$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa File: cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa (raw, json) Hash identifier: 9S6psAi8CRKK/XowYLzlJsIxavWCzoTOvRnWAhN3DBE= Subject key identifier: 85:2F:A2:8E:C2:BD:27:BF:E3:78:9C:02:E7:87:1A:8B:C5:67:1C:AF Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F432858495ABEB93348187211141DC940 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 177 IP address blocks: 2001:48a8:68fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:b9:33:48:18:72:11:14:1d:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=572c15a3-8707-4558-b804-7bdfb934cfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3c:ce:24:0c:ed:a1:61:81:36:00:3a:f5:a4: ad:7c:37:4a:ad:f5:9b:2d:e8:f6:8a:86:91:5c:bd: f4:dc:9b:06:95:23:fa:ca:88:7f:4c:2b:17:e2:f2: ad:dd:4f:a3:a9:57:f3:cf:c3:d2:3a:76:60:aa:30: 77:7d:c4:37:c1:c3:79:40:b4:a4:7b:43:96:ab:51: 00:a9:e2:55:c8:d8:3c:7e:46:18:6b:ef:da:11:88: cb:bf:80:31:50:ca:8f:71:0a:bd:45:52:aa:35:23: fa:73:0a:2e:59:5a:ad:76:de:f2:ab:4b:b8:88:f3: 56:10:6a:7e:3a:c7:59:a4:6c:0f:14:d1:c9:95:4b: 0d:17:c5:f0:e6:89:ee:3d:01:cc:82:db:d0:a4:1a: 0a:61:99:bf:dd:37:cb:a9:ec:5a:2a:41:b7:43:6d: f7:6c:1d:67:6e:8f:be:5e:6d:4b:e7:3f:6b:b4:ef: ec:6b:0e:d7:97:f5:1c:4d:48:ca:30:8d:65:80:29: f4:a2:71:ca:0d:c3:42:51:b6:04:93:97:74:4e:9d: a8:38:a8:8b:ed:0c:cd:8e:8f:b5:09:96:a5:b4:98: cc:19:65:a7:48:e4:bc:d5:09:96:64:cb:bf:5f:3e: 07:48:ae:b0:18:cb:7d:04:9d:67:62:0e:bf:8e:7f: 6f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2F:A2:8E:C2:BD:27:BF:E3:78:9C:02:E7:87:1A:8B:C5:67:1C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8:68fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:81:65:0c:11:75:af:5c:fd:31:f5:ad:e9:15:7f:ff:4f:3e: 9b:bb:f6:aa:18:e0:08:c2:5d:88:21:fb:63:b5:bd:9c:fc:5e: 21:06:b5:1d:f0:ef:ea:3c:61:df:a8:5b:b2:c1:eb:6b:87:d2: 77:81:ac:b8:6a:69:b0:bb:c6:d2:3a:d8:91:ce:33:73:e1:1d: f7:2f:0b:59:b5:09:4f:a9:41:7a:25:ea:5b:bd:e1:83:99:84: ad:67:3c:92:0b:7a:f1:ab:f3:7e:f7:78:b4:9f:f4:60:76:6b: e2:df:98:e5:6d:96:2f:05:c6:a3:f0:37:b2:0b:07:ea:0c:21: ad:9a:80:11:27:8b:9c:75:7b:29:22:2d:7e:23:5f:0c:8d:41: 7c:0c:f7:0d:73:f3:e0:b7:76:a3:5d:cf:bc:21:25:6e:b4:e8: 8c:ea:4c:0e:a4:70:fa:94:44:6f:1e:34:c5:03:9d:30:61:fe: 1e:b8:75:22:8f:3d:cd:55:3e:4b:44:01:36:82:d8:52:14:1f: 51:96:4c:21:8a:34:e7:51:74:15:ed:1d:5a:4b:b4:db:b9:10: cd:fa:77:48:e5:3f:29:1c:db:39:06:16:46:e9:c9:a5:da:64: 32:7c:53:06:b7:54:ac:54:56:9d:f2:e1:20:a0:47:0e:04:a8: 1e:d8:f3:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElavrkzSBhyERQdyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NTcyYzE1YTMtODcwNy00NTU4LWI4MDQtN2JkZmI5MzRjZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TzOJAztoWGBNgA69aStfDdKrfWbLej2ioaR XL303JsGlSP6yoh/TCsX4vKt3U+jqVfzz8PSOnZgqjB3fcQ3wcN5QLSke0OWq1EA qeJVyNg8fkYYa+/aEYjLv4AxUMqPcQq9RVKqNSP6cwouWVqtdt7yq0u4iPNWEGp+ OsdZpGwPFNHJlUsNF8Xw5onuPQHMgtvQpBoKYZm/3TfLqexaKkG3Q233bB1nbo++ Xm1L5z9rtO/saw7Xl/UcTUjKMI1lgCn0onHKDcNCUbYEk5d0Tp2oOKiL7QzNjo+1 CZaltJjMGWWnSOS81QmWZMu/Xz4HSK6wGMt9BJ1nYg6/jn9v4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIUvoo7CvSe/43icAueHGovFZxyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvY2MzYWFjMGMtYmJjMy0z NTBjLWIwZWYtZWVjYTA2YWZhYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIqGj9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKSBZQwRda9c/TH1rekVf/9PPpu79qoY4AjCXYgh+2O1vZz8XiEG tR3w7+o8Yd+oW7LB62uH0neBrLhqabC7xtI62JHOM3PhHfcvC1m1CU+pQXol6lu9 4YOZhK1nPJILevGr8373eLSf9GB2a+LfmOVtli8FxqPwN7ILB+oMIa2agBEni5x1 eykiLX4jXwyNQXwM9w1z8+C3dqNdz7whJW606IzqTA6kcPqURG8eNMUDnTBh/h64 dSKPPc1VPktEATaC2FIUH1GWTCGKNOdRdBXtHVpLtNu5EM36d0jlPykc2zkGFkbp yaXaZDJ8Uwa3VKxUVp3y4SCgRw4EqB7Y8yM= -----END CERTIFICATE-----Generated at Sun Apr 20 04:30:31 2025 by rpki-client