$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa File: ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa (raw, json) Hash identifier: p2w4RZoYETuhy9N7lGnVplV1c2wE8ona6+is85KyzZ0= Subject key identifier: 9E:6F:AE:0C:69:08:C1:CA:12:D5:F5:B4:23:27:84:1B:6F:FD:88:DD Certificate issuer: /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Certificate serial: 010D0C9F43285849C61D43423A6C95F124563980 Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa Signing time: Wed 07 May 2025 12:02:50 +0000 ROA not before: Wed 07 May 2025 12:02:50 +0000 ROA not after: Tue 05 Aug 2025 12:02:50 +0000 asID: 14618 IP address blocks: 2620:117:5200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:1d:43:42:3a:6c:95:f1:24:56:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Validity Not Before: May 7 12:02:50 2025 GMT Not After : Aug 5 12:02:50 2025 GMT Subject: CN=8f8fa693-8816-45e0-aa34-5637778bdd41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:60:3a:85:b8:d6:3a:a8:08:6f:d8:30:82:8e: 90:12:75:79:41:a9:51:48:ce:e0:03:e2:76:7a:b5: 69:8e:e8:fc:e2:4f:bf:a4:d0:e7:b5:69:56:51:e4: da:83:c1:99:02:02:a9:3e:b7:a1:19:7e:d8:0d:19: 5b:36:3b:5e:23:b0:af:af:2d:e7:ea:92:3b:3d:43: be:42:2f:a7:aa:17:c4:5d:db:59:51:30:84:5d:bb: 28:9e:d0:a6:e0:c3:22:a1:a0:05:38:5b:63:4d:46: 8c:27:7b:e8:f5:99:60:2a:cc:9c:d2:3a:e6:11:54: 04:96:ad:96:d9:5a:5f:db:28:ee:46:23:4b:90:aa: b0:24:ff:6e:08:1f:1a:e7:16:b5:ee:b4:35:ef:7c: 96:32:c8:da:ea:a1:1d:17:ef:42:3e:35:1a:13:40: fa:79:d4:52:64:6b:38:eb:99:60:1b:4c:70:72:79: 62:fc:d6:0f:da:40:5e:bd:c3:3c:48:1e:b6:fa:1a: 4e:ba:04:76:90:a5:94:b7:15:51:5c:cb:77:1a:23: ce:c5:42:10:9f:97:d4:31:fa:e1:35:48:e9:a9:40: f2:27:84:7c:93:26:bc:6a:7d:b2:3d:30:3b:ce:55: 37:22:20:05:fa:3d:db:79:d1:7f:1c:20:c6:00:5a: 14:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6F:AE:0C:69:08:C1:CA:12:D5:F5:B4:23:27:84:1B:6F:FD:88:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl X509v3 Authority Key Identifier: keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:5200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ef:47:b3:bd:b0:d9:ca:86:0a:f1:a8:50:c1:3b:eb:c9:3c: 15:15:ea:02:30:0c:d2:0f:d6:23:d2:1f:d3:d9:0a:95:f2:11: 1e:9f:78:36:4d:ce:ed:cb:e1:14:a9:bf:6a:81:63:dc:83:3f: 10:5e:17:71:b9:9d:13:79:16:02:2b:98:85:f9:3e:8f:c2:11: 0b:0f:97:c6:41:7c:a1:ab:39:14:a9:7f:cd:4a:3c:5f:e9:bb: 0e:2b:b4:a0:8b:80:96:37:3c:d1:e4:83:e0:33:de:35:7e:81: 11:14:52:a6:8e:92:b1:02:52:bc:d8:e1:7c:6b:45:85:f1:34: dc:6a:18:3d:c1:b2:3f:6e:34:f1:19:ca:68:81:7a:5a:37:47: 2a:ae:ab:74:43:f8:b6:f0:ad:ce:e2:05:4c:8f:92:bc:f3:78: 50:b4:34:d5:54:1a:c7:32:a3:ac:98:a1:22:08:87:a2:73:d4: 5e:67:1a:b0:c8:11:9c:78:40:5c:be:fc:70:00:9a:22:15:d4: 84:03:cf:46:f4:83:52:47:c9:7b:cc:bd:ab:ae:cc:06:a6:26: 21:8c:19:44:4b:4c:91:20:cd:5d:70:a8:8a:dd:be:b8:21:2d: 3d:eb:0e:48:7a:7f:36:0c:20:eb:2e:a5:84:f4:d2:fe:ce:bb: 24:5a:fe:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnGHUNCOmyV8SRWOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU1MGY2NGMtNDYzMy00NWYwLWI4OTYtM2FjN2JkZjdl NWI4MB4XDTI1MDUwNzEyMDI1MFoXDTI1MDgwNTEyMDI1MFowLzEtMCsGA1UEAxMk OGY4ZmE2OTMtODgxNi00NWUwLWFhMzQtNTYzNzc3OGJkZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2A6hbjWOqgIb9gwgo6QEnV5QalRSM7gA+J2 erVpjuj84k+/pNDntWlWUeTag8GZAgKpPrehGX7YDRlbNjteI7Cvry3n6pI7PUO+ Qi+nqhfEXdtZUTCEXbsontCm4MMioaAFOFtjTUaMJ3vo9ZlgKsyc0jrmEVQElq2W 2Vpf2yjuRiNLkKqwJP9uCB8a5xa17rQ173yWMsja6qEdF+9CPjUaE0D6edRSZGs4 65lgG0xwcnli/NYP2kBevcM8SB62+hpOugR2kKWUtxVRXMt3GiPOxUIQn5fUMfrh NUjpqUDyJ4R8kya8an2yPTA7zlU3IiAF+j3bedF/HCDGAFoUyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ5vrgxpCMHKEtX1tCMnhBtv/YjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUw ZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3YmRmN2U1YjgvY2EzZTg5OWQtZTcyNC0z NWU4LThiNDMtY2JkYmU3YzkyZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU1MGY2NGMtNDYzMy00NWYwLWI4 OTYtM2FjN2JkZjdlNWI4L2E1NTBmNjRjLTQ2MzMtNDVmMC1iODk2LTNhYzdiZGY3 ZTViOC5jcmwwHwYDVR0jBBgwFoAU0bK/CQCZzu0rGnHmo5haYV5HPtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUwZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3 YmRmN2U1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABF1Iw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGu9Hs72w2cqGCvGoUME768k8FRXqAjAM0g/WI9If09kKlfIRHp94 Nk3O7cvhFKm/aoFj3IM/EF4XcbmdE3kWAiuYhfk+j8IRCw+XxkF8oas5FKl/zUo8 X+m7Diu0oIuAljc80eSD4DPeNX6BERRSpo6SsQJSvNjhfGtFhfE03GoYPcGyP240 8RnKaIF6WjdHKq6rdEP4tvCtzuIFTI+SvPN4ULQ01VQaxzKjrJihIgiHonPUXmca sMgRnHhAXL78cACaIhXUhAPPRvSDUkfJe8y9q67MBqYmIYwZREtMkSDNXXCoit2+ uCEtPesOSHp/Ngwg6y6lhPTS/s67JFr+OA== -----END CERTIFICATE-----Generated at Tue May 13 06:26:10 2025 by rpki-client