$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e/57841ffc-7b85-3795-8174-1c0512029396.roa File: 57841ffc-7b85-3795-8174-1c0512029396.roa (raw, json) Hash identifier: K1gKgB3+EC6CXfdKXK26VzuVqF+OQ/Ud1tVE1VnV/G8= Subject key identifier: D6:36:C6:F5:B7:C9:33:35:5C:98:08:4B:2B:12:86:45:B8:C7:B5:F5 Certificate issuer: /CN=fb30680d-be2d-4b84-93f9-e8999234172e Certificate serial: 010D0C9F43285849C4D4BB246F96A437D09F2900 Authority key identifier: CE:C4:6D:5C:E2:31:0B:5C:D0:8E:87:86:68:88:F0:5A:73:EC:B2:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e/57841ffc-7b85-3795-8174-1c0512029396.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 6327 IP address blocks: 2620:8::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e/fb30680d-be2d-4b84-93f9-e8999234172e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e/fb30680d-be2d-4b84-93f9-e8999234172e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:bb:24:6f:96:a4:37:d0:9f:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb30680d-be2d-4b84-93f9-e8999234172e Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=acac8e5f-bc36-43f3-9208-83092d11951f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:6e:e4:2b:b5:46:78:ca:32:5d:a2:bd:4b: 8e:43:9d:85:f1:4d:d8:7b:43:53:3a:1e:b7:f3:97: 3c:ff:cc:5c:06:48:2c:c0:e6:df:ab:38:7b:ca:66: db:a3:92:1d:24:4f:80:79:88:2c:a1:5d:e3:62:41: ed:09:4c:21:a6:95:ff:8f:5d:0b:a2:d3:1d:5c:aa: d0:e5:fc:ac:3f:0e:21:4a:7a:ac:e5:81:f3:cc:bb: 09:2a:aa:12:8f:4d:b8:1f:24:cd:b0:3f:44:f8:5e: ab:f8:9e:9e:e5:a6:be:bd:4c:02:fa:e2:58:f5:fc: a2:75:ee:24:6d:9b:7e:c0:d3:10:4c:ef:1f:27:fe: 98:00:6e:98:44:9a:a0:71:23:ca:c9:cf:5b:74:47: c8:f5:52:d8:de:dc:1e:35:07:35:f8:53:8d:27:ef: 1f:b6:c8:01:11:86:de:f5:b8:50:76:fa:c0:52:40: 73:0f:bd:bb:99:35:5b:85:c2:78:13:b6:52:c9:b9: bd:24:60:e9:4c:e8:c2:07:63:ae:34:70:a2:63:5e: 59:c1:b3:75:2e:ab:03:e7:77:43:49:25:c2:2b:04: ec:55:03:3e:56:8e:ec:1c:96:2f:91:a3:37:9f:00: cd:e9:9c:d3:6a:ff:01:0d:71:43:49:19:45:6f:f3: 77:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:36:C6:F5:B7:C9:33:35:5C:98:08:4B:2B:12:86:45:B8:C7:B5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e/57841ffc-7b85-3795-8174-1c0512029396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e/fb30680d-be2d-4b84-93f9-e8999234172e.crl X509v3 Authority Key Identifier: keyid:CE:C4:6D:5C:E2:31:0B:5C:D0:8E:87:86:68:88:F0:5A:73:EC:B2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e.cer sbgp-ipAddrBlock: critical IPv6: 2620:8::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:55:f1:b3:f6:4b:e4:09:bf:b0:65:9f:6b:a9:c6:94:f5:b9: 9e:d9:ee:c1:f1:e6:b1:5b:9c:6f:73:0c:0b:0c:70:25:9e:3a: 15:12:c7:dc:b6:95:c2:da:36:9f:ef:eb:30:dc:2c:fa:f6:ac: a0:3a:c7:bf:79:f3:4f:c8:c5:75:d6:35:81:5a:63:2f:b7:66: c7:56:69:ac:02:62:8f:5d:f7:3d:00:5b:cb:7f:b5:90:55:ef: 5e:11:84:e6:b0:e4:eb:e7:74:32:c8:c8:fe:8e:d2:52:ae:0b: fd:14:fa:07:ba:97:20:39:13:ba:f9:2a:08:db:a4:53:ab:da: 62:db:28:9d:22:a9:8e:c9:72:ba:83:cc:fc:7e:80:4c:a6:7e: 24:18:3e:fb:d1:41:01:11:19:64:36:bf:93:5d:a7:48:4e:08: 68:ee:64:af:6e:d9:37:e2:dc:a1:97:ec:00:b0:25:81:42:e0: ec:de:e1:61:35:fc:ff:58:1d:05:de:5e:88:4c:c8:bb:0a:01: af:2c:c3:60:f2:1d:db:da:ab:59:48:bd:b5:6b:ce:37:f1:0b: 11:b2:ee:62:4d:06:d9:2b:81:32:1f:15:01:05:83:eb:f4:58: c2:cf:3b:1b:a9:6f:4f:8a:1c:9e:9a:77:f8:89:7a:c2:f2:23: 7e:68:b1:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnE1Lskb5akN9CfKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmIzMDY4MGQtYmUyZC00Yjg0LTkzZjktZTg5OTkyMzQx NzJlMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk YWNhYzhlNWYtYmMzNi00M2YzLTkyMDgtODMwOTJkMTE5NTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5xu5Cu1RnjKMl2ivUuOQ52F8U3Ye0NTOh63 85c8/8xcBkgswObfqzh7ymbbo5IdJE+AeYgsoV3jYkHtCUwhppX/j10LotMdXKrQ 5fysPw4hSnqs5YHzzLsJKqoSj024HyTNsD9E+F6r+J6e5aa+vUwC+uJY9fyide4k bZt+wNMQTO8fJ/6YAG6YRJqgcSPKyc9bdEfI9VLY3tweNQc1+FONJ+8ftsgBEYbe 9bhQdvrAUkBzD727mTVbhcJ4E7ZSybm9JGDpTOjCB2OuNHCiY15ZwbN1LqsD53dD SSXCKwTsVQM+Vo7sHJYvkaM3nwDN6ZzTav8BDXFDSRlFb/N3SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNY2xvW3yTM1XJgISysShkW4x7X1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mYjMw NjgwZC1iZTJkLTRiODQtOTNmOS1lODk5OTIzNDE3MmUvNTc4NDFmZmMtN2I4NS0z Nzk1LTgxNzQtMWMwNTEyMDI5Mzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmIzMDY4MGQtYmUyZC00Yjg0LTkz ZjktZTg5OTkyMzQxNzJlL2ZiMzA2ODBkLWJlMmQtNGI4NC05M2Y5LWU4OTk5MjM0 MTcyZS5jcmwwHwYDVR0jBBgwFoAUzsRtXOIxC1zQjoeGaIjwWnPssl0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mYjMwNjgwZC1iZTJkLTRiODQtOTNmOS1lODk5 OTIzNDE3MmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJiAACAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHRV8bP2S+QJv7Bln2upxpT1uZ7Z7sHx5rFbnG9zDAsMcCWeOhUS x9y2lcLaNp/v6zDcLPr2rKA6x79580/IxXXWNYFaYy+3ZsdWaawCYo9d9z0AW8t/ tZBV714RhOaw5OvndDLIyP6O0lKuC/0U+ge6lyA5E7r5KgjbpFOr2mLbKJ0iqY7J crqDzPx+gEymfiQYPvvRQQERGWQ2v5Ndp0hOCGjuZK9u2Tfi3KGX7ACwJYFC4Oze 4WE1/P9YHQXeXohMyLsKAa8sw2DyHdvaq1lIvbVrzjfxCxGy7mJNBtkrgTIfFQEF g+v0WMLPOxupb0+KHJ6ad/iJesLyI35osUM= -----END CERTIFICATE-----Generated at Mon May 12 12:45:36 2025 by rpki-client