$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c10a2301-31ac-3467-af08-e7869b904a5a.roa File: c10a2301-31ac-3467-af08-e7869b904a5a.roa (raw, json) Hash identifier: H++nRRigXY/HpTVHn9EzYfWmvaIqNLB9Fjdh6hMtGzI= Subject key identifier: E3:30:2F:79:84:4C:4F:7B:A4:B8:85:C0:85:B2:E8:5C:5B:57:E1:9E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849DF5A6BE5AEEF69A04075AF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c10a2301-31ac-3467-af08-e7869b904a5a.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 12222 IP address blocks: 2001:4878:8322::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:6b:e5:ae:ef:69:a0:40:75:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=a8fc9ec7-48bc-4284-ba88-3f64771f9478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:ec:14:a2:45:e6:53:41:0c:50:e0:47:24: 16:b2:82:e4:46:93:54:65:74:73:74:c0:22:79:99: 9b:72:d6:0e:35:95:02:42:ea:01:99:6f:9d:c9:26: f0:f9:30:da:64:93:a4:fd:5d:4b:6d:62:c3:78:45: 1d:3b:aa:0b:68:97:33:15:93:13:01:03:2f:17:2c: 19:ac:83:ca:79:2d:f4:61:82:a5:f6:bc:ac:6d:8e: b9:ab:37:8a:ce:6d:a8:d7:33:fc:93:4d:27:61:0a: 2b:1d:d3:c8:ad:03:34:06:38:04:9d:64:9e:0b:81: 2a:83:b2:79:4d:46:19:e8:07:90:6c:03:31:b4:8a: ce:b8:5f:3c:22:2f:b3:9c:82:93:fc:e7:10:8b:67: 4d:be:b8:d4:d4:30:27:30:c1:88:3c:93:59:b8:3b: cc:c7:77:a4:c7:7e:b6:85:93:48:54:b0:40:6a:4c: 5a:08:e4:9c:a5:30:39:22:aa:4f:7f:b3:6e:5a:79: 26:1e:84:9b:61:a2:c4:2c:05:db:ef:25:d8:38:8a: 62:31:11:ce:8c:09:63:4c:25:b1:85:fe:4f:0f:14: 7c:8c:02:b2:90:a4:66:7d:c6:e2:d0:e9:f9:99:dc: e9:b8:f0:17:1c:e5:2b:38:ae:16:2c:07:3c:4f:a9: 16:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:30:2F:79:84:4C:4F:7B:A4:B8:85:C0:85:B2:E8:5C:5B:57:E1:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c10a2301-31ac-3467-af08-e7869b904a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:8322::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:78:c3:7c:75:7b:24:36:41:89:dd:3e:88:68:41:0a:04:59: e3:91:27:09:23:15:9c:bc:0f:ce:a9:39:20:3f:5c:44:f1:0f: 53:6e:be:93:7a:87:d7:04:16:95:bd:65:d6:99:71:89:5e:69: 30:a7:07:a7:21:17:1e:c0:cc:93:85:03:a2:73:a5:b6:15:7a: f8:8f:3e:a3:b1:be:48:6d:aa:52:0b:85:e3:7c:b7:9a:b6:10: 4f:15:08:e1:28:a4:73:71:61:88:7d:07:ce:c8:84:22:d0:5d: e6:ea:ef:11:38:64:b3:77:dd:92:31:f2:ac:4c:50:5c:a1:55: 96:a8:9e:cc:f5:5c:c5:01:74:e0:a2:c2:64:b8:82:a5:7c:84: 0b:51:6b:20:a9:6d:cb:47:c7:c7:8a:95:36:4a:9a:1b:0a:50: 8a:58:f2:98:48:21:c2:a2:52:6f:af:67:3e:e6:30:0f:f8:c6: 98:42:7d:59:61:b9:3b:56:a5:c9:6f:7f:ad:61:fa:48:a6:a3: 2d:62:a9:1a:7d:27:d3:38:d3:56:ad:e6:50:ea:91:b0:fc:55: d1:f3:3d:6a:7d:dd:c9:05:b6:00:77:8f:35:c7:22:59:31:92: e2:49:3c:93:9b:42:46:07:af:ac:09:89:60:0a:ef:64:81:e9: e4:9b:5e:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnfWmvlru9poEB1r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk YThmYzllYzctNDhiYy00Mjg0LWJhODgtM2Y2NDc3MWY5NDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4jsFKJF5lNBDFDgRyQWsoLkRpNUZXRzdMAi eZmbctYONZUCQuoBmW+dySbw+TDaZJOk/V1LbWLDeEUdO6oLaJczFZMTAQMvFywZ rIPKeS30YYKl9rysbY65qzeKzm2o1zP8k00nYQorHdPIrQM0BjgEnWSeC4Eqg7J5 TUYZ6AeQbAMxtIrOuF88Ii+znIKT/OcQi2dNvrjU1DAnMMGIPJNZuDvMx3ekx362 hZNIVLBAakxaCOScpTA5IqpPf7NuWnkmHoSbYaLELAXb7yXYOIpiMRHOjAljTCWx hf5PDxR8jAKykKRmfcbi0On5mdzpuPAXHOUrOK4WLAc8T6kW7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOMwL3mETE97pLiFwIWy6FxbV+GeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzEwYTIzMDEtMzFhYy0z NDY3LWFmMDgtZTc4NjliOTA0YTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeIMi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFp4w3x1eyQ2QYndPohoQQoEWeORJwkjFZy8D86pOSA/XETxD1Nu vpN6h9cEFpW9ZdaZcYleaTCnB6chFx7AzJOFA6JzpbYVeviPPqOxvkhtqlILheN8 t5q2EE8VCOEopHNxYYh9B87IhCLQXebq7xE4ZLN33ZIx8qxMUFyhVZaonsz1XMUB dOCiwmS4gqV8hAtRayCpbctHx8eKlTZKmhsKUIpY8phIIcKiUm+vZz7mMA/4xphC fVlhuTtWpclvf61h+kimoy1iqRp9J9M401at5lDqkbD8VdHzPWp93ckFtgB3jzXH IlkxkuJJPJObQkYHr6wJiWAK72SB6eSbXrs= -----END CERTIFICATE-----Generated at Sat Jun 7 14:05:03 2025 by rpki-client