$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa File: 9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa (raw, json) Hash identifier: L8eMcx/mR+PvyH7EMaML8gq6tvuRiL5UOE4rQBlo6To= Subject key identifier: B7:B1:C5:5F:5B:A4:9F:57:86:31:0A:2C:76:BD:E0:BC:98:1A:8F:05 Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F432858499DBF3042863F9C1EDA0B1900 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 11067 IP address blocks: 2605:d800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:30:42:86:3f:9c:1e:da:0b:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=555f5cd0-8622-4de5-baf6-3aafc12e664c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:7c:95:cb:d6:cc:38:bb:63:a5:47:17:2a: 94:f9:fb:5c:1e:72:88:4c:33:11:fa:01:e1:36:19: c6:e2:2a:5e:35:17:7e:05:09:38:2b:d4:76:35:5b: 0f:61:6e:0f:a5:4d:4a:3c:8a:a0:ef:a3:48:9e:6e: 83:69:c0:01:5a:ce:6f:30:f0:3e:85:4b:c4:56:cc: 5f:db:8b:2f:72:10:1d:f2:d2:da:c7:c2:61:e3:f0: da:0a:26:55:29:27:56:08:3d:7a:b1:16:a3:21:16: e2:54:ca:e9:d4:83:05:aa:54:10:6e:41:7e:0c:b3: 2d:f0:99:ff:b7:d9:50:1f:f8:b5:92:24:76:72:81: 05:3a:b4:3e:80:55:19:79:58:12:88:af:62:4c:03: 0a:54:b3:bd:fd:14:f0:a7:7a:42:80:cb:93:c5:25: e4:e6:fd:c3:de:ba:36:3c:a4:f2:b3:f7:5e:c2:93: 8e:b4:c6:e5:59:8a:ec:79:2d:c3:7b:ed:4f:3d:d5: f3:77:0d:9c:de:5a:f8:8a:df:2d:bf:12:f8:79:94: 3b:67:45:48:b3:d8:af:c5:fb:d4:4c:ae:58:64:9e: d9:d8:49:c6:81:d2:bc:8d:60:57:ea:39:75:3f:26: 77:05:65:0d:38:73:c0:7f:15:e8:33:43:61:9c:ed: 3e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B1:C5:5F:5B:A4:9F:57:86:31:0A:2C:76:BD:E0:BC:98:1A:8F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv6: 2605:d800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c0:69:f3:8d:2d:95:a0:07:32:77:66:e8:48:fe:70:b5:88: d7:2f:8b:5c:04:06:9e:cb:bc:65:58:4a:ca:bc:af:2b:20:93: 70:f9:7c:0a:07:36:22:db:3f:32:10:7b:3f:22:3e:45:94:63: 3e:b0:b9:96:3d:18:c8:fc:2f:d6:cd:4a:cb:99:4e:65:df:64: ba:d5:68:ff:6a:5f:2e:48:e5:3f:f2:d3:bd:65:d1:36:62:fa: ee:40:2a:85:d3:bd:4d:32:94:05:5a:22:1d:5c:53:0f:be:f5: ba:f0:4c:7b:0a:f7:ec:d3:24:52:8e:00:47:35:c6:7f:31:c7: 45:68:4b:ea:c8:33:7d:d9:45:c5:29:ff:98:55:fa:f2:65:1d: cb:52:58:68:9d:78:3f:e1:f1:0d:44:68:78:be:16:32:39:6d: 49:3e:d2:83:0b:d7:65:c9:08:72:cb:bc:d5:9b:2d:3d:f3:d7: 69:24:b0:f3:28:81:c9:69:24:50:e5:ce:27:52:51:d2:35:af: 7f:33:9c:8a:17:70:7f:c5:6a:e5:8d:fc:fb:8d:04:95:bc:03: 3c:3d:4c:88:0e:72:ca:3e:3c:8f:ae:37:12:0e:5d:00:9f:b5: 2d:f2:1c:20:39:85:4a:9f:5e:6d:77:e4:16:86:03:c4:77:a2: 01:ba:fb:f6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmdvzBChj+cHtoLGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NTU1ZjVjZDAtODYyMi00ZGU1LWJhZjYtM2FhZmMxMmU2NjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY18lcvWzDi7Y6VHFyqU+ftcHnKITDMR+gHh NhnG4ipeNRd+BQk4K9R2NVsPYW4PpU1KPIqg76NInm6DacABWs5vMPA+hUvEVsxf 24svchAd8tLax8Jh4/DaCiZVKSdWCD16sRajIRbiVMrp1IMFqlQQbkF+DLMt8Jn/ t9lQH/i1kiR2coEFOrQ+gFUZeVgSiK9iTAMKVLO9/RTwp3pCgMuTxSXk5v3D3ro2 PKTys/dewpOOtMblWYrseS3De+1PPdXzdw2c3lr4it8tvxL4eZQ7Z0VIs9ivxfvU TK5YZJ7Z2EnGgdK8jWBX6jl1PyZ3BWUNOHPAfxXoM0NhnO0+WQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLexxV9bpJ9XhjEKLHa94LyYGo8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvOWRhNWFmNGUtZGFlNi0z YTEwLTk2ZTMtZTgzZWE0YzkwNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXYADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAwGnzjS2VoAcyd2boSP5wtYjXL4tcBAaey7xlWErKvK8rIJNw+XwK BzYi2z8yEHs/Ij5FlGM+sLmWPRjI/C/WzUrLmU5l32S61Wj/al8uSOU/8tO9ZdE2 YvruQCqF071NMpQFWiIdXFMPvvW68Ex7Cvfs0yRSjgBHNcZ/McdFaEvqyDN92UXF Kf+YVfryZR3LUlhonXg/4fENRGh4vhYyOW1JPtKDC9dlyQhyy7zVmy0989dpJLDz KIHJaSRQ5c4nUlHSNa9/M5yKF3B/xWrljfz7jQSVvAM8PUyIDnLKPjyPrjcSDl0A n7Ut8hwgOYVKn15td+QWhgPEd6IBuvv2 -----END CERTIFICATE-----Generated at Sat May 10 23:04:04 2025 by rpki-client