$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/d6f6aaca-ed6b-3db8-b03c-829187f0d236.roa File: d6f6aaca-ed6b-3db8-b03c-829187f0d236.roa (raw, json) Hash identifier: pMTqBoJDXAP6fyRVnjtD40d7OdEqTl+8txujKzFa5fg= Subject key identifier: 6B:BF:7B:40:9A:99:E3:F0:B9:D8:60:5B:B9:62:21:91:D7:C0:64:41 Certificate issuer: /CN=5bac54b9-66dc-4956-863d-1804cfb9e853 Certificate serial: 010D0C9F43285849DF5A6F95788C29776E8CC600 Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/d6f6aaca-ed6b-3db8-b03c-829187f0d236.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 399077 IP address blocks: 2606:4dc0:1::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:6f:95:78:8c:29:77:6e:8c:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=dd5fc9c6-6f70-4b48-a1fa-0503a8600040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:0a:f5:94:f0:89:43:fd:b9:33:17:ae:ba: ca:09:fa:5a:c5:4e:5f:71:bf:26:d6:3d:3c:f8:ac: b5:63:48:f3:e4:1a:8f:fa:1e:4a:3d:7b:22:25:cb: 66:f2:5f:06:4f:9f:63:3f:3c:82:97:35:12:e8:5d: b9:ab:c5:ec:5c:4b:27:ae:17:a5:8b:91:48:0c:27: 5d:18:e8:62:d8:6c:d4:87:54:bd:dc:21:35:0a:45: 9c:05:a3:09:cd:c8:40:96:25:ef:f0:e7:e4:7d:e6: 21:aa:e3:c3:eb:ee:45:dc:3c:b2:1f:bf:9a:4e:a9: 1c:ec:fb:5d:50:80:c2:03:44:68:e5:5d:63:b9:ae: 81:a0:31:52:4f:92:04:07:21:0f:99:5c:82:6e:f0: 1d:ee:4d:64:d7:48:bc:92:c7:8a:c3:ba:07:39:b5: 0b:44:99:36:47:c9:cc:85:4f:48:69:98:6c:61:1d: f6:1b:54:2d:6e:c7:54:78:d7:0e:84:24:61:e0:3d: 82:e3:a2:7b:0e:72:a4:ea:4a:93:2f:d1:a7:53:1f: ee:ac:ff:9f:4f:26:6a:e7:4e:5c:42:ea:f5:90:6c: 9d:bd:c0:be:f5:eb:14:43:2f:dd:34:c7:d3:63:79: b7:b2:50:a6:1d:ce:e8:6b:8d:9b:ee:f6:51:8e:14: 5d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BF:7B:40:9A:99:E3:F0:B9:D8:60:5B:B9:62:21:91:D7:C0:64:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/d6f6aaca-ed6b-3db8-b03c-829187f0d236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl X509v3 Authority Key Identifier: keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer sbgp-ipAddrBlock: critical IPv6: 2606:4dc0:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:32:84:91:c6:a8:4f:60:ac:cd:da:9e:70:23:fe:c2:85:e2: c9:04:50:90:3e:d0:1d:2f:5a:05:da:09:e4:be:96:3d:32:af: 15:53:76:92:e3:f7:21:67:e0:c4:b1:b6:ec:3f:d6:d6:4a:d5: 71:dd:98:c6:b7:ef:c5:77:75:aa:48:b4:41:2a:30:74:12:d2: 81:30:9e:77:9d:72:c1:53:7c:51:93:92:f2:29:70:99:56:f1: f7:1d:ef:bb:ee:a7:d1:9d:19:32:68:13:59:c6:f1:d4:34:c3: 6a:68:29:11:d3:51:eb:d2:18:38:ea:d9:3a:c3:bb:d3:ee:07: e1:c4:82:f9:cc:cc:f0:7b:ea:31:96:28:08:5c:c0:b4:a6:e3: ef:c2:49:d0:e7:42:3a:8d:19:ee:7b:78:0f:23:e6:96:4c:97: df:9c:01:1a:03:0a:db:d6:04:32:41:28:cb:9c:b5:92:5c:52: 77:41:79:62:c1:cc:36:66:93:de:b6:d8:29:46:2e:34:44:91: ad:70:c0:90:6b:e8:fa:e0:d8:12:36:37:46:35:ac:21:fc:65: 4b:53:8b:7d:0b:72:35:4e:c8:45:17:e2:f2:bc:d4:0f:29:f5: 7c:bf:0d:89:fe:fe:26:a0:16:ef:05:66:42:2f:a1:1c:e2:90: 86:c8:cd:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnfWm+VeIwpd26MxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhYzU0YjktNjZkYy00OTU2LTg2M2QtMTgwNGNmYjll ODUzMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZGQ1ZmM5YzYtNmY3MC00YjQ4LWExZmEtMDUwM2E4NjAwMDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxQK9ZTwiUP9uTMXrrrKCfpaxU5fcb8m1j08 +Ky1Y0jz5BqP+h5KPXsiJctm8l8GT59jPzyClzUS6F25q8XsXEsnrheli5FIDCdd GOhi2GzUh1S93CE1CkWcBaMJzchAliXv8OfkfeYhquPD6+5F3DyyH7+aTqkc7Ptd UIDCA0Ro5V1jua6BoDFST5IEByEPmVyCbvAd7k1k10i8kseKw7oHObULRJk2R8nM hU9IaZhsYR32G1QtbsdUeNcOhCRh4D2C46J7DnKk6kqTL9GnUx/urP+fTyZq505c Qur1kGydvcC+9esUQy/dNMfTY3m3slCmHc7oa42b7vZRjhRd9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGu/e0CamePwudhgW7liIZHXwGRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YmFj NTRiOS02NmRjLTQ5NTYtODYzZC0xODA0Y2ZiOWU4NTMvZDZmNmFhY2EtZWQ2Yi0z ZGI4LWIwM2MtODI5MTg3ZjBkMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWJhYzU0YjktNjZkYy00OTU2LTg2 M2QtMTgwNGNmYjllODUzLzViYWM1NGI5LTY2ZGMtNDk1Ni04NjNkLTE4MDRjZmI5 ZTg1My5jcmwwHwYDVR0jBBgwFoAUf0qap0BizW2/cBkWzv2bKifmLp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81YmFjNTRiOS02NmRjLTQ5NTYtODYzZC0xODA0 Y2ZiOWU4NTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZNwAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALsyhJHGqE9grM3annAj/sKF4skEUJA+0B0vWgXaCeS+lj0yrxVT dpLj9yFn4MSxtuw/1tZK1XHdmMa378V3dapItEEqMHQS0oEwnnedcsFTfFGTkvIp cJlW8fcd77vup9GdGTJoE1nG8dQ0w2poKRHTUevSGDjq2TrDu9PuB+HEgvnMzPB7 6jGWKAhcwLSm4+/CSdDnQjqNGe57eA8j5pZMl9+cARoDCtvWBDJBKMuctZJcUndB eWLBzDZmk9622ClGLjREka1wwJBr6Prg2BI2N0Y1rCH8ZUtTi30LcjVOyEUX4vK8 1A8p9Xy/DYn+/iagFu8FZkIvoRzikIbIzfw= -----END CERTIFICATE-----Generated at Mon Jun 16 22:14:58 2025 by rpki-client