$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa File: 404125c1-db53-3460-abc1-3e2005096ff7.roa (raw, json) Hash identifier: 65bMIzQQExtQEj15NhNFs8wppZdc6WtKrozFg4G0zVc= Subject key identifier: 30:1F:CD:7C:83:9F:05:96:DA:63:AB:7C:1B:7B:9A:DF:05:02:CB:DB Certificate issuer: /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Certificate serial: 010D0C9F43285849C61CF28617DF946B71C17500 Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa Signing time: Wed 07 May 2025 12:02:12 +0000 ROA not before: Wed 07 May 2025 12:02:12 +0000 ROA not after: Tue 05 Aug 2025 12:02:12 +0000 asID: 16509 IP address blocks: 2620:117:5200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:1c:f2:86:17:df:94:6b:71:c1:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Validity Not Before: May 7 12:02:12 2025 GMT Not After : Aug 5 12:02:12 2025 GMT Subject: CN=d2ac3b7a-08a7-4a74-94de-e2519fd905a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:05:b2:57:0a:a7:00:66:9b:50:bf:ad:49:44: b0:80:36:d4:bc:81:42:f4:48:6a:0d:6f:6d:f7:a8: 81:4a:fb:db:18:61:55:b4:13:3e:5a:36:49:2d:7b: 51:4a:3c:5d:bc:fd:8b:e9:0d:bc:34:51:a3:b2:ba: 86:ee:11:28:3a:c8:ec:e7:9e:85:7c:f8:77:e2:1f: aa:60:f5:39:51:77:c7:55:be:f7:2c:29:fc:2e:9c: 98:67:47:76:97:35:42:2c:0a:8c:54:a7:6d:a7:27: 65:45:f4:1c:6b:e6:d5:ee:88:9c:81:b4:45:b8:ec: 40:9c:f1:77:37:d9:ec:3f:b3:d3:6a:52:72:09:4b: 5a:53:b9:e8:e5:d5:5c:81:87:41:61:2e:18:3f:62: 31:f1:9e:f2:b0:2a:e1:36:d3:14:eb:84:7d:1a:8c: 24:13:63:cc:98:4f:5d:19:ca:37:8e:40:5c:2f:3e: 68:4a:97:bc:d5:14:6b:4f:1b:b8:60:ac:39:24:e6: 0e:82:61:97:01:f1:53:cd:c4:89:82:15:fe:b5:97: 13:0b:88:04:af:63:ad:e1:a5:04:cb:c4:8e:14:59: 8b:f0:23:33:bb:c5:04:02:99:7c:24:55:96:6f:5b: 49:a7:9a:88:5a:3a:70:65:d6:fc:7d:89:4d:46:e0: 8d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1F:CD:7C:83:9F:05:96:DA:63:AB:7C:1B:7B:9A:DF:05:02:CB:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl X509v3 Authority Key Identifier: keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:5200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6e:b6:ad:3f:04:8a:e1:20:ed:86:64:22:51:d6:df:91:3c: 02:30:4c:05:21:74:0d:c4:f7:39:a6:97:7f:a8:76:0e:93:0d: aa:0e:ae:3e:51:14:29:72:29:f9:f2:fd:9a:1d:dd:09:3c:dc: e3:f8:04:82:be:a8:2d:be:12:d2:36:2b:eb:c4:12:a8:4d:45: c3:e5:7d:0c:e1:da:24:d8:70:a3:da:07:b5:50:0c:88:7f:b5: e2:a3:83:03:2d:b7:52:b3:2e:45:9b:ec:5e:87:d6:58:af:ad: fe:44:68:79:37:bc:c6:9b:5d:5c:e4:39:7e:e0:20:f5:ab:d8: 2d:9c:be:6c:4c:06:33:92:7e:e2:27:19:90:f0:b5:30:86:5f: 9c:67:40:c7:5c:28:cf:5e:4b:d4:40:d6:16:39:33:c5:9a:7c: db:11:38:f4:3c:c4:91:b1:ff:e6:08:db:5e:4d:fc:6b:9d:0b: 08:cb:88:27:30:bf:2d:0d:f6:bd:56:89:11:94:c6:f5:03:e5: 2a:f9:ca:48:c0:fe:83:af:76:b6:9c:5d:5d:21:e0:df:26:22: 24:91:86:52:99:86:b8:5c:79:cd:da:1c:2c:ff:65:db:40:a5: a1:ba:f5:d6:a9:b3:3a:85:ea:cc:4e:84:28:cc:42:9a:bd:11: 44:7e:cd:ba -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnGHPKGF9+Ua3HBdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU1MGY2NGMtNDYzMy00NWYwLWI4OTYtM2FjN2JkZjdl NWI4MB4XDTI1MDUwNzEyMDIxMloXDTI1MDgwNTEyMDIxMlowLzEtMCsGA1UEAxMk ZDJhYzNiN2EtMDhhNy00YTc0LTk0ZGUtZTI1MTlmZDkwNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgWyVwqnAGabUL+tSUSwgDbUvIFC9EhqDW9t 96iBSvvbGGFVtBM+WjZJLXtRSjxdvP2L6Q28NFGjsrqG7hEoOsjs556FfPh34h+q YPU5UXfHVb73LCn8LpyYZ0d2lzVCLAqMVKdtpydlRfQca+bV7oicgbRFuOxAnPF3 N9nsP7PTalJyCUtaU7no5dVcgYdBYS4YP2Ix8Z7ysCrhNtMU64R9GowkE2PMmE9d Gco3jkBcLz5oSpe81RRrTxu4YKw5JOYOgmGXAfFTzcSJghX+tZcTC4gEr2Ot4aUE y8SOFFmL8CMzu8UEApl8JFWWb1tJp5qIWjpwZdb8fYlNRuCNeQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDAfzXyDnwWW2mOrfBt7mt8FAsvbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUw ZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3YmRmN2U1YjgvNDA0MTI1YzEtZGI1My0z NDYwLWFiYzEtM2UyMDA1MDk2ZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU1MGY2NGMtNDYzMy00NWYwLWI4 OTYtM2FjN2JkZjdlNWI4L2E1NTBmNjRjLTQ2MzMtNDVmMC1iODk2LTNhYzdiZGY3 ZTViOC5jcmwwHwYDVR0jBBgwFoAU0bK/CQCZzu0rGnHmo5haYV5HPtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUwZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3 YmRmN2U1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABF1Iw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANm62rT8EiuEg7YZkIlHW35E8AjBMBSF0DcT3OaaXf6h2DpMNqg6u PlEUKXIp+fL9mh3dCTzc4/gEgr6oLb4S0jYr68QSqE1Fw+V9DOHaJNhwo9oHtVAM iH+14qODAy23UrMuRZvsXofWWK+t/kRoeTe8xptdXOQ5fuAg9avYLZy+bEwGM5J+ 4icZkPC1MIZfnGdAx1woz15L1EDWFjkzxZp82xE49DzEkbH/5gjbXk38a50LCMuI JzC/LQ32vVaJEZTG9QPlKvnKSMD+g692tpxdXSHg3yYiJJGGUpmGuFx5zdocLP9l 20Clobr11qmzOoXqzE6EKMxCmr0RRH7Nug== -----END CERTIFICATE-----Generated at Mon May 12 23:49:11 2025 by rpki-client