$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa File: 3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa (raw, json) Hash identifier: t6eZZi8S0s6Rz4sMsUS3nXs5uqL2QfCa7lePjyxRXtc= Subject key identifier: 5B:D1:CC:46:62:C5:A0:B2:6E:64:22:B8:A4:FE:F5:F4:B5:77:7F:12 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F43285849B149F486969E45AC3D747A20 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 32771 IP address blocks: 2620:111:8003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f4:86:96:9e:45:ac:3d:74:7a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d59c6bf6-49bc-47ab-ad71-7fcba319eac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bc:a6:b8:69:c2:59:5d:eb:5e:02:8b:66:fa: fc:c6:44:9a:dc:40:26:eb:e5:22:42:34:1a:a5:4c: 46:2f:a5:ce:c5:81:9a:98:04:3d:84:5e:37:8f:cc: 58:51:4d:b6:a7:44:ce:b0:9d:cc:ac:80:38:a5:66: f4:4f:db:56:7e:53:f3:b9:37:c2:15:ce:99:59:0f: 57:ca:c8:91:d5:41:07:df:53:6d:9f:ed:b9:f1:4c: ed:c6:0a:c1:ff:dc:1e:70:d5:f9:1d:20:c2:12:ce: 4e:2f:14:ba:44:fe:b6:c5:4a:e2:07:40:05:c7:05: 03:fb:d0:82:31:42:fc:3e:6b:c8:9b:0d:3d:ef:ea: 94:20:1b:5f:43:84:ca:a4:b7:38:33:62:45:32:27: 55:7b:9d:50:9d:88:30:b4:aa:1f:36:14:53:a0:4b: 63:9f:df:80:66:ac:9a:87:10:e7:8c:1d:40:f2:34: 1e:5c:bd:e2:c0:f4:b8:a7:fa:a6:b4:b7:58:b5:b9: 63:5a:08:f6:42:43:f2:1e:f0:36:17:ec:a2:dd:00: 9a:91:a1:20:5d:21:58:7e:de:ef:ce:40:3d:1e:2d: 81:d5:1c:7b:13:0c:a5:68:ca:31:b1:1c:f4:b4:77: 80:e1:e4:1d:c1:d1:3f:32:ea:de:30:f4:5d:a8:5b: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D1:CC:46:62:C5:A0:B2:6E:64:22:B8:A4:FE:F5:F4:B5:77:7F:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:8003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:07:36:7b:5f:a1:21:22:14:84:08:ee:a1:90:32:45:9c:d5: 51:ed:99:d2:8f:1d:2c:72:d9:09:80:98:29:c4:ec:5b:e7:db: f8:69:08:70:50:e2:eb:29:94:54:1a:47:86:61:18:43:77:ab: 35:65:00:27:57:0e:2e:8f:84:52:c2:c4:b9:79:35:c2:b3:bf: 01:cc:72:77:94:62:a8:5c:f9:77:a8:45:25:6c:b0:2f:b7:11: f6:7f:b1:02:ad:3c:87:6c:a3:71:bc:df:f3:74:d7:e1:62:5f: 2c:58:17:fd:e1:e7:61:3c:71:3d:2a:22:25:b0:f6:0a:70:86: fb:e9:2b:f8:6c:1c:4e:3a:fa:ac:d5:0d:4e:0a:1c:e7:74:55: 64:11:66:48:7d:88:14:ab:92:41:c3:ce:0e:2d:c8:c0:a3:75: 4b:15:93:ad:26:77:49:ac:ed:44:89:a7:96:ca:9f:bd:81:8a: 98:b0:52:08:d1:ca:84:aa:8f:4b:f5:44:43:ac:28:68:c4:ee: 45:ec:15:33:c5:4a:9e:08:da:77:9b:44:c9:05:fa:ed:62:46: 8c:50:7c:fa:bb:86:c2:d9:56:25:63:8c:59:20:56:1a:f4:79: 50:7f:da:93:a4:27:5f:fe:53:e6:5f:d8:50:71:4e:e6:61:27: fd:b5:fc:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSfSGlp5FrD10eiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDU5YzZiZjYtNDliYy00N2FiLWFkNzEtN2ZjYmEzMTllYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLymuGnCWV3rXgKLZvr8xkSa3EAm6+UiQjQa pUxGL6XOxYGamAQ9hF43j8xYUU22p0TOsJ3MrIA4pWb0T9tWflPzuTfCFc6ZWQ9X ysiR1UEH31Ntn+258UztxgrB/9wecNX5HSDCEs5OLxS6RP62xUriB0AFxwUD+9CC MUL8PmvImw097+qUIBtfQ4TKpLc4M2JFMidVe51QnYgwtKofNhRToEtjn9+AZqya hxDnjB1A8jQeXL3iwPS4p/qmtLdYtbljWgj2QkPyHvA2F+yi3QCakaEgXSFYft7v zkA9Hi2B1Rx7EwylaMoxsRz0tHeA4eQdwdE/MureMPRdqFsg0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFvRzEZixaCybmQiuKT+9fS1d38SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvMzY4MmM4NTctYTFlOS0z M2QyLWJkMGYtYTRkOTVkZjg4ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABUHNntfoSEiFIQI7qGQMkWc1VHtmdKPHSxy2QmAmCnE7Fvn2/hp CHBQ4usplFQaR4ZhGEN3qzVlACdXDi6PhFLCxLl5NcKzvwHMcneUYqhc+XeoRSVs sC+3EfZ/sQKtPIdso3G83/N01+FiXyxYF/3h52E8cT0qIiWw9gpwhvvpK/hsHE46 +qzVDU4KHOd0VWQRZkh9iBSrkkHDzg4tyMCjdUsVk60md0ms7USJp5bKn72Bipiw UgjRyoSqj0v1REOsKGjE7kXsFTPFSp4I2nebRMkF+u1iRoxQfPq7hsLZViVjjFkg Vhr0eVB/2pOkJ1/+U+Zf2FBxTuZhJ/21/D4= -----END CERTIFICATE-----Generated at Tue May 6 00:37:17 2025 by rpki-client