$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa File: 99c569cb-49e3-3b55-8f14-63e32d1466d6.roa (raw, json) Hash identifier: AEkM3KuRYpgiJND7YqSnEfKZS8Jzk0HVgq6YtPC539U= Subject key identifier: C1:72:BE:6B:82:56:D6:50:F4:66:3E:EE:C7:B5:80:9A:CB:A5:3A:E8 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F43285849B149F4B88146692E1F6B9D00 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 32771 IP address blocks: 2620:111:800b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f4:b8:81:46:69:2e:1f:6b:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=e1cd72c9-feb0-43e2-a422-021b8a616941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:89:b8:01:a9:b2:79:b2:2b:3d:82:d5:16:87: 84:78:0c:59:db:21:8e:fb:a9:95:c7:46:2a:54:33: 36:90:d3:06:b9:aa:9a:5b:e4:ec:73:a9:d7:cd:6c: bb:26:44:90:3d:5c:70:4c:d4:7a:b5:98:13:10:5a: 24:11:31:c0:e2:70:85:bc:54:d3:7e:e3:3f:55:b1: 8a:60:48:17:57:84:8c:22:9b:44:fb:05:89:fa:0a: 6c:60:a0:07:ab:f2:19:fe:54:2b:5a:87:7a:fe:68: ab:7c:5b:14:bd:8f:96:4d:7b:28:70:37:0a:97:a6: fa:05:80:59:ba:99:72:c7:8e:7a:5a:26:33:6a:cd: c7:a9:52:2c:e5:ea:05:1f:c3:21:14:ad:9f:11:1f: 34:20:50:69:5c:72:17:e8:53:bf:df:2d:93:e8:d5: 22:47:f5:1b:c1:fc:c4:ca:6b:8f:3b:d3:16:90:eb: c7:dd:0f:b8:f4:9b:a6:02:6c:c1:86:5c:3e:01:c9: 4a:9b:bc:f1:1d:80:0b:20:96:8d:51:2c:49:46:1f: 22:9b:91:c1:a3:6b:eb:57:b8:ef:6a:8e:27:4d:e3: 3d:bb:b5:1c:82:72:84:5c:86:09:94:ec:05:99:c4: 5f:54:05:da:ef:a4:fe:fb:aa:df:28:7a:a1:30:1d: 16:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:72:BE:6B:82:56:D6:50:F4:66:3E:EE:C7:B5:80:9A:CB:A5:3A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:800b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e0:80:91:81:74:b2:94:78:88:b2:10:bb:89:d3:14:07:1e: 14:be:00:28:e6:c1:3d:5d:b6:21:ee:d3:bd:b2:2d:0e:86:7f: d3:7f:71:31:9e:56:b3:67:5b:7b:8e:06:1d:c4:90:0c:ee:39: 3d:37:84:ec:6b:ef:80:23:28:32:6c:d4:ba:ee:57:fd:c9:a0: 36:0b:42:86:aa:ad:1d:4b:44:57:bc:d4:60:ab:32:14:0e:a6: 14:50:7b:72:e8:24:ad:93:47:17:69:98:9c:15:76:83:1b:02: 64:86:bf:28:da:90:6d:de:86:92:7c:16:ca:23:3f:a4:8d:6d: 5c:a7:52:ae:59:98:9b:93:6c:92:87:31:4d:f9:14:5a:27:c7: a3:1f:4a:f6:10:ef:11:2f:07:40:ab:f8:f6:92:1a:d9:f6:c9: 10:64:80:74:d6:b6:2a:db:a8:8c:07:cc:84:33:d1:9f:69:70: 65:fe:34:3c:2f:cb:59:19:3a:f6:01:2b:58:09:54:af:f3:37: d8:77:63:70:fe:2f:1d:20:6a:39:48:05:dd:ad:06:e9:91:30: 4a:e5:6d:95:c5:cc:ad:d7:37:33:83:9e:94:51:01:86:80:fc: 1a:fb:4a:cb:b5:8b:11:a6:ed:64:89:22:84:52:5a:31:6c:d4: c8:1d:f8:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSfS4gUZpLh9rnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTFjZDcyYzktZmViMC00M2UyLWE0MjItMDIxYjhhNjE2OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIm4AamyebIrPYLVFoeEeAxZ2yGO+6mVx0Yq VDM2kNMGuaqaW+Tsc6nXzWy7JkSQPVxwTNR6tZgTEFokETHA4nCFvFTTfuM/VbGK YEgXV4SMIptE+wWJ+gpsYKAHq/IZ/lQrWod6/mirfFsUvY+WTXsocDcKl6b6BYBZ uplyx456WiYzas3HqVIs5eoFH8MhFK2fER80IFBpXHIX6FO/3y2T6NUiR/UbwfzE ymuPO9MWkOvH3Q+49JumAmzBhlw+AclKm7zxHYALIJaNUSxJRh8im5HBo2vrV7jv ao4nTeM9u7UcgnKEXIYJlOwFmcRfVAXa76T++6rfKHqhMB0WzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMFyvmuCVtZQ9GY+7se1gJrLpTroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvOTljNTY5Y2ItNDllMy0z YjU1LThmMTQtNjNlMzJkMTQ2NmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAILggJGBdLKUeIiyELuJ0xQHHhS+ACjmwT1dtiHu072yLQ6Gf9N/ cTGeVrNnW3uOBh3EkAzuOT03hOxr74AjKDJs1LruV/3JoDYLQoaqrR1LRFe81GCr MhQOphRQe3LoJK2TRxdpmJwVdoMbAmSGvyjakG3ehpJ8FsojP6SNbVynUq5ZmJuT bJKHMU35FFonx6MfSvYQ7xEvB0Cr+PaSGtn2yRBkgHTWtirbqIwHzIQz0Z9pcGX+ NDwvy1kZOvYBK1gJVK/zN9h3Y3D+Lx0gajlIBd2tBumRMErlbZXFzK3XNzODnpRR AYaA/Br7Ssu1ixGm7WSJIoRSWjFs1Mgd+Hs= -----END CERTIFICATE-----Generated at Sat May 10 05:01:37 2025 by rpki-client