$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4658cd45-8eaf-3e39-b7ec-5e1a18ea68b7.roa File: 4658cd45-8eaf-3e39-b7ec-5e1a18ea68b7.roa (raw, json) Hash identifier: eEjoH55Cff9fKy40AoKdtVVWsjAidvsBGsbxFQEBitA= Subject key identifier: 6E:1F:A9:04:A2:D7:E7:B3:B0:84:38:95:BE:84:F6:A3:DF:1D:6B:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849DC8FB857019E9AB4B814BB5D Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4658cd45-8eaf-3e39-b7ec-5e1a18ea68b7.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 12222 IP address blocks: 2001:4878:4225::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:b8:57:01:9e:9a:b4:b8:14:bb:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=26208cad-20ae-49e9-9263-407ebc44dbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:67:5b:a0:fa:44:d0:96:3f:4a:a6:6d:d6: b3:a0:d4:a8:7c:6f:4f:47:ad:f5:a5:f5:10:74:d1: 62:6d:2a:8a:b1:93:ab:28:da:6c:23:25:a4:87:e3: f1:ab:36:3c:04:06:fb:4b:14:d5:57:5f:1a:e8:5a: 68:fd:ab:e7:dc:7c:e1:f0:fd:7e:15:c7:58:8c:ab: 4d:ea:21:33:76:9c:e4:c2:5e:6f:1f:7a:f3:69:be: 1b:01:93:7c:fb:21:16:0a:d1:f2:23:c0:52:b8:76: dd:2c:48:f0:05:00:6e:3d:38:61:80:72:8f:79:96: 21:ad:75:f1:b1:cc:b0:b2:2d:d5:05:05:ec:66:50: 1f:8f:b5:42:93:44:28:31:02:e4:cf:a3:4f:bd:ab: 95:c2:9d:5a:6d:14:89:66:c7:e7:f4:b2:28:a2:f5: cb:aa:ca:82:41:a8:78:47:cc:47:c8:63:3a:12:1a: dd:1c:b7:90:44:4d:bb:ad:c1:e3:27:05:bc:41:a0: 2c:3e:86:0d:e2:03:07:cd:9d:29:19:5f:79:84:da: 8a:5c:79:1a:b7:82:35:8e:61:73:52:07:1c:0a:34: 43:31:02:13:e4:f0:4b:38:bd:1b:f1:75:7c:e4:a7: ea:8b:21:de:86:ff:d6:9e:00:d6:bc:d6:ca:12:88: 9d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1F:A9:04:A2:D7:E7:B3:B0:84:38:95:BE:84:F6:A3:DF:1D:6B:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4658cd45-8eaf-3e39-b7ec-5e1a18ea68b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:4225::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:c6:53:65:a2:9f:1b:75:43:7f:3e:94:48:99:88:ae:4d:a8: 7c:89:5d:4e:e4:7d:5f:2f:da:58:7b:b8:94:48:07:7e:a2:5d: 59:8c:21:2e:b8:b5:71:4a:c6:75:6f:9d:5b:c2:9f:13:1d:57: 25:e4:7d:df:e8:51:3c:45:da:24:a4:b6:7a:d2:85:b0:44:e0: 86:0e:a6:75:34:ec:a8:df:44:8f:97:d3:74:8a:16:3a:97:98: 3e:2f:d8:87:45:e0:8c:d7:47:8b:5e:42:89:a6:0f:4f:4c:57: b7:0d:95:99:ad:ef:f8:85:87:2e:7d:48:85:e9:c9:1f:41:07: c0:83:e7:d9:c9:8d:eb:41:f8:6e:e7:11:b5:77:b1:61:fd:56: d9:d5:f8:5d:25:d9:aa:77:85:af:cb:24:8e:eb:ff:3c:fb:70: 7c:de:0a:93:2e:f5:97:a8:6c:67:05:3b:e7:e9:3b:08:f3:ec: be:14:28:b9:f5:4a:c4:c3:78:b0:0d:89:16:6d:d7:45:af:4b: 5f:38:06:fb:1e:92:42:87:8e:42:db:13:87:bb:4c:2e:40:b7: 31:43:d9:73:81:0c:f4:76:b9:e2:66:94:c3:61:c4:6d:24:d4: c8:b2:50:c0:2b:db:eb:fd:5b:12:dc:1e:b9:85:88:2f:4c:d3: 03:2c:bc:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncj7hXAZ6atLgUu10wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MjYyMDhjYWQtMjBhZS00OWU5LTkyNjMtNDA3ZWJjNDRkYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsANnW6D6RNCWP0qmbdazoNSofG9PR631pfUQ dNFibSqKsZOrKNpsIyWkh+PxqzY8BAb7SxTVV18a6Fpo/avn3Hzh8P1+FcdYjKtN 6iEzdpzkwl5vH3rzab4bAZN8+yEWCtHyI8BSuHbdLEjwBQBuPThhgHKPeZYhrXXx scywsi3VBQXsZlAfj7VCk0QoMQLkz6NPvauVwp1abRSJZsfn9LIoovXLqsqCQah4 R8xHyGM6EhrdHLeQRE27rcHjJwW8QaAsPoYN4gMHzZ0pGV95hNqKXHkat4I1jmFz UgccCjRDMQIT5PBLOL0b8XV85KfqiyHehv/WngDWvNbKEoidGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG4fqQSi1+ezsIQ4lb6E9qPfHWs7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDY1OGNkNDUtOGVhZi0z ZTM5LWI3ZWMtNWUxYTE4ZWE2OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeEIl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJbGU2Winxt1Q38+lEiZiK5NqHyJXU7kfV8v2lh7uJRIB36iXVmM IS64tXFKxnVvnVvCnxMdVyXkfd/oUTxF2iSktnrShbBE4IYOpnU07KjfRI+X03SK FjqXmD4v2IdF4IzXR4teQommD09MV7cNlZmt7/iFhy59SIXpyR9BB8CD59nJjetB +G7nEbV3sWH9VtnV+F0l2ap3ha/LJI7r/zz7cHzeCpMu9ZeobGcFO+fpOwjz7L4U KLn1SsTDeLANiRZt10WvS184BvsekkKHjkLbE4e7TC5AtzFD2XOBDPR2ueJmlMNh xG0k1MiyUMAr2+v9WxLcHrmFiC9M0wMsvDw= -----END CERTIFICATE-----Generated at Sat Jun 7 23:14:56 2025 by rpki-client