$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0c58cabb-3ff1-3ef1-a4d1-d48b2b9c4c54.roa File: 0c58cabb-3ff1-3ef1-a4d1-d48b2b9c4c54.roa (raw, json) Hash identifier: lyt5FHe74Pa+l/5X0x0VeG5TNcHlMgVG//XUURcsx2g= Subject key identifier: E4:B4:A9:74:3A:35:B4:F7:1C:10:9F:19:BF:43:98:E0:4C:F0:C8:36 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F7BF7BCEF4A4AF1661F40 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0c58cabb-3ff1-3ef1-a4d1-d48b2b9c4c54.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 33363 IP address blocks: 2605:a401:8240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:7b:f7:bc:ef:4a:4a:f1:66:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=aef000f1-b61c-4572-ba42-ffd1f7c5dcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:94:bd:75:b1:74:4a:35:3d:8b:fb:34:45:e3: ce:84:70:9d:a4:ab:1b:b4:56:53:b6:76:0e:4b:0d: 68:dc:13:50:16:73:99:e5:a3:1a:48:48:f3:e7:a5: 30:8d:b4:b5:aa:27:e4:48:79:02:4b:e8:2b:83:a9: 1c:06:1a:2f:19:e4:41:38:ea:3b:52:5d:65:e2:01: 83:a0:3c:8c:78:f9:f4:67:50:8e:22:db:63:a1:4e: 32:2d:99:71:55:b2:4a:8f:e3:e5:c5:c1:62:12:a0: 13:13:5b:db:8b:4b:53:85:60:f5:55:e8:15:68:8e: a6:8b:df:ef:4f:4e:f2:ba:1d:e5:32:b6:db:10:c3: 50:31:43:e4:bc:9e:67:27:49:b9:16:bc:3d:64:92: 16:c1:21:fe:dd:d8:5f:bf:4a:c5:70:5f:b1:bb:3a: b0:09:c1:b2:e1:2a:9b:36:7d:be:c1:b4:a9:2d:62: 52:a1:1e:e0:9b:b7:83:71:d8:52:90:79:3c:fc:d4: e0:ea:45:ec:ce:60:33:39:05:3d:a1:17:ed:e1:8a: 10:c3:30:cc:31:ad:79:52:61:31:03:3e:82:49:9a: d5:cf:58:4b:d5:50:d1:0f:94:7c:87:c9:a8:10:be: 25:ef:f9:4e:24:f2:41:43:01:30:fc:c2:b7:30:c8: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B4:A9:74:3A:35:B4:F7:1C:10:9F:19:BF:43:98:E0:4C:F0:C8:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0c58cabb-3ff1-3ef1-a4d1-d48b2b9c4c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8240::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5f:07:c6:e1:de:cb:47:13:6a:94:be:ba:44:fa:57:1a:f4: 78:99:55:bd:df:17:23:d5:c5:f4:34:f4:4b:a3:2d:bd:35:85: a6:0f:74:fa:9c:91:e9:79:8a:99:41:dd:f1:e7:d0:a0:1c:25: 1b:a6:51:34:52:62:7c:b5:39:e7:1d:19:c9:dc:37:70:8c:b9: af:7f:43:4e:2a:b5:0f:59:1c:2a:a5:37:6e:40:47:83:49:55: 9f:fb:ef:f8:a7:96:34:5c:7e:39:57:98:cf:23:47:c9:1d:98: 5d:3e:9a:11:0e:c0:ca:40:ea:fd:1b:43:6f:fe:ba:a0:4a:f3: 8d:b2:2e:07:8b:e6:d0:2e:5c:33:97:55:2a:02:94:41:87:d5: 30:77:b6:9f:16:3d:b0:82:e7:fa:26:e2:13:fe:be:a7:e2:ab: ee:6d:7a:e0:80:d0:bd:91:77:bc:c3:67:6d:fe:04:4b:98:55: dd:90:83:f7:f6:62:e6:63:2b:c4:84:75:a9:31:64:19:fc:5c: 2f:9a:65:b8:c5:97:25:05:9b:a9:1c:33:be:0d:f8:8d:87:4a: 84:f0:5e:a2:92:d6:db:2b:04:be:05:d6:cd:be:30:b8:94:14: 84:30:73:c8:32:b4:81:74:6e:37:e5:5b:0b:cd:bc:b6:bc:2d: 2e:b1:33:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P3v3vO9KSvFmH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YWVmMDAwZjEtYjYxYy00NTcyLWJhNDItZmZkMWY3YzVkY2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpS9dbF0SjU9i/s0RePOhHCdpKsbtFZTtnYO Sw1o3BNQFnOZ5aMaSEjz56UwjbS1qifkSHkCS+grg6kcBhovGeRBOOo7Ul1l4gGD oDyMePn0Z1COIttjoU4yLZlxVbJKj+PlxcFiEqATE1vbi0tThWD1VegVaI6mi9/v T07yuh3lMrbbEMNQMUPkvJ5nJ0m5Frw9ZJIWwSH+3dhfv0rFcF+xuzqwCcGy4Sqb Nn2+wbSpLWJSoR7gm7eDcdhSkHk8/NTg6kXszmAzOQU9oRft4YoQwzDMMa15UmEx Az6CSZrVz1hL1VDRD5R8h8moEL4l7/lOJPJBQwEw/MK3MMhhZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOS0qXQ6NbT3HBCfGb9DmOBM8Mg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMGM1OGNhYmItM2ZmMS0z ZWYxLWE0ZDEtZDQ4YjJiOWM0YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYJA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABFfB8bh3stHE2qUvrpE+lca9HiZVb3fFyPVxfQ09EujLb01haYP dPqckel5iplB3fHn0KAcJRumUTRSYny1OecdGcncN3CMua9/Q04qtQ9ZHCqlN25A R4NJVZ/77/inljRcfjlXmM8jR8kdmF0+mhEOwMpA6v0bQ2/+uqBK842yLgeL5tAu XDOXVSoClEGH1TB3tp8WPbCC5/om4hP+vqfiq+5teuCA0L2Rd7zDZ23+BEuYVd2Q g/f2YuZjK8SEdakxZBn8XC+aZbjFlyUFm6kcM74N+I2HSoTwXqKS1tsrBL4F1s2+ MLiUFIQwc8gytIF0bjflWwvNvLa8LS6xM2s= -----END CERTIFICATE-----Generated at Mon May 5 20:17:28 2025 by rpki-client