$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59504056-6cfd-3907-b966-e87f290cd39a.roa File: 59504056-6cfd-3907-b966-e87f290cd39a.roa (raw, json) Hash identifier: 2pRVIc9eVGUvLawGdHfNXs1rdndcqQRDkngxLozMBFw= Subject key identifier: 9A:14:A8:34:95:F4:0F:DA:9F:91:1A:D6:52:C6:6A:F3:0A:5B:1E:7A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F18022F6BE405A8D9DA95400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59504056-6cfd-3907-b966-e87f290cd39a.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397222 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:22:f6:be:40:5a:8d:9d:a9:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=0a85e9af-bb02-4ab5-93de-c138fcff5756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:c8:7d:54:a2:e4:10:04:ca:f1:aa:e5:3d: f4:90:2b:26:47:95:6f:18:b8:e8:60:11:4a:67:26: 39:6a:af:f9:10:d6:d3:64:14:c1:cf:1e:1a:ee:d1: 84:58:90:da:3e:bf:f2:66:7b:1f:f9:79:8b:7c:d8: a7:f4:a5:dc:99:38:f9:9c:42:51:ab:e0:4b:f4:cf: 60:b7:6c:b2:f0:3d:f8:49:88:11:2e:57:55:26:ee: 40:a1:7d:d2:ea:56:b2:6e:91:7c:ce:a4:52:8a:a1: bf:98:63:d5:63:23:66:8f:3b:97:f7:09:b4:0c:ee: 45:83:05:46:ae:05:e5:72:0c:e7:71:a3:28:49:16: e0:c5:1f:61:75:15:b0:07:03:f3:3b:d9:6d:07:05: e7:17:da:cf:e5:b1:2c:0a:73:88:8b:82:ef:82:1b: a7:8a:70:c0:99:57:1e:30:5c:de:75:81:86:56:c0: 9f:5c:2d:7a:d0:2e:33:38:9f:02:2d:fb:75:86:1a: f6:b3:24:71:b5:20:a6:bf:3b:d9:23:f6:c7:21:83: a1:65:06:cf:d5:84:ec:58:46:c9:75:f7:28:38:ae: 12:81:27:60:c4:31:72:8c:7a:ce:e0:29:16:a6:de: 37:a1:e3:f2:7f:d8:18:c9:80:4b:57:83:89:a6:74: 25:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:14:A8:34:95:F4:0F:DA:9F:91:1A:D6:52:C6:6A:F3:0A:5B:1E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59504056-6cfd-3907-b966-e87f290cd39a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:de:05:5c:f2:b0:ed:54:0f:ea:7d:ae:10:7c:b6:d3:ee:a2: 87:26:3d:eb:b6:88:25:5d:c8:44:46:fc:d5:a0:a5:5e:81:62: b7:66:71:59:c8:5b:8a:19:02:67:01:a8:36:8d:10:19:2a:f5: fd:e3:c7:12:40:82:86:23:3e:c6:32:8f:81:8f:3d:3d:3e:db: 49:2f:54:87:3b:08:44:36:29:54:21:b1:ec:b1:e2:31:4f:7f: 22:58:ba:1a:47:98:02:67:ef:5f:13:33:35:74:94:bf:81:4a: 18:af:6e:58:a9:37:79:9a:1f:11:c8:36:23:05:15:ab:e9:c4: 90:dc:9e:5a:85:ac:ff:54:c6:01:aa:14:69:a2:92:10:5d:29: ba:c8:4d:ba:3d:dc:98:b2:7d:ed:87:d3:b2:12:a8:22:bb:a9: 19:b2:d3:5e:55:8e:d6:36:94:ff:b0:36:a9:cf:f1:68:16:b6: 2d:96:0d:e6:06:49:9a:b5:c9:aa:90:d8:29:d4:f5:40:94:10: 7e:96:76:01:41:75:9b:90:45:bf:7d:96:e1:a9:5a:46:f5:e9: d1:ca:84:5f:3f:a8:d0:d1:19:e5:33:d8:f9:3e:92:eb:93:ff: 3b:c8:dd:89:e2:a5:14:e5:80:33:7a:f7:76:d2:74:da:bd:ba: 7f:cb:91:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnxgCL2vkBajZ2pVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MGE4NWU5YWYtYmIwMi00YWI1LTkzZGUtYzEzOGZjZmY1NzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgPIfVSi5BAEyvGq5T30kCsmR5VvGLjoYBFK ZyY5aq/5ENbTZBTBzx4a7tGEWJDaPr/yZnsf+XmLfNin9KXcmTj5nEJRq+BL9M9g t2yy8D34SYgRLldVJu5AoX3S6laybpF8zqRSiqG/mGPVYyNmjzuX9wm0DO5FgwVG rgXlcgzncaMoSRbgxR9hdRWwBwPzO9ltBwXnF9rP5bEsCnOIi4LvghuninDAmVce MFzedYGGVsCfXC160C4zOJ8CLft1hhr2syRxtSCmvzvZI/bHIYOhZQbP1YTsWEbJ dfcoOK4SgSdgxDFyjHrO4CkWpt43oePyf9gYyYBLV4OJpnQliQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJoUqDSV9A/an5Ea1lLGavMKWx56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTk1MDQwNTYtNmNmZC0z OTA3LWI5NjYtZTg3ZjI5MGNkMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFXeBVzysO1UD+p9rhB8ttPuoocmPeu2iCVdyERG/NWgpV6BYrdm cVnIW4oZAmcBqDaNEBkq9f3jxxJAgoYjPsYyj4GPPT0+20kvVIc7CEQ2KVQhseyx 4jFPfyJYuhpHmAJn718TMzV0lL+BShivblipN3maHxHINiMFFavpxJDcnlqFrP9U xgGqFGmikhBdKbrITbo93Jiyfe2H07ISqCK7qRmy015VjtY2lP+wNqnP8WgWti2W DeYGSZq1yaqQ2CnU9UCUEH6WdgFBdZuQRb99luGpWkb16dHKhF8/qNDRGeUz2Pk+ kuuT/zvI3YnipRTlgDN693bSdNq9un/LkRw= -----END CERTIFICATE-----Generated at Tue Jul 1 02:39:44 2025 by rpki-client