$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/aff59bdc-f068-3ecb-a235-3ed47409a9d8.roa File: aff59bdc-f068-3ecb-a235-3ed47409a9d8.roa (raw, json) Hash identifier: rnLzgFnmtm3UAxKl98XT201okgwKRFOBsAxZRMRHT7E= Subject key identifier: AA:9C:19:47:CD:7E:45:66:D6:28:0A:B1:4B:59:08:86:A8:B2:BD:A2 Certificate issuer: /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Certificate serial: 010D0C9F43285849C20A202747A54CAA34314340 Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/aff59bdc-f068-3ecb-a235-3ed47409a9d8.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 61112 IP address blocks: 2602:fa4f:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:20:27:47:a5:4c:aa:34:31:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=4157a29e-c337-4ebb-9c4b-a7417f7211e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:11:3e:09:d7:60:b9:17:18:df:30:58:63:87: 72:f2:d6:29:83:c4:97:50:55:0d:9f:70:a9:d8:60: 06:1b:9c:55:30:a5:51:90:f5:ab:c7:f6:d5:22:b7: 93:c1:b3:70:fe:cf:f2:d3:4c:0d:85:8a:2e:dc:40: 77:60:cd:6c:46:b4:d6:f7:a7:f0:39:1e:cc:17:d9: 4d:ed:d2:21:5f:33:16:c2:95:d5:4f:af:72:60:5a: d9:f4:a8:2e:6f:c9:20:aa:8b:00:88:cb:32:a2:44: 81:16:0d:bd:dc:33:57:cc:28:6c:f4:f9:80:93:24: bb:97:eb:51:56:5d:44:d8:01:5a:aa:9f:f6:2f:5b: 73:a5:e4:7b:95:a3:5d:22:33:08:09:ac:0b:8d:08: be:3c:91:62:e7:27:17:c7:12:3b:c1:49:19:d6:7f: 6b:12:36:53:ee:53:db:f5:86:f7:8a:b6:6a:c5:c2: f6:91:2a:2f:b7:8a:05:81:89:89:f4:01:64:42:67: 1c:f7:f3:3b:bc:66:dd:63:ec:62:f3:7b:59:f7:69: a9:d9:86:82:8d:ad:aa:64:90:47:ce:af:47:a6:88: 3d:99:f5:17:e4:95:10:64:da:72:df:15:2c:b5:9a: 18:39:33:14:c6:b1:6a:85:30:da:0d:0f:b6:f3:55: 5e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9C:19:47:CD:7E:45:66:D6:28:0A:B1:4B:59:08:86:A8:B2:BD:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/aff59bdc-f068-3ecb-a235-3ed47409a9d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl X509v3 Authority Key Identifier: keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa4f:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:70:04:72:17:ab:dc:de:18:a9:71:23:0f:97:f0:5d:aa:2f: fb:e4:40:d2:4c:91:84:4a:eb:31:08:69:fe:dc:c9:e2:df:45: 8f:78:1c:90:aa:72:fa:02:3a:f9:6b:f7:72:fa:48:d3:48:75: 09:c1:cf:1e:b8:d7:b6:26:d1:01:cd:e1:2b:75:14:81:85:a2: 7b:db:1a:0a:96:fe:f3:f0:4b:f8:3a:1c:e5:62:2e:b1:fc:ca: 7a:49:36:70:79:80:49:d2:18:9c:f2:9b:77:a8:f7:78:6b:1a: 4b:b5:5c:53:fa:a2:e5:9c:75:04:49:2f:40:7a:49:27:d8:ed: dd:7d:7a:46:7f:12:18:ec:6e:ee:8f:40:ab:12:f0:5a:28:53: 62:ec:d2:c4:07:f9:d1:8f:93:ca:f2:9f:58:ce:18:b0:32:69: 40:97:f9:b2:b9:78:b5:89:c7:eb:06:be:96:c8:4b:03:3b:c7: 46:a2:18:10:6c:ca:32:45:e4:d9:0f:ce:31:4e:4f:0e:ac:17: 1c:3b:1e:ba:5b:da:d8:94:5a:db:e4:cb:f8:d8:62:6c:b4:f6: d2:b1:44:d5:aa:98:d4:1e:63:70:60:85:31:37:78:d3:ec:13: be:ad:f3:2e:bd:fc:17:c0:4f:21:22:8c:f2:12:5f:71:d3:bb: 9b:dd:6c:fe -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnCCiAnR6VMqjQxQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2 YmY3MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NDE1N2EyOWUtYzMzNy00ZWJiLTljNGItYTc0MTdmNzIxMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRE+CddguRcY3zBYY4dy8tYpg8SXUFUNn3Cp 2GAGG5xVMKVRkPWrx/bVIreTwbNw/s/y00wNhYou3EB3YM1sRrTW96fwOR7MF9lN 7dIhXzMWwpXVT69yYFrZ9Kgub8kgqosAiMsyokSBFg293DNXzChs9PmAkyS7l+tR Vl1E2AFaqp/2L1tzpeR7laNdIjMICawLjQi+PJFi5ycXxxI7wUkZ1n9rEjZT7lPb 9Yb3irZqxcL2kSovt4oFgYmJ9AFkQmcc9/M7vGbdY+xi83tZ92mp2YaCja2qZJBH zq9Hpog9mfUX5JUQZNpy3xUstZoYOTMUxrFqhTDaDQ+281VeiQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKqcGUfNfkVm1igKsUtZCIaosr2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4 ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvYWZmNTliZGMtZjA2OC0z ZWNiLWEyMzUtM2VkNDc0MDlhOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1 ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2 NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4 ZTU2NjZiZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6TwIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAnXAEcher3N4YqXEjD5fwXaov++RA0kyRhErrMQhp/tzJ4t9Fj3gc kKpy+gI6+Wv3cvpI00h1CcHPHrjXtibRAc3hK3UUgYWie9saCpb+8/BL+Doc5WIu sfzKekk2cHmASdIYnPKbd6j3eGsaS7VcU/qi5Zx1BEkvQHpJJ9jt3X16Rn8SGOxu 7o9AqxLwWihTYuzSxAf50Y+TyvKfWM4YsDJpQJf5srl4tYnH6wa+lshLAzvHRqIY EGzKMkXk2Q/OMU5PDqwXHDseulva2JRa2+TL+NhibLT20rFE1aqY1B5jcGCFMTd4 0+wTvq3zLr38F8BPISKM8hJfcdO7m91s/g== -----END CERTIFICATE-----Generated at Thu May 8 19:01:10 2025 by rpki-client