$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd5ac422-1b81-34e2-aae2-ba087b4b4e7b.roa File: dd5ac422-1b81-34e2-aae2-ba087b4b4e7b.roa (raw, json) Hash identifier: /tEM8GhVI1dMPhzdOTiezXx8O8q0o8EgMUPvB3oQAlM= Subject key identifier: A5:72:F5:8F:38:5B:4D:EC:E7:5B:38:21:3C:4D:79:E3:62:5B:83:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849DC8FAF98B6A8A5B1B73B7100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd5ac422-1b81-34e2-aae2-ba087b4b4e7b.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 12222 IP address blocks: 2001:4878:2356::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:af:98:b6:a8:a5:b1:b7:3b:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=cb7beea9-f31c-4bb2-875b-66667e5d8e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:49:8e:ba:ce:a6:ee:1b:06:bd:25:66:e4: ec:a6:43:08:c3:68:a1:8c:02:2b:bd:69:c8:a6:ff: d6:4c:05:eb:ae:b9:ce:b5:2c:68:b9:99:5b:e0:1c: ea:a4:0e:0a:60:19:b4:a8:10:1c:e6:d3:bf:30:35: a7:4c:b0:2b:94:85:69:70:ee:f4:6b:5a:15:f6:33: b7:b9:ad:1b:74:47:f7:0c:5a:0c:d7:7f:ce:76:2f: 76:04:2d:00:a9:71:44:68:4a:1c:d0:d5:33:85:99: 05:76:05:aa:fd:1f:34:b6:90:ec:23:b0:d9:83:73: 5a:36:06:53:2f:7a:0e:75:13:e1:29:88:29:da:64: 3c:77:9e:59:90:13:8d:ea:2f:fc:5c:5b:86:4f:52: 0d:8c:98:39:5d:2a:f4:b4:65:ed:0a:06:c5:b4:69: 6c:43:8c:b1:70:a0:26:82:ad:21:bc:0d:21:60:60: 18:61:51:b5:aa:f0:37:23:07:39:5f:ee:eb:c6:d6: dc:46:fe:fc:d8:60:7f:fb:95:f7:94:f0:fc:fd:c4: 60:38:26:2c:ed:61:c8:48:4b:9d:55:6a:25:f3:a0: e2:a3:91:84:19:60:b0:06:19:b5:04:53:da:3f:6e: 45:4d:ee:89:6f:25:e5:04:c5:4f:9f:13:58:8e:12: 49:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:72:F5:8F:38:5B:4D:EC:E7:5B:38:21:3C:4D:79:E3:62:5B:83:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd5ac422-1b81-34e2-aae2-ba087b4b4e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:2356::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5b:6d:ef:da:37:4a:c4:77:23:b7:03:31:28:ee:9a:bf:4c: c2:32:2a:4a:ca:4a:66:85:35:ae:05:0b:e0:c9:5d:3b:a3:d6: bc:46:56:fc:a2:9f:53:63:da:5c:6e:cc:5e:b5:bf:79:a1:89: f5:f8:0b:2e:0e:38:d6:ad:ce:09:78:87:f1:07:a0:4e:11:61: 4e:51:1f:aa:3d:17:a9:64:56:25:27:1b:9a:fb:d9:8a:e7:bb: b6:36:a6:cf:00:7b:f2:6b:13:34:9a:36:27:cb:d9:7b:8e:23: 0b:12:89:4a:fa:e9:a3:81:ec:97:84:b7:05:c3:6f:92:6d:db: 3b:b5:9d:85:67:11:b8:da:bb:5f:cd:fb:96:ea:e4:4f:29:f4: 73:80:9b:4a:f7:b2:88:ae:5c:56:1f:57:49:b5:0f:97:1a:34: 2c:bf:4d:ce:db:ec:5e:8a:c4:26:d7:5c:0b:da:a4:f8:d9:b7: 99:86:02:27:d9:04:07:57:e1:a8:10:4e:60:92:ea:39:dd:cf: 76:0c:94:82:0a:0a:2c:ab:88:6f:1c:e1:02:f0:09:49:ab:22: 09:fc:cd:70:48:ef:bd:02:89:93:d3:22:7f:f0:c3:40:0d:c5: 70:a9:94:a5:e0:93:5f:23:17:9f:53:68:b2:c8:32:c0:70:bd: a5:50:e6:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncj6+Ytqilsbc7cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk Y2I3YmVlYTktZjMxYy00YmIyLTg3NWItNjY2NjdlNWQ4ZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvhJjrrOpu4bBr0lZuTspkMIw2ihjAIrvWnI pv/WTAXrrrnOtSxouZlb4BzqpA4KYBm0qBAc5tO/MDWnTLArlIVpcO70a1oV9jO3 ua0bdEf3DFoM13/Odi92BC0AqXFEaEoc0NUzhZkFdgWq/R80tpDsI7DZg3NaNgZT L3oOdRPhKYgp2mQ8d55ZkBON6i/8XFuGT1INjJg5XSr0tGXtCgbFtGlsQ4yxcKAm gq0hvA0hYGAYYVG1qvA3Iwc5X+7rxtbcRv782GB/+5X3lPD8/cRgOCYs7WHISEud VWol86Dio5GEGWCwBhm1BFPaP25FTe6JbyXlBMVPnxNYjhJJuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKVy9Y84W03s51s4ITxNeeNiW4MRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ1YWM0MjItMWI4MS0z NGUyLWFhZTItYmEwODdiNGI0ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCNW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE5bbe/aN0rEdyO3AzEo7pq/TMIyKkrKSmaFNa4FC+DJXTuj1rxG Vvyin1Nj2lxuzF61v3mhifX4Cy4OONatzgl4h/EHoE4RYU5RH6o9F6lkViUnG5r7 2Yrnu7Y2ps8Ae/JrEzSaNifL2XuOIwsSiUr66aOB7JeEtwXDb5Jt2zu1nYVnEbja u1/N+5bq5E8p9HOAm0r3soiuXFYfV0m1D5caNCy/Tc7b7F6KxCbXXAvapPjZt5mG AifZBAdX4agQTmCS6jndz3YMlIIKCiyriG8c4QLwCUmrIgn8zXBI770CiZPTIn/w w0ANxXCplKXgk18jF59TaLLIMsBwvaVQ5lU= -----END CERTIFICATE-----Generated at Sat Jun 7 14:02:04 2025 by rpki-client