$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa File: 60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa (raw, json) Hash identifier: xUU5FK7VZrfy+pg+9/FO0cnraMLpv1BvpFNXP1xKmdI= Subject key identifier: 48:18:CA:D2:24:55:1C:D0:9E:FF:7D:62:A5:13:A8:EF:69:70:AB:76 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F432858498FC9B32A0CEA4FF7B6A4E240 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 32058 IP address blocks: 2620:0:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b3:2a:0c:ea:4f:f7:b6:a4:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=b6f7b977-be88-4f77-b218-af83b1d4f8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:d3:70:bd:ef:07:73:a6:bd:a2:64:c9:5c: 5e:30:06:d2:57:7a:53:a5:c0:e1:6b:f4:17:17:68: de:2c:c3:d4:14:53:1d:2b:05:88:4c:6e:3e:df:74: a1:ea:a5:06:86:2b:e4:bd:e4:93:10:b3:f7:ee:5a: c8:04:d9:ad:6d:4c:6c:c4:aa:c5:d6:fe:59:f4:e8: bf:20:7d:71:be:4a:a6:04:1c:ae:76:60:41:8f:8b: 56:03:0c:64:9f:76:a5:60:1e:6b:8e:37:56:33:ec: 99:81:c7:1d:1a:f7:a9:9d:1c:47:23:98:6d:7d:af: 69:d8:83:61:dd:c6:ed:25:25:dc:df:ba:26:c4:e5: a5:02:af:17:75:1b:d5:09:10:aa:2a:88:92:28:ac: 1c:ac:60:57:b3:1a:d1:b8:aa:12:56:02:d3:32:0d: 3b:a0:74:ee:d6:5d:6d:ed:d2:33:95:5d:52:f3:61: 42:c7:49:17:92:ec:0b:ba:a9:3b:73:7d:7b:6a:75: 98:a8:0c:b7:fd:70:3a:47:59:20:86:6a:ca:2d:25: 4c:42:b2:99:7c:ed:6e:40:e0:de:4a:58:f1:7c:8c: 9f:48:dc:8f:09:00:f6:92:e4:8d:f4:20:0e:6e:6e: 57:bd:17:96:76:a4:08:95:19:cc:97:48:90:2a:2a: b0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:18:CA:D2:24:55:1C:D0:9E:FF:7D:62:A5:13:A8:EF:69:70:AB:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:3f:67:52:c4:de:4b:67:51:df:23:c9:a1:89:8d:d1:17:0b: b7:13:80:22:e1:82:cd:5b:42:1b:39:46:8c:71:e4:ce:15:d6: 11:8f:93:71:e9:a7:6e:ad:b5:b7:44:df:a7:b1:ce:c7:c3:ad: a2:96:4a:64:73:77:71:98:de:8e:4c:d2:63:22:ec:94:a5:13: cc:b4:b7:c6:a2:f2:a9:05:50:a3:53:9d:d9:d5:bf:61:73:a6: fc:b1:f6:fa:15:b0:1c:8a:35:60:74:c9:3a:31:f3:8c:02:62: 81:cc:94:20:3c:b4:50:22:3a:b6:c9:59:48:cb:28:92:39:6c: dc:02:c7:e7:e4:d6:d8:80:98:e0:14:a1:a1:96:c4:68:b8:1c: 87:4a:0d:e6:0a:82:a5:ab:8a:3a:ee:52:22:bb:ea:65:d9:cf: c3:c5:a2:df:fa:92:b7:52:ac:8b:8c:79:33:63:8c:cd:3e:8b: 33:07:a3:d9:6d:06:09:fd:93:02:cb:79:96:ec:8c:70:98:73: f6:f1:d7:79:75:19:ec:dc:c3:b5:ed:ba:d4:56:4c:0f:a1:17: 9d:df:07:38:3f:04:d7:fe:91:d4:70:40:db:23:6c:4c:4c:5b: ba:ae:7d:d1:12:cc:5c:5a:a3:e5:30:89:c6:fe:fd:69:d1:3e: 3f:38:96:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmPybMqDOpP97ak4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk YjZmN2I5NzctYmU4OC00Zjc3LWIyMTgtYWY4M2IxZDRmOGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00HTcL3vB3OmvaJkyVxeMAbSV3pTpcDha/QX F2jeLMPUFFMdKwWITG4+33Sh6qUGhivkveSTELP37lrIBNmtbUxsxKrF1v5Z9Oi/ IH1xvkqmBByudmBBj4tWAwxkn3alYB5rjjdWM+yZgccdGvepnRxHI5htfa9p2INh 3cbtJSXc37omxOWlAq8XdRvVCRCqKoiSKKwcrGBXsxrRuKoSVgLTMg07oHTu1l1t 7dIzlV1S82FCx0kXkuwLuqk7c317anWYqAy3/XA6R1kghmrKLSVMQrKZfO1uQODe SljxfIyfSNyPCQD2kuSN9CAObm5XvReWdqQIlRnMl0iQKiqwnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEgYytIkVRzQnv99YqUTqO9pcKt2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvNjBkZjZmOGYtMWI3Zi0z MmU2LThhYTMtZjdhYWYxYzJjZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJQ/Z1LE3ktnUd8jyaGJjdEXC7cTgCLhgs1bQhs5Roxx5M4V1hGP k3Hpp26ttbdE36exzsfDraKWSmRzd3GY3o5M0mMi7JSlE8y0t8ai8qkFUKNTndnV v2Fzpvyx9voVsByKNWB0yTox84wCYoHMlCA8tFAiOrbJWUjLKJI5bNwCx+fk1tiA mOAUoaGWxGi4HIdKDeYKgqWrijruUiK76mXZz8PFot/6krdSrIuMeTNjjM0+izMH o9ltBgn9kwLLeZbsjHCYc/bx13l1Gezcw7XtutRWTA+hF53fBzg/BNf+kdRwQNsj bExMW7qufdESzFxao+Uwicb+/WnRPj84lnc= -----END CERTIFICATE-----Generated at Sun May 11 05:28:05 2025 by rpki-client