$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba290ddd-27e1-33cd-82c7-756aa91e1e1b.roa File: ba290ddd-27e1-33cd-82c7-756aa91e1e1b.roa (raw, json) Hash identifier: hsUH9zVPIfEKfaMVPXBZq+d3oerm0bcUJ2sfOv2CI2Q= Subject key identifier: 56:2A:25:F2:C7:73:3C:9A:0B:42:F8:CD:EF:F4:73:44:88:8B:50:0A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA6CAD5E2EAFD72AEA9540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba290ddd-27e1-33cd-82c7-756aa91e1e1b.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396602 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:6c:ad:5e:2e:af:d7:2a:ea:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=1b9cef84-9fa9-4a12-a3ec-a5d16f0b14f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:d3:16:22:4f:99:16:a6:e1:3b:6a:4e:88: aa:e7:58:f8:1f:c5:41:28:c6:93:ab:c5:fb:4f:4d: ca:b4:61:d7:cd:c8:6e:d5:bf:0a:7f:6f:2f:b3:41: 38:d1:83:06:b0:09:81:77:95:8d:ff:59:f8:b0:34: 98:5b:95:d4:39:14:16:85:24:bd:b1:e6:32:12:b0: c8:28:bd:73:ca:7b:e0:a4:1b:fe:28:21:9b:e6:a1: d4:5c:e3:e4:7e:71:07:5e:37:79:a9:5f:aa:5b:34: 6e:82:3e:08:01:77:47:95:eb:2a:30:75:f1:de:58: 2f:c4:21:84:0a:37:13:dd:25:aa:22:00:e6:a5:20: 2a:77:1e:91:97:c9:a9:b6:1d:67:d7:55:26:e1:48: f3:a5:68:8d:11:2d:c9:4d:b8:d1:5c:00:97:a4:c9: 67:f6:8b:5e:e7:58:b5:2c:a0:27:34:90:8c:59:3b: 49:e3:49:17:98:94:ed:19:f1:61:e5:80:f5:12:be: 02:95:42:0f:30:fb:f6:10:3e:0d:02:a1:94:8d:9d: dd:28:83:c0:6e:2b:2e:81:69:b6:17:34:42:bb:99: 6c:61:50:f0:54:c4:dd:fc:9f:1a:20:65:e9:e4:10: 42:dd:69:31:88:8c:bc:a4:a8:11:f3:82:24:5a:e5: 43:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2A:25:F2:C7:73:3C:9A:0B:42:F8:CD:EF:F4:73:44:88:8B:50:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba290ddd-27e1-33cd-82c7-756aa91e1e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:7f:b3:18:8f:e6:61:3d:8e:bb:ff:be:24:48:49:49:e5:ca: 72:e8:c5:ec:89:c3:aa:9d:58:92:7e:29:18:13:d2:8b:a9:4b: 8a:01:9b:81:42:92:f9:94:d6:e7:44:87:13:3c:f4:86:19:6f: 37:1a:96:50:08:b5:5d:7a:e9:8d:03:1b:5c:7f:0f:db:d8:31: a8:68:fd:9d:33:cd:f0:6c:d3:4a:a3:06:3e:d5:b6:a2:ff:e2: 06:db:2b:50:e2:17:38:b4:ab:de:56:f6:61:19:d4:8c:f1:25: 1e:e6:6b:79:3b:96:55:85:de:54:9b:02:bc:e8:11:f3:32:ef: 55:da:fa:8e:3d:aa:a0:76:90:16:03:b2:fd:ff:d6:d5:0d:d3: b0:e7:a9:87:38:db:71:75:3f:cb:53:a1:17:0c:5e:e8:50:5b: 16:55:3f:a5:14:22:75:2e:ce:cd:fe:56:6a:83:a4:e8:7f:33: 34:25:33:c9:77:b8:4f:3b:d3:3d:5d:3d:7a:3c:3e:98:1f:26: eb:4e:cf:e0:6c:53:5a:d8:44:97:50:8c:0c:b1:11:ac:63:08: d1:5c:1a:89:39:ba:a0:40:5a:86:10:15:19:b7:94:a2:c6:03: 29:16:b3:e3:44:cf:48:e9:f3:43:e0:ad:49:d7:17:8f:35:12: 0c:7b:44:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnr6mytXi6v1yrqlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MWI5Y2VmODQtOWZhOS00YTEyLWEzZWMtYTVkMTZmMGIxNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywnTFiJPmRam4TtqToiq51j4H8VBKMaTq8X7 T03KtGHXzchu1b8Kf28vs0E40YMGsAmBd5WN/1n4sDSYW5XUORQWhSS9seYyErDI KL1zynvgpBv+KCGb5qHUXOPkfnEHXjd5qV+qWzRugj4IAXdHlesqMHXx3lgvxCGE CjcT3SWqIgDmpSAqdx6Rl8mpth1n11Um4UjzpWiNES3JTbjRXACXpMln9ote51i1 LKAnNJCMWTtJ40kXmJTtGfFh5YD1Er4ClUIPMPv2ED4NAqGUjZ3dKIPAbisugWm2 FzRCu5lsYVDwVMTd/J8aIGXp5BBC3WkxiIy8pKgR84IkWuVDLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFYqJfLHczyaC0L4ze/0c0SIi1AKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmEyOTBkZGQtMjdlMS0z M2NkLTgyYzctNzU2YWE5MWUxZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACB/sxiP5mE9jrv/viRISUnlynLoxeyJw6qdWJJ+KRgT0oupS4oB m4FCkvmU1udEhxM89IYZbzcallAItV166Y0DG1x/D9vYMaho/Z0zzfBs00qjBj7V tqL/4gbbK1DiFzi0q95W9mEZ1IzxJR7ma3k7llWF3lSbArzoEfMy71Xa+o49qqB2 kBYDsv3/1tUN07DnqYc423F1P8tToRcMXuhQWxZVP6UUInUuzs3+VmqDpOh/MzQl M8l3uE870z1dPXo8PpgfJutOz+BsU1rYRJdQjAyxEaxjCNFcGok5uqBAWoYQFRm3 lKLGAykWs+NEz0jp80PgrUnXF481Egx7RHc= -----END CERTIFICATE-----Generated at Mon Jun 30 16:00:58 2025 by rpki-client