$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa File: 1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa (raw, json) Hash identifier: 3uq8OgWZFE+w8g62uqUCNkrUv1e1M7tbbPPE0ibk0As= Subject key identifier: F4:CB:A7:19:39:6C:77:7F:F6:2B:B5:25:F6:CF:A8:33:0A:68:EA:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849DF5A6C6FEA655321F1D45E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 12222 IP address blocks: 2001:4878:a062::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:6c:6f:ea:65:53:21:f1:d4:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=0464e60f-75cc-43ef-b5a9-d2d909b060b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f0:20:65:d1:7e:50:0f:94:f4:df:96:94:77: 56:e6:60:14:c7:a9:41:13:ba:a2:45:10:a5:04:ba: 7b:f9:3c:1d:40:37:22:e6:0d:d1:df:e3:a0:f1:e6: ba:d7:85:d1:02:01:42:4a:d4:8c:29:fd:7d:9b:0b: 88:77:37:a4:ff:78:52:47:ff:5a:f1:07:76:e8:84: 6c:c4:67:f5:da:f9:6d:5d:40:76:85:35:92:fa:fc: 36:75:97:29:a1:72:30:2b:17:fd:a8:7d:bb:aa:ec: f4:8c:e8:42:fd:72:09:5f:f0:92:cb:40:14:8b:fe: fd:da:30:d9:04:4d:92:36:a5:99:7a:ad:94:c3:88: b5:1d:0d:db:7e:45:db:41:09:db:60:29:96:8d:d0: 75:46:96:49:20:bb:62:c6:a7:f6:e5:3a:76:25:36: c1:ab:e1:3d:d2:86:25:d1:cd:8c:d5:c9:8e:16:50: 74:92:38:d3:c5:50:85:bf:36:a6:30:39:20:d5:ec: 26:01:1f:7f:79:9d:40:4d:aa:c9:40:b4:05:10:7b: 9b:4a:1b:31:81:7a:04:c4:9b:e0:c9:6f:a9:92:9b: f9:95:13:3b:9b:99:11:77:05:b6:37:88:11:57:c1: 53:6e:59:2c:25:b8:d4:22:20:d8:8d:c9:63:55:46: 43:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CB:A7:19:39:6C:77:7F:F6:2B:B5:25:F6:CF:A8:33:0A:68:EA:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:a062::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:fe:fb:38:4b:ed:ad:1e:3b:ca:fc:c6:9a:e0:b0:04:da:95: de:22:ad:7c:8c:c6:4d:39:2d:1f:23:10:7c:c3:35:cc:a7:53: 67:8c:a4:f6:a0:76:c0:01:33:e4:ec:ac:36:c7:c3:aa:75:e4: d5:0e:b9:7b:13:27:de:d7:4f:17:78:08:6a:82:0c:15:b7:cf: 70:18:34:f7:8f:24:07:25:f7:71:15:12:e0:03:e7:1f:e0:32: 14:f0:f2:c0:3b:f3:47:ab:41:47:27:2e:c3:d5:7e:fa:b5:3f: 64:f8:da:c3:a9:25:ad:0f:47:80:a9:e1:17:0d:e7:46:e7:1a: cb:73:6b:36:bb:c2:a6:12:d0:aa:eb:19:42:35:34:70:12:b5: 35:cf:e8:a1:4d:68:0f:9a:70:59:27:e6:eb:f8:f7:90:f0:68: 03:be:f0:aa:6b:ab:8f:4f:57:06:9b:83:ba:b0:10:0b:07:ab: 99:13:ac:ce:61:f4:79:8a:a0:32:c5:fd:86:6f:02:53:e8:9d: ef:7d:ed:9d:2b:74:c0:f7:0e:ae:94:2b:48:db:c0:ad:db:a2: d6:fe:37:3d:93:cc:2a:d2:8f:11:35:17:b1:26:aa:4f:ca:d8: 22:e5:7f:45:7d:ec:a0:7e:f8:fe:a5:bf:cc:9a:73:83:a0:91: 85:9b:59:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnfWmxv6mVTIfHUXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MDQ2NGU2MGYtNzVjYy00M2VmLWI1YTktZDJkOTA5YjA2MGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfAgZdF+UA+U9N+WlHdW5mAUx6lBE7qiRRCl BLp7+TwdQDci5g3R3+Og8ea614XRAgFCStSMKf19mwuIdzek/3hSR/9a8Qd26IRs xGf12vltXUB2hTWS+vw2dZcpoXIwKxf9qH27quz0jOhC/XIJX/CSy0AUi/792jDZ BE2SNqWZeq2Uw4i1HQ3bfkXbQQnbYCmWjdB1RpZJILtixqf25Tp2JTbBq+E90oYl 0c2M1cmOFlB0kjjTxVCFvzamMDkg1ewmAR9/eZ1ATarJQLQFEHubShsxgXoExJvg yW+pkpv5lRM7m5kRdwW2N4gRV8FTblksJbjUIiDYjcljVUZDAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPTLpxk5bHd/9iu1JfbPqDMKaOoMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWM0MDlkN2ItNWJkZi0z MGY4LThjNjEtZGU1ZjEzZmQxZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKBi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADH++zhL7a0eO8r8xprgsATald4irXyMxk05LR8jEHzDNcynU2eM pPagdsABM+TsrDbHw6p15NUOuXsTJ97XTxd4CGqCDBW3z3AYNPePJAcl93EVEuAD 5x/gMhTw8sA780erQUcnLsPVfvq1P2T42sOpJa0PR4Cp4RcN50bnGstzaza7wqYS 0KrrGUI1NHAStTXP6KFNaA+acFkn5uv495DwaAO+8Kprq49PVwabg7qwEAsHq5kT rM5h9HmKoDLF/YZvAlPone997Z0rdMD3Dq6UK0jbwK3botb+Nz2TzCrSjxE1F7Em qk/K2CLlf0V97KB++P6lv8yac4OgkYWbWUc= -----END CERTIFICATE-----Generated at Sat Jun 7 14:04:12 2025 by rpki-client