$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac8169d-1bb6-35a6-9326-48c13633c078.roa File: 3ac8169d-1bb6-35a6-9326-48c13633c078.roa (raw, json) Hash identifier: yAwCQaToL9dS/W2oWVREtcGFGAQbDNLuJLKW0IqdzEI= Subject key identifier: B1:1A:54:54:91:38:6E:64:2C:ED:4B:40:54:4B:00:FF:ED:D5:34:AB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849DC8FB84A8BC6033C1CDAD140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac8169d-1bb6-35a6-9326-48c13633c078.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 12222 IP address blocks: 2001:4878:4220::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:b8:4a:8b:c6:03:3c:1c:da:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=f7db4495-2ee4-4960-8272-43942fb1ba65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:72:7c:ab:c3:43:c1:ff:8c:1b:66:b8:5f:be: 88:01:89:84:fa:63:0a:d1:1d:72:ca:7d:1d:bf:e2: 6e:58:f7:f4:3a:79:7f:18:db:5e:8c:76:38:08:91: ca:de:9a:53:87:2a:4d:99:f1:63:98:e3:cc:62:b1: 8d:02:c2:d7:0c:94:51:4b:2c:98:28:6a:03:f2:d5: 06:24:b5:5d:0f:04:25:0b:a5:1e:d2:05:bd:28:c4: 0f:bd:07:03:f1:7c:f3:d5:6b:71:3f:40:e9:fb:75: 1e:21:01:2d:78:44:7c:f8:d6:ee:73:58:c8:ce:b7: 96:a3:45:14:93:c4:91:19:50:96:35:09:06:86:d7: 77:7d:dd:14:1c:35:c7:81:15:6e:75:66:d9:80:10: 26:78:bd:34:87:fd:46:82:a7:18:9f:7f:66:98:0f: 1f:b8:1e:52:a5:dc:0a:64:be:f8:6c:93:73:a8:ad: b6:3f:06:94:30:2d:a2:5f:00:7e:e6:08:e9:79:e3: 6e:45:f3:b3:cc:b7:c4:7e:1d:fa:12:6d:df:b2:72: f1:88:19:4e:31:99:38:21:e5:41:8f:cc:28:c6:bc: 23:73:c0:9e:3f:1b:c4:e1:2b:98:27:97:d7:28:2a: 67:59:91:b5:c9:e1:69:a8:6d:94:1a:4e:10:22:45: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1A:54:54:91:38:6E:64:2C:ED:4B:40:54:4B:00:FF:ED:D5:34:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac8169d-1bb6-35a6-9326-48c13633c078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:4220::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d8:cb:95:5f:b0:40:b4:c3:2f:3d:95:80:fd:43:1b:21:f4: 24:34:f4:8d:90:63:cf:2f:73:cb:f2:c6:80:ef:79:80:c1:a9: e7:65:03:a2:66:ce:9b:3d:c0:35:de:54:ab:d0:22:01:0a:8a: 66:5f:7e:ce:64:2a:52:de:0d:90:ff:2a:ff:6d:8f:99:b4:a9: b2:fc:95:1a:89:13:5b:3b:0f:f9:59:36:4a:f1:71:85:4e:5b: 1e:d5:95:4c:5e:c6:95:50:ae:a2:46:32:96:dc:84:65:66:e8: 2b:bb:72:68:38:b3:4e:b9:8d:fa:c2:37:d6:53:50:a9:82:90: 70:4f:64:b1:eb:44:cd:7f:9b:dc:d8:8e:77:8e:a5:9f:1a:4c: 89:30:3d:60:70:18:22:dd:cb:a5:42:72:96:0f:f8:01:a4:1b: 3e:0c:28:eb:99:6a:9d:0d:ae:a1:9c:a4:39:05:1c:9d:e6:8c: 00:28:70:18:66:fb:bb:4b:4f:80:2e:dc:01:f0:e2:4e:52:fa: 81:25:af:c5:f6:d1:3f:b3:b8:a1:6a:cf:a4:cf:11:4f:45:9a: 39:de:95:d0:af:f1:5a:28:63:b2:6f:93:32:9a:1f:9a:de:82: 86:ee:b1:5d:ce:2e:d9:f5:f5:bf:b7:27:8a:d2:e1:06:9a:06: f1:87:e4:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncj7hKi8YDPBza0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZjdkYjQ0OTUtMmVlNC00OTYwLTgyNzItNDM5NDJmYjFiYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HJ8q8NDwf+MG2a4X76IAYmE+mMK0R1yyn0d v+JuWPf0Onl/GNtejHY4CJHK3ppThypNmfFjmOPMYrGNAsLXDJRRSyyYKGoD8tUG JLVdDwQlC6Ue0gW9KMQPvQcD8Xzz1WtxP0Dp+3UeIQEteER8+Nbuc1jIzreWo0UU k8SRGVCWNQkGhtd3fd0UHDXHgRVudWbZgBAmeL00h/1GgqcYn39mmA8fuB5SpdwK ZL74bJNzqK22PwaUMC2iXwB+5gjpeeNuRfOzzLfEfh36Em3fsnLxiBlOMZk4IeVB j8woxrwjc8CePxvE4SuYJ5fXKCpnWZG1yeFpqG2UGk4QIkUcOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLEaVFSROG5kLO1LQFRLAP/t1TSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FjODE2OWQtMWJiNi0z NWE2LTkzMjYtNDhjMTM2MzNjMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeEIg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG/Yy5VfsEC0wy89lYD9Qxsh9CQ09I2QY88vc8vyxoDveYDBqedl A6Jmzps9wDXeVKvQIgEKimZffs5kKlLeDZD/Kv9tj5m0qbL8lRqJE1s7D/lZNkrx cYVOWx7VlUxexpVQrqJGMpbchGVm6Cu7cmg4s065jfrCN9ZTUKmCkHBPZLHrRM1/ m9zYjneOpZ8aTIkwPWBwGCLdy6VCcpYP+AGkGz4MKOuZap0NrqGcpDkFHJ3mjAAo cBhm+7tLT4Au3AHw4k5S+oElr8X20T+zuKFqz6TPEU9FmjneldCv8VooY7JvkzKa H5regobusV3OLtn19b+3J4rS4QaaBvGH5Is= -----END CERTIFICATE-----Generated at Sat Jun 7 23:05:33 2025 by rpki-client