$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5d64cfaa-cb61-3815-9d12-66b6234c1e9e.roa File: 5d64cfaa-cb61-3815-9d12-66b6234c1e9e.roa (raw, json) Hash identifier: kofZLBUT/gFLs/1/AecDv4tHQEE1FUS0upNU1pyfYGw= Subject key identifier: 20:04:17:7E:AC:10:AA:35:0E:68:52:EA:02:87:B3:10:48:28:CB:AA Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F9F8261BF903755DFC800 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5d64cfaa-cb61-3815-9d12-66b6234c1e9e.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 33363 IP address blocks: 2605:a401:8130::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:9f:82:61:bf:90:37:55:df:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=df2be5e2-f1af-43ba-bc31-a2b2bc1dbf48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:73:f6:b5:98:23:35:84:11:10:8e:a5:a0:20: 65:58:01:c6:df:bd:a1:e8:6f:3e:74:50:5f:49:ee: 7e:ed:15:75:70:4a:ab:27:16:08:1f:a4:0d:1e:6b: ed:1a:34:fb:a1:f4:20:cc:65:c4:98:cb:64:aa:74: b1:54:3b:be:75:ff:51:6e:37:1f:44:e0:1c:78:9e: 6c:ef:d3:06:98:38:54:03:c2:a0:4d:89:63:ce:a1: 39:9e:1d:03:10:fd:93:db:c5:ee:cc:b1:a6:67:db: e3:2e:87:7c:e6:f5:82:e1:90:e9:b1:fb:e4:2e:00: d9:d6:a1:2b:38:13:8d:6e:46:10:92:4e:d5:b0:06: 17:d8:7e:13:54:ed:75:d3:fb:58:76:ff:7b:e3:48: ea:83:fb:12:ba:3d:6a:63:f4:4d:72:5a:88:f2:2f: 3e:44:14:5f:6b:9d:0e:43:86:aa:b8:35:dd:95:f1: 9f:d8:b0:e2:0a:b3:ed:74:b1:ac:69:c0:b2:e0:7e: 13:8e:c9:f5:4a:3a:8f:fd:5e:ec:32:1e:46:9f:16: e2:0b:17:47:33:a7:8f:57:16:5d:45:12:cd:ff:44: c4:03:c3:09:dc:0d:a5:52:96:7c:72:42:f5:eb:2c: 57:08:33:52:a0:52:31:51:b9:79:71:6e:61:cd:ff: ab:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:04:17:7E:AC:10:AA:35:0E:68:52:EA:02:87:B3:10:48:28:CB:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5d64cfaa-cb61-3815-9d12-66b6234c1e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8130::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:5e:4d:48:64:23:64:65:5f:6b:57:ea:a1:1d:f0:b8:90:4c: 6a:2e:2c:32:45:0d:a9:b6:97:5a:70:b1:eb:c9:d2:76:aa:c6: d5:71:e9:0e:67:98:f3:56:94:85:c1:57:63:a8:0d:08:c3:75: ec:70:05:91:5e:97:24:0e:56:ce:6b:44:63:36:69:a8:6e:44: 1d:81:5c:6a:e1:71:63:af:b6:7a:18:4e:5d:7d:36:cc:85:03: 03:87:55:5a:e4:62:3f:90:3b:da:f4:57:c6:9c:36:a2:cd:d0: a0:28:71:f3:f8:6f:59:1f:f1:4e:f5:ef:e0:d5:f1:32:6e:6b: 67:f1:fa:fe:a1:79:7c:7d:e3:c1:41:51:23:a6:53:ca:b8:b1: 2b:ea:44:ee:61:d8:ce:fe:3f:26:c6:21:e0:87:cc:74:ad:cb: 10:fd:3f:0b:c8:30:c4:b3:a3:48:54:61:8a:ac:d1:c6:d3:39: a6:ef:56:c9:b8:dc:fb:e7:31:37:78:50:f9:bd:26:c6:5e:7e: fc:1e:77:4f:5b:d4:79:fd:1d:9a:16:11:c9:2c:02:7b:df:d0: 5f:bd:32:ff:21:73:cd:95:c5:1a:31:ad:69:f7:09:fc:64:e8: 04:fb:04:6c:8a:1e:4b:4b:6e:f4:c1:f0:e1:74:15:9e:7a:25: b3:27:f5:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P5+CYb+QN1XfyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZGYyYmU1ZTItZjFhZi00M2JhLWJjMzEtYTJiMmJjMWRiZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHP2tZgjNYQREI6loCBlWAHG372h6G8+dFBf Se5+7RV1cEqrJxYIH6QNHmvtGjT7ofQgzGXEmMtkqnSxVDu+df9RbjcfROAceJ5s 79MGmDhUA8KgTYljzqE5nh0DEP2T28XuzLGmZ9vjLod85vWC4ZDpsfvkLgDZ1qEr OBONbkYQkk7VsAYX2H4TVO110/tYdv9740jqg/sSuj1qY/RNclqI8i8+RBRfa50O Q4aquDXdlfGf2LDiCrPtdLGsacCy4H4Tjsn1SjqP/V7sMh5GnxbiCxdHM6ePVxZd RRLN/0TEA8MJ3A2lUpZ8ckL16yxXCDNSoFIxUbl5cW5hzf+rBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCAEF36sEKo1DmhS6gKHsxBIKMuqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNWQ2NGNmYWEtY2I2MS0z ODE1LTlkMTItNjZiNjIzNGMxZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYEw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACheTUhkI2RlX2tX6qEd8LiQTGouLDJFDam2l1pwsevJ0naqxtVx 6Q5nmPNWlIXBV2OoDQjDdexwBZFelyQOVs5rRGM2aahuRB2BXGrhcWOvtnoYTl19 NsyFAwOHVVrkYj+QO9r0V8acNqLN0KAocfP4b1kf8U717+DV8TJua2fx+v6heXx9 48FBUSOmU8q4sSvqRO5h2M7+PybGIeCHzHStyxD9PwvIMMSzo0hUYYqs0cbTOabv Vsm43PvnMTd4UPm9JsZefvwed09b1Hn9HZoWEcksAnvf0F+9Mv8hc82VxRoxrWn3 Cfxk6AT7BGyKHktLbvTB8OF0FZ56JbMn9R8= -----END CERTIFICATE-----Generated at Sat May 10 10:19:03 2025 by rpki-client