$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f70d9506-a4e9-3287-80d3-3e488fad71c4.roa File: f70d9506-a4e9-3287-80d3-3e488fad71c4.roa (raw, json) Hash identifier: pXGhl80sKRGSi6rEjV99W1WS1d44np+vMXmyCB9OuDM= Subject key identifier: B2:88:50:11:BF:B8:67:C1:32:D0:FA:84:FE:62:65:E9:49:53:42:58 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584A43DAFA8C77E8BE45CFC28580 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f70d9506-a4e9-3287-80d3-3e488fad71c4.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 31898 IP address blocks: 2620:123:208b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:fa:8c:77:e8:be:45:cf:c2:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=e953e7e9-f165-4d3a-8b6e-faab22d39980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:fb:e3:9f:47:b2:27:69:b9:88:5c:31:6e: ce:60:4d:17:e7:c8:29:bb:4f:08:1c:c7:33:fc:f1: 95:e5:e5:d4:b0:f6:9e:33:ce:50:05:bb:6e:b4:77: 3b:bd:aa:bd:0a:33:1c:e6:c5:59:fd:ef:dc:00:1f: 31:1c:9d:9a:89:50:a7:17:58:7d:2c:71:63:70:30: be:05:a5:46:26:15:48:f1:d9:33:37:d7:ae:ee:f9: 29:3d:8a:9f:05:9c:f4:77:b0:27:25:02:bb:f1:a5: 76:17:4b:52:3b:c1:aa:1d:d1:64:2b:7b:65:17:f4: 0f:61:2e:87:fb:85:99:d9:2c:40:34:c2:e8:62:4d: aa:05:48:75:bb:8e:62:7b:20:88:43:07:e9:7d:2c: 50:94:12:34:10:f6:d0:c4:37:2c:05:bb:0c:23:ef: be:ad:ad:a6:c2:f6:96:27:c4:90:16:87:d5:48:d9: c5:7e:b9:ea:5c:4d:96:49:ef:bb:0e:b7:a6:73:77: 4d:14:3c:4f:9d:cd:1f:44:da:c9:9c:da:b4:45:f9: 4f:3b:8e:7d:cd:18:54:11:f8:ac:b5:75:44:04:52: 19:07:99:9d:e3:c3:f0:cc:62:29:0f:af:2b:7c:1e: b0:0d:67:30:8c:e6:95:a6:5e:fd:2a:e8:91:99:af: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:88:50:11:BF:B8:67:C1:32:D0:FA:84:FE:62:65:E9:49:53:42:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f70d9506-a4e9-3287-80d3-3e488fad71c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:208b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:0a:a2:a7:cb:66:43:eb:a7:77:16:10:c2:7d:6c:6a:a1:d6: fc:0e:a8:da:57:21:f9:80:3c:3e:7e:ae:f1:35:54:36:29:e5: 5b:32:6c:d4:95:c0:63:52:b9:76:ba:b5:d1:c6:0d:65:59:b2: d1:2d:52:80:3c:58:fb:75:07:43:57:24:e3:11:8f:86:87:b0: b8:5f:ba:f1:e4:41:4c:10:03:c4:4b:e8:dd:18:8b:3e:26:e7: 7d:2a:28:7e:a8:2c:11:e0:d5:b6:04:c2:55:93:fb:3d:ac:97: 21:8d:78:ec:d7:a6:0c:a6:f0:2f:3f:c1:de:29:59:03:81:c6: d0:bc:a1:32:38:e7:eb:8f:8d:77:58:04:a0:b4:05:3b:28:89: f6:5d:39:5a:e6:1d:d5:88:b0:57:b1:ab:24:57:4a:0e:2d:4d: d2:45:22:a1:04:3b:06:d3:37:a9:8f:b3:e9:03:98:3f:8b:69: e7:04:9d:4d:03:3e:a2:5c:1d:5d:ef:46:a5:da:00:a7:ee:29: a1:b1:63:22:cb:a9:cd:e4:75:fe:4a:e1:b6:5e:23:78:17:df: 7f:12:ef:8f:c5:f6:48:68:db:38:5c:04:c0:06:ad:6d:12:11: 87:aa:35:c3:74:2e:e9:e9:93:a4:34:48:4c:9c:e2:ec:9a:6a: 04:1e:b3:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpD2vqMd+i+Rc/ChYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ZTk1M2U3ZTktZjE2NS00ZDNhLThiNmUtZmFhYjIyZDM5OTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2L7459HsidpuYhcMW7OYE0X58gpu08IHMcz /PGV5eXUsPaeM85QBbtutHc7vaq9CjMc5sVZ/e/cAB8xHJ2aiVCnF1h9LHFjcDC+ BaVGJhVI8dkzN9eu7vkpPYqfBZz0d7AnJQK78aV2F0tSO8GqHdFkK3tlF/QPYS6H +4WZ2SxANMLoYk2qBUh1u45ieyCIQwfpfSxQlBI0EPbQxDcsBbsMI+++ra2mwvaW J8SQFofVSNnFfrnqXE2WSe+7Dremc3dNFDxPnc0fRNrJnNq0RflPO459zRhUEfis tXVEBFIZB5md48PwzGIpD68rfB6wDWcwjOaVpl79KuiRma8V7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLKIUBG/uGfBMtD6hP5iZelJU0JYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZjcwZDk1MDYtYTRlOS0z Mjg3LTgwZDMtM2U0ODhmYWQ3MWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyCL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHgKoqfLZkPrp3cWEMJ9bGqh1vwOqNpXIfmAPD5+rvE1VDYp5Vsy bNSVwGNSuXa6tdHGDWVZstEtUoA8WPt1B0NXJOMRj4aHsLhfuvHkQUwQA8RL6N0Y iz4m530qKH6oLBHg1bYEwlWT+z2slyGNeOzXpgym8C8/wd4pWQOBxtC8oTI45+uP jXdYBKC0BTsoifZdOVrmHdWIsFexqyRXSg4tTdJFIqEEOwbTN6mPs+kDmD+LaecE nU0DPqJcHV3vRqXaAKfuKaGxYyLLqc3kdf5K4bZeI3gX338S74/F9kho2zhcBMAG rW0SEYeqNcN0Lunpk6Q0SEyc4uyaagQes4U= -----END CERTIFICATE-----Generated at Sun Jun 29 14:05:50 2025 by rpki-client