$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/657f4e52-d18a-31c3-a83a-299192cabbc4.roa File: 657f4e52-d18a-31c3-a83a-299192cabbc4.roa (raw, json) Hash identifier: HJXwSGCzGAzhKuZ71ipOzBL6Gru8O7+gZYJ8DIQebbk= Subject key identifier: C0:58:BB:5A:2F:5A:63:4D:6A:16:A1:4B:84:39:5C:F0:9D:10:E5:BA Certificate issuer: /CN=111c4633-f730-480a-8516-3382e9a5eda3 Certificate serial: 010D0C9F4328584954706612B9F4E34CA4320780 Authority key identifier: 4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/657f4e52-d18a-31c3-a83a-299192cabbc4.roa Signing time: Thu 27 Mar 2025 18:48:12 +0000 ROA not before: Thu 27 Mar 2025 18:48:12 +0000 ROA not after: Wed 25 Jun 2025 18:48:12 +0000 asID: 13538 IP address blocks: 2001:504:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:70:66:12:b9:f4:e3:4c:a4:32:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111c4633-f730-480a-8516-3382e9a5eda3 Validity Not Before: Mar 27 18:48:12 2025 GMT Not After : Jun 25 18:48:12 2025 GMT Subject: CN=5c40e0b2-a0fe-4171-937e-51b79bfcf48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:dc:2d:18:08:22:47:75:72:4d:54:23:d6: d9:38:b2:26:9b:44:55:75:ee:da:d3:d8:27:d7:e1: 1b:11:05:3b:90:2b:87:61:1a:27:9c:e9:16:73:34: d8:05:f3:91:0c:e5:1a:24:75:77:9f:7f:9b:db:f5: d6:c1:85:bd:81:94:3c:87:88:18:4a:ef:e0:a9:7b: 2e:83:64:f8:1f:40:62:4c:aa:51:ff:f7:d4:df:05: 48:56:8c:05:d6:94:89:ec:dd:87:6a:e3:e7:5a:d8: 00:8c:18:b0:db:c8:a4:07:1c:73:48:74:bb:59:d2: af:bd:ed:4a:48:a4:fe:f8:7e:f1:30:d6:a7:03:c8: e6:52:5a:9f:a8:42:6b:ea:81:c0:0b:8b:3e:cb:4c: 2c:b7:34:6b:76:fb:fa:b5:8d:32:80:a8:2f:18:1f: cd:dc:20:99:93:49:fc:dd:e9:f3:cc:dd:ba:25:a4: 4c:4e:c3:72:0a:a9:e4:16:f9:e3:16:62:44:8d:24: 56:75:65:16:fe:34:64:12:d5:b7:31:29:64:75:0d: 54:a0:3b:9c:38:60:8d:e7:76:e6:60:28:34:02:e7: a3:60:0e:c3:37:77:e3:bf:c7:4e:40:6f:41:35:19: 8c:f7:72:41:53:d1:0a:36:3a:1e:a5:c6:57:27:a0: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:58:BB:5A:2F:5A:63:4D:6A:16:A1:4B:84:39:5C:F0:9D:10:E5:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/657f4e52-d18a-31c3-a83a-299192cabbc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl X509v3 Authority Key Identifier: keyid:4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:1e:8c:16:a5:25:d4:8d:a8:db:db:37:01:38:41:a5:f7:db: 75:bb:9d:33:ad:6a:c0:b5:3a:3c:c6:03:50:0d:a0:d9:84:28: 15:48:73:c7:a7:dc:7f:a7:6a:d4:20:28:60:5f:8e:ab:24:21: a3:06:90:16:47:93:75:28:eb:4c:07:22:9a:34:80:9b:30:dd: ab:69:2e:b7:cf:7f:85:91:fc:14:f0:5a:ee:3a:96:f5:e5:e2: 5b:b1:ac:80:06:ba:85:bf:2b:9c:b9:f9:84:8c:c7:35:48:88: 5f:2c:ff:3b:1f:92:1e:7a:23:a4:bb:af:62:1d:7a:24:69:49: ef:1a:f5:63:1c:3a:a1:6b:2e:33:7d:f5:17:d5:4f:4a:9d:4f: cc:42:04:0e:11:db:28:da:74:3d:1f:44:2d:07:43:7a:01:77: f2:b4:99:d2:ba:88:5f:c5:4e:e4:ce:03:24:23:09:20:87:d4: 3a:aa:fe:42:41:ac:b7:3b:17:84:d0:56:a9:09:1e:c6:06:1f: 65:2e:1d:79:82:97:05:ee:70:95:7b:b1:e3:7c:20:66:09:7e: f6:aa:da:ef:3c:8d:24:5e:27:29:77:90:44:59:3a:bb:b0:bd: ed:d4:c9:ce:21:aa:a7:b7:4f:c0:55:09:81:f0:3d:79:3c:3f: ae:2a:18:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElUcGYSufTjTKQyB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExYzQ2MzMtZjczMC00ODBhLTg1MTYtMzM4MmU5YTVl ZGEzMB4XDTI1MDMyNzE4NDgxMloXDTI1MDYyNTE4NDgxMlowLzEtMCsGA1UEAxMk NWM0MGUwYjItYTBmZS00MTcxLTkzN2UtNTFiNzliZmNmNDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMPcLRgIIkd1ck1UI9bZOLImm0RVde7a09gn 1+EbEQU7kCuHYRonnOkWczTYBfORDOUaJHV3n3+b2/XWwYW9gZQ8h4gYSu/gqXsu g2T4H0BiTKpR//fU3wVIVowF1pSJ7N2HauPnWtgAjBiw28ikBxxzSHS7WdKvve1K SKT++H7xMNanA8jmUlqfqEJr6oHAC4s+y0wstzRrdvv6tY0ygKgvGB/N3CCZk0n8 3enzzN26JaRMTsNyCqnkFvnjFmJEjSRWdWUW/jRkEtW3MSlkdQ1UoDucOGCN53bm YCg0AuejYA7DN3fjv8dOQG9BNRmM93JBU9EKNjoepcZXJ6BNjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMBYu1ovWmNNahahS4Q5XPCdEOW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMTFj NDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgyZTlhNWVkYTMvNjU3ZjRlNTItZDE4YS0z MWMzLWE4M2EtMjk5MTkyY2FiYmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTExYzQ2MzMtZjczMC00ODBhLTg1 MTYtMzM4MmU5YTVlZGEzLzExMWM0NjMzLWY3MzAtNDgwYS04NTE2LTMzODJlOWE1 ZWRhMy5jcmwwHwYDVR0jBBgwFoAUTe3HwLDrCjnMZRcyMMi2U4gjbEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMTFjNDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgy ZTlhNWVkYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABcejBalJdSNqNvbNwE4QaX323W7nTOtasC1OjzGA1ANoNmEKBVI c8en3H+natQgKGBfjqskIaMGkBZHk3Uo60wHIpo0gJsw3atpLrfPf4WR/BTwWu46 lvXl4luxrIAGuoW/K5y5+YSMxzVIiF8s/zsfkh56I6S7r2IdeiRpSe8a9WMcOqFr LjN99RfVT0qdT8xCBA4R2yjadD0fRC0HQ3oBd/K0mdK6iF/FTuTOAyQjCSCH1Dqq /kJBrLc7F4TQVqkJHsYGH2UuHXmClwXucJV7seN8IGYJfvaq2u88jSReJyl3kERZ Oruwve3Uyc4hqqe3T8BVCYHwPXk8P64qGA4= -----END CERTIFICATE-----Generated at Mon May 12 06:51:56 2025 by rpki-client