$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/022dd074-afdd-3083-9ebd-637a44081763.roa File: 022dd074-afdd-3083-9ebd-637a44081763.roa (raw, json) Hash identifier: /eMO1B6KUIZNwaBY2NDnGyofcfNltg4K6UsJwFAmRb0= Subject key identifier: 78:72:DA:55:EC:FE:CA:D5:84:C2:CF:78:9B:38:DE:30:E8:55:6B:A1 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F432858491ED6DBE0B61675BA3EF25F40 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/022dd074-afdd-3083-9ebd-637a44081763.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 397373 IP address blocks: 2604:f440:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:db:e0:b6:16:75:ba:3e:f2:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=382ccc19-9b0b-4489-98ca-a99c2c27d7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:83:34:18:5b:b8:a0:ca:cb:e6:bd:bc:78:0c: c8:5e:f9:6d:49:52:7d:bb:96:55:34:93:0c:48:54: af:1a:3a:a5:51:32:12:d1:0a:4b:9c:ce:87:68:8f: 93:f9:01:72:4e:ca:7e:a6:e5:b8:c6:00:34:3d:43: d6:8d:f2:ef:18:77:bb:50:b4:db:9e:d0:c4:b8:5d: 32:8e:6a:90:13:a8:2a:56:85:21:2c:e8:1b:e4:68: e7:b7:72:40:aa:89:92:80:2d:88:d1:31:91:2f:19: cb:6a:7d:04:f8:a4:fd:9a:fb:5a:fd:3a:e1:01:9b: 40:9f:6a:40:ed:69:3a:75:83:1f:01:c0:63:15:e1: 95:c0:2d:71:33:f2:3b:86:66:a4:93:d0:35:d0:a5: 55:64:1f:c3:1d:86:87:38:b7:c2:07:79:c7:bb:ae: 03:6c:f6:d8:4e:95:0b:98:e5:c1:15:13:06:2c:e1: 53:e2:a4:ce:b8:00:23:f8:c6:22:fd:6a:f9:b6:bc: b4:bd:11:61:96:c0:87:a0:aa:3a:52:5f:97:13:78: 9f:10:82:30:58:33:02:a8:c2:df:ea:11:6a:5e:6c: fc:99:8a:49:ab:08:f0:89:89:ef:bd:81:45:1a:c1: a7:6f:45:33:46:27:f0:58:0f:63:e6:81:22:68:f9: 6b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:72:DA:55:EC:FE:CA:D5:84:C2:CF:78:9B:38:DE:30:E8:55:6B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/022dd074-afdd-3083-9ebd-637a44081763.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv6: 2604:f440:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9a:f6:33:11:19:dc:a8:86:61:6d:b6:b1:b9:66:23:01:6d: e8:a8:fc:20:16:a3:6e:f0:67:44:54:57:30:2d:c9:13:6a:da: f9:08:e2:e9:e5:e5:03:37:20:fd:77:3c:cf:4c:5a:54:94:ae: 9d:08:1b:ce:4a:2c:de:e7:f0:b0:fc:2d:f2:f8:2a:9e:02:73: 5e:df:08:66:27:49:c1:ab:97:0f:42:34:43:93:cd:ae:a5:c3: b6:78:15:06:2e:38:35:4b:a2:05:1d:50:c5:be:30:66:04:8f: 43:af:7a:9c:86:04:4e:af:71:84:40:29:12:8a:7e:c7:9f:54: 40:0f:eb:79:0a:db:c3:82:bf:76:75:f0:a2:bb:64:29:2b:1a: a4:84:03:dc:74:a3:a7:ba:98:b8:de:2f:09:b1:33:60:9a:fa: de:07:62:23:71:68:37:31:be:6a:9a:8a:0c:3e:0c:18:bd:0c: b9:f7:e7:24:f0:1f:66:53:ce:4a:bf:2e:e6:27:35:52:de:c2: 1a:46:0b:fc:fa:cf:8f:06:39:e7:1c:ea:eb:63:13:c8:09:4b: c6:a0:b9:f4:e9:0e:b4:db:9e:46:f3:e6:80:0e:7a:9e:9d:7e: 5f:3d:fa:11:3f:1c:dd:61:64:8e:05:95:c9:dd:3d:27:18:0a: fd:20:29:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEke1tvgthZ1uj7yX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MzgyY2NjMTktOWIwYi00NDg5LTk4Y2EtYTk5YzJjMjdkN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4M0GFu4oMrL5r28eAzIXvltSVJ9u5ZVNJMM SFSvGjqlUTIS0QpLnM6HaI+T+QFyTsp+puW4xgA0PUPWjfLvGHe7ULTbntDEuF0y jmqQE6gqVoUhLOgb5Gjnt3JAqomSgC2I0TGRLxnLan0E+KT9mvta/TrhAZtAn2pA 7Wk6dYMfAcBjFeGVwC1xM/I7hmakk9A10KVVZB/DHYaHOLfCB3nHu64DbPbYTpUL mOXBFRMGLOFT4qTOuAAj+MYi/Wr5try0vRFhlsCHoKo6Ul+XE3ifEIIwWDMCqMLf 6hFqXmz8mYpJqwjwiYnvvYFFGsGnb0UzRifwWA9j5oEiaPlr7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHhy2lXs/srVhMLPeJs43jDoVWuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvMDIyZGQwNzQtYWZkZC0z MDgzLTllYmQtNjM3YTQ0MDgxNzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgT0QAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE2a9jMRGdyohmFttrG5ZiMBbeio/CAWo27wZ0RUVzAtyRNq2vkI 4unl5QM3IP13PM9MWlSUrp0IG85KLN7n8LD8LfL4Kp4Cc17fCGYnScGrlw9CNEOT za6lw7Z4FQYuODVLogUdUMW+MGYEj0OvepyGBE6vcYRAKRKKfsefVEAP63kK28OC v3Z18KK7ZCkrGqSEA9x0o6e6mLjeLwmxM2Ca+t4HYiNxaDcxvmqaigw+DBi9DLn3 5yTwH2ZTzkq/LuYnNVLewhpGC/z6z48GOecc6utjE8gJS8agufTpDrTbnkbz5oAO ep6dfl89+hE/HN1hZI4FlcndPScYCv0gKZs= -----END CERTIFICATE-----Generated at Mon May 5 07:21:13 2025 by rpki-client