$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/0ef2b5ae-7ec0-394e-8b1f-d0fc47784b1b.roa File: 0ef2b5ae-7ec0-394e-8b1f-d0fc47784b1b.roa (raw, json) Hash identifier: kbgJmlZx8PLe0zU1lIGiRJBQzH84EtO/IgPq0kxpAsI= Subject key identifier: E2:20:B9:4C:05:18:63:AB:C8:81:11:5F:94:A5:17:9B:42:A9:D6:3D Certificate issuer: /CN=72de343e-ded3-43ae-b207-e492c0f88566 Certificate serial: 010D0C9F43285849CBCF957F038A7CDBBD069E00 Authority key identifier: D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/0ef2b5ae-7ec0-394e-8b1f-d0fc47784b1b.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 22803 IP address blocks: 2620:33::/48 maxlen: 48 2620:1dc::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:95:7f:03:8a:7c:db:bd:06:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72de343e-ded3-43ae-b207-e492c0f88566 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=89d091f8-1909-4897-954f-5d9313f5021f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8d:c4:bf:7c:5f:3a:8c:7f:bd:96:51:fb:39: 3a:57:b1:e3:cf:e3:cd:84:7b:92:29:8e:68:e5:82: 59:ba:ff:53:6b:ed:cd:f2:9a:20:02:c0:f3:ba:d5: 75:94:9f:af:87:fa:5c:62:ae:02:53:e5:30:bc:3b: 2a:10:47:c4:2e:74:9c:9c:35:09:95:79:a3:c1:d4: 2a:a6:bd:99:fd:29:e7:fa:4f:73:45:73:06:b2:86: d5:ea:1f:7e:db:a7:9a:93:2d:d7:72:9a:28:1e:d9: cb:d0:c9:e1:3e:d3:fc:86:62:6d:1d:27:bf:07:ad: ea:d6:4a:59:ba:55:51:54:4b:25:ee:22:95:10:40: 2f:97:c9:12:da:4c:c9:5b:cc:a3:3d:d0:e4:f3:95: a5:61:51:f6:65:f0:60:2f:31:f3:6f:c9:5d:d5:fb: aa:42:31:5e:9f:f8:fa:dd:3c:ed:02:53:f5:eb:6b: 65:52:90:b7:cf:17:75:2b:d7:6a:81:96:c6:6b:03: eb:2d:51:c0:e1:81:b6:32:32:d4:fd:6d:8a:87:98: da:35:f6:f8:c9:38:d8:8a:b5:b8:bd:57:3b:b3:a1: 46:52:48:a9:98:4b:5e:f3:f8:79:98:fb:8b:a8:2f: 20:1a:3f:74:ad:79:5c:b1:86:44:dd:80:4b:e4:90: b3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:20:B9:4C:05:18:63:AB:C8:81:11:5F:94:A5:17:9B:42:A9:D6:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/0ef2b5ae-7ec0-394e-8b1f-d0fc47784b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.crl X509v3 Authority Key Identifier: keyid:D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer sbgp-ipAddrBlock: critical IPv6: 2620:33::/48 2620:1dc::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:64:6f:35:ef:87:fe:73:44:03:a4:44:90:8e:99:1d:ca:4d: d1:50:17:cc:02:25:ec:ab:cd:74:b0:ba:ad:4b:1f:45:d6:16: 45:38:1e:7b:15:a0:20:db:b6:59:ea:53:c2:9c:80:cc:30:49: c2:f2:ba:30:9a:90:15:c8:43:e0:86:57:4f:02:85:b7:37:f6: 33:0e:24:1f:0a:1a:62:df:69:5f:3a:13:a4:a5:e6:19:fa:16: 08:8d:ec:16:51:b1:24:db:48:81:8a:44:56:11:1e:32:81:03: fd:d7:d2:aa:22:7c:53:e4:e7:fd:bb:e6:59:47:fe:58:3d:93: 7c:55:e8:7f:db:d9:e4:f5:f0:64:54:6c:f1:fb:34:9c:ee:1f: 69:3a:a8:41:a6:fc:b1:7d:54:b4:81:f8:2f:d3:a1:19:2f:77: 59:9b:14:dc:61:78:0d:df:2d:96:c3:e0:89:ed:e2:36:b1:71: 32:f4:7e:b0:20:c1:4d:31:9c:94:fc:1e:a3:dd:db:d6:34:ea: 7d:f6:16:12:49:ca:a9:1c:05:8c:22:d4:19:b2:06:0b:86:5f: 27:da:55:37:a5:4f:ce:76:e9:7d:2d:d8:f8:e1:26:4e:24:60: 48:33:35:32:f4:88:63:6f:34:8a:f9:32:1d:46:87:a0:04:62: 15:51:ec:b4 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWEnLz5V/A4p8270GngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJkZTM0M2UtZGVkMy00M2FlLWIyMDctZTQ5MmMwZjg4 NTY2MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ODlkMDkxZjgtMTkwOS00ODk3LTk1NGYtNWQ5MzEzZjUwMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI3Ev3xfOox/vZZR+zk6V7Hjz+PNhHuSKY5o 5YJZuv9Ta+3N8pogAsDzutV1lJ+vh/pcYq4CU+UwvDsqEEfELnScnDUJlXmjwdQq pr2Z/Snn+k9zRXMGsobV6h9+26eaky3XcpooHtnL0MnhPtP8hmJtHSe/B63q1kpZ ulVRVEsl7iKVEEAvl8kS2kzJW8yjPdDk85WlYVH2ZfBgLzHzb8ld1fuqQjFen/j6 3TztAlP162tlUpC3zxd1K9dqgZbGawPrLVHA4YG2MjLU/W2Kh5jaNfb4yTjYirW4 vVc7s6FGUkipmEte8/h5mPuLqC8gGj90rXlcsYZE3YBL5JCzRwIDAQABo4IDYDCC A1wwHQYDVR0OBBYEFOIguUwFGGOryIERX5SlF5tCqdY9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MmRl MzQzZS1kZWQzLTQzYWUtYjIwNy1lNDkyYzBmODg1NjYvMGVmMmI1YWUtN2VjMC0z OTRlLThiMWYtZDBmYzQ3Nzg0YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzJkZTM0M2UtZGVkMy00M2FlLWIy MDctZTQ5MmMwZjg4NTY2LzcyZGUzNDNlLWRlZDMtNDNhZS1iMjA3LWU0OTJjMGY4 ODU2Ni5jcmwwHwYDVR0jBBgwFoAU183wKI29M1FMhbJfuD5KCaWPPPEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MmRlMzQzZS1kZWQzLTQzYWUtYjIwNy1lNDky YzBmODg1NjYuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAJiAAMwAA AwYEJiAB3AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEABmRvNe+H/nNEA6REkI6ZHcpN0VAXzAIl7KvNdLC6 rUsfRdYWRTgeexWgINu2WepTwpyAzDBJwvK6MJqQFchD4IZXTwKFtzf2Mw4kHwoa Yt9pXzoTpKXmGfoWCI3sFlGxJNtIgYpEVhEeMoED/dfSqiJ8U+Tn/bvmWUf+WD2T fFXof9vZ5PXwZFRs8fs0nO4faTqoQab8sX1UtIH4L9OhGS93WZsU3GF4Dd8tlsPg ie3iNrFxMvR+sCDBTTGclPweo93b1jTqffYWEknKqRwFjCLUGbIGC4ZfJ9pVN6VP znbpfS3Y+OEmTiRgSDM1MvSIY280ivkyHUaHoARiFVHstA== -----END CERTIFICATE-----Generated at Mon May 12 11:24:35 2025 by rpki-client