$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80cccd29-da15-3182-a379-5db749441da5.roa File: 80cccd29-da15-3182-a379-5db749441da5.roa (raw, json) Hash identifier: VSTRygsPeQssqNotpbaKupjomdS0f9Utod1+bdYFJd0= Subject key identifier: 97:68:91:1D:61:4E:27:53:7E:06:F1:26:72:97:06:50:37:B3:F2:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849DC8FAEEBBF5D038DA225E780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80cccd29-da15-3182-a379-5db749441da5.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 35994 IP address blocks: 2001:4878:4055::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:ae:eb:bf:5d:03:8d:a2:25:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=039d93a1-dbf7-4aad-b422-694006ddb3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5f:8d:ab:87:35:ed:24:39:2a:00:53:7c:d0: f9:77:ce:01:85:1c:3e:cd:25:ec:4a:4b:1c:c8:25: b9:a4:e1:d1:80:4c:90:b2:73:35:cb:27:e4:d9:87: 6a:cf:50:13:27:e6:d3:e3:49:e4:ea:a8:d3:23:23: b7:1f:a8:b4:c3:b3:6a:84:09:b6:74:fe:5b:db:9f: 4b:7d:ee:60:06:a8:55:23:18:7b:e9:6e:38:78:da: 07:6d:02:9e:e5:33:c1:c5:be:87:42:88:c1:19:fe: 0c:6a:c6:35:9a:60:14:a5:4c:0e:10:6b:5e:f4:90: 53:36:69:31:d5:76:cb:1b:a3:a4:16:ce:fb:19:3a: 02:ee:b9:69:5a:bc:2e:b6:3c:46:ca:c8:89:48:a2: 35:4c:df:c6:60:b3:2f:1a:bb:61:61:27:a2:52:c4: 04:c7:58:86:41:d0:e6:d0:46:a3:66:d8:e1:9d:a3: 5c:ed:69:9f:78:8f:fc:5d:40:a3:66:f0:18:c6:4f: bd:a4:92:9d:4f:eb:d3:c6:e2:ce:12:fd:74:47:c2: c3:1f:db:7d:7c:3c:9a:2a:f8:4f:59:32:67:17:58: b6:a0:65:35:63:f0:83:07:bb:f9:16:bd:1d:b2:43: 41:b7:27:cb:46:9b:20:8a:f2:1c:09:82:d6:fb:43: 51:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:68:91:1D:61:4E:27:53:7E:06:F1:26:72:97:06:50:37:B3:F2:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80cccd29-da15-3182-a379-5db749441da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:4055::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a8:9e:5e:6f:f2:73:74:aa:ad:dd:ef:e9:31:e5:3d:cc:59: b2:8b:08:e1:40:d4:88:05:3e:40:4c:e4:c4:9f:16:dd:29:21: 1a:7e:a0:58:14:87:43:0f:28:05:b1:14:c0:a2:86:ba:5c:92: 5a:cf:42:57:47:d1:66:d7:89:5f:ec:ed:89:8b:b8:2f:3a:c9: d5:8c:a4:ee:fc:50:e5:f7:9a:9a:56:f0:88:3a:4b:dd:aa:a5: 55:d6:14:ae:51:e2:fd:57:69:06:13:64:9c:35:ca:35:ff:52: f1:27:89:5c:0e:ca:bf:df:97:77:6c:96:96:fc:bf:00:5a:30: 7f:fb:28:a9:d1:88:53:7d:19:03:21:4f:9f:6a:80:38:94:b6: 60:da:6a:1f:19:b1:36:0a:34:49:8a:d1:32:ae:dd:bf:ef:91: e0:4c:20:a5:3a:fd:8c:9b:a1:db:e0:59:49:c5:78:1c:bd:19: c7:18:7b:a7:bd:83:80:bd:e6:64:85:16:7f:ca:0d:24:7c:13: ff:07:7b:f6:73:cb:2b:32:3f:e3:4e:de:78:6a:94:1a:21:fd: 72:11:a3:ba:81:70:bf:b2:ef:88:96:5b:b0:fb:10:d5:b9:0e: 12:60:c5:83:5d:d8:05:79:ca:d4:4e:1c:88:0a:df:98:7c:78: 33:23:a6:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncj67rv10DjaIl54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MDM5ZDkzYTEtZGJmNy00YWFkLWI0MjItNjk0MDA2ZGRiM2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll+Nq4c17SQ5KgBTfND5d84BhRw+zSXsSksc yCW5pOHRgEyQsnM1yyfk2Ydqz1ATJ+bT40nk6qjTIyO3H6i0w7NqhAm2dP5b259L fe5gBqhVIxh76W44eNoHbQKe5TPBxb6HQojBGf4MasY1mmAUpUwOEGte9JBTNmkx 1XbLG6OkFs77GToC7rlpWrwutjxGysiJSKI1TN/GYLMvGrthYSeiUsQEx1iGQdDm 0EajZtjhnaNc7WmfeI/8XUCjZvAYxk+9pJKdT+vTxuLOEv10R8LDH9t9fDyaKvhP WTJnF1i2oGU1Y/CDB7v5Fr0dskNBtyfLRpsgivIcCYLW+0NRuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJdokR1hTidTfgbxJnKXBlA3s/LeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODBjY2NkMjktZGExNS0z MTgyLWEzNzktNWRiNzQ5NDQxZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeEBV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIaonl5v8nN0qq3d7+kx5T3MWbKLCOFA1IgFPkBM5MSfFt0pIRp+ oFgUh0MPKAWxFMCihrpcklrPQldH0WbXiV/s7YmLuC86ydWMpO78UOX3mppW8Ig6 S92qpVXWFK5R4v1XaQYTZJw1yjX/UvEniVwOyr/fl3dslpb8vwBaMH/7KKnRiFN9 GQMhT59qgDiUtmDaah8ZsTYKNEmK0TKu3b/vkeBMIKU6/YybodvgWUnFeBy9GccY e6e9g4C95mSFFn/KDSR8E/8He/ZzyysyP+NO3nhqlBoh/XIRo7qBcL+y74iWW7D7 ENW5DhJgxYNd2AV5ytROHIgK35h8eDMjpoQ= -----END CERTIFICATE-----Generated at Sat Jun 7 15:36:41 2025 by rpki-client