$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/556ab474-b1fc-3b96-bfc3-a128608ae64e.roa File: 556ab474-b1fc-3b96-bfc3-a128608ae64e.roa (raw, json) Hash identifier: iEEmwdCQH9KKYZWKknQukxM2imn1jQLi76dETaB+KMo= Subject key identifier: C3:A4:41:9E:56:39:E9:EA:91:C1:6B:4F:6A:0F:DF:CC:B7:1B:FE:67 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F43285849B6DF54197C5380415B159F80 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/556ab474-b1fc-3b96-bfc3-a128608ae64e.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 32771 IP address blocks: 2620:111:800f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:54:19:7c:53:80:41:5b:15:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=715b3da4-0c94-4e94-af01-9c57ecc5acab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:52:e4:f9:04:02:bd:9b:6a:18:63:a0:56:cc: cb:b2:47:e2:a5:6a:82:92:42:79:12:ad:a7:72:ba: 82:f2:fc:13:9c:11:e5:f9:3a:f6:ee:38:5f:56:ed: 03:c3:f6:0c:0c:2e:46:17:f1:f8:b7:c2:55:cb:53: 28:53:6b:ee:16:5e:99:e4:ad:68:b4:78:1c:39:ee: 76:04:24:d6:a0:fb:ec:48:79:2e:58:04:7a:6c:de: 9c:2d:3a:ac:bb:c6:4c:ee:56:b1:15:3f:ec:1c:18: 70:54:f7:65:be:3c:10:03:05:f6:98:6e:d5:74:16: 33:97:f3:db:ae:14:a9:ea:82:93:6f:ff:db:ad:65: 82:c4:90:e3:90:22:b0:74:52:5e:bd:b3:aa:02:63: 50:eb:08:f1:4c:2b:e6:ea:2f:68:70:77:5d:95:70: fa:a2:ca:3c:b1:c2:d3:7e:ae:28:c8:e5:5c:58:3a: a6:a0:92:2b:8d:90:32:6f:ae:53:96:d6:6f:57:c3: 6c:be:25:ae:82:a0:23:db:f7:23:7d:57:4c:f5:34: 4b:2c:85:78:21:5e:4f:69:26:09:d7:b9:af:c8:6c: a1:23:7a:01:ca:73:ba:81:87:c7:69:ea:bb:fe:ed: 5d:f9:f6:cf:b6:03:ed:16:36:3c:e4:71:3f:ec:85: e5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A4:41:9E:56:39:E9:EA:91:C1:6B:4F:6A:0F:DF:CC:B7:1B:FE:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/556ab474-b1fc-3b96-bfc3-a128608ae64e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:800f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:f2:c7:47:48:59:8c:49:d7:d0:bb:cd:71:b4:0f:79:be:dd: 7e:fa:b2:29:35:46:5c:48:91:27:ef:eb:4c:1c:b9:d3:1c:c0: b5:15:83:31:9f:d6:75:a2:c5:77:7c:68:e1:47:9b:5b:da:bf: 9a:bc:82:8b:9e:9a:f9:0a:a1:9f:c3:89:54:94:1a:ab:bc:28: 18:0f:30:6d:24:eb:aa:95:88:e6:3f:ea:b9:e2:07:88:aa:52: 8e:95:eb:d7:26:11:f3:22:7d:60:1b:8a:ac:4f:10:f3:25:6c: e2:c2:8a:5c:5c:9c:a1:20:8e:4e:46:7e:3e:3f:63:20:70:b4: 90:c9:6b:ad:06:c2:69:41:02:82:3d:76:7c:a8:87:58:cc:d6: e3:3c:16:43:1a:d5:10:2d:a3:00:7a:8b:8f:5f:3a:1e:34:7a: cc:d1:cb:fb:29:e1:a5:e0:6e:80:4b:c5:21:23:9d:ba:2b:21: f1:96:24:1a:8e:a7:00:da:16:c4:14:8d:c4:c1:67:4f:4d:27: 28:fd:af:db:31:95:48:07:44:c0:ec:d7:f5:29:30:d5:cd:6c: 1f:05:10:68:c8:1f:b5:c9:e2:4e:24:18:e7:3b:ac:0d:89:c8: 6d:55:c8:4f:34:66:8a:fd:00:53:de:e2:36:28:11:2a:b6:a9: 2e:72:03:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm231QZfFOAQVsVn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk NzE1YjNkYTQtMGM5NC00ZTk0LWFmMDEtOWM1N2VjYzVhY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVLk+QQCvZtqGGOgVszLskfipWqCkkJ5Eq2n crqC8vwTnBHl+Tr27jhfVu0Dw/YMDC5GF/H4t8JVy1MoU2vuFl6Z5K1otHgcOe52 BCTWoPvsSHkuWAR6bN6cLTqsu8ZM7laxFT/sHBhwVPdlvjwQAwX2mG7VdBYzl/Pb rhSp6oKTb//brWWCxJDjkCKwdFJevbOqAmNQ6wjxTCvm6i9ocHddlXD6oso8scLT fq4oyOVcWDqmoJIrjZAyb65TltZvV8NsviWugqAj2/cjfVdM9TRLLIV4IV5PaSYJ 17mvyGyhI3oBynO6gYfHaeq7/u1d+fbPtgPtFjY85HE/7IXlJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMOkQZ5WOenqkcFrT2oP38y3G/5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvNTU2YWI0NzQtYjFmYy0z Yjk2LWJmYzMtYTEyODYwOGFlNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ7yx0dIWYxJ19C7zXG0D3m+3X76sik1RlxIkSfv60wcudMcwLUV gzGf1nWixXd8aOFHm1vav5q8gouemvkKoZ/DiVSUGqu8KBgPMG0k66qViOY/6rni B4iqUo6V69cmEfMifWAbiqxPEPMlbOLCilxcnKEgjk5Gfj4/YyBwtJDJa60GwmlB AoI9dnyoh1jM1uM8FkMa1RAtowB6i49fOh40eszRy/sp4aXgboBLxSEjnborIfGW JBqOpwDaFsQUjcTBZ09NJyj9r9sxlUgHRMDs1/UpMNXNbB8FEGjIH7XJ4k4kGOc7 rA2JyG1VyE80Zor9AFPe4jYoESq2qS5yA7o= -----END CERTIFICATE-----Generated at Fri May 9 02:45:04 2025 by rpki-client