$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/13c1aa45-1be2-3120-b677-18f0d15c80ce.roa File: 13c1aa45-1be2-3120-b677-18f0d15c80ce.roa (raw, json) Hash identifier: YwsAGpof5PzO4RIYqbM7CabGnhFWcmYMcDAuJUxHWVI= Subject key identifier: CB:09:76:E1:55:43:AE:17:16:65:CB:FB:0E:62:69:57:40:FC:80:CA Certificate issuer: /CN=e5c2b906-947b-452e-a546-6011e1a0e535 Certificate serial: 010D0C9F43285849D594EB4C25B5CDC70632AE80 Authority key identifier: 07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/13c1aa45-1be2-3120-b677-18f0d15c80ce.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 39941 IP address blocks: 2001:504:b::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:eb:4c:25:b5:cd:c7:06:32:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5c2b906-947b-452e-a546-6011e1a0e535 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=5a44bcec-666b-4ca9-bd7c-355ae98e237d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:17:62:a7:b5:21:ab:8c:a6:e0:ed:d5:6f:fc: a6:d5:30:38:b6:ff:b3:b3:a9:64:f3:26:c9:cd:a5: ab:43:c3:3e:9a:ee:2f:20:92:b2:4d:67:f0:18:46: 8a:27:d4:2e:13:4c:d8:56:6d:1f:12:7b:fc:ea:32: a6:7b:24:8f:24:cc:1a:8f:3d:a0:54:c8:06:25:01: 8b:74:85:da:1e:16:80:41:53:b6:ff:d2:e7:cc:10: be:87:59:8a:da:28:45:07:20:5e:62:d4:37:e3:76: f8:56:9e:2d:83:6b:6b:31:1e:26:95:f8:c6:23:5c: 01:f3:65:d5:3d:51:47:a5:e4:f8:52:d0:18:3a:1c: eb:41:7d:6e:4a:ce:42:e0:35:62:91:67:6d:79:2b: 19:df:46:91:c0:3d:0c:f4:f1:7b:02:1d:a9:46:b1: ac:7e:0d:a8:b6:a3:3e:35:d7:4a:8d:73:fd:eb:db: 96:55:e0:af:26:92:16:73:c1:05:da:c3:66:84:ba: 4c:d8:d3:e8:bb:54:a2:32:22:41:da:90:33:3b:23: 63:f0:07:26:d8:81:31:6f:8c:95:22:63:5f:5a:5e: f5:e1:79:8d:94:71:fc:7e:bf:48:dc:ad:72:38:f0: 16:89:99:e1:b6:d4:7e:ea:2d:89:8e:4f:4c:bb:3e: 6b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:09:76:E1:55:43:AE:17:16:65:CB:FB:0E:62:69:57:40:FC:80:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/13c1aa45-1be2-3120-b677-18f0d15c80ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl X509v3 Authority Key Identifier: keyid:07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2f:ac:5d:1c:a8:85:36:87:cc:90:c9:23:9b:f4:29:be:5d: ba:15:23:b4:82:a3:04:19:12:bb:61:1b:35:12:eb:12:f0:06: ae:af:60:14:69:b4:4f:d8:54:06:8f:0e:17:77:e5:5b:ec:3b: b8:73:04:44:37:b6:6e:ef:1f:e9:d5:de:31:05:85:6c:b2:99: 23:09:1a:0e:ec:b0:cd:93:53:a6:bd:e5:c2:1c:c0:4d:6e:24: ed:e7:5b:3b:03:8e:af:55:c5:c7:7a:25:e6:09:41:aa:64:78: eb:bb:f3:49:d2:86:f7:e8:3d:da:f7:b4:0d:e1:d9:ef:94:88: da:6d:d9:ff:3e:34:ea:ca:ab:7b:34:78:77:19:45:02:7a:66: b9:f9:35:21:57:4c:14:01:88:8e:c5:36:a0:9c:9f:c4:92:0e: af:59:b0:82:f9:85:95:27:ef:a4:fb:7f:4d:bf:f8:40:87:f3: 8e:e0:2d:ef:74:5f:04:dd:a0:a4:13:74:3f:23:78:11:01:85: 8c:f2:55:80:69:0f:76:9e:e2:ef:6e:8d:ec:b8:1e:18:12:58: cf:2d:86:d1:f1:6d:fa:66:46:65:cf:fc:9c:49:e7:48:49:d5: 65:b0:02:32:dc:56:e1:42:b9:dd:c7:ed:7c:3a:10:a7:ca:fd: c4:af:b4:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnVlOtMJbXNxwYyroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTVjMmI5MDYtOTQ3Yi00NTJlLWE1NDYtNjAxMWUxYTBl NTM1MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NWE0NGJjZWMtNjY2Yi00Y2E5LWJkN2MtMzU1YWU5OGUyMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBdip7Uhq4ym4O3Vb/ym1TA4tv+zs6lk8ybJ zaWrQ8M+mu4vIJKyTWfwGEaKJ9QuE0zYVm0fEnv86jKmeySPJMwajz2gVMgGJQGL dIXaHhaAQVO2/9LnzBC+h1mK2ihFByBeYtQ343b4Vp4tg2trMR4mlfjGI1wB82XV PVFHpeT4UtAYOhzrQX1uSs5C4DVikWdteSsZ30aRwD0M9PF7Ah2pRrGsfg2otqM+ NddKjXP969uWVeCvJpIWc8EF2sNmhLpM2NPou1SiMiJB2pAzOyNj8Acm2IExb4yV ImNfWl714XmNlHH8fr9I3K1yOPAWiZnhttR+6i2Jjk9Muz5r6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMsJduFVQ64XFmXL+w5iaVdA/IDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lNWMy YjkwNi05NDdiLTQ1MmUtYTU0Ni02MDExZTFhMGU1MzUvMTNjMWFhNDUtMWJlMi0z MTIwLWI2NzctMThmMGQxNWM4MGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTVjMmI5MDYtOTQ3Yi00NTJlLWE1 NDYtNjAxMWUxYTBlNTM1L2U1YzJiOTA2LTk0N2ItNDUyZS1hNTQ2LTYwMTFlMWEw ZTUzNS5jcmwwHwYDVR0jBBgwFoAUB0/j0KrwEb96y8hRayHlvJ5en8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lNWMyYjkwNi05NDdiLTQ1MmUtYTU0Ni02MDEx ZTFhMGU1MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABovrF0cqIU2h8yQySOb9Cm+XboVI7SCowQZErthGzUS6xLwBq6v YBRptE/YVAaPDhd35VvsO7hzBEQ3tm7vH+nV3jEFhWyymSMJGg7ssM2TU6a95cIc wE1uJO3nWzsDjq9Vxcd6JeYJQapkeOu780nShvfoPdr3tA3h2e+UiNpt2f8+NOrK q3s0eHcZRQJ6Zrn5NSFXTBQBiI7FNqCcn8SSDq9ZsIL5hZUn76T7f02/+ECH847g Le90XwTdoKQTdD8jeBEBhYzyVYBpD3ae4u9ujey4HhgSWM8thtHxbfpmRmXP/JxJ 50hJ1WWwAjLcVuFCud3H7Xw6EKfK/cSvtEk= -----END CERTIFICATE-----Generated at Mon Jun 16 03:21:32 2025 by rpki-client