$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53/675caa0d-a9a7-363c-ad86-aa26ee4a7e09.roa File: 675caa0d-a9a7-363c-ad86-aa26ee4a7e09.roa (raw, json) Hash identifier: vWMkcLpv+t5BtsERllElYoXDNld2hnDnpw3vKvvqjvA= Subject key identifier: AD:15:39:DF:9E:B6:16:92:0C:4E:DC:34:E6:4B:5D:1E:0F:EE:2D:60 Certificate issuer: /CN=9aa1239e-f794-41f3-afdb-07b565ff2d53 Certificate serial: 010D0C9F43285849C0A4DFFB51F4C41992F85F40 Authority key identifier: 0F:0C:07:9A:B1:5A:67:0B:4D:8B:E4:6B:93:EA:4E:43:8D:11:2E:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53/675caa0d-a9a7-363c-ad86-aa26ee4a7e09.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 29903 IP address blocks: 2620:5a:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53/9aa1239e-f794-41f3-afdb-07b565ff2d53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53/9aa1239e-f794-41f3-afdb-07b565ff2d53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:df:fb:51:f4:c4:19:92:f8:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aa1239e-f794-41f3-afdb-07b565ff2d53 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=27fb229f-707e-484d-9877-58218461b0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:4f:41:47:62:76:a9:65:d9:2a:fb:16:2b: e5:dd:ed:a3:33:d5:77:a0:21:34:2a:de:fe:12:d6: 5e:a0:d9:fc:0e:53:aa:5e:e9:9a:59:84:5a:06:12: 79:e5:c3:67:df:4c:ca:3a:1a:4b:ce:14:84:e5:2b: 8b:c9:d1:b3:08:c1:9a:c9:fd:57:6e:d2:7b:f8:ae: 71:80:bd:7d:86:9d:1a:56:33:ed:44:7e:d2:ab:d1: df:1e:73:8b:9b:d8:7c:c1:fb:a4:b1:aa:92:68:a8: c4:cb:5a:a1:f3:c2:8c:f9:93:5e:c9:24:de:d9:6d: 7b:04:76:48:42:9a:0c:37:e8:c7:59:a4:4e:79:8c: 2f:b2:a8:89:f1:72:89:9e:e1:94:93:7d:c3:59:90: 7b:e1:eb:34:76:5f:c3:03:8b:01:37:10:6b:a6:2c: f2:4b:f0:85:53:23:47:99:24:c0:f6:2d:42:ab:3e: 95:b3:c0:7d:b8:76:ad:7a:e1:1e:54:b1:27:77:f8: 3d:32:75:98:21:e1:f8:58:d6:42:ef:2f:9d:6d:94: 11:00:dc:9f:9e:d1:ee:2d:b2:93:bb:65:66:4c:f4: 18:4e:36:cd:a5:70:6b:9e:ed:35:d6:6e:38:c8:4e: 78:4d:39:1b:2e:77:c5:c5:b2:dc:1a:4c:70:9e:fa: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:15:39:DF:9E:B6:16:92:0C:4E:DC:34:E6:4B:5D:1E:0F:EE:2D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53/675caa0d-a9a7-363c-ad86-aa26ee4a7e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53/9aa1239e-f794-41f3-afdb-07b565ff2d53.crl X509v3 Authority Key Identifier: keyid:0F:0C:07:9A:B1:5A:67:0B:4D:8B:E4:6B:93:EA:4E:43:8D:11:2E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53.cer sbgp-ipAddrBlock: critical IPv6: 2620:5a:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7a:ad:50:bf:91:d0:f3:99:be:32:3d:cc:87:c9:b2:f5:19: c5:8c:d0:00:04:52:6f:d1:64:e3:d8:62:85:eb:96:40:f5:ef: 1f:66:d7:65:d3:ab:bb:02:5c:df:6d:da:ed:90:e9:fb:1f:f7: 50:26:d8:bd:f4:6c:21:b9:03:4a:d7:a7:31:ca:dd:7c:f4:ba: f8:4f:db:40:8f:f7:48:b0:b8:c0:b7:e5:95:15:81:a4:f0:2e: 5f:ef:6e:c6:51:8c:ee:e1:e0:25:9c:a1:55:38:22:5a:26:c4: 5a:0b:f0:65:ed:dd:83:15:3c:af:96:da:ba:a3:1a:79:17:ed: a7:59:27:8c:e2:10:6c:36:e6:48:dc:ae:6e:a2:7f:a0:28:36: 5d:d5:57:6d:19:e7:20:54:46:a2:7b:f4:cd:79:d2:78:af:b3: c6:19:64:77:cd:49:c5:73:91:d8:96:c0:b7:9e:74:ff:7a:40: 9e:61:5d:bb:da:dd:b7:25:8a:85:37:bc:22:4e:93:7d:f6:cd: ff:08:2c:d1:f5:4f:ee:2e:5f:e2:01:93:c3:12:7a:05:c0:3a: 01:35:be:0a:f8:25:d3:23:f9:6d:ea:41:82:bb:fa:3f:b7:ce: f3:11:fc:ec:c0:bc:54:ce:95:07:31:a0:ff:64:54:a6:a1:9d: a9:cb:8e:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnApN/7UfTEGZL4X0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFhMTIzOWUtZjc5NC00MWYzLWFmZGItMDdiNTY1ZmYy ZDUzMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MjdmYjIyOWYtNzA3ZS00ODRkLTk4NzctNTgyMTg0NjFiMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjVPQUdidqll2Sr7Fivl3e2jM9V3oCE0Kt7+ EtZeoNn8DlOqXumaWYRaBhJ55cNn30zKOhpLzhSE5SuLydGzCMGayf1XbtJ7+K5x gL19hp0aVjPtRH7Sq9HfHnOLm9h8wfuksaqSaKjEy1qh88KM+ZNeySTe2W17BHZI QpoMN+jHWaROeYwvsqiJ8XKJnuGUk33DWZB74es0dl/DA4sBNxBrpizyS/CFUyNH mSTA9i1Cqz6Vs8B9uHateuEeVLEnd/g9MnWYIeH4WNZC7y+dbZQRANyfntHuLbKT u2VmTPQYTjbNpXBrnu011m44yE54TTkbLnfFxbLcGkxwnvqTGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK0VOd+ethaSDE7cNOZLXR4P7i1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YWEx MjM5ZS1mNzk0LTQxZjMtYWZkYi0wN2I1NjVmZjJkNTMvNjc1Y2FhMGQtYTlhNy0z NjNjLWFkODYtYWEyNmVlNGE3ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWFhMTIzOWUtZjc5NC00MWYzLWFm ZGItMDdiNTY1ZmYyZDUzLzlhYTEyMzllLWY3OTQtNDFmMy1hZmRiLTA3YjU2NWZm MmQ1My5jcmwwHwYDVR0jBBgwFoAUDwwHmrFaZwtNi+Rrk+pOQ40RLuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85YWExMjM5ZS1mNzk0LTQxZjMtYWZkYi0wN2I1 NjVmZjJkNTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAWoAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD96rVC/kdDzmb4yPcyHybL1GcWM0AAEUm/RZOPYYoXrlkD17x9m 12XTq7sCXN9t2u2Q6fsf91Am2L30bCG5A0rXpzHK3Xz0uvhP20CP90iwuMC35ZUV gaTwLl/vbsZRjO7h4CWcoVU4IlomxFoL8GXt3YMVPK+W2rqjGnkX7adZJ4ziEGw2 5kjcrm6if6AoNl3VV20Z5yBURqJ79M150nivs8YZZHfNScVzkdiWwLeedP96QJ5h Xbva3bclioU3vCJOk332zf8ILNH1T+4uX+IBk8MSegXAOgE1vgr4JdMj+W3qQYK7 +j+3zvMR/OzAvFTOlQcxoP9kVKahnanLji4= -----END CERTIFICATE-----Generated at Mon May 5 14:34:47 2025 by rpki-client