$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24de1adc-157e-3630-9c57-552f4df813e4.roa File: 24de1adc-157e-3630-9c57-552f4df813e4.roa (raw, json) Hash identifier: A605v7XI13GfsCpPPlytV56Vuheyk3LBxyck39BXi34= Subject key identifier: 39:25:2A:2C:7E:86:61:96:01:0A:7C:D5:A0:AB:A3:64:B8:19:F8:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E2252B864913A6444F7C2600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24de1adc-157e-3630-9c57-552f4df813e4.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 12222 IP address blocks: 2001:4878:c063::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:2b:86:49:13:a6:44:4f:7c:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=c9d635af-24e6-4b1d-a863-05f91f1ef544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:15:e3:a3:95:dc:a7:c3:87:eb:93:5b:89:ad: df:a2:76:54:93:09:f9:0b:8b:97:c1:3a:1b:44:64: da:f7:47:9a:83:2b:ed:5b:09:ba:13:19:64:2b:3a: a2:0f:7f:08:01:5d:04:1c:33:7e:d0:c2:7d:06:30: eb:91:84:81:77:55:e0:5b:f3:3a:55:41:3e:3e:47: 9f:1e:11:62:5f:b5:d2:cb:a2:f4:04:f9:f1:03:4b: 4f:e8:84:31:ea:f1:c3:5f:ec:c5:4d:14:45:b3:60: a2:68:bd:e4:33:d5:db:3c:57:98:dc:3c:76:dc:86: 30:5d:25:70:23:37:a2:7e:de:b7:b0:45:ec:32:f6: bc:a2:85:6a:c7:54:24:28:79:f2:51:f6:11:0c:39: f4:32:e7:69:49:cc:65:30:0e:4e:b1:70:c7:94:72: b3:40:63:c3:c9:68:4d:d1:48:05:dd:a1:dd:3a:05: 82:0a:f4:3f:68:5a:29:73:09:b6:da:7b:87:66:14: 17:58:6b:af:8f:7d:59:86:22:44:21:0c:b5:e1:a0: 78:96:78:15:93:fe:df:70:0a:e9:a1:4f:8f:06:c8: 93:ec:79:0a:64:30:09:94:f7:85:f5:d6:32:0e:7b: c8:bc:c4:3b:f6:c6:c0:1f:ad:52:75:e9:b0:27:08: 01:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:25:2A:2C:7E:86:61:96:01:0A:7C:D5:A0:AB:A3:64:B8:19:F8:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24de1adc-157e-3630-9c57-552f4df813e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:c063::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:33:1d:aa:68:32:f3:3e:a8:24:ac:2e:ae:70:ae:d1:86:0a: 19:72:3e:94:b1:d9:cd:0c:0f:b4:a7:9e:89:46:f6:49:8a:22: 4d:e2:2b:e1:19:d6:1b:b8:46:3c:3f:12:43:18:65:f0:be:43: a1:1d:28:2c:54:30:ea:2b:98:68:5f:b5:da:8a:bf:c5:3c:15: db:42:aa:01:d1:73:6c:f3:74:e3:55:08:61:ad:c5:af:f9:2a: 3a:f3:2b:0f:e2:b2:37:24:ee:36:7d:43:2e:3a:ea:3f:2d:c8: 6d:95:ae:bd:71:94:ba:bf:aa:d7:11:a4:44:2f:e4:8f:07:b9: ec:a1:9f:ea:e4:1a:cf:a0:69:4a:25:b3:a8:6b:73:c7:dc:58: a7:84:db:1d:32:00:a9:8f:08:01:64:ca:e2:40:4e:41:b6:97: 2b:a0:d2:f7:08:1e:63:26:19:82:6f:e9:ff:02:35:39:6b:f7: c6:68:3b:10:bb:5a:44:2c:f9:11:3f:35:5f:38:e9:fc:d0:78: b5:b7:fd:d9:e1:4b:96:8b:5f:7e:30:7e:cf:41:9c:cd:80:f3: d3:e9:88:17:67:02:b6:cc:72:5b:08:1f:39:d9:46:17:d0:3a: 45:06:7b:17:34:06:d5:fc:36:65:2f:2e:18:2f:84:17:e4:53: 5a:cf:7e:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEniJSuGSROmRE98JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk YzlkNjM1YWYtMjRlNi00YjFkLWE4NjMtMDVmOTFmMWVmNTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxXjo5Xcp8OH65Nbia3fonZUkwn5C4uXwTob RGTa90eagyvtWwm6ExlkKzqiD38IAV0EHDN+0MJ9BjDrkYSBd1XgW/M6VUE+Pkef HhFiX7XSy6L0BPnxA0tP6IQx6vHDX+zFTRRFs2CiaL3kM9XbPFeY3Dx23IYwXSVw Izeift63sEXsMva8ooVqx1QkKHnyUfYRDDn0MudpScxlMA5OsXDHlHKzQGPDyWhN 0UgF3aHdOgWCCvQ/aFopcwm22nuHZhQXWGuvj31ZhiJEIQy14aB4lngVk/7fcArp oU+PBsiT7HkKZDAJlPeF9dYyDnvIvMQ79sbAH61SdemwJwgBBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDklKix+hmGWAQp81aCro2S4GfifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRkZTFhZGMtMTU3ZS0z NjMwLTljNTctNTUyZjRkZjgxM2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeMBj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACszHapoMvM+qCSsLq5wrtGGChlyPpSx2c0MD7SnnolG9kmKIk3i K+EZ1hu4Rjw/EkMYZfC+Q6EdKCxUMOormGhftdqKv8U8FdtCqgHRc2zzdONVCGGt xa/5KjrzKw/isjck7jZ9Qy466j8tyG2Vrr1xlLq/qtcRpEQv5I8Hueyhn+rkGs+g aUols6hrc8fcWKeE2x0yAKmPCAFkyuJATkG2lyug0vcIHmMmGYJv6f8CNTlr98Zo OxC7WkQs+RE/NV846fzQeLW3/dnhS5aLX34wfs9BnM2A89PpiBdnArbMclsIHznZ RhfQOkUGexc0BtX8NmUvLhgvhBfkU1rPfkY= -----END CERTIFICATE-----Generated at Sat Jun 7 18:52:04 2025 by rpki-client