$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/086cb794-8c2f-3726-899f-ae4c1798bd3f.roa File: 086cb794-8c2f-3726-899f-ae4c1798bd3f.roa (raw, json) Hash identifier: K6B4KCZKvf4JFAbP4RgUx8mQbZdb9U+Wp+LRh+K/Nxg= Subject key identifier: 12:1A:05:5C:13:2B:67:DD:BD:D4:34:73:15:42:FD:02:EA:FB:8C:74 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858496CE45B5DD44F8B826D50D380 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/086cb794-8c2f-3726-899f-ae4c1798bd3f.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 30103 IP address blocks: 2620:123:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:5b:5d:d4:4f:8b:82:6d:50:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=e181b26e-c890-4381-8198-334d5ce0159e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:76:4f:8a:88:df:20:61:d5:af:eb:56:92:ac: 26:36:bd:53:a6:e5:94:e4:1c:3e:7b:8b:4b:57:af: 97:32:d6:cb:c3:98:a9:1b:13:92:00:cb:6a:f4:27: ac:54:a5:34:a9:7b:20:a4:a0:11:0f:9f:71:c7:4d: ad:5b:ce:1d:e4:e5:5a:ad:c4:a8:4f:ea:6a:9a:42: 15:b2:f9:fb:6d:ad:d4:45:4c:21:f1:12:f7:ac:47: b7:b9:30:c7:7a:ee:55:02:a0:bc:b5:53:ec:db:22: 84:5e:05:87:69:2c:2b:bc:6e:3e:6a:e4:ba:9c:e1: 6b:2b:b1:8c:8b:ba:f9:29:6a:53:eb:4c:36:3b:0f: 47:fd:2f:e0:ce:04:b5:14:7a:2a:e8:fa:d3:55:68: 13:e4:e3:d7:bf:ce:a5:b9:10:bf:f9:89:f3:98:94: c1:37:1c:69:d4:64:86:36:dc:e1:02:6b:e1:9a:c9: 21:70:27:90:0b:ba:8d:99:dd:78:4b:a2:ec:bf:04: 6a:cd:41:b7:04:da:4d:3f:28:eb:f2:d2:88:b4:75: d6:ab:ae:47:0a:10:25:22:39:f9:2c:69:b4:ab:fd: 11:ee:f8:72:6e:87:e5:d3:87:07:d0:9e:41:cb:84: 61:64:29:37:de:01:a4:a3:7e:14:a5:2c:6c:f8:dc: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1A:05:5C:13:2B:67:DD:BD:D4:34:73:15:42:FD:02:EA:FB:8C:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/086cb794-8c2f-3726-899f-ae4c1798bd3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:2080::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c6:3b:52:ab:c5:47:8d:4b:e0:63:05:18:7c:90:84:cf:70: ba:e4:ec:7c:29:a0:49:1c:68:f2:2f:43:8a:10:c8:69:3d:ad: ac:e0:70:19:cd:c9:ee:3e:de:b4:50:1a:c0:8d:c3:85:98:ac: be:52:1b:06:0f:e0:29:fd:5e:43:ef:e4:90:6a:d4:2d:75:67: cb:5e:63:16:f1:af:e4:c5:46:9e:83:e5:c4:11:c9:3c:ba:80: ff:b2:8e:c4:8a:fc:48:1c:48:95:66:c2:3e:d5:2b:05:c5:3b: 99:1c:04:72:de:4c:99:fc:bb:33:b7:57:64:3f:a0:d8:80:e0: 5d:d1:3a:39:e5:7d:7f:de:a0:e4:5f:c6:2e:65:a7:97:04:33: e1:1d:3b:8a:2d:9e:9e:22:22:1e:70:c8:71:45:8c:26:d8:2b: 59:00:ed:b1:38:70:4c:8c:29:0c:13:a9:e3:93:4d:43:c2:f8: 98:81:c7:d8:b6:59:34:2e:a1:b0:1a:02:ae:12:da:ba:69:a6: 19:1a:24:44:56:b1:76:69:14:8f:6f:e2:5e:5c:47:86:0e:8d: e3:a5:96:ff:17:ff:29:3c:0b:6c:15:c1:df:08:3f:45:e8:16: 70:c0:a3:f0:84:f3:b0:0d:c7:0e:02:60:d6:37:e4:35:9a:f4: 5b:0e:5f:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEls5Ftd1E+Lgm1Q04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ZTE4MWIyNmUtYzg5MC00MzgxLTgxOTgtMzM0ZDVjZTAxNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXZPiojfIGHVr+tWkqwmNr1TpuWU5Bw+e4tL V6+XMtbLw5ipGxOSAMtq9CesVKU0qXsgpKARD59xx02tW84d5OVarcSoT+pqmkIV svn7ba3URUwh8RL3rEe3uTDHeu5VAqC8tVPs2yKEXgWHaSwrvG4+auS6nOFrK7GM i7r5KWpT60w2Ow9H/S/gzgS1FHoq6PrTVWgT5OPXv86luRC/+YnzmJTBNxxp1GSG NtzhAmvhmskhcCeQC7qNmd14S6LsvwRqzUG3BNpNPyjr8tKItHXWq65HChAlIjn5 LGm0q/0R7vhybofl04cH0J5By4RhZCk33gGko34UpSxs+NyVbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBIaBVwTK2fdvdQ0cxVC/QLq+4x0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMDg2Y2I3OTQtOGMyZi0z NzI2LTg5OWYtYWU0YzE3OThiZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHfGO1KrxUeNS+BjBRh8kITPcLrk7HwpoEkcaPIvQ4oQyGk9razg cBnNye4+3rRQGsCNw4WYrL5SGwYP4Cn9XkPv5JBq1C11Z8teYxbxr+TFRp6D5cQR yTy6gP+yjsSK/EgcSJVmwj7VKwXFO5kcBHLeTJn8uzO3V2Q/oNiA4F3ROjnlfX/e oORfxi5lp5cEM+EdO4otnp4iIh5wyHFFjCbYK1kA7bE4cEyMKQwTqeOTTUPC+JiB x9i2WTQuobAaAq4S2rppphkaJERWsXZpFI9v4l5cR4YOjeOllv8X/yk8C2wVwd8I P0XoFnDAo/CE87ANxw4CYNY35DWa9FsOX5w= -----END CERTIFICATE-----Generated at Sun Apr 6 17:46:38 2025 by rpki-client