:BC:BC:06:60:92:19:1F:C8:FD:13:58:8C:10:63:07:BE:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/855538ac-c152-3b18-a738-92a0aae00088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl X509v3 Authority Key Identifier: keyid:B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer sbgp-ipAddrBlock: critical IPv6: 2605:32c0:a000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:51:d6:1f:f1:4f:89:7e:57:f9:1d:06:6b:84:45:e2:7c:41: 9c:ac:d3:91:77:26:52:f9:5a:a2:b1:ea:e2:05:7d:9a:22:a1: 6c:b8:af:88:67:a2:d6:1d:91:ad:22:bb:c3:ee:0f:05:50:ea: 4a:52:1e:11:cf:bc:93:2b:a4:70:60:07:51:a9:aa:80:d7:e5: 08:3f:63:63:29:19:4f:4f:21:69:62:23:c4:d1:84:22:fc:af: ba:13:1f:dc:81:57:d4:4e:7c:7e:93:fc:c2:94:25:b8:e0:8d: 1f:f2:71:01:81:2e:f2:69:78:75:c0:bb:38:65:80:73:9d:a0: cc:76:d5:7b:1f:a3:0a:3a:a7:46:8d:c7:36:9d:39:56:55:45: 85:05:79:fc:41:3f:d3:9e:16:4c:57:a6:8f:4d:94:dc:b8:62: 32:4e:e8:77:7c:9e:b8:82:74:55:5c:38:97:14:63:ed:c6:56: 97:68:6f:6a:2f:d4:b8:57:75:f3:e7:f4:32:76:98:89:4a:7a: f7:9f:9b:6e:63:9a:a9:2e:f0:bb:d6:88:4f:ad:83:2a:ee:23: e6:b0:44:2b:9c:1d:bf:b0:6f:86:30:e8:3b:7e:eb:de:57:7e: be:67:47:b0:67:24:1f:f7:cd:be:ff:86:42:b0:f7:3a:bf:98: 5a:93:c5:68 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEk1Doa1S4CpAK7kibAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjMmZjYjUtODIyNC00MGFhLWJhY2UtMjMwZmNkZWZi YWE1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk OTg5MDVjMjgtYzNhYy00MTlkLTk0NjUtYjdjNDMwNjBlZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugB/WI72HCsjpMFEKbcI+QdMxzge3TbXhV4F dJHRYOemLUdEJsHiVWRb71W3w4Mmp82+qFZcfUp2t7b/xrFKHHlEjpKRvZBxErJy tyIragEez7ntscXuNChnS4hmzKmRWygIyAuaw1SDKL+zjzKV60d5EIzQOFbPqZ+t mwTpZ4i87638pVaOhq+1orLSZkhgfLVSs4fZKqIQBO8C+U5dc3LParpcwdCVLuxb +9UYbeDO/VkHmXVMaWB/TTzyQkxpnHQzoTpAaZk0QZlSrRKUYkbPW2U+LmhJM97R g0Ueo5qiNQFh/woJ3RwWPxlMVNOPIu+wDKMC8k5BDgMGNGmr7QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAwLAry8BmCSGR/I/RNYjBBjB77+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMWMy ZmNiNS04MjI0LTQwYWEtYmFjZS0yMzBmY2RlZmJhYTUvODU1NTM4YWMtYzE1Mi0z YjE4LWE3MzgtOTJhMGFhZTAwMDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzFjMmZjYjUtODIyNC00MGFhLWJh Y2UtMjMwZmNkZWZiYWE1L2MxYzJmY2I1LTgyMjQtNDBhYS1iYWNlLTIzMGZjZGVm YmFhNS5jcmwwHwYDVR0jBBgwFoAUsyEefqI73O8Sc7jmR075Z0ZYYLEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMWMyZmNiNS04MjI0LTQwYWEtYmFjZS0yMzBm Y2RlZmJhYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgUywKAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPFHWH/FPiX5X+R0Ga4RF4nxBnKzTkXcmUvlaorHq4gV9miKhbLiv iGei1h2RrSK7w+4PBVDqSlIeEc+8kyukcGAHUamqgNflCD9jYykZT08haWIjxNGE IvyvuhMf3IFX1E58fpP8wpQluOCNH/JxAYEu8ml4dcC7OGWAc52gzHbVex+jCjqn Ro3HNp05VlVFhQV5/EE/054WTFemj02U3LhiMk7od3yeuIJ0VVw4lxRj7cZWl2hv ai/UuFd18+f0MnaYiUp695+bbmOaqS7wu9aIT62DKu4j5rBEK5wdv7BvhjDoO37r 3ld+vmdHsGckH/fNvv+GQrD3Or+YWpPFaA== -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:35 2025 by rpki-client