$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/58999dee-a5dd-3f9e-9eae-4627b45d30df.roa File: 58999dee-a5dd-3f9e-9eae-4627b45d30df.roa (raw, json) Hash identifier: lPchSlXBhHj8UXk7H8jpfrHg6c0fuJ5ydeOGAbK1FYQ= Subject key identifier: 01:30:A4:C2:27:1A:46:33:70:F4:6A:31:39:C1:D8:C6:FB:27:CB:DA Certificate issuer: /CN=59df81a1-cce3-4626-9cbb-51da282803bf Certificate serial: 010D0C9F43285849E4EFB1B29626DA20004CA808 Authority key identifier: D9:70:2F:5B:89:D9:C5:D3:86:61:81:94:5A:20:7B:35:45:3B:3D:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/58999dee-a5dd-3f9e-9eae-4627b45d30df.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 399557 IP address blocks: 2001:504:109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:b1:b2:96:26:da:20:00:4c:a8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59df81a1-cce3-4626-9cbb-51da282803bf Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=5c112c70-c864-438a-8017-008918941756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:1a:f5:2b:07:a5:a6:67:59:60:df:7f:69: 0c:ea:17:f3:20:5e:65:0b:40:5f:cd:f5:13:f7:43: dd:b9:64:59:43:db:75:bc:83:ab:ef:3e:ac:c7:2c: 1c:c7:11:0e:9b:1e:3d:6a:5b:2a:9a:44:80:b1:9a: e8:d4:02:c4:8b:dd:52:a2:b3:b6:05:13:b7:c2:79: 2c:63:f3:ed:56:a3:a2:5a:6e:95:92:d4:eb:2b:ff: b8:76:0a:b2:d8:af:b7:46:cb:14:a9:44:27:fd:7f: ee:a1:90:63:67:a5:a2:0f:fd:f2:20:e5:eb:c1:85: cc:c8:67:b3:92:66:90:2c:36:38:f2:e1:63:04:51: c2:1d:0e:23:c5:dd:76:64:81:91:7b:02:cf:f5:be: d5:88:b8:4b:2f:e4:00:da:51:db:b2:bf:9c:a7:63: 66:fb:0c:b4:ba:89:3c:51:fc:13:7d:49:0d:6f:27: 08:81:68:7c:7a:92:6b:0a:79:33:ef:da:f7:d1:52: b0:eb:c8:02:40:ee:8c:fb:8e:5b:7c:11:15:0b:55: 5b:62:f0:b1:a0:20:35:7c:1a:7a:f2:2e:3e:22:1c: 65:d0:9c:8c:79:e9:f2:5b:ea:ca:9e:88:42:85:3e: d3:9f:f3:b4:8e:26:df:97:3c:46:8b:34:17:e1:6e: e0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:30:A4:C2:27:1A:46:33:70:F4:6A:31:39:C1:D8:C6:FB:27:CB:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/58999dee-a5dd-3f9e-9eae-4627b45d30df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.crl X509v3 Authority Key Identifier: keyid:D9:70:2F:5B:89:D9:C5:D3:86:61:81:94:5A:20:7B:35:45:3B:3D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:109::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ce:33:29:ce:db:0f:34:6b:74:ec:bb:71:10:d5:83:7d:a4: 0c:db:0a:0d:46:21:42:5b:b2:58:95:96:f5:7e:d4:5f:0b:94: 12:4a:7e:43:f2:6d:53:c1:27:33:ff:86:8c:72:69:00:b2:d3: c8:8e:61:f8:95:0e:bb:9d:5b:ac:0b:d6:3f:ec:71:67:da:ee: 21:18:ea:65:8b:a6:98:2e:10:8e:d4:41:38:77:98:ce:89:95: 12:a8:21:19:b4:a5:5d:52:d6:4c:8f:67:09:2e:bc:39:d8:35: ee:d4:7c:bd:f3:00:88:60:95:fa:88:f7:66:58:06:08:7d:71: 66:d0:cd:3b:09:a3:f9:45:88:fc:76:0a:55:06:2f:1c:2c:6c: 39:2a:df:7e:72:80:f6:b5:18:9b:24:2f:f6:73:ce:8f:51:16: 41:86:79:97:d9:ec:6b:d3:8d:75:27:08:3f:13:7e:7c:f5:b0: 2d:40:43:11:c4:42:f1:7a:67:ee:52:52:45:da:78:ba:32:1e: bb:c4:7c:0f:72:db:ab:b7:88:8a:6b:10:d4:45:a5:60:29:39: ff:28:e0:e4:b7:6f:db:d6:f1:2b:8f:25:5e:d2:b0:b3:0e:0a: 37:19:b5:28:67:8f:32:48:a7:a7:ff:ea:75:b2:28:15:4b:27: b4:6e:f0:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnk77GylibaIABMqAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlkZjgxYTEtY2NlMy00NjI2LTljYmItNTFkYTI4Mjgw M2JmMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NWMxMTJjNzAtYzg2NC00MzhhLTgwMTctMDA4OTE4OTQxNzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdAa9SsHpaZnWWDff2kM6hfzIF5lC0BfzfUT 90PduWRZQ9t1vIOr7z6sxywcxxEOmx49alsqmkSAsZro1ALEi91SorO2BRO3wnks Y/PtVqOiWm6VktTrK/+4dgqy2K+3RssUqUQn/X/uoZBjZ6WiD/3yIOXrwYXMyGez kmaQLDY48uFjBFHCHQ4jxd12ZIGRewLP9b7ViLhLL+QA2lHbsr+cp2Nm+wy0uok8 UfwTfUkNbycIgWh8epJrCnkz79r30VKw68gCQO6M+45bfBEVC1VbYvCxoCA1fBp6 8i4+Ihxl0JyMeenyW+rKnohChT7Tn/O0jibflzxGizQX4W7gfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAEwpMInGkYzcPRqMTnB2Mb7J8vaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWRm ODFhMS1jY2UzLTQ2MjYtOWNiYi01MWRhMjgyODAzYmYvNTg5OTlkZWUtYTVkZC0z ZjllLTllYWUtNDYyN2I0NWQzMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTlkZjgxYTEtY2NlMy00NjI2LTlj YmItNTFkYTI4MjgwM2JmLzU5ZGY4MWExLWNjZTMtNDYyNi05Y2JiLTUxZGEyODI4 MDNiZi5jcmwwHwYDVR0jBBgwFoAU2XAvW4nZxdOGYYGUWiB7NUU7PfQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWRmODFhMS1jY2UzLTQ2MjYtOWNiYi01MWRh MjgyODAzYmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAEJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEvOMynO2w80a3Tsu3EQ1YN9pAzbCg1GIUJbsliVlvV+1F8LlBJK fkPybVPBJzP/hoxyaQCy08iOYfiVDrudW6wL1j/scWfa7iEY6mWLppguEI7UQTh3 mM6JlRKoIRm0pV1S1kyPZwkuvDnYNe7UfL3zAIhglfqI92ZYBgh9cWbQzTsJo/lF iPx2ClUGLxwsbDkq335ygPa1GJskL/Zzzo9RFkGGeZfZ7GvTjXUnCD8Tfnz1sC1A QxHEQvF6Z+5SUkXaeLoyHrvEfA9y26u3iIprENRFpWApOf8o4OS3b9vW8SuPJV7S sLMOCjcZtShnjzJIp6f/6nWyKBVLJ7Ru8OA= -----END CERTIFICATE-----Generated at Tue Jul 1 15:58:19 2025 by rpki-client