$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/0a59adf1-4ce0-3512-b604-484c769f0384.roa File: 0a59adf1-4ce0-3512-b604-484c769f0384.roa (raw, json) Hash identifier: kJToHgEmk+vqEhy9MKvwiC7CxLnmoieslRRuzFqIGZQ= Subject key identifier: 5F:69:73:93:07:C9:23:68:BD:A5:4A:D1:53:45:6C:67:51:C3:1A:26 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F43285849B6DF53E8ADB34BC7C99124C0 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/0a59adf1-4ce0-3512-b604-484c769f0384.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 32771 IP address blocks: 2620:111:800d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:53:e8:ad:b3:4b:c7:c9:91:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=e6ddbc75-3de1-4846-89b6-d4f9b083306f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:c9:ca:20:0b:8b:cb:84:39:50:aa:60:f4: 27:e6:f8:2b:75:cb:52:cb:7c:3c:45:11:24:c5:ff: 1f:3e:ae:af:9a:12:5f:df:6b:88:19:a5:c5:81:b8: 3b:27:c4:cd:02:95:a9:0a:18:6a:ec:94:ed:1a:98: f2:e4:65:15:e9:02:e8:0a:08:a6:e3:43:6d:23:70: 9a:4c:8b:0a:5e:e9:88:21:03:9f:15:c6:50:7d:57: e4:58:58:b7:52:42:d1:c3:5b:ef:c2:81:bb:c1:3d: 26:a6:65:2e:02:23:6c:8d:30:3e:4f:f0:67:5b:4d: cf:ce:e4:b8:d8:fe:c4:9b:c1:67:ad:b2:e0:ee:6f: 3f:d7:93:e1:09:c3:e8:6c:10:21:ff:84:19:48:96: d5:88:a6:a5:f3:67:29:2e:7c:09:08:3f:1a:00:3c: df:50:d3:34:ef:54:4d:5f:38:ee:bb:c5:62:99:b0: 13:65:8c:0c:d4:a6:3d:3e:f6:42:9f:88:4d:8f:88: fc:ce:e1:56:44:38:11:4a:16:e2:e1:e1:fd:c8:ec: 97:06:ee:95:cb:1c:cb:f2:45:22:92:02:33:3f:89: f0:90:0c:3c:76:93:73:a0:64:77:6f:d2:af:22:76: 67:a9:33:fe:ca:78:be:b8:7d:f9:87:be:e5:0a:d1: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:69:73:93:07:C9:23:68:BD:A5:4A:D1:53:45:6C:67:51:C3:1A:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/0a59adf1-4ce0-3512-b604-484c769f0384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:800d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7c:05:84:16:03:55:87:a2:17:8b:3e:64:01:7e:e0:fb:3f: 67:fd:81:bf:29:0a:cc:61:c0:3a:92:37:cb:a4:a1:0a:c4:34: 09:c1:17:75:df:db:ce:6a:12:72:b5:26:8f:62:f0:c3:f0:08: 9c:32:b1:d5:f9:d6:83:0e:91:38:e3:6b:06:62:16:c4:8f:e1: c2:e0:69:cf:11:84:65:5c:0b:de:70:83:52:45:ef:f4:18:2c: b0:44:09:9e:61:58:ea:46:b7:18:16:9f:08:4b:64:0a:d5:7f: d0:04:bd:8b:7f:e5:94:1f:f8:77:bf:d9:ad:62:9b:c3:2c:ad: 04:2b:9c:0d:1a:49:f8:2b:75:0a:5f:3d:70:8c:82:c3:61:4e: 5d:90:d3:57:e3:c3:08:2c:fd:8c:b4:e0:12:79:56:97:88:7b: 56:8c:f3:ed:fd:52:15:71:ad:1f:e8:ec:2b:e3:5e:eb:2e:72: b7:e8:df:76:79:fa:22:fb:1d:77:6f:e1:16:48:6c:3b:2d:77: 9c:87:31:f1:29:29:bd:86:91:48:0c:2c:2c:1b:15:9e:80:c0: b7:e2:44:c5:23:79:96:3e:63:5b:14:fc:16:76:c8:db:c8:8b: 91:72:77:26:07:80:1e:59:3a:70:06:18:71:ae:02:11:13:18: 15:51:8a:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm231PorbNLx8mRJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk ZTZkZGJjNzUtM2RlMS00ODQ2LTg5YjYtZDRmOWIwODMzMDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmffJyiALi8uEOVCqYPQn5vgrdctSy3w8RREk xf8fPq6vmhJf32uIGaXFgbg7J8TNApWpChhq7JTtGpjy5GUV6QLoCgim40NtI3Ca TIsKXumIIQOfFcZQfVfkWFi3UkLRw1vvwoG7wT0mpmUuAiNsjTA+T/BnW03PzuS4 2P7Em8FnrbLg7m8/15PhCcPobBAh/4QZSJbViKal82cpLnwJCD8aADzfUNM071RN Xzjuu8VimbATZYwM1KY9PvZCn4hNj4j8zuFWRDgRShbi4eH9yOyXBu6VyxzL8kUi kgIzP4nwkAw8dpNzoGR3b9KvInZnqTP+yni+uH35h77lCtG2OQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF9pc5MHySNovaVK0VNFbGdRwxomMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvMGE1OWFkZjEtNGNlMC0z NTEyLWI2MDQtNDg0Yzc2OWYwMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADl8BYQWA1WHoheLPmQBfuD7P2f9gb8pCsxhwDqSN8ukoQrENAnB F3Xf285qEnK1Jo9i8MPwCJwysdX51oMOkTjjawZiFsSP4cLgac8RhGVcC95wg1JF 7/QYLLBECZ5hWOpGtxgWnwhLZArVf9AEvYt/5ZQf+He/2a1im8MsrQQrnA0aSfgr dQpfPXCMgsNhTl2Q01fjwwgs/Yy04BJ5VpeIe1aM8+39UhVxrR/o7CvjXusucrfo 33Z5+iL7HXdv4RZIbDstd5yHMfEpKb2GkUgMLCwbFZ6AwLfiRMUjeZY+Y1sU/BZ2 yNvIi5FydyYHgB5ZOnAGGHGuAhETGBVRiiU= -----END CERTIFICATE-----Generated at Sat May 10 13:58:20 2025 by rpki-client