$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa File: b0aead21-fe86-32c1-8560-e3f695d01240.roa (raw, json) Hash identifier: pRiOnEa7f3wW8eLUsT2aKu89SsZ1YqMYodOcp4ZzGtU= Subject key identifier: 67:28:39:FA:CC:D7:FF:49:FF:F4:35:25:8C:CB:7D:C9:F0:66:C9:00 Certificate issuer: /CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Certificate serial: 010D0C9F43285849CE9A6349B4FECDE6FFA9AD28 Authority key identifier: 8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 19919 IP address blocks: 2601:1600::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:63:49:b4:fe:cd:e6:ff:a9:ad:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=00bcaf12-ece6-42ce-ba6c-a6206808566c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5e:7c:5a:d4:a2:71:1a:3e:52:2d:e3:44:cb: 47:38:73:db:f0:cd:69:ab:0c:a5:ea:da:f8:a8:14: 99:fa:bd:88:e3:fb:38:73:2a:c2:da:bf:d8:e2:b3: 8a:f8:e3:b8:e9:14:b5:fc:f5:95:7e:35:58:f6:d5: c6:3b:35:07:a7:ed:e5:b1:80:91:3f:4d:eb:e9:c1: 92:3e:9d:72:80:bd:db:13:55:90:84:4c:6f:1c:35: 2b:d5:2c:03:3a:eb:80:d0:eb:d1:f3:b1:c6:f1:f3: 34:a6:ad:11:b7:f4:d4:a6:55:64:a6:a3:17:5e:68: 41:14:b3:52:8a:5d:1c:c8:cc:b9:93:8e:8f:be:d9: 41:ac:de:66:83:b1:af:bb:2f:1b:80:68:18:b8:94: 65:87:a8:cf:f4:44:cf:04:ff:f9:64:2f:01:f8:a0: c8:4f:e9:76:5a:4e:7b:a1:14:7e:15:d6:d1:07:98: c2:dc:62:ba:53:62:8f:25:e8:32:e0:5f:92:2c:7b: c2:32:0e:45:47:19:47:f4:bf:21:ca:9b:b2:35:1e: 77:f3:39:08:96:cb:ad:6a:9b:42:0b:2a:ab:4a:b9: 81:bc:db:a3:80:98:ca:de:96:32:aa:23:f5:46:58: 2e:93:fb:f3:6a:32:7c:81:b2:43:38:8b:9d:a5:48: 03:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:28:39:FA:CC:D7:FF:49:FF:F4:35:25:8C:CB:7D:C9:F0:66:C9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl X509v3 Authority Key Identifier: keyid:8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer sbgp-ipAddrBlock: critical IPv6: 2601:1600::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:60:a2:d6:dc:33:70:cc:bf:8f:dc:b8:5b:df:77:ac:b7:be: 89:4a:20:53:fd:f6:b8:48:9d:7d:38:6e:25:91:de:d5:11:e7: a5:3e:8a:0d:f4:5b:2c:8a:83:99:64:2c:4f:fb:ab:84:bf:89: 81:4b:89:b6:d9:51:83:f3:95:da:8b:18:54:d1:e1:61:09:72: eb:81:cb:6c:80:b2:95:da:a6:43:61:dd:c6:76:0b:10:ff:ba: de:32:32:06:dc:5b:e8:20:51:45:45:cc:9d:33:21:20:b2:69: 68:4f:25:86:22:02:38:bb:f4:2a:a2:91:f2:ab:54:03:4a:b5: dc:ca:ea:bc:7d:c0:d9:ae:13:2e:c5:48:7f:66:26:b2:c5:18: bb:3d:91:39:5d:22:6d:54:de:18:6b:1d:15:8f:3b:1b:35:1c: ec:ca:3e:04:2a:6f:c5:ce:2f:0e:3b:96:e7:34:f0:0c:67:ad: f8:3d:48:96:b7:16:7b:66:44:de:c3:fe:ed:e1:6e:bc:f1:6c: 16:6d:2c:5e:a5:4e:7e:88:48:6b:de:3d:7b:2e:f3:01:46:6f: db:f6:a5:2b:b9:4f:0c:f3:39:f5:a7:c2:f4:a8:72:5a:6b:e3: f0:93:11:c8:1f:cf:8f:04:2f:5f:8c:0e:23:d1:29:60:15:37: 20:29:14:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnOmmNJtP7N5v+prSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZhZmM3YTAtOTQyNC00MzFiLTg3YWEtZmFiNGM3MDMy ZWQyMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MDBiY2FmMTItZWNlNi00MmNlLWJhNmMtYTYyMDY4MDg1NjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF58WtSicRo+Ui3jRMtHOHPb8M1pqwyl6tr4 qBSZ+r2I4/s4cyrC2r/Y4rOK+OO46RS1/PWVfjVY9tXGOzUHp+3lsYCRP03r6cGS Pp1ygL3bE1WQhExvHDUr1SwDOuuA0OvR87HG8fM0pq0Rt/TUplVkpqMXXmhBFLNS il0cyMy5k46PvtlBrN5mg7Gvuy8bgGgYuJRlh6jP9ETPBP/5ZC8B+KDIT+l2Wk57 oRR+FdbRB5jC3GK6U2KPJegy4F+SLHvCMg5FRxlH9L8hypuyNR538zkIlsutaptC CyqrSrmBvNujgJjK3pYyqiP1Rlguk/vzajJ8gbJDOIudpUgDQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGcoOfrM1/9J//Q1JYzLfcnwZskAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NmFm YzdhMC05NDI0LTQzMWItODdhYS1mYWI0YzcwMzJlZDIvYjBhZWFkMjEtZmU4Ni0z MmMxLTg1NjAtZTNmNjk1ZDAxMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjZhZmM3YTAtOTQyNC00MzFiLTg3 YWEtZmFiNGM3MDMyZWQyLzY2YWZjN2EwLTk0MjQtNDMxYi04N2FhLWZhYjRjNzAz MmVkMi5jcmwwHwYDVR0jBBgwFoAUi7dDLh1Lr9B5AwaWTKytXGQkYSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NmFmYzdhMC05NDI0LTQzMWItODdhYS1mYWI0 YzcwMzJlZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgEWADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJYKLW3DNwzL+P3Lhb33est76JSiBT/fa4SJ19OG4lkd7VEeelPooN 9FssioOZZCxP+6uEv4mBS4m22VGD85XaixhU0eFhCXLrgctsgLKV2qZDYd3GdgsQ /7reMjIG3FvoIFFFRcydMyEgsmloTyWGIgI4u/QqopHyq1QDSrXcyuq8fcDZrhMu xUh/ZiayxRi7PZE5XSJtVN4Yax0VjzsbNRzsyj4EKm/Fzi8OO5bnNPAMZ634PUiW txZ7ZkTew/7t4W688WwWbSxepU5+iEhr3j17LvMBRm/b9qUruU8M8zn1p8L0qHJa a+PwkxHIH8+PBC9fjA4j0SlgFTcgKRQg -----END CERTIFICATE-----Generated at Mon May 12 10:07:19 2025 by rpki-client