$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/d28c0219-5798-341b-a3bf-be4ed586f980.roa File: d28c0219-5798-341b-a3bf-be4ed586f980.roa (raw, json) Hash identifier: RHmEp/SoK7Y7WSxzoJizfeUNLPyi5U9T2j088AjviiY= Subject key identifier: 42:09:74:ED:FB:74:1E:5C:62:37:6C:7B:9C:0B:8A:03:D1:06:C6:6B Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F43285849912F2F8F5C4F0419549B91C8 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/d28c0219-5798-341b-a3bf-be4ed586f980.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 32771 IP address blocks: 2620:111:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2f:8f:5c:4f:04:19:54:9b:91:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=ac11634c-305a-40c0-8741-071267271494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:97:a6:83:85:60:0c:5f:e4:be:9b:ed:6a: 84:68:1c:18:4c:30:b0:d8:f3:b0:08:72:55:4d:2b: c8:e5:38:bc:f0:83:fe:f4:38:98:96:3c:ff:44:15: a0:98:a8:ad:7a:fd:68:24:a0:ed:12:4b:4e:c2:95: da:88:1d:e3:44:68:e2:5f:21:58:c6:46:8d:11:c7: 58:73:cf:1c:80:60:f4:6e:53:1c:11:f5:e5:2d:a4: 37:66:04:e0:cc:67:99:ac:96:b0:ab:3b:b9:9b:09: 89:5c:c0:1d:db:4b:5b:12:e5:e2:4c:42:b1:3c:63: d4:69:e5:ae:11:b5:bc:81:fe:81:a6:1f:5f:2f:e0: 6a:11:28:3b:5b:b8:87:2e:92:45:25:fe:5d:e1:8c: b2:95:5e:42:6b:5c:2d:66:c7:fd:04:06:8f:e1:7a: 7e:b8:9f:0e:b9:0a:1b:00:d2:e9:66:75:d2:34:d5: 14:af:10:28:7a:cf:bc:1e:ff:23:f6:ef:66:30:b6: 65:3f:08:96:e7:d2:20:6d:f2:40:30:0f:4a:ea:3b: 50:49:9f:fb:fd:31:0e:06:b2:b0:8c:75:0f:c1:c6: aa:ff:8b:2e:18:69:fb:03:68:de:a8:a2:83:9b:9c: de:61:3f:70:4d:b6:e8:b2:8b:ce:28:e6:95:4f:1c: 19:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:09:74:ED:FB:74:1E:5C:62:37:6C:7B:9C:0B:8A:03:D1:06:C6:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/d28c0219-5798-341b-a3bf-be4ed586f980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:8002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:02:c1:db:36:79:e4:1c:b5:63:31:f6:70:fd:51:49:b0:3e: f6:d1:db:fd:5c:b7:7e:ad:88:53:20:8f:94:fd:f6:87:7d:0d: 9e:43:44:a4:af:48:3f:f6:66:57:98:35:b2:d2:d5:99:1a:28: 05:16:3c:b7:1a:0c:02:2a:cb:cd:f8:b7:56:44:9b:8f:0f:de: 34:4b:46:10:b4:b2:2f:ed:dc:e1:dc:dd:5e:27:b7:2e:bd:32: 91:ac:ed:9b:8d:d1:60:9f:9c:33:63:fa:a4:8f:60:0f:0b:af: e8:cd:85:2a:9c:2e:bc:b8:4d:1e:96:57:7e:db:a3:58:64:f0: 5e:47:a9:2f:c5:1b:2c:49:b8:59:94:96:bf:a6:b8:35:6c:3b: 8f:aa:00:cb:ce:d1:d1:97:0e:f1:2e:2a:0b:83:d8:2c:de:26: 41:c5:dd:47:40:1e:6b:68:69:05:cd:28:da:64:fe:38:49:cc: 97:ec:6a:c5:6d:3b:47:32:c5:da:c5:a7:69:e9:c9:f4:f2:dd: a5:0f:33:6e:11:22:e1:08:50:74:e3:e8:e7:98:d2:a1:c5:45: b7:d8:77:4c:49:fe:58:d0:04:62:cb:0a:52:25:e9:24:c3:d4: 8f:0d:3e:c0:8d:df:95:59:36:46:6d:02:72:85:5a:fa:da:e6: 5c:c2:39:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmRLy+PXE8EGVSbkcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk YWMxMTYzNGMtMzA1YS00MGMwLTg3NDEtMDcxMjY3MjcxNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTmXpoOFYAxf5L6b7WqEaBwYTDCw2POwCHJV TSvI5Ti88IP+9DiYljz/RBWgmKitev1oJKDtEktOwpXaiB3jRGjiXyFYxkaNEcdY c88cgGD0blMcEfXlLaQ3ZgTgzGeZrJawqzu5mwmJXMAd20tbEuXiTEKxPGPUaeWu EbW8gf6Bph9fL+BqESg7W7iHLpJFJf5d4YyylV5Ca1wtZsf9BAaP4Xp+uJ8OuQob ANLpZnXSNNUUrxAoes+8Hv8j9u9mMLZlPwiW59IgbfJAMA9K6jtQSZ/7/TEOBrKw jHUPwcaq/4suGGn7A2jeqKKDm5zeYT9wTbbosovOKOaVTxwZGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEIJdO37dB5cYjdse5wLigPRBsZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvZDI4YzAyMTktNTc5OC0z NDFiLWEzYmYtYmU0ZWQ1ODZmOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEwCwds2eeQctWMx9nD9UUmwPvbR2/1ct36tiFMgj5T99od9DZ5D RKSvSD/2ZleYNbLS1ZkaKAUWPLcaDAIqy834t1ZEm48P3jRLRhC0si/t3OHc3V4n ty69MpGs7ZuN0WCfnDNj+qSPYA8Lr+jNhSqcLry4TR6WV37bo1hk8F5HqS/FGyxJ uFmUlr+muDVsO4+qAMvO0dGXDvEuKguD2CzeJkHF3UdAHmtoaQXNKNpk/jhJzJfs asVtO0cyxdrFp2npyfTy3aUPM24RIuEIUHTj6OeY0qHFRbfYd0xJ/ljQBGLLClIl 6STD1I8NPsCN35VZNkZtAnKFWvra5lzCOTQ= -----END CERTIFICATE-----Generated at Mon Apr 28 05:35:54 2025 by rpki-client