$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa File: 2523a460-454b-387d-8a94-5c40f8f7d030.roa (raw, json) Hash identifier: Y0vsHe9QvrSz9vPJ6lOzpyKwTQK3wtNVqppO8RAFvqc= Subject key identifier: F0:D7:9F:1D:8D:72:70:B7:65:29:A8:C0:01:60:8D:1F:8E:D1:6D:ED Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F432858494303F458ED38BDD20046A374 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 29834 IP address blocks: 2620:1f7:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:f4:58:ed:38:bd:d2:00:46:a3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=884b9dea-5bf0-4b0e-9b6b-339c9376a0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:23:d7:bf:8e:b1:7c:55:2c:16:c6:cd:8e:bc: 29:bf:2d:94:a6:3a:2b:db:1a:b7:73:12:08:f2:3c: 2c:ca:2c:f1:f6:24:b3:ff:1d:5f:cb:e8:59:96:1a: 31:86:ba:fb:a8:62:bb:94:aa:c6:5d:85:ce:c8:f6: 72:82:d2:8e:52:9f:8a:5a:cb:c1:27:26:f9:32:d3: 48:b1:81:d4:ab:a3:3a:20:75:f9:4d:5a:76:4d:e9: 0f:97:ba:fc:03:67:2c:5f:27:03:a4:20:f8:d9:fa: 85:65:79:50:ae:81:b6:5c:b4:2c:58:d7:4b:2b:5e: 34:ba:b4:74:cf:74:53:6d:9e:96:cb:96:2d:89:df: f1:5f:91:4f:e3:95:ea:15:20:fa:d9:42:99:19:1b: a5:8f:f4:ca:7e:6b:4c:e2:b0:c9:8f:97:c2:a3:37: 7e:30:0a:5c:00:13:ff:74:f8:d0:ce:4c:b4:12:18: 8f:9d:60:48:15:c6:73:70:13:8f:e8:d0:6a:1a:54: c9:15:46:2b:36:43:28:ed:8f:df:fb:75:3f:fd:84: 3a:6a:58:76:ac:23:f8:1d:84:a0:2a:4f:b5:76:b2: cd:cb:e7:57:90:b5:6e:b6:f4:b1:59:a5:8e:6f:fc: 8d:05:19:ab:23:9d:c1:0c:6e:9f:52:6a:d6:7d:2e: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D7:9F:1D:8D:72:70:B7:65:29:A8:C0:01:60:8D:1F:8E:D1:6D:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv6: 2620:1f7:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a3:f2:c1:22:68:8e:3f:cd:54:8b:c4:71:ae:95:14:67:6f: cd:23:c0:f5:5b:e2:8b:f0:6e:b7:d9:d8:b3:61:ef:b3:59:f6: ee:12:70:88:ec:82:38:a0:3a:51:c4:a6:f0:63:4b:f6:70:c3: 3b:94:7d:e1:32:14:1b:c8:ca:c6:f9:72:0a:40:5a:e6:a7:9b: 27:8e:0e:1b:c6:ec:0e:b6:5a:af:aa:c0:aa:5b:c0:e0:ee:03: 63:95:57:a8:55:80:6a:88:d6:6b:ee:94:21:63:7f:20:ba:6d: 48:b6:f6:61:c5:65:4b:6a:77:04:6b:e6:5b:33:bf:19:a0:17: 3d:76:37:b9:25:5b:81:7a:c6:85:fb:42:0b:20:cf:9d:45:a9: 34:38:3d:02:59:fd:62:69:a4:39:f3:8b:aa:51:92:be:ef:ed: 0d:73:b8:b4:00:93:b8:5d:7a:35:77:31:9e:ee:42:7f:98:f5: 48:ce:01:45:7a:ea:07:6f:c5:26:af:62:97:ae:23:d6:86:4d: 5f:35:0d:cb:41:30:e6:86:12:0e:fe:96:49:71:1f:3b:c3:0c: c3:41:ef:66:ca:34:30:b8:7c:73:91:d4:dd:20:ca:fd:cb:f6: 9b:0b:e1:b3:de:6d:25:ec:7b:d0:4d:e5:1a:c0:c8:b3:2b:f4: 86:0c:80:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElDA/RY7Ti90gBGo3QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk ODg0YjlkZWEtNWJmMC00YjBlLTliNmItMzM5YzkzNzZhMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSPXv46xfFUsFsbNjrwpvy2Upjor2xq3cxII 8jwsyizx9iSz/x1fy+hZlhoxhrr7qGK7lKrGXYXOyPZygtKOUp+KWsvBJyb5MtNI sYHUq6M6IHX5TVp2TekPl7r8A2csXycDpCD42fqFZXlQroG2XLQsWNdLK140urR0 z3RTbZ6Wy5Ytid/xX5FP45XqFSD62UKZGRulj/TKfmtM4rDJj5fCozd+MApcABP/ dPjQzky0EhiPnWBIFcZzcBOP6NBqGlTJFUYrNkMo7Y/f+3U//YQ6alh2rCP4HYSg Kk+1drLNy+dXkLVutvSxWaWOb/yNBRmrI53BDG6fUmrWfS4FIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPDXnx2NcnC3ZSmowAFgjR+O0W3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvMjUyM2E0NjAtNDU0Yi0z ODdkLThhOTQtNWM0MGY4ZjdkMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABaj8sEiaI4/zVSLxHGulRRnb80jwPVb4ovwbrfZ2LNh77NZ9u4S cIjsgjigOlHEpvBjS/ZwwzuUfeEyFBvIysb5cgpAWuanmyeODhvG7A62Wq+qwKpb wODuA2OVV6hVgGqI1mvulCFjfyC6bUi29mHFZUtqdwRr5lszvxmgFz12N7klW4F6 xoX7Qgsgz51FqTQ4PQJZ/WJppDnzi6pRkr7v7Q1zuLQAk7hdejV3MZ7uQn+Y9UjO AUV66gdvxSavYpeuI9aGTV81DctBMOaGEg7+lklxHzvDDMNB72bKNDC4fHOR1N0g yv3L9psL4bPebSXse9BN5RrAyLMr9IYMgDk= -----END CERTIFICATE-----Generated at Sat May 10 10:19:09 2025 by rpki-client