$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa File: 5da813c6-3362-3a15-8c8f-01d933e11263.roa (raw, json) Hash identifier: zxLY8x8+kyGBF9gtz0g+FoGdUGlAzt9RMEMnFfpBsT8= Subject key identifier: FD:54:B5:A8:B6:9A:5F:19:07:DE:86:9B:C3:32:45:42:15:F5:53:98 Certificate issuer: /CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Certificate serial: 010D0C9F43285849ABB49B892D00E5CEFF793B00 Authority key identifier: 6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16509 IP address blocks: 2620:10b:b008::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9b:89:2d:00:e5:ce:ff:79:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=23ab9d65-a5e0-4a3c-bfd5-3bc463732733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:54:a7:3b:88:ab:f0:e8:58:96:56:53:58: bb:0d:75:5e:91:b3:b2:46:07:1c:1d:22:a8:36:06: e6:f6:cd:c5:92:94:89:fd:6a:a0:34:12:65:2f:1e: 13:cd:94:95:a3:a1:6d:f1:b9:c9:0d:a7:08:ca:b4: cf:81:05:53:19:55:12:2e:2b:5c:e0:55:bf:01:88: 97:28:91:e8:2c:a6:e2:8b:61:58:a2:c7:c6:ff:04: 84:2d:c1:c0:28:e1:29:5f:f8:34:f2:f3:2a:36:03: 37:8e:7d:b1:05:18:2f:79:d2:eb:d1:2f:ea:c8:a3: 9e:dd:dd:8b:88:14:44:76:78:a6:8b:de:07:38:ac: 6f:99:9b:4c:85:57:d2:af:0f:11:d0:84:74:f1:b7: fd:40:43:20:65:42:24:09:64:3d:3e:59:45:a6:d6: d6:df:27:cd:ad:2a:ae:73:47:79:8d:45:b1:e4:89: 73:f3:4d:3c:78:4b:7c:55:bf:44:8b:70:1f:4a:1b: 6c:77:63:5e:c2:66:de:f8:a6:a6:5f:39:31:71:74: 82:b9:7d:63:1f:74:3c:77:7c:a7:dd:fc:58:68:87: 10:7d:de:41:3c:95:0c:c2:df:9c:f5:a5:cf:c9:2b: d7:d3:7a:d3:4a:56:0b:84:fa:c8:a3:b9:e2:1c:12: fb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:54:B5:A8:B6:9A:5F:19:07:DE:86:9B:C3:32:45:42:15:F5:53:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl X509v3 Authority Key Identifier: keyid:6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer sbgp-ipAddrBlock: critical IPv6: 2620:10b:b008::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a6:28:a8:91:c4:ed:51:8d:b8:4a:6d:54:68:66:03:dc:e6: a3:27:b9:b1:ce:35:1f:0c:c2:b3:c1:33:33:97:02:c2:c0:1a: 39:fb:02:fd:09:56:be:1f:89:cd:7f:79:a0:73:05:9d:6a:32: 44:b5:2a:d1:cf:98:41:db:99:97:ac:34:dc:58:dc:df:e8:9e: c5:65:f5:18:38:52:88:8d:1b:df:ec:f0:7c:ae:7d:ba:d9:1e: 3d:dd:58:0d:f7:5f:c6:4e:70:33:e1:d4:10:4a:e6:5c:32:a4: ed:30:ef:62:0d:4a:dc:48:24:42:8a:7c:83:4b:48:f7:48:32: f3:1c:2c:b2:d9:2c:4f:dd:08:b1:44:ab:20:70:db:e3:90:3a: 6a:c9:e1:bf:39:87:ce:5e:9e:40:c0:86:c2:d4:8e:37:00:7c: df:d5:47:f5:98:54:85:41:9a:1f:ed:b2:3f:9a:92:df:dd:28: 3e:5f:51:de:3e:18:22:2e:6c:0c:08:86:d4:8d:e0:d6:0d:28: 6b:a3:dc:cf:f3:a6:0d:74:e8:fc:1b:ca:fa:ec:34:96:0e:1f: 33:03:c2:2e:a0:46:b6:42:e0:28:a6:16:fa:e0:68:9b:dd:b1: d5:cd:db:42:e0:4a:06:ee:f4:85:25:ce:da:ca:2c:82:e0:0a: 46:53:5e:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmrtJuJLQDlzv95OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNlZjdkYjEtZDBmNy00YTk1LThjMzYtZDE2MmEyOGE1 MmM2MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MjNhYjlkNjUtYTVlMC00YTNjLWJmZDUtM2JjNDYzNzMyNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0pUpzuIq/DoWJZWU1i7DXVekbOyRgccHSKo Ngbm9s3FkpSJ/WqgNBJlLx4TzZSVo6Ft8bnJDacIyrTPgQVTGVUSLitc4FW/AYiX KJHoLKbii2FYosfG/wSELcHAKOEpX/g08vMqNgM3jn2xBRgvedLr0S/qyKOe3d2L iBREdnimi94HOKxvmZtMhVfSrw8R0IR08bf9QEMgZUIkCWQ9PllFptbW3yfNrSqu c0d5jUWx5Ilz8008eEt8Vb9Ei3AfShtsd2Newmbe+KamXzkxcXSCuX1jH3Q8d3yn 3fxYaIcQfd5BPJUMwt+c9aXPySvX03rTSlYLhPrIo7niHBL7AwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP1Utai2ml8ZB96Gm8MyRUIV9VOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2Vm N2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYyYTI4YTUyYzYvNWRhODEzYzYtMzM2Mi0z YTE1LThjOGYtMDFkOTMzZTExMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGNlZjdkYjEtZDBmNy00YTk1LThj MzYtZDE2MmEyOGE1MmM2LzRjZWY3ZGIxLWQwZjctNGE5NS04YzM2LWQxNjJhMjhh NTJjNi5jcmwwHwYDVR0jBBgwFoAUbEoioeXy+BtrS/P6NFeOguEXuyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2VmN2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYy YTI4YTUyYzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABC7AI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGmKKiRxO1RjbhKbVRoZgPc5qMnubHONR8MwrPBMzOXAsLAGjn7 Av0JVr4fic1/eaBzBZ1qMkS1KtHPmEHbmZesNNxY3N/onsVl9Rg4UoiNG9/s8Hyu fbrZHj3dWA33X8ZOcDPh1BBK5lwypO0w72INStxIJEKKfINLSPdIMvMcLLLZLE/d CLFEqyBw2+OQOmrJ4b85h85enkDAhsLUjjcAfN/VR/WYVIVBmh/tsj+akt/dKD5f Ud4+GCIubAwIhtSN4NYNKGuj3M/zpg106PwbyvrsNJYOHzMDwi6gRrZC4CimFvrg aJvdsdXN20LgSgbu9IUlztrKLILgCkZTXjk= -----END CERTIFICATE-----Generated at Mon May 5 20:53:58 2025 by rpki-client