$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/8e21170e-1466-3099-9701-481f57135285.roa File: 8e21170e-1466-3099-9701-481f57135285.roa (raw, json) Hash identifier: 5hFhfzx/DOR0fa7/7ohwiE0/amgN78i7r1t+f9zi9ks= Subject key identifier: 83:E1:AA:AF:30:06:72:CE:C4:03:6D:1B:C5:12:16:21:E5:A1:FF:13 Certificate issuer: /CN=d826c88d-e62d-45fe-a08c-0b0a021a5314 Certificate serial: 010D0C9F43285849B6DF56D808EAC92FEBE81680 Authority key identifier: A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/8e21170e-1466-3099-9701-481f57135285.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 81 IP address blocks: 2620:7:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:56:d8:08:ea:c9:2f:eb:e8:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d826c88d-e62d-45fe-a08c-0b0a021a5314 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=dd38d0a0-e2df-48d0-b1c0-ea39fb11f0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:89:7a:7e:07:44:e4:c7:87:46:a3:1f:dc:c3: 5a:9e:e8:1c:c3:43:77:a9:f2:0e:47:2a:40:6a:c5: db:20:39:e3:fc:db:db:60:e4:78:b9:35:41:30:66: b0:49:b4:f0:2d:34:c1:86:9b:63:60:ac:58:2b:35: 1e:d2:4d:3d:ad:6a:a2:52:c7:70:48:c2:97:53:d7: 14:e2:bd:79:c9:ba:a6:59:f1:6e:0a:84:4b:66:d5: d2:07:9c:fa:84:01:8b:a0:fe:62:8c:d3:95:7b:cd: f4:a2:e9:77:88:29:96:70:5f:41:aa:3a:dd:62:71: 80:bd:fd:7a:6c:9c:69:de:d6:d5:ff:76:e5:c0:92: c7:2d:e4:a9:bf:24:ab:21:d9:a0:b9:e9:b4:13:92: 57:2f:22:a2:82:ac:36:a8:cd:2f:45:d3:58:e4:9e: 58:6c:19:d4:c6:fb:b9:03:20:20:3c:20:88:1c:c4: 4b:db:2f:c2:e4:03:f1:07:58:5e:bc:b5:af:02:b1: 70:a6:ba:cc:83:a4:b4:70:07:af:bc:6f:62:c6:7c: 7d:d3:a3:10:10:e7:d9:1f:cd:24:c3:f7:b1:23:84: 62:69:cf:10:be:70:bc:9d:cc:ed:bd:6c:5b:ac:7f: cc:b2:67:c0:f3:11:d2:fb:33:05:6c:e8:fe:9e:30: 97:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E1:AA:AF:30:06:72:CE:C4:03:6D:1B:C5:12:16:21:E5:A1:FF:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/8e21170e-1466-3099-9701-481f57135285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl X509v3 Authority Key Identifier: keyid:A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer sbgp-ipAddrBlock: critical IPv6: 2620:7:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6a:43:d0:4a:05:66:0a:9b:37:66:42:31:8c:90:78:2e:b8: 7f:b4:34:46:f1:fe:29:8b:77:6a:51:e7:39:03:96:78:5c:f1: 2e:7c:cd:f8:09:83:8e:32:77:1d:6f:9d:14:f9:be:cd:1a:2a: 5b:6f:c3:77:60:2a:98:06:3d:c2:07:09:0e:27:8c:72:27:f0: db:ff:38:45:5e:e1:51:a4:1f:8e:20:e3:00:31:ed:7a:9d:6c: c6:ee:cd:50:7b:89:78:a0:fc:ed:1c:3e:bd:01:72:81:19:d4: 50:1a:66:a7:39:44:6d:d6:db:30:d8:de:91:72:cc:ef:b1:f6: 81:1b:48:5e:48:5b:63:6b:a2:4e:01:e7:de:98:66:e0:0d:d3: 1a:b1:d8:f7:9d:26:db:77:70:a2:3a:15:e5:5b:3b:3f:f0:fa: 67:bc:97:b3:b3:43:e8:85:99:31:c5:f4:c6:a8:c6:c0:40:42: 4c:5a:e7:d0:e6:58:9d:17:59:b7:36:5f:d4:6f:4e:de:bb:60: 5f:53:de:68:a7:f3:30:61:6d:99:21:31:dc:b6:d4:ff:d2:94: 36:6b:c5:e1:86:75:b4:11:87:ff:c5:cd:be:21:b4:2c:27:d0: bf:47:35:4a:94:82:b2:b4:d3:a7:9d:bd:63:21:6f:30:64:4c: ae:4e:42:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm231bYCOrJL+voFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgyNmM4OGQtZTYyZC00NWZlLWEwOGMtMGIwYTAyMWE1 MzE0MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk ZGQzOGQwYTAtZTJkZi00OGQwLWIxYzAtZWEzOWZiMTFmMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4l6fgdE5MeHRqMf3MNanugcw0N3qfIORypA asXbIDnj/NvbYOR4uTVBMGawSbTwLTTBhptjYKxYKzUe0k09rWqiUsdwSMKXU9cU 4r15ybqmWfFuCoRLZtXSB5z6hAGLoP5ijNOVe830oul3iCmWcF9BqjrdYnGAvf16 bJxp3tbV/3blwJLHLeSpvySrIdmguem0E5JXLyKigqw2qM0vRdNY5J5YbBnUxvu5 AyAgPCCIHMRL2y/C5APxB1hevLWvArFwprrMg6S0cAevvG9ixnx906MQEOfZH80k w/exI4Riac8QvnC8ncztvWxbrH/MsmfA8xHS+zMFbOj+njCXjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIPhqq8wBnLOxANtG8USFiHlof8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODI2 Yzg4ZC1lNjJkLTQ1ZmUtYTA4Yy0wYjBhMDIxYTUzMTQvOGUyMTE3MGUtMTQ2Ni0z MDk5LTk3MDEtNDgxZjU3MTM1Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDgyNmM4OGQtZTYyZC00NWZlLWEw OGMtMGIwYTAyMWE1MzE0L2Q4MjZjODhkLWU2MmQtNDVmZS1hMDhjLTBiMGEwMjFh NTMxNC5jcmwwHwYDVR0jBBgwFoAUoc+i8N7KpEuZE/Pqkvx2np/ugGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODI2Yzg4ZC1lNjJkLTQ1ZmUtYTA4Yy0wYjBh MDIxYTUzMTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAByAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGBqQ9BKBWYKmzdmQjGMkHguuH+0NEbx/imLd2pR5zkDlnhc8S58 zfgJg44ydx1vnRT5vs0aKltvw3dgKpgGPcIHCQ4njHIn8Nv/OEVe4VGkH44g4wAx 7XqdbMbuzVB7iXig/O0cPr0BcoEZ1FAaZqc5RG3W2zDY3pFyzO+x9oEbSF5IW2Nr ok4B596YZuAN0xqx2PedJtt3cKI6FeVbOz/w+me8l7OzQ+iFmTHF9MaoxsBAQkxa 59DmWJ0XWbc2X9RvTt67YF9T3min8zBhbZkhMdy21P/SlDZrxeGGdbQRh//Fzb4h tCwn0L9HNUqUgrK006edvWMhbzBkTK5OQqY= -----END CERTIFICATE-----Generated at Tue May 6 06:32:40 2025 by rpki-client