$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f6439dc-31bc-3ca8-922c-0791c755b7e2.roa File: 4f6439dc-31bc-3ca8-922c-0791c755b7e2.roa (raw, json) Hash identifier: icK+Aa9MWY+qltgXmBLZUagyVgoGEN+g8ItuXKCNefk= Subject key identifier: 14:47:A0:41:3B:49:EF:D5:EC:35:C1:B9:10:3B:FA:F1:31:AC:00:1A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849DC8FB72F9BAF64AED3B68C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f6439dc-31bc-3ca8-922c-0791c755b7e2.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 12222 IP address blocks: 2001:4878:2242::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:b7:2f:9b:af:64:ae:d3:b6:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=d1ec28d0-4437-4855-b1c1-8f895be85e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:ac:01:81:03:46:f4:83:81:49:eb:e9:ad: 9a:52:f8:d6:de:e9:a6:13:63:a4:22:39:57:dd:45: 0e:c1:04:22:73:a2:1a:4d:6a:88:bc:e5:ad:03:9c: 3c:9a:32:d4:9b:fe:d7:d6:98:5f:ec:cc:04:80:ec: 24:b0:cb:84:08:dc:08:bd:40:43:f8:27:90:f7:c5: 25:b2:f7:93:f1:c6:0d:49:96:c2:a0:67:00:41:5f: e2:c8:a8:76:62:03:bd:c9:0c:9f:38:a4:fb:f9:a8: cf:81:e6:50:68:90:85:49:b9:d7:a6:72:b7:dc:3a: e8:fb:a2:33:3b:e5:42:68:bb:7b:9d:2e:f4:02:55: d5:60:64:c3:02:a8:88:77:f3:21:28:c2:b3:cb:e2: d2:8e:a0:4f:d4:d3:9b:d0:aa:81:29:26:10:6a:ff: b2:d8:4f:b1:5d:8b:7c:64:94:a5:de:87:f3:c3:76: e8:30:8c:9a:95:3c:f5:b5:fc:50:82:14:5b:9d:7c: 48:7e:8b:df:c7:ec:92:95:7a:0b:45:a9:03:fd:9b: 8a:a9:bb:cd:b4:18:aa:2a:2e:12:4a:80:13:e6:01: f1:e6:07:d4:75:0d:e9:44:49:86:2b:7e:2e:e2:59: 00:df:b2:1a:9e:3c:c4:c5:5e:03:e3:ab:c1:05:c2: 81:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:47:A0:41:3B:49:EF:D5:EC:35:C1:B9:10:3B:FA:F1:31:AC:00:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f6439dc-31bc-3ca8-922c-0791c755b7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:2242::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:16:a0:b5:e3:12:32:2f:dd:8d:b9:04:d6:13:49:88:e0:dd: 08:94:02:1a:bf:fc:e0:13:49:89:ba:cc:38:cd:3c:7c:56:7a: 17:e6:40:6b:7e:4b:da:07:ef:c4:4b:92:94:fa:54:df:fc:da: fc:6d:a6:dd:94:0e:32:73:e0:8b:bd:42:8d:d7:5f:fe:27:12: 5b:b1:22:c4:0a:4b:fe:57:dd:80:63:a6:28:12:d7:47:b2:32: 67:0e:11:a8:d2:4b:cf:78:21:b7:f8:21:44:82:84:c3:fa:fe: fe:fd:f7:95:7c:c6:8b:ac:03:19:eb:ae:52:96:ad:c9:fb:04: 06:94:bf:01:3e:80:26:88:61:39:45:12:8e:71:6f:47:ae:c4: dd:20:36:84:ce:2a:7b:43:cd:48:88:c3:4e:6b:75:2e:ad:2c: ec:63:2b:22:de:67:aa:7c:36:d2:83:cb:0c:ff:09:2d:97:b9: 8c:d8:86:7d:9d:e3:ff:0d:ad:71:ad:e9:00:21:68:c2:22:f8: bd:e9:f6:ef:38:d8:8f:99:fb:e4:1a:c5:3e:84:94:21:8b:a7: 72:80:86:f5:87:8d:80:ca:89:57:64:0c:eb:26:e7:53:83:93: 6c:cf:83:e4:83:dc:28:cc:d2:59:cc:d5:db:39:62:fe:af:ee: 99:c1:7d:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncj7cvm69krtO2jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDFlYzI4ZDAtNDQzNy00ODU1LWIxYzEtOGY4OTViZTg1ZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08SsAYEDRvSDgUnr6a2aUvjW3ummE2OkIjlX 3UUOwQQic6IaTWqIvOWtA5w8mjLUm/7X1phf7MwEgOwksMuECNwIvUBD+CeQ98Ul sveT8cYNSZbCoGcAQV/iyKh2YgO9yQyfOKT7+ajPgeZQaJCFSbnXpnK33Dro+6Iz O+VCaLt7nS70AlXVYGTDAqiId/MhKMKzy+LSjqBP1NOb0KqBKSYQav+y2E+xXYt8 ZJSl3ofzw3boMIyalTz1tfxQghRbnXxIfovfx+ySlXoLRakD/ZuKqbvNtBiqKi4S SoAT5gHx5gfUdQ3pREmGK34u4lkA37IanjzExV4D46vBBcKBLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBRHoEE7Se/V7DXBuRA7+vExrAAaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGY2NDM5ZGMtMzFiYy0z Y2E4LTkyMmMtMDc5MWM3NTViN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCJC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIAWoLXjEjIv3Y25BNYTSYjg3QiUAhq//OATSYm6zDjNPHxWehfm QGt+S9oH78RLkpT6VN/82vxtpt2UDjJz4Iu9Qo3XX/4nEluxIsQKS/5X3YBjpigS 10eyMmcOEajSS894Ibf4IUSChMP6/v7995V8xousAxnrrlKWrcn7BAaUvwE+gCaI YTlFEo5xb0euxN0gNoTOKntDzUiIw05rdS6tLOxjKyLeZ6p8NtKDywz/CS2XuYzY hn2d4/8NrXGt6QAhaMIi+L3p9u842I+Z++QaxT6ElCGLp3KAhvWHjYDKiVdkDOsm 51ODk2zPg+SD3CjM0lnM1ds5Yv6v7pnBfek= -----END CERTIFICATE-----Generated at Sat Jun 7 23:03:41 2025 by rpki-client