$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/c568d12f-84a4-31f6-8f97-9be5baaf2a9c.roa File: c568d12f-84a4-31f6-8f97-9be5baaf2a9c.roa (raw, json) Hash identifier: p2CPCjAv745whnelacmyV+GDKIvU9ag/DMrrZS3+/ck= Subject key identifier: E9:93:A4:B5:D0:F2:3D:06:84:1B:B2:6F:47:7A:AB:C8:5F:AB:C4:37 Certificate issuer: /CN=6dfb8a83-8fe5-48a4-88df-ad72541dae26 Certificate serial: 010D0C9F43285849BDDA23A7D395C99111BF3EE0 Authority key identifier: 9D:4F:21:1C:94:F3:51:87:DA:8B:C9:E5:34:B0:F1:93:01:05:46:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/c568d12f-84a4-31f6-8f97-9be5baaf2a9c.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 393454 IP address blocks: 2620:119:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/6dfb8a83-8fe5-48a4-88df-ad72541dae26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/6dfb8a83-8fe5-48a4-88df-ad72541dae26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:23:a7:d3:95:c9:91:11:bf:3e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfb8a83-8fe5-48a4-88df-ad72541dae26 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=ed96740d-fa5c-4fe4-8dc9-16b72a192462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:21:5c:1d:57:a8:19:0b:d5:b8:69:95:dd:de: 8c:84:b8:90:b8:09:3e:85:e8:15:4b:cb:da:2f:c8: 7c:eb:a8:7f:f7:0c:97:55:76:4b:0d:66:cd:75:9f: f5:37:84:db:23:ee:46:0d:29:cf:45:de:21:5a:56: 0e:32:49:22:92:e8:3f:66:60:98:97:1d:6d:97:f8: 23:6a:dd:f3:2e:08:35:d5:e2:8b:b3:e1:6d:54:0a: 48:3a:e1:86:db:73:5b:6d:5f:53:5d:d1:e7:6c:e2: 0e:ba:e5:c7:95:ee:91:85:7a:ab:0c:09:24:a1:92: 7a:a8:48:86:52:b1:68:0b:8f:a3:7a:16:ff:da:ff: 95:ec:3f:d4:77:b6:7c:8f:65:e0:eb:35:1b:25:50: f0:9a:91:59:7c:f1:ed:79:83:db:51:83:bf:e9:37: ad:99:bd:fa:1b:de:8f:a8:be:f3:dd:b1:59:7d:6d: 51:80:87:39:dd:45:86:cb:c9:b5:98:3c:70:d6:71: 24:f9:99:97:5d:f9:1f:34:37:9f:e4:cc:cf:b2:6d: 95:05:30:de:87:b4:41:10:94:63:e1:d2:d4:cb:37: 44:af:ea:d1:19:c6:22:aa:8c:75:4a:2c:59:83:f0: 14:99:8f:19:a0:98:8b:f4:c0:c9:99:b4:d2:33:a6: a2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:93:A4:B5:D0:F2:3D:06:84:1B:B2:6F:47:7A:AB:C8:5F:AB:C4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/c568d12f-84a4-31f6-8f97-9be5baaf2a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/6dfb8a83-8fe5-48a4-88df-ad72541dae26.crl X509v3 Authority Key Identifier: keyid:9D:4F:21:1C:94:F3:51:87:DA:8B:C9:E5:34:B0:F1:93:01:05:46:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26.cer sbgp-ipAddrBlock: critical IPv6: 2620:119:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:74:ee:4e:2e:98:91:5c:7a:0f:9c:d5:92:7d:e0:c5:dc:2d: 1f:d8:b9:26:81:9e:d2:69:29:0e:84:a5:1a:85:b5:20:72:8a: 56:1f:0f:d6:e1:ac:0f:f6:7f:98:5d:cb:c7:71:67:98:d1:d1: c5:4b:0a:94:92:23:c7:72:2e:b2:2c:33:9e:15:4f:45:76:28: 22:e5:38:af:b1:1d:5e:d0:6b:4c:41:4c:cf:be:1e:c6:6f:80: 0f:b2:92:fe:37:8d:e6:8d:cf:8f:66:d0:09:91:e0:74:98:bc: f2:d8:df:65:c8:6f:4a:2f:37:f1:f8:31:33:04:22:0b:6b:79: 48:17:91:57:43:15:83:69:24:c5:ea:61:b3:4e:93:0e:1c:76: b2:63:fb:1d:76:e2:ee:b1:a5:a5:10:cd:02:5b:60:ab:8d:4c: 24:86:82:92:df:d7:b1:1e:cd:b9:e8:e5:c3:39:bb:b9:e6:ae: 64:51:1d:a2:4d:be:40:e0:37:66:d3:f4:6c:0c:36:d4:6d:7f: 4b:9b:5f:36:c1:c8:5f:8e:85:17:15:8e:f2:b4:f3:cc:cc:0b: af:d0:c2:bf:ff:10:ae:f0:0b:a5:6b:5a:82:6f:23:11:fc:de: a7:f5:6e:08:e7:5c:96:e4:9e:85:4d:b8:d5:e2:d0:78:5d:ee: be:02:52:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm92iOn05XJkRG/PuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmRmYjhhODMtOGZlNS00OGE0LTg4ZGYtYWQ3MjU0MWRh ZTI2MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZWQ5Njc0MGQtZmE1Yy00ZmU0LThkYzktMTZiNzJhMTkyNDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCFcHVeoGQvVuGmV3d6MhLiQuAk+hegVS8va L8h866h/9wyXVXZLDWbNdZ/1N4TbI+5GDSnPRd4hWlYOMkkikug/ZmCYlx1tl/gj at3zLgg11eKLs+FtVApIOuGG23NbbV9TXdHnbOIOuuXHle6RhXqrDAkkoZJ6qEiG UrFoC4+jehb/2v+V7D/Ud7Z8j2Xg6zUbJVDwmpFZfPHteYPbUYO/6Tetmb36G96P qL7z3bFZfW1RgIc53UWGy8m1mDxw1nEk+ZmXXfkfNDef5MzPsm2VBTDeh7RBEJRj 4dLUyzdEr+rRGcYiqox1SixZg/AUmY8ZoJiL9MDJmbTSM6ai6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOmTpLXQ8j0GhBuyb0d6q8hfq8Q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZGZi OGE4My04ZmU1LTQ4YTQtODhkZi1hZDcyNTQxZGFlMjYvYzU2OGQxMmYtODRhNC0z MWY2LThmOTctOWJlNWJhYWYyYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmRmYjhhODMtOGZlNS00OGE0LTg4 ZGYtYWQ3MjU0MWRhZTI2LzZkZmI4YTgzLThmZTUtNDhhNC04OGRmLWFkNzI1NDFk YWUyNi5jcmwwHwYDVR0jBBgwFoAUnU8hHJTzUYfai8nlNLDxkwEFRk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZGZiOGE4My04ZmU1LTQ4YTQtODhkZi1hZDcy NTQxZGFlMjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABGfAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKl07k4umJFceg+c1ZJ94MXcLR/YuSaBntJpKQ6EpRqFtSByilYf D9bhrA/2f5hdy8dxZ5jR0cVLCpSSI8dyLrIsM54VT0V2KCLlOK+xHV7Qa0xBTM++ HsZvgA+ykv43jeaNz49m0AmR4HSYvPLY32XIb0ovN/H4MTMEIgtreUgXkVdDFYNp JMXqYbNOkw4cdrJj+x124u6xpaUQzQJbYKuNTCSGgpLf17Eezbno5cM5u7nmrmRR HaJNvkDgN2bT9GwMNtRtf0ubXzbByF+OhRcVjvK088zMC6/Qwr//EK7wC6VrWoJv IxH83qf1bgjnXJbknoVNuNXi0Hhd7r4CUmk= -----END CERTIFICATE-----Generated at Mon May 5 12:18:26 2025 by rpki-client