$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9abf490e-12d9-3db2-b661-3e64feafa9e2.roa File: 9abf490e-12d9-3db2-b661-3e64feafa9e2.roa (raw, json) Hash identifier: gGTgerq4Wp/rl6rYZkpQ2jpC0cWgJlX31rJV1oX8sy8= Subject key identifier: 59:6B:ED:6B:9B:A4:81:DB:AB:D1:B7:03:98:1C:EC:F7:80:FC:6C:07 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584964843A54590D52837DB33900 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9abf490e-12d9-3db2-b661-3e64feafa9e2.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 31898 IP address blocks: 2620:123:208c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:3a:54:59:0d:52:83:7d:b3:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=e707fafe-5647-4982-8463-b38e87d52353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:84:67:43:fe:15:47:f4:9a:ad:19:29:ff: 5a:55:9f:ca:11:69:71:48:92:08:09:60:2a:16:a0: 94:da:d6:94:4b:ab:76:3b:27:02:11:9c:c7:4b:86: 5b:36:29:66:35:61:94:82:fc:01:86:15:a4:05:10: e0:d2:44:da:c5:cf:b7:8b:bf:4b:1b:c9:cc:01:b6: 84:dc:0a:fb:67:e7:e2:b0:f1:61:f7:75:94:6e:8a: c7:4d:81:3b:53:90:ad:14:41:51:4b:e6:f8:e4:02: 74:89:95:fe:a4:f2:3d:17:3d:46:9a:46:70:5f:97: ff:f8:44:37:c5:55:c2:33:c3:3d:d6:16:dc:38:3c: 80:f9:0c:3c:8c:8f:83:13:2a:2a:d8:85:7c:8c:01: e5:a3:90:5a:5f:b8:70:60:a2:b3:a3:1e:23:de:e3: 35:fe:ae:54:39:3b:46:f6:a3:68:51:5c:80:3e:1b: 05:50:3c:56:ec:a3:5c:79:fc:7f:1d:3d:2e:cd:a4: 21:54:8f:62:e7:c8:3b:07:51:6f:e0:00:55:51:74: 0b:cc:41:fd:ff:b6:ce:cc:73:39:ba:68:8d:fa:72: 80:12:aa:73:77:c5:59:eb:6a:24:b7:26:72:04:35: 03:90:59:e4:0c:38:38:75:a5:c5:66:d3:5f:10:f8: 17:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6B:ED:6B:9B:A4:81:DB:AB:D1:B7:03:98:1C:EC:F7:80:FC:6C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9abf490e-12d9-3db2-b661-3e64feafa9e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:208c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d2:92:06:7d:91:ab:0c:9e:51:85:1b:48:3e:c0:43:f4:fc: 73:dc:60:aa:82:0b:e9:84:5b:33:16:60:d4:f8:09:5b:44:65: a9:f9:82:c7:84:fe:7c:df:56:28:70:d5:c7:b4:7a:2b:21:21: fd:3d:38:26:b4:28:ff:e5:63:f9:59:7c:53:7f:6d:e3:85:76: 68:e3:88:73:4f:1b:5c:ce:19:82:f5:1c:80:63:02:67:d6:19: f0:30:47:e9:24:c3:24:18:de:d3:de:59:7d:ba:ed:4e:ac:ed: 30:45:f1:fe:cf:a4:62:88:95:93:83:37:a2:4e:5c:15:86:ea: fd:5d:c8:48:2f:fd:60:5c:f6:c3:5a:dc:27:73:02:d3:5d:16: 69:d8:cc:5e:db:d0:02:f4:42:ed:1b:f4:eb:25:45:ed:ee:6b: 7e:d8:0b:14:10:e9:e4:f4:30:cb:69:56:18:5e:ee:8a:21:dd: 6e:0b:a7:54:a8:65:9e:93:cf:2b:55:a3:9d:f5:2f:ed:ec:77: 11:f0:a0:31:ec:2b:53:79:1c:a8:f3:7e:ca:d0:1f:6e:ec:4f: 04:d7:93:9c:02:da:8b:80:4b:8e:d7:73:7f:0f:db:9e:5c:67: c3:40:ca:ae:67:76:95:1b:71:2e:b6:db:55:be:64:bc:25:c0: 41:32:ae:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElkhDpUWQ1Sg32zOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk ZTcwN2ZhZmUtNTY0Ny00OTgyLTg0NjMtYjM4ZTg3ZDUyMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryWEZ0P+FUf0mq0ZKf9aVZ/KEWlxSJIICWAq FqCU2taUS6t2OycCEZzHS4ZbNilmNWGUgvwBhhWkBRDg0kTaxc+3i79LG8nMAbaE 3Ar7Z+fisPFh93WUborHTYE7U5CtFEFRS+b45AJ0iZX+pPI9Fz1GmkZwX5f/+EQ3 xVXCM8M91hbcODyA+Qw8jI+DEyoq2IV8jAHlo5BaX7hwYKKzox4j3uM1/q5UOTtG 9qNoUVyAPhsFUDxW7KNcefx/HT0uzaQhVI9i58g7B1Fv4ABVUXQLzEH9/7bOzHM5 umiN+nKAEqpzd8VZ62oktyZyBDUDkFnkDDg4daXFZtNfEPgXeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFlr7WubpIHbq9G3A5gc7PeA/GwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvOWFiZjQ5MGUtMTJkOS0z ZGIyLWI2NjEtM2U2NGZlYWZhOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyCM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIDSkgZ9kasMnlGFG0g+wEP0/HPcYKqCC+mEWzMWYNT4CVtEZan5 gseE/nzfVihw1ce0eishIf09OCa0KP/lY/lZfFN/beOFdmjjiHNPG1zOGYL1HIBj AmfWGfAwR+kkwyQY3tPeWX267U6s7TBF8f7PpGKIlZODN6JOXBWG6v1dyEgv/WBc 9sNa3CdzAtNdFmnYzF7b0AL0Qu0b9OslRe3ua37YCxQQ6eT0MMtpVhhe7ooh3W4L p1SoZZ6TzytVo531L+3sdxHwoDHsK1N5HKjzfsrQH27sTwTXk5wC2ouAS47Xc38P 255cZ8NAyq5ndpUbcS6221W+ZLwlwEEyrg0= -----END CERTIFICATE-----Generated at Sat Apr 5 18:06:39 2025 by rpki-client