$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc0da51e-bddf-385a-bee9-51758d38ce9e.roa File: dc0da51e-bddf-385a-bee9-51758d38ce9e.roa (raw, json) Hash identifier: KCJ4GP/2D5W7u3t5TmXvRLREgnnNyg69sa1xYa9w5MM= Subject key identifier: 5D:82:9F:8C:F2:E4:F7:88:D7:3D:97:05:77:DF:AB:E3:A2:86:B9:42 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584955295812915D41467B3E7B80 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc0da51e-bddf-385a-bee9-51758d38ce9e.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 40627 IP address blocks: 2620:77::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:58:12:91:5d:41:46:7b:3e:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=7c3db057-c324-45c5-9a76-d88cf1e2cdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:b4:0d:a2:9b:ab:34:33:c5:96:de:dd:52: 26:87:1a:f0:bd:87:d1:e3:6a:7a:ba:8d:2e:a8:95: 82:ec:cb:8b:55:4c:c5:bb:aa:b1:91:ed:42:2e:51: 8b:66:14:6c:f4:5b:c5:c0:a5:14:58:c8:0e:27:79: 13:4e:96:dc:39:95:64:a7:96:71:c5:3e:96:9f:5a: d7:86:9d:32:f1:9d:b9:b8:e7:5b:9a:dd:47:e2:5f: 1a:bc:48:ac:1f:4f:8c:7c:a0:6f:d7:e8:65:4b:d7: b2:cb:20:b3:7e:9d:37:7b:2f:e8:bf:93:44:8d:b8: 41:48:6c:01:4e:bb:46:29:d9:dc:b8:43:0e:c2:bc: 00:3a:57:8e:52:12:84:52:4b:a7:bc:30:57:ea:22: 8c:bb:0d:70:7e:61:a3:21:9e:af:b7:ae:ed:f8:8d: 33:1e:2b:09:d5:43:aa:d2:4d:5b:e5:af:dd:b4:9c: 3b:ac:13:76:48:90:5a:63:b3:77:b7:ad:81:7f:5f: b8:3e:8a:84:7d:72:63:2e:94:ee:85:d4:90:5e:4a: db:a4:76:ca:c8:58:bc:71:ea:2d:21:90:98:7c:64: 9b:6e:a3:f7:05:42:a7:69:26:bd:e2:3c:ad:dc:9c: db:18:d7:f2:1e:3b:0c:e6:8c:fd:3e:e4:f1:86:3e: 3c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:82:9F:8C:F2:E4:F7:88:D7:3D:97:05:77:DF:AB:E3:A2:86:B9:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc0da51e-bddf-385a-bee9-51758d38ce9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv6: 2620:77::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b2:7e:bd:fc:aa:ea:87:65:4d:12:63:41:69:2b:31:ab:0a: 8d:f1:72:68:dc:00:73:c2:8a:75:b7:12:9c:fc:49:8e:54:00: ab:62:eb:58:d7:25:69:bb:f6:ec:37:a5:fb:43:a9:09:88:7c: c4:69:f2:17:cc:cd:dd:bf:61:ea:a8:0a:19:ec:c8:77:15:d1: e6:2e:fc:d9:0b:6b:47:36:5f:17:83:37:f0:a2:51:21:f1:74: fb:f5:c4:67:c4:b8:a5:d2:3b:f2:9f:bc:7e:26:f3:4d:3e:6d: fc:ee:22:95:3f:c1:3a:01:af:38:59:6c:02:eb:f4:b8:0e:03: be:38:24:0e:8f:8d:a7:1a:e5:10:21:9a:72:2a:e9:77:d0:7e: ee:23:57:a6:39:83:ff:45:be:11:32:83:61:aa:54:4a:ee:8e: c3:ce:ba:77:a0:21:bc:84:cd:62:12:c3:47:e3:6b:92:c4:59: 32:4b:2b:2e:bc:75:09:eb:4b:90:15:88:93:1e:b5:7d:a0:3d: d0:bf:f3:50:62:30:10:bd:26:1b:17:f2:a7:ca:84:d9:74:9e: da:45:4a:01:3e:3f:0a:02:d4:f2:b7:74:ca:b0:05:28:f5:6a: 33:e3:bd:14:30:d6:c3:4b:fa:3d:70:11:b3:9e:15:8f:cc:f6: 52:22:04:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElVKVgSkV1BRns+e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk N2MzZGIwNTctYzMyNC00NWM1LTlhNzYtZDg4Y2YxZTJjZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBa0DaKbqzQzxZbe3VImhxrwvYfR42p6uo0u qJWC7MuLVUzFu6qxke1CLlGLZhRs9FvFwKUUWMgOJ3kTTpbcOZVkp5ZxxT6Wn1rX hp0y8Z25uOdbmt1H4l8avEisH0+MfKBv1+hlS9eyyyCzfp03ey/ov5NEjbhBSGwB TrtGKdncuEMOwrwAOleOUhKEUkunvDBX6iKMuw1wfmGjIZ6vt67t+I0zHisJ1UOq 0k1b5a/dtJw7rBN2SJBaY7N3t62Bf1+4PoqEfXJjLpTuhdSQXkrbpHbKyFi8ceot IZCYfGSbbqP3BUKnaSa94jyt3JzbGNfyHjsM5oz9PuTxhj48WQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF2Cn4zy5PeI1z2XBXffq+OihrlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvZGMwZGE1MWUtYmRkZi0z ODVhLWJlZTktNTE3NThkMzhjZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADWyfr38quqHZU0SY0FpKzGrCo3xcmjcAHPCinW3Epz8SY5UAKti 61jXJWm79uw3pftDqQmIfMRp8hfMzd2/YeqoChnsyHcV0eYu/NkLa0c2XxeDN/Ci USHxdPv1xGfEuKXSO/KfvH4m800+bfzuIpU/wToBrzhZbALr9LgOA744JA6Pjaca 5RAhmnIq6XfQfu4jV6Y5g/9FvhEyg2GqVErujsPOunegIbyEzWISw0fja5LEWTJL Ky68dQnrS5AViJMetX2gPdC/81BiMBC9JhsX8qfKhNl0ntpFSgE+PwoC1PK3dMqw BSj1ajPjvRQw1sNL+j1wEbOeFY/M9lIiBG4= -----END CERTIFICATE-----Generated at Sat Apr 5 06:31:20 2025 by rpki-client