$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c5be503d-4f2d-3c91-bfc4-2f7a6a1454d2.roa File: c5be503d-4f2d-3c91-bfc4-2f7a6a1454d2.roa (raw, json) Hash identifier: lBSCf1zwMYcI/SXNsXuDmiZWBZWEZDl9dC1Nx3Y+v58= Subject key identifier: CE:B8:C1:15:C0:53:86:AE:90:2C:6A:42:40:60:D9:31:7E:F4:26:62 Certificate issuer: /CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9 Certificate serial: 010D0C9F43285849EBEA56FA8093923DFB670900 Authority key identifier: 56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c5be503d-4f2d-3c91-bfc4-2f7a6a1454d2.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 394911 IP address blocks: 2606:d8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:56:fa:80:93:92:3d:fb:67:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=98f04b3a-74ef-4ed0-b9a8-17fd0c660b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:59:90:30:5e:8a:da:d2:17:b9:87:6e:f8: fd:c0:7c:c2:2a:0d:7f:c7:f9:51:f4:bd:a0:6c:c4: 7a:94:62:73:05:23:c6:d3:69:8a:bf:d9:35:5a:05: 8f:1e:c3:f0:81:b5:29:7b:d6:14:30:34:0e:35:0a: 2a:d4:d1:c6:f9:ab:6b:48:ca:4a:d7:a2:80:22:ed: ba:39:36:48:71:f1:fa:c8:60:0a:60:78:23:0b:01: 09:fc:05:3f:38:fc:a5:7c:2c:20:96:21:be:66:02: 31:d4:0a:2d:99:2a:e7:7e:e6:70:d2:7b:1c:b8:07: a1:31:bb:39:02:34:8a:ce:2e:e3:83:9c:c2:90:b9: bc:58:ff:48:fa:4b:46:a3:ef:ac:db:4e:9a:8f:a8: 26:e6:fd:1b:62:bb:82:64:d6:95:19:bb:bc:a1:9b: 3a:15:a9:ac:4a:5b:f3:29:5c:0d:dd:a2:42:93:b9: 22:e9:d6:38:e3:b6:2d:3e:13:77:b8:79:ec:0a:24: a9:fe:cc:c5:2b:92:3c:38:2e:1f:09:44:7d:9b:ac: bc:e5:9c:14:b7:e9:f3:f5:dc:5b:ad:a3:2d:29:fd: eb:4e:7c:39:83:af:f2:6c:21:1a:9d:28:43:fb:2d: 8b:57:aa:18:3b:0d:3c:c3:38:21:81:fa:72:94:9a: b4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B8:C1:15:C0:53:86:AE:90:2C:6A:42:40:60:D9:31:7E:F4:26:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c5be503d-4f2d-3c91-bfc4-2f7a6a1454d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.crl X509v3 Authority Key Identifier: keyid:56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer sbgp-ipAddrBlock: critical IPv6: 2606:d8c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e7:c1:80:e1:44:22:49:80:ae:d3:37:cb:28:89:e5:1c:a7: 62:22:1c:92:5e:e6:37:a6:fa:1d:a0:ba:a2:63:d2:6f:b2:6d: c5:d3:37:aa:27:38:a9:af:87:82:0f:f9:a0:f4:fd:30:38:eb: 9c:21:b0:88:75:59:fa:38:f7:f3:74:47:03:e6:35:f6:2c:bc: cb:8c:41:5a:a0:40:e5:70:df:0b:ec:e2:d5:91:52:68:f0:aa: 60:78:a6:7c:b4:af:4f:93:1a:29:88:9a:82:61:76:a9:8a:a1: c8:fa:4d:eb:92:d4:2b:01:af:3f:ff:42:43:0e:57:fb:f4:22: 77:b7:30:f4:a2:61:6c:13:3d:ce:35:8b:19:ed:7c:f6:4f:c8: 3d:80:b5:ac:ff:2f:6a:a7:08:b8:4c:0a:5f:02:9d:48:46:4c: 73:87:2d:65:cb:8c:48:2e:8e:d0:2c:dc:eb:aa:42:44:a6:87: ae:e7:97:88:51:3e:57:d4:8b:0b:1d:f3:05:ff:5b:ad:9a:d4: 08:5d:4e:a8:eb:d4:bb:df:df:83:f6:9a:c8:30:f6:22:2a:c4: 05:cd:d4:8a:47:5d:77:83:0b:98:e3:24:12:34:6e:0d:b1:ec: 9e:39:a3:72:c0:5f:69:d8:b7:a2:14:11:43:5c:bc:7b:28:25: c2:68:66:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnr6lb6gJOSPftnCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ1NDY1YTItODJjOC00NDQ3LWI2ZGEtN2NhYmMwMTdl M2E5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk OThmMDRiM2EtNzRlZi00ZWQwLWI5YTgtMTdmZDBjNjYwYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxahZkDBeitrSF7mHbvj9wHzCKg1/x/lR9L2g bMR6lGJzBSPG02mKv9k1WgWPHsPwgbUpe9YUMDQONQoq1NHG+atrSMpK16KAIu26 OTZIcfH6yGAKYHgjCwEJ/AU/OPylfCwgliG+ZgIx1AotmSrnfuZw0nscuAehMbs5 AjSKzi7jg5zCkLm8WP9I+ktGo++s206aj6gm5v0bYruCZNaVGbu8oZs6FamsSlvz KVwN3aJCk7ki6dY447YtPhN3uHnsCiSp/szFK5I8OC4fCUR9m6y85ZwUt+nz9dxb raMtKf3rTnw5g6/ybCEanShD+y2LV6oYOw08wzghgfpylJq0iQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM64wRXAU4aukCxqQkBg2TF+9CZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDU0 NjVhMi04MmM4LTQ0NDctYjZkYS03Y2FiYzAxN2UzYTkvYzViZTUwM2QtNGYyZC0z YzkxLWJmYzQtMmY3YTZhMTQ1NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQ1NDY1YTItODJjOC00NDQ3LWI2 ZGEtN2NhYmMwMTdlM2E5L2FkNTQ2NWEyLTgyYzgtNDQ0Ny1iNmRhLTdjYWJjMDE3 ZTNhOS5jcmwwHwYDVR0jBBgwFoAUVvpPUtPktlImmQv7z834oVxj5KkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDU0NjVhMi04MmM4LTQ0NDctYjZkYS03Y2Fi YzAxN2UzYTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbYwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+58GA4UQiSYCu0zfLKInlHKdiIhySXuY3pvodoLqiY9Jvsm3F0zeq Jzipr4eCD/mg9P0wOOucIbCIdVn6OPfzdEcD5jX2LLzLjEFaoEDlcN8L7OLVkVJo 8KpgeKZ8tK9PkxopiJqCYXapiqHI+k3rktQrAa8//0JDDlf79CJ3tzD0omFsEz3O NYsZ7Xz2T8g9gLWs/y9qpwi4TApfAp1IRkxzhy1ly4xILo7QLNzrqkJEpoeu55eI UT5X1IsLHfMF/1utmtQIXU6o69S739+D9prIMPYiKsQFzdSKR113gwuY4yQSNG4N seyeOaNywF9p2LeiFBFDXLx7KCXCaGaC -----END CERTIFICATE-----Generated at Mon Jun 30 07:21:06 2025 by rpki-client