$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa File: 870b3555-4770-357a-83a4-150807097e93.roa (raw, json) Hash identifier: GQXriXaVvwhwWP8vikEyfCcadXH6vXESaXFDRu3tpQo= Subject key identifier: AC:F3:A8:B9:98:17:BB:8E:36:E8:80:B3:F7:1E:39:A5:D2:9D:2D:ED Certificate issuer: /CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Certificate serial: 010D0C9F43285849CE9A51DAA168564AB6953B80 Authority key identifier: B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 6491 IP address blocks: 2620:67:a000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:51:da:a1:68:56:4a:b6:95:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=351f3113-6016-447c-8033-ef293550bd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2e:36:54:ab:dd:ac:f6:ff:a0:92:61:58:e6: 58:88:74:4e:da:aa:a3:8b:a5:cc:4d:ce:3a:49:9f: ff:6f:9d:c2:d1:fc:1d:0d:c7:31:93:bb:6c:cd:7e: 41:72:05:c2:ef:8a:86:44:5f:03:5a:dc:1a:9d:6d: cb:79:72:c8:eb:17:ef:d4:b9:ff:39:1c:f6:a9:50: 75:54:1e:7f:08:6c:58:98:01:74:08:8f:eb:07:5f: bb:3e:c8:3b:4a:31:b5:ba:3a:14:c8:46:c0:93:b9: b5:80:5e:d6:ed:07:aa:eb:92:72:7a:40:a7:75:b7: 87:f2:57:09:39:84:21:0d:39:7a:a4:07:0d:5a:90: ac:9e:0c:24:bb:f1:45:11:85:2c:76:b1:cc:1f:9d: 42:62:71:46:3c:0b:00:6e:f9:4e:37:96:40:f9:38: e5:82:38:ce:67:ff:74:48:61:51:35:ff:c4:52:d8: 26:83:c1:00:a1:f0:06:65:c6:1d:dc:11:69:26:4d: 14:24:f6:78:e0:4d:33:96:5e:8f:8e:75:6d:d6:6e: 8f:d6:52:cd:8f:1a:b4:e7:e0:c1:39:75:3b:55:e5: fc:f6:7d:8c:c3:a6:60:03:46:e3:8c:96:14:0b:4e: 49:87:a1:4a:6a:38:4e:f9:54:5d:78:5d:24:5d:dd: 52:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F3:A8:B9:98:17:BB:8E:36:E8:80:B3:F7:1E:39:A5:D2:9D:2D:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl X509v3 Authority Key Identifier: keyid:B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer sbgp-ipAddrBlock: critical IPv6: 2620:67:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c7:12:67:e9:4a:c8:60:b2:1f:11:38:82:da:aa:dc:09:19: 49:15:f2:91:be:9d:02:d5:c1:3c:c8:87:ef:cc:38:43:38:2e: 22:e4:f4:1d:dc:4a:0d:e6:4c:44:00:84:04:66:ce:08:35:1e: 71:a5:ce:d6:0a:d0:78:df:d0:7f:96:59:30:b5:5c:1c:8f:b7: 2d:99:af:2f:88:af:1a:0e:84:ce:66:48:c7:35:fb:38:db:19: aa:f8:97:2a:f8:98:f5:95:f6:31:46:c6:d4:12:c3:74:78:f7: 72:f2:61:af:03:cd:4a:fb:be:a2:17:3e:3a:63:ab:5e:9a:e9: a6:24:03:00:2d:83:99:69:5b:9e:b8:4d:75:4b:9a:9c:db:57: b9:f8:53:b3:cf:d3:80:39:6a:ff:b4:bf:62:55:89:ff:cc:a2: 8d:63:d0:d3:46:4a:bd:14:67:05:68:09:eb:a2:da:b6:a2:c5: 27:aa:bd:cb:95:59:e8:d5:d5:1b:06:d0:3f:51:e6:44:7f:82: f6:84:b9:ab:da:f7:ff:41:1e:be:dc:1c:a2:5e:de:7c:56:66: 88:78:06:76:55:35:80:69:8d:bf:af:c5:45:0e:69:ac:66:46: 4a:f6:e7:ef:0c:fa:04:32:67:70:9b:2f:ee:1d:37:f4:5d:de: 8d:da:00:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmlHaoWhWSraVO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiZGQ3MWMtYzMwZS00NGFjLTkwZjgtYmE0NDMxMzRk OGRkMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MzUxZjMxMTMtNjAxNi00NDdjLTgwMzMtZWYyOTM1NTBiZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S42VKvdrPb/oJJhWOZYiHRO2qqji6XMTc46 SZ//b53C0fwdDccxk7tszX5BcgXC74qGRF8DWtwanW3LeXLI6xfv1Ln/ORz2qVB1 VB5/CGxYmAF0CI/rB1+7Psg7SjG1ujoUyEbAk7m1gF7W7Qeq65JyekCndbeH8lcJ OYQhDTl6pAcNWpCsngwku/FFEYUsdrHMH51CYnFGPAsAbvlON5ZA+TjlgjjOZ/90 SGFRNf/EUtgmg8EAofAGZcYd3BFpJk0UJPZ44E0zll6PjnVt1m6P1lLNjxq05+DB OXU7VeX89n2Mw6ZgA0bjjJYUC05Jh6FKajhO+VRdeF0kXd1SYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKzzqLmYF7uONuiAs/ceOaXSnS3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJk ZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0MzEzNGQ4ZGQvODcwYjM1NTUtNDc3MC0z NTdhLTgzYTQtMTUwODA3MDk3ZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2JiZGQ3MWMtYzMwZS00NGFjLTkw ZjgtYmE0NDMxMzRkOGRkLzNiYmRkNzFjLWMzMGUtNDRhYy05MGY4LWJhNDQzMTM0 ZDhkZC5jcmwwHwYDVR0jBBgwFoAUt/Qb+wOj1yED+K4IbV52vOa77HMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJkZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0 MzEzNGQ4ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAZ6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADPHEmfpSshgsh8ROILaqtwJGUkV8pG+nQLVwTzIh+/MOEM4LiLk 9B3cSg3mTEQAhARmzgg1HnGlztYK0Hjf0H+WWTC1XByPty2Zry+IrxoOhM5mSMc1 +zjbGar4lyr4mPWV9jFGxtQSw3R493LyYa8DzUr7vqIXPjpjq16a6aYkAwAtg5lp W564TXVLmpzbV7n4U7PP04A5av+0v2JVif/Moo1j0NNGSr0UZwVoCeui2raixSeq vcuVWejV1RsG0D9R5kR/gvaEuava9/9BHr7cHKJe3nxWZoh4BnZVNYBpjb+vxUUO aaxmRkr25+8M+gQyZ3CbL+4dN/Rd3o3aANY= -----END CERTIFICATE-----Generated at Sat May 10 22:15:16 2025 by rpki-client