$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/c65a4b55-f107-3a1b-9632-cdeeaf54662a.roa File: c65a4b55-f107-3a1b-9632-cdeeaf54662a.roa (raw, json) Hash identifier: 0qAsJHfl4pvzokcV8ApdJqXlfGJFoQi/0/Hrzy2zs/w= Subject key identifier: 9E:90:E2:07:61:33:62:38:51:F4:DA:1C:A5:D3:25:7F:47:D8:90:D9 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F43285849B149F49770F736FC1F746180 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/c65a4b55-f107-3a1b-9632-cdeeaf54662a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 32771 IP address blocks: 2620:111:8007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f4:97:70:f7:36:fc:1f:74:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a2e5fc87-85a5-4b7f-894f-f823b95a9f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:29:c9:2e:f3:b9:5a:1a:b4:a3:f9:97:82:bb: 27:9b:0f:be:18:b4:e3:0e:33:31:e4:21:0c:e1:f8: be:3b:a3:7a:33:19:60:78:d6:40:5d:a8:49:72:e0: 70:5d:03:68:66:54:55:9e:31:f9:77:84:e6:60:f8: 4b:fa:71:70:ca:98:ff:ce:4a:23:a4:df:d1:31:53: b4:bd:3d:77:63:a0:e0:d1:b7:6f:db:27:09:17:30: 24:ad:cf:52:0a:77:b3:ea:65:42:7e:c7:41:6a:27: 88:67:6a:15:aa:82:b5:e8:a1:89:fa:d2:e0:17:d1: de:c2:93:35:d4:07:63:09:0c:85:dc:6a:d3:69:17: 94:de:d5:70:e2:2a:0d:7b:33:df:b5:5b:83:91:4e: 2b:04:f4:2a:d1:14:aa:5b:83:c0:82:5f:1f:c3:97: 56:a2:c4:1e:f1:9c:66:b9:d3:14:11:9a:a9:29:9d: 42:c0:97:d1:51:95:71:b1:fb:5d:89:3b:b8:94:31: e0:8f:74:53:03:05:14:33:02:78:09:7d:13:fc:75: 91:9e:e5:5f:e7:c9:eb:59:71:0d:ca:11:15:9d:33: ec:d5:96:77:86:6f:be:39:98:f3:04:8d:ab:06:33: a9:da:f4:20:26:52:de:fc:8f:17:f6:ce:7d:bf:d0: e7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:90:E2:07:61:33:62:38:51:F4:DA:1C:A5:D3:25:7F:47:D8:90:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/c65a4b55-f107-3a1b-9632-cdeeaf54662a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:8007::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:69:62:7d:9d:ce:5b:5a:8c:84:ab:f5:8b:ca:5c:4e:3c:56: b4:5e:67:c1:06:18:93:5e:5f:c0:e5:d6:0b:30:61:f7:ca:81: 03:22:a7:3e:d8:81:a4:55:6d:1a:e9:78:65:20:12:22:c8:85: 49:71:ed:e3:ff:f9:02:f3:d2:43:91:c3:45:2f:20:80:93:af: 33:26:0d:a2:b9:1b:cd:5a:00:8b:b0:b3:b4:4e:d2:d1:88:4e: 9c:a2:4b:1a:7d:e6:45:69:2f:fe:48:bd:30:15:ca:2c:81:1a: f7:23:9c:dc:e6:05:1e:34:db:f8:fa:fa:1f:b7:80:64:3a:8f: b3:43:0a:1c:2a:b9:42:5f:83:21:14:fc:57:00:2a:9f:e6:31: 98:78:22:3d:02:3e:f7:34:e3:d3:66:fb:b2:b4:02:a1:0d:e1: e3:ad:bb:62:27:70:72:02:73:39:2e:d2:57:aa:1a:1b:26:3e: 15:dd:59:36:ca:24:69:3d:17:91:40:d9:00:67:e8:66:7b:14: b2:b2:14:fb:68:6c:da:f7:11:93:f4:17:c9:1b:cf:ec:29:19: 44:99:6d:c7:30:91:29:40:09:02:10:7d:b1:50:90:03:a0:1f: 68:75:19:02:bf:8b:e7:4b:d1:31:ae:17:9b:2d:13:fc:13:8b: d9:76:75:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSfSXcPc2/B90YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTJlNWZjODctODVhNS00YjdmLTg5NGYtZjgyM2I5NWE5Zjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSnJLvO5Whq0o/mXgrsnmw++GLTjDjMx5CEM 4fi+O6N6MxlgeNZAXahJcuBwXQNoZlRVnjH5d4TmYPhL+nFwypj/zkojpN/RMVO0 vT13Y6Dg0bdv2ycJFzAkrc9SCnez6mVCfsdBaieIZ2oVqoK16KGJ+tLgF9HewpM1 1AdjCQyF3GrTaReU3tVw4ioNezPftVuDkU4rBPQq0RSqW4PAgl8fw5dWosQe8Zxm udMUEZqpKZ1CwJfRUZVxsftdiTu4lDHgj3RTAwUUMwJ4CX0T/HWRnuVf58nrWXEN yhEVnTPs1ZZ3hm++OZjzBI2rBjOp2vQgJlLe/I8X9s59v9Dn+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ6Q4gdhM2I4UfTaHKXTJX9H2JDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvYzY1YTRiNTUtZjEwNy0z YTFiLTk2MzItY2RlZWFmNTQ2NjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVpYn2dzltajISr9YvKXE48VrReZ8EGGJNeX8Dl1gswYffKgQMi pz7YgaRVbRrpeGUgEiLIhUlx7eP/+QLz0kORw0UvIICTrzMmDaK5G81aAIuws7RO 0tGITpyiSxp95kVpL/5IvTAVyiyBGvcjnNzmBR402/j6+h+3gGQ6j7NDChwquUJf gyEU/FcAKp/mMZh4Ij0CPvc049Nm+7K0AqEN4eOtu2IncHICczku0leqGhsmPhXd WTbKJGk9F5FA2QBn6GZ7FLKyFPtobNr3EZP0F8kbz+wpGUSZbccwkSlACQIQfbFQ kAOgH2h1GQK/i+dL0TGuF5stE/wTi9l2dTI= -----END CERTIFICATE-----Generated at Tue May 6 08:18:21 2025 by rpki-client