$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/2927b48a-f5fd-3d87-a95a-0b605e6b2e0d.roa File: 2927b48a-f5fd-3d87-a95a-0b605e6b2e0d.roa (raw, json) Hash identifier: yZRyuZMoPR+0nCTI21C42XK3eFJHkf4P/dbf4SsLekw= Subject key identifier: C3:AB:2B:AD:20:CF:1F:91:C5:59:35:FC:44:91:11:20:44:96:49:2E Certificate issuer: /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Certificate serial: 010D0C9F432858499D4B82828C31514C1FE08C00 Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/2927b48a-f5fd-3d87-a95a-0b605e6b2e0d.roa Signing time: Tue 22 Apr 2025 21:07:53 +0000 ROA not before: Tue 22 Apr 2025 21:07:53 +0000 ROA not after: Mon 21 Jul 2025 21:07:53 +0000 asID: 1828 IP address blocks: 2605:f500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:4b:82:82:8c:31:51:4c:1f:e0:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Validity Not Before: Apr 22 21:07:53 2025 GMT Not After : Jul 21 21:07:53 2025 GMT Subject: CN=e4d7ccb7-af5a-4296-a357-2efc740baf8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:db:3d:58:5f:f4:d6:f4:ab:40:7f:af:12:7b: 7c:89:d0:4c:65:de:f6:91:1b:d2:29:99:89:18:34: 79:bf:c5:f1:18:96:42:04:15:40:50:47:76:a9:c5: 56:77:6f:db:39:50:1e:fb:9d:8f:2a:7b:ed:95:d0: 9a:07:08:6e:4d:2a:97:bc:e7:d0:20:02:a8:a2:19: 87:ea:8a:94:65:e9:4e:ea:aa:9c:91:6c:52:39:30: 51:1c:19:2f:b1:ca:35:a6:a2:d4:3c:57:24:ca:81: 0f:9f:ed:35:13:cf:28:76:01:4e:ec:e9:81:d2:86: 62:3b:06:c2:98:de:17:3e:1e:e1:81:7a:6b:6d:68: 8b:55:53:6b:1c:9e:17:4e:63:ad:08:06:2c:2b:5c: 77:47:2a:d7:26:b6:2b:fa:6a:9d:df:6e:ad:1a:94: 72:fc:31:22:cb:40:66:6d:31:a2:21:13:35:88:49: f4:72:69:6f:15:2a:bc:e7:9d:a8:b3:bc:9a:df:63: 1e:06:60:8f:d1:60:36:6f:b3:94:ce:11:13:8b:32: a2:c7:cf:2b:7d:4b:52:16:ae:d0:37:00:93:42:34: 40:41:99:66:79:ea:6b:21:b8:57:96:41:c9:18:93: b0:42:36:c2:ab:23:5e:14:b8:42:07:40:b1:c4:05: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AB:2B:AD:20:CF:1F:91:C5:59:35:FC:44:91:11:20:44:96:49:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/2927b48a-f5fd-3d87-a95a-0b605e6b2e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl X509v3 Authority Key Identifier: keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer sbgp-ipAddrBlock: critical IPv6: 2605:f500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:97:d9:8e:0a:a6:6b:79:68:01:cb:07:6e:00:00:48:10:63: 77:8f:48:05:e9:25:cf:8c:81:1d:4c:71:cd:01:a6:0a:97:37: a7:d4:a1:97:e0:ed:38:01:e2:54:1f:04:32:43:aa:92:01:e2: 77:b6:7a:af:90:23:bb:d0:90:e8:2e:f0:bc:af:42:51:4d:93: f1:ba:95:e8:fe:c5:1e:d1:bc:9b:15:80:fd:0d:1e:e2:03:1f: 69:f1:5e:ec:8b:6d:e2:2a:e3:c9:73:96:fa:32:eb:6b:66:75: d7:db:c0:5c:f2:9c:bc:7f:f3:a6:36:88:93:32:ea:ce:c5:f0: 0e:e1:6c:c3:ab:5e:2f:71:7d:8d:6f:1d:73:ca:3c:ca:d1:3f: 99:4e:eb:23:82:08:cd:6a:35:79:d8:16:a1:9f:93:10:97:d2: a3:47:13:17:aa:e4:b4:52:5d:6b:7a:e2:ed:87:5b:5b:50:7c: eb:fc:0d:e0:cc:5b:bc:b0:16:4c:2a:0e:ef:60:11:65:43:48: 2d:8a:34:5a:4c:dc:3a:2a:da:6f:af:d0:6f:f6:8e:cf:03:e3: a3:37:f9:be:55:ed:96:92:78:9a:08:85:5e:6f:86:2d:53:12: 26:69:7a:3b:34:92:6a:4b:a0:e2:91:3e:9c:ab:33:9f:90:cd: 2a:c0:38:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdS4KCjDFRTB/gjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNDY1YzAtMmExMC00OTVhLWI3ZDItMmFhMDQ4YjI4 NmEwMB4XDTI1MDQyMjIxMDc1M1oXDTI1MDcyMTIxMDc1M1owLzEtMCsGA1UEAxMk ZTRkN2NjYjctYWY1YS00Mjk2LWEzNTctMmVmYzc0MGJhZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgts9WF/01vSrQH+vEnt8idBMZd72kRvSKZmJ GDR5v8XxGJZCBBVAUEd2qcVWd2/bOVAe+52PKnvtldCaBwhuTSqXvOfQIAKoohmH 6oqUZelO6qqckWxSOTBRHBkvsco1pqLUPFckyoEPn+01E88odgFO7OmB0oZiOwbC mN4XPh7hgXprbWiLVVNrHJ4XTmOtCAYsK1x3RyrXJrYr+mqd326tGpRy/DEiy0Bm bTGiIRM1iEn0cmlvFSq8552os7ya32MeBmCP0WA2b7OUzhETizKix88rfUtSFq7Q NwCTQjRAQZlmeeprIbhXlkHJGJOwQjbCqyNeFLhCB0CxxAWpvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMOrK60gzx+RxVk1/ESRESBElkkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0 NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEwNDhiMjg2YTAvMjkyN2I0OGEtZjVmZC0z ZDg3LWE5NWEtMGI2MDVlNmIyZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFlNDY1YzAtMmExMC00OTVhLWI3 ZDItMmFhMDQ4YjI4NmEwL2FhZTQ2NWMwLTJhMTAtNDk1YS1iN2QyLTJhYTA0OGIy ODZhMC5jcmwwHwYDVR0jBBgwFoAUqvGlGuuoqNwlLVt4tOGaGNmKjyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEw NDhiMjg2YTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX1AAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEKX2Y4Kpmt5aAHLB24AAEgQY3ePSAXpJc+MgR1Mcc0BpgqXN6fU oZfg7TgB4lQfBDJDqpIB4ne2eq+QI7vQkOgu8LyvQlFNk/G6lej+xR7RvJsVgP0N HuIDH2nxXuyLbeIq48lzlvoy62tmddfbwFzynLx/86Y2iJMy6s7F8A7hbMOrXi9x fY1vHXPKPMrRP5lO6yOCCM1qNXnYFqGfkxCX0qNHExeq5LRSXWt64u2HW1tQfOv8 DeDMW7ywFkwqDu9gEWVDSC2KNFpM3Doq2m+v0G/2js8D46M3+b5V7ZaSeJoIhV5v hi1TEiZpejs0kmpLoOKRPpyrM5+QzSrAOD0= -----END CERTIFICATE-----Generated at Fri May 9 20:41:34 2025 by rpki-client