$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa File: 1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa (raw, json) Hash identifier: OYSZQ5bBLTQBR/EeWDGx9jVMHF7Jd0COmH9lSZmGBsA= Subject key identifier: 09:FA:D1:25:F3:13:94:A4:B0:37:02:2E:C0:03:3F:76:A8:31:8E:3D Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F43285849B6DF4D6A973F110564DA5180 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 54054 IP address blocks: 2620:8c:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4d:6a:97:3f:11:05:64:da:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=6bf01e1c-84b5-4c71-87a2-63dc0029e678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1b:3b:4a:5b:0d:26:d7:9e:b2:a8:63:bc:5e: 8b:37:ba:63:ae:0a:6c:19:e0:1e:c1:72:13:9c:f1: 38:80:cc:dc:cc:a9:c9:75:b7:47:e6:a8:f4:24:c1: ad:3a:61:9a:14:a1:ff:1c:9e:aa:f2:d5:90:d0:af: fc:bb:0a:f4:2f:af:13:98:ac:62:f5:a5:a1:68:26: 37:1c:46:7f:a5:36:22:4f:62:e5:17:37:10:f5:82: 25:52:1f:73:1f:86:46:19:a7:46:af:a9:1a:97:85: cb:d6:7a:0b:2b:16:12:7f:2d:63:b9:5e:30:d7:6c: 7c:c3:b3:ec:e9:27:9d:77:1b:92:31:42:42:33:50: f0:a8:b5:4b:f4:39:b6:55:f3:a4:ce:5c:46:74:a4: 83:6f:a9:00:7e:a9:44:b3:59:9d:1b:b6:77:4d:84: 81:8d:39:2d:04:9b:a6:0d:5c:8b:6e:23:f7:ca:88: 36:3e:8a:41:82:86:48:7b:25:07:85:c4:40:8e:15: d9:a3:84:b5:2f:3f:dc:1d:fd:96:05:eb:c7:f5:8a: bb:07:da:0b:42:d3:c4:c1:5a:59:8e:b7:61:b8:21: 0e:f6:75:b8:5d:61:ad:72:8b:c3:cb:f7:90:05:a8: 66:2a:2d:9b:46:22:e0:07:7d:ac:3b:e1:39:2f:31: 78:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FA:D1:25:F3:13:94:A4:B0:37:02:2E:C0:03:3F:76:A8:31:8E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv6: 2620:8c:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:35:08:de:95:a7:52:e6:1d:da:f3:5a:17:5b:40:dd:56:9b: 39:35:53:ab:70:d1:3e:73:25:e4:d5:93:5b:de:5d:f7:0f:42: 83:61:08:1c:0e:19:94:f5:f0:0b:53:16:e2:80:eb:20:52:92: 9e:c9:42:f3:53:5d:6f:07:18:d6:b8:0b:86:28:72:d9:c7:5c: 89:70:f8:26:e4:00:58:7a:eb:85:f8:14:da:22:f9:e9:27:b1: 5f:4c:3f:83:8a:39:cb:bd:d0:8e:7e:fb:c3:c9:d8:c6:aa:97: 2d:b3:36:7d:05:93:09:68:81:6d:72:8a:fc:b1:b3:bb:f0:e2: c5:25:c8:ee:d6:91:39:b2:3b:63:4e:9f:26:11:60:06:dc:0c: 9e:c3:24:92:71:b0:21:e6:12:ab:30:fe:c0:4e:fd:53:fb:3d: 8a:a5:16:d6:1b:e6:c0:72:60:5a:9d:c7:bf:9c:6e:63:91:8e: 2e:6c:d9:98:88:4e:cf:13:5e:8c:86:28:25:7c:0e:06:bc:34: 96:7f:d8:96:e6:af:d9:d7:c2:c3:e2:7f:c0:2a:e0:d6:0d:ba: 6f:14:0f:b5:54:a0:59:a4:33:d2:72:11:5f:7c:60:4b:53:e2: 14:21:f7:45:4b:49:cb:86:6f:9f:e9:3b:09:35:13:84:16:1f: 7b:8c:32:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm2301qlz8RBWTaUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk NmJmMDFlMWMtODRiNS00YzcxLTg3YTItNjNkYzAwMjllNjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxs7SlsNJteesqhjvF6LN7pjrgpsGeAewXIT nPE4gMzczKnJdbdH5qj0JMGtOmGaFKH/HJ6q8tWQ0K/8uwr0L68TmKxi9aWhaCY3 HEZ/pTYiT2LlFzcQ9YIlUh9zH4ZGGadGr6kal4XL1noLKxYSfy1juV4w12x8w7Ps 6SeddxuSMUJCM1DwqLVL9Dm2VfOkzlxGdKSDb6kAfqlEs1mdG7Z3TYSBjTktBJum DVyLbiP3yog2PopBgoZIeyUHhcRAjhXZo4S1Lz/cHf2WBevH9Yq7B9oLQtPEwVpZ jrdhuCEO9nW4XWGtcovDy/eQBahmKi2bRiLgB32sO+E5LzF4EwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAn60SXzE5SksDcCLsADP3aoMY49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvMWJjMGIxZTYtYmExZC0z YzI0LWI2NzgtYzI5YmYzMDIyMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAjEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFs1CN6Vp1LmHdrzWhdbQN1Wmzk1U6tw0T5zJeTVk1veXfcPQoNh CBwOGZT18AtTFuKA6yBSkp7JQvNTXW8HGNa4C4YoctnHXIlw+CbkAFh664X4FNoi +eknsV9MP4OKOcu90I5++8PJ2Maqly2zNn0FkwlogW1yivyxs7vw4sUlyO7WkTmy O2NOnyYRYAbcDJ7DJJJxsCHmEqsw/sBO/VP7PYqlFtYb5sByYFqdx7+cbmORji5s 2ZiITs8TXoyGKCV8Dga8NJZ/2Jbmr9nXwsPif8Aq4NYNum8UD7VUoFmkM9JyEV98 YEtT4hQh90VLScuGb5/pOwk1E4QWH3uMMs4= -----END CERTIFICATE-----Generated at Sun Jun 8 06:06:04 2025 by rpki-client