$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa File: 2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa (raw, json) Hash identifier: D9/Clhpe6k4CNmRnY05J0RGd9qHQYRi5iyx2kppNIJ8= Subject key identifier: EC:71:13:46:EF:9B:C6:07:30:02:E1:EF:73:83:92:92:7F:02:CA:BB Certificate issuer: /CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4 Certificate serial: 010D0C9F43285849AD1A0FCE6FF7E876D29E5180 Authority key identifier: 5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 26737 IP address blocks: 2620:14:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:0f:ce:6f:f7:e8:76:d2:9e:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=9dfa9afa-78e4-45a9-8a77-d50a4a506267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:68:0a:9c:25:4a:45:92:f7:91:ba:07:0c:2a: 1e:c1:bc:2e:68:a1:df:75:56:ac:fb:a7:9c:2a:59: 37:91:ef:25:4f:66:0c:2a:02:e1:e7:cf:50:9f:8d: 2f:ff:c9:5b:b2:32:fa:c8:d9:bc:32:de:93:86:65: dc:c7:ff:d8:f8:a0:27:c1:e8:b3:c8:ed:cd:25:c8: 73:fc:fc:67:39:31:79:6b:1f:a0:9e:06:ef:68:71: d1:b9:6d:ac:e9:86:d8:3e:fb:51:1d:81:ef:df:42: c5:af:15:ab:fe:d3:2f:95:df:58:29:51:5d:4b:ed: 38:43:50:58:e6:31:63:67:48:fc:08:2a:3a:87:4c: 43:a9:ff:8c:00:42:b7:76:1c:5c:b8:e8:5d:4c:3f: 51:5a:c4:70:ef:ed:13:bf:ca:89:77:64:5e:a6:e6: 28:90:79:23:53:06:7d:26:8c:35:54:f1:a0:7d:0d: 74:36:b9:f0:12:70:7f:a2:25:e6:d7:ba:78:ca:01: 2c:07:7f:0a:5f:a9:10:4b:01:af:ec:da:0e:fa:c7: cd:91:58:01:fe:48:e1:11:fd:cf:83:78:28:7f:8c: 82:e9:1c:b4:c6:42:af:ea:7b:5e:1a:9b:7e:e0:f1: eb:e4:21:a8:fd:75:cd:2c:7a:ac:da:f6:3d:0a:0f: 93:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:71:13:46:EF:9B:C6:07:30:02:E1:EF:73:83:92:92:7F:02:CA:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl X509v3 Authority Key Identifier: keyid:5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer sbgp-ipAddrBlock: critical IPv6: 2620:14:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:2a:07:6e:c9:f7:98:05:bf:1a:0d:39:05:6a:0f:46:2c:4a: 31:6d:d6:a9:9e:bf:ed:0b:af:a5:39:50:a5:95:d0:30:40:28: 88:aa:16:45:0c:17:2d:63:50:35:8c:1e:32:0a:69:71:a7:7b: 0a:56:63:b0:91:ba:de:c6:08:ba:b1:42:1b:ef:3f:9c:36:5a: 01:e9:01:72:45:50:76:55:ce:79:2d:13:f6:5e:a7:80:50:62: 44:91:55:bc:cf:16:17:16:e2:86:bb:31:fd:0d:27:82:9b:2e: 48:20:c3:9e:e4:a9:2c:ab:f9:1b:d3:8d:15:0c:2d:3f:4f:21: f0:61:15:20:56:7d:d9:82:64:e9:4e:81:5a:ad:44:85:d4:b3: 8d:77:b0:2f:19:0d:57:da:f2:79:80:ff:be:e6:5e:1f:d2:ee: 4a:2e:90:00:fd:95:7d:23:ac:7f:64:76:5d:02:54:eb:bc:77: ea:58:28:83:12:f2:27:63:a6:1a:1b:bf:ed:bd:3b:ec:21:99: 54:99:b8:dd:d7:10:51:8b:37:54:f7:77:16:87:d0:01:c6:01: 6b:e2:2d:88:dd:83:3d:3f:89:bb:94:19:39:d1:94:f4:48:76: 49:9b:5e:c2:93:57:83:02:06:a5:34:47:9c:0f:e6:9c:3d:ca: 9d:c7:a8:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmtGg/Ob/fodtKeUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlmNWM3NjctNWIxZi00YTg1LThmMDUtOTgwYjU4NWZh MmI0MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OWRmYTlhZmEtNzhlNC00NWE5LThhNzctZDUwYTRhNTA2MjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGgKnCVKRZL3kboHDCoewbwuaKHfdVas+6ec Klk3ke8lT2YMKgLh589Qn40v/8lbsjL6yNm8Mt6ThmXcx//Y+KAnweizyO3NJchz /PxnOTF5ax+gngbvaHHRuW2s6YbYPvtRHYHv30LFrxWr/tMvld9YKVFdS+04Q1BY 5jFjZ0j8CCo6h0xDqf+MAEK3dhxcuOhdTD9RWsRw7+0Tv8qJd2RepuYokHkjUwZ9 Jow1VPGgfQ10NrnwEnB/oiXm17p4ygEsB38KX6kQSwGv7NoO+sfNkVgB/kjhEf3P g3gof4yC6Ry0xkKv6nteGpt+4PHr5CGo/XXNLHqs2vY9Cg+TNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOxxE0bvm8YHMALh73ODkpJ/Asq7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OWY1 Yzc2Ny01YjFmLTRhODUtOGYwNS05ODBiNTg1ZmEyYjQvMmQ3ZDEwZjctNjFmNy0z MDFmLTgwZjItOGI4OGYwMTVlNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTlmNWM3NjctNWIxZi00YTg1LThm MDUtOTgwYjU4NWZhMmI0LzU5ZjVjNzY3LTViMWYtNGE4NS04ZjA1LTk4MGI1ODVm YTJiNC5jcmwwHwYDVR0jBBgwFoAUXkkwOuJ1kpAgQPi5HRExgP9Kk20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OWY1Yzc2Ny01YjFmLTRhODUtOGYwNS05ODBi NTg1ZmEyYjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAFCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4qB27J95gFvxoNOQVqD0YsSjFt1qmev+0Lr6U5UKWV0DBAKIiq FkUMFy1jUDWMHjIKaXGnewpWY7CRut7GCLqxQhvvP5w2WgHpAXJFUHZVznktE/Ze p4BQYkSRVbzPFhcW4oa7Mf0NJ4KbLkggw57kqSyr+RvTjRUMLT9PIfBhFSBWfdmC ZOlOgVqtRIXUs413sC8ZDVfa8nmA/77mXh/S7koukAD9lX0jrH9kdl0CVOu8d+pY KIMS8idjphobv+29O+whmVSZuN3XEFGLN1T3dxaH0AHGAWviLYjdgz0/ibuUGTnR lPRIdkmbXsKTV4MCBqU0R5wP5pw9yp3HqOc= -----END CERTIFICATE-----Generated at Sun Jun 15 11:49:16 2025 by rpki-client