$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2def12e-66c1-37b9-8fc8-1bfac0f67c54.roa File: f2def12e-66c1-37b9-8fc8-1bfac0f67c54.roa (raw, json) Hash identifier: sHVKMxqyC/TkKM32C8A1iU1WCqpQUOt2Jecl+ChKDQ0= Subject key identifier: 88:81:2D:CF:A7:A6:71:30:42:10:88:CA:89:3A:93:B9:DC:34:0E:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E2252A9ECA1C1DAE33574E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2def12e-66c1-37b9-8fc8-1bfac0f67c54.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 35994 IP address blocks: 2001:4878:c1e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:2a:9e:ca:1c:1d:ae:33:57:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=b1b541d9-7356-48f0-9049-51507505a158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8c:1b:e0:3c:5c:6c:b3:a9:b8:46:db:57:20: 01:a5:f4:ba:a1:57:11:0a:92:2d:6c:6a:74:64:a6: 5a:a5:c2:50:b7:3b:27:20:24:7f:43:63:ce:de:c7: 27:b5:e2:73:03:f1:79:74:43:c9:44:86:ac:04:02: c6:06:18:48:48:ec:dd:09:5c:1f:85:b1:81:69:12: af:7c:45:84:43:75:51:b9:f9:74:3f:3c:91:2d:3f: 81:95:a2:58:c4:07:a8:44:50:09:a3:ce:75:0d:c7: 35:dd:a1:8a:98:33:7e:88:14:c8:c9:d4:47:68:be: 72:3a:ea:e2:03:b4:f6:16:9b:95:3b:4b:33:01:98: 83:5d:a1:11:fd:76:72:3d:99:43:76:9c:4a:0e:ee: f0:9c:36:a6:61:38:a3:24:dd:61:dd:9a:2b:ab:b4: 8a:80:59:6b:ea:54:fc:06:9f:99:9c:c5:d8:be:72: d7:31:14:76:da:77:1b:15:b5:13:3d:b3:53:22:b4: 70:39:24:e3:01:85:6f:9a:f7:43:ae:6b:67:86:5d: eb:16:2e:d1:4d:cc:a4:43:42:3a:70:db:fd:59:97: db:8c:30:33:08:69:0c:8c:20:43:e6:4a:da:cf:f9: d2:32:3b:e8:d3:24:0a:71:55:2f:73:a3:28:17:ba: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:81:2D:CF:A7:A6:71:30:42:10:88:CA:89:3A:93:B9:DC:34:0E:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2def12e-66c1-37b9-8fc8-1bfac0f67c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:c1e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:be:64:00:4e:d3:9c:b9:61:fb:ef:1c:3a:4d:6a:42:8b:e6: 16:8a:fa:99:77:de:67:af:5c:e1:fe:3a:97:4d:fe:c8:61:ec: 53:27:d4:01:1e:ce:26:2a:ad:99:5c:4c:85:f9:31:ca:19:9d: 79:3e:11:ed:34:8c:6f:9b:65:c5:f0:d5:d6:be:98:93:bd:06: e8:03:76:b8:5e:a0:8c:a7:b5:66:88:f5:44:10:c4:31:6b:f1: 97:00:d3:b1:ec:c5:30:30:55:1e:26:0b:6e:cb:7c:63:25:db: 13:89:dc:25:78:f8:cb:f4:7a:8c:8e:c7:b6:b3:6f:88:4e:c6: f0:c7:4a:da:11:bb:79:3e:cf:a9:40:c7:e0:07:79:7a:48:b2: 20:0c:f8:fb:4b:95:c7:66:5b:79:d3:cb:be:6c:14:a6:1f:2a: d6:c8:5f:e7:92:9c:44:0a:ab:9c:6c:82:ba:76:b0:47:cc:d3: 10:89:36:be:d0:e8:72:b7:10:7b:09:c8:26:ff:28:54:24:5e: 7d:9b:1d:23:de:58:bd:56:e4:d0:7c:5f:b3:f4:46:42:a9:56: 2d:63:53:4a:20:16:8e:46:32:17:19:5f:9e:62:f4:7a:fc:a2: d8:42:a9:ad:12:34:d5:b4:ae:3e:81:9c:f0:1a:c2:b3:16:69: 2a:25:7c:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEniJSqeyhwdrjNXToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk YjFiNTQxZDktNzM1Ni00OGYwLTkwNDktNTE1MDc1MDVhMTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYwb4DxcbLOpuEbbVyABpfS6oVcRCpItbGp0 ZKZapcJQtzsnICR/Q2PO3scnteJzA/F5dEPJRIasBALGBhhISOzdCVwfhbGBaRKv fEWEQ3VRufl0PzyRLT+BlaJYxAeoRFAJo851Dcc13aGKmDN+iBTIydRHaL5yOuri A7T2FpuVO0szAZiDXaER/XZyPZlDdpxKDu7wnDamYTijJN1h3Zorq7SKgFlr6lT8 Bp+ZnMXYvnLXMRR22ncbFbUTPbNTIrRwOSTjAYVvmvdDrmtnhl3rFi7RTcykQ0I6 cNv9WZfbjDAzCGkMjCBD5kraz/nSMjvo0yQKcVUvc6MoF7qvVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIiBLc+npnEwQhCIyok6k7ncNA5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjJkZWYxMmUtNjZjMS0z N2I5LThmYzgtMWJmYWMwZjY3YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIeMHg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHW+ZABO05y5YfvvHDpNakKL5haK+pl33mevXOH+OpdN/shh7FMn 1AEeziYqrZlcTIX5McoZnXk+Ee00jG+bZcXw1da+mJO9BugDdrheoIyntWaI9UQQ xDFr8ZcA07HsxTAwVR4mC27LfGMl2xOJ3CV4+Mv0eoyOx7azb4hOxvDHStoRu3k+ z6lAx+AHeXpIsiAM+PtLlcdmW3nTy75sFKYfKtbIX+eSnEQKq5xsgrp2sEfM0xCJ Nr7Q6HK3EHsJyCb/KFQkXn2bHSPeWL1W5NB8X7P0RkKpVi1jU0ogFo5GMhcZX55i 9Hr8othCqa0SNNW0rj6BnPAawrMWaSolfBA= -----END CERTIFICATE-----Generated at Sat Jun 7 14:04:48 2025 by rpki-client