$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa File: f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa (raw, json) Hash identifier: XfHWu+d2fbiWiUF2NZZk/nMS35rVpORqo3GY2mFXX7w= Subject key identifier: 1C:38:DD:E9:C1:2C:31:CA:E9:8C:F5:98:F9:2C:34:80:58:C0:BF:9B Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F43285849F2E549B86D2284A41AEA6500 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 46455 IP address blocks: 2604:c880::/32 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:49:b8:6d:22:84:a4:1a:ea:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=9b9457f1-c11e-434b-b936-6f6b52bd5095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:f4:bf:53:78:ce:23:7c:18:6d:f8:7f:cc: dc:d6:42:d6:b8:37:ad:eb:14:45:d4:b5:a0:e2:fc: 79:d3:8e:c7:d4:70:3f:49:78:0c:15:58:3c:48:38: 8b:d6:e2:fe:fe:42:7c:c1:c0:69:b6:3d:d1:76:6b: 51:c2:82:03:df:67:cf:82:68:b9:e4:f4:53:ca:c9: cf:4d:a0:3c:f0:7a:b2:5a:84:16:85:2e:a9:3d:82: 4a:e6:3a:32:a6:6c:ba:0e:b0:c2:52:ca:8f:38:82: 4c:64:be:0b:dd:7c:49:d1:12:61:2c:41:04:1e:03: 90:b1:13:be:d0:7c:b7:67:9b:ec:3b:45:86:2d:a7: 02:ab:de:7b:e0:1d:68:83:8c:08:79:e6:3e:22:df: 8d:43:34:6a:e7:9b:1e:2f:47:1d:fd:06:9f:32:28: 23:90:bd:98:3a:47:a1:59:60:b1:6d:34:7c:89:74: 66:0b:60:3b:67:2a:21:ba:d5:43:22:ef:dc:cd:1b: de:e7:02:70:fa:fd:6e:11:0a:6d:c2:48:84:95:0b: 56:e0:a2:ea:e6:d7:37:ef:7d:9a:62:c4:64:8c:04: c5:05:17:1f:bf:b1:9b:95:3f:2a:1f:b9:9c:4a:8a: 9d:24:85:aa:63:68:ab:6e:f0:c2:99:c6:1e:0f:a6: 54:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:38:DD:E9:C1:2C:31:CA:E9:8C:F5:98:F9:2C:34:80:58:C0:BF:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv6: 2604:c880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:a0:f8:bb:ce:3b:9b:d7:e5:30:32:89:82:ed:ab:9a:bf:01: e6:b5:22:32:81:04:d7:0c:b4:87:18:30:34:aa:2d:c9:2a:02: 9c:03:8f:4c:19:84:50:db:b4:a3:6c:53:fa:31:a9:30:ef:f3: ee:c5:e1:a4:f0:03:de:05:d7:9f:f3:ee:6b:67:c8:07:ee:10: 1b:75:30:48:64:56:9d:47:3a:c3:b7:0d:01:15:a0:0c:32:63: e3:7d:fd:d8:8e:02:0b:c7:34:d6:f7:0a:d3:ee:ab:d3:60:2d: f9:59:a4:f1:cc:1d:92:be:b6:8e:95:fd:fe:4f:85:92:88:0e: ec:6d:2b:25:07:22:cb:87:64:c4:1a:09:47:b5:28:e4:24:d5: de:9d:8a:d4:4d:bc:2c:38:c7:49:46:12:49:4a:bd:dd:e6:0e: 40:3f:8b:a6:ef:e8:e1:ac:91:6e:19:b5:66:5e:ee:87:7b:68: f7:2e:99:6e:d0:9d:91:0d:a2:c2:27:8f:27:82:91:74:e1:47: 4e:0b:c1:3d:06:64:83:9c:5d:62:30:a3:f7:c0:8d:f7:80:4d: 42:7c:42:c1:dd:4f:25:89:98:8d:1a:41:47:5c:93:d1:40:79: d2:90:f9:bd:78:40:34:83:e6:42:4e:e6:75:56:b5:eb:fa:66: b4:63:5f:e8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEny5Um4bSKEpBrqZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk OWI5NDU3ZjEtYzExZS00MzRiLWI5MzYtNmY2YjUyYmQ1MDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT70v1N4ziN8GG34f8zc1kLWuDet6xRF1LWg 4vx5047H1HA/SXgMFVg8SDiL1uL+/kJ8wcBptj3RdmtRwoID32fPgmi55PRTysnP TaA88HqyWoQWhS6pPYJK5joypmy6DrDCUsqPOIJMZL4L3XxJ0RJhLEEEHgOQsRO+ 0Hy3Z5vsO0WGLacCq9574B1og4wIeeY+It+NQzRq55seL0cd/QafMigjkL2YOkeh WWCxbTR8iXRmC2A7ZyohutVDIu/czRve5wJw+v1uEQptwkiElQtW4KLq5tc3732a YsRkjATFBRcfv7GblT8qH7mcSoqdJIWqY2irbvDCmcYeD6ZU3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBw43enBLDHK6Yz1mPksNIBYwL+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvZjVhZDI4Y2UtOWFlNS0z ZWI1LWFlMTItZDBhNzFmOGFjMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTIgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDCoPi7zjub1+UwMomC7auavwHmtSIygQTXDLSHGDA0qi3JKgKcA49M GYRQ27SjbFP6Makw7/PuxeGk8APeBdef8+5rZ8gH7hAbdTBIZFadRzrDtw0BFaAM MmPjff3YjgILxzTW9wrT7qvTYC35WaTxzB2SvraOlf3+T4WSiA7sbSslByLLh2TE GglHtSjkJNXenYrUTbwsOMdJRhJJSr3d5g5AP4um7+jhrJFuGbVmXu6He2j3Lplu 0J2RDaLCJ48ngpF04UdOC8E9BmSDnF1iMKP3wI33gE1CfELB3U8liZiNGkFHXJPR QHnSkPm9eEA0g+ZCTuZ1VrXr+ma0Y1/o -----END CERTIFICATE-----Generated at Sun Jun 15 15:16:56 2025 by rpki-client