$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa File: 058e8951-6243-3e09-9ea4-9c5f828671a1.roa (raw, json) Hash identifier: aQBHvbKMT0YdThVIEhK5jjCyC78JoOcUthuT/Q/LjSY= Subject key identifier: C8:91:F9:B1:9E:2D:77:34:AD:DB:E6:7C:36:D0:CB:C9:05:6E:61:1E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123CC52661FDAD73697300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 2001:4860:4820::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:3c:c5:26:61:fd:ad:73:69:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=dbdfe9bf-ac70-4c02-9d5e-98cc5d2fd2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:93:f1:db:29:db:df:2e:a0:a9:28:56:c2: ea:fc:b7:7a:6b:bc:52:2d:6f:b3:44:9e:3d:d6:85: 5d:57:61:7c:29:5f:69:61:25:ed:86:cd:36:1c:23: 82:c7:5c:90:56:b9:cf:d0:ea:e4:ea:cf:f2:cb:85: 2f:da:16:9f:35:c1:2b:03:1f:26:78:e4:31:5d:c7: bb:94:c4:84:3d:3e:86:b4:42:ce:fe:bf:ca:4d:d3: 86:02:46:63:73:67:97:73:97:b7:c9:fa:dd:63:1b: f2:c6:22:ab:af:11:b6:c4:17:46:12:64:cf:06:4c: 00:14:24:04:6f:1b:77:ea:37:0c:cb:eb:b2:ca:2b: 06:98:1c:92:8b:e7:63:b3:d5:8d:46:93:0a:4f:dd: 3b:74:0f:42:94:83:52:c5:af:d9:be:78:74:45:8e: bf:69:6a:0a:f0:71:a6:f3:23:a1:d6:7a:f2:35:9d: 4b:01:94:27:53:89:67:02:ef:7e:e7:1b:37:12:e0: f7:81:58:71:51:fe:37:67:8c:2d:71:11:6e:c3:33: 5a:03:c1:ca:e0:7f:be:4d:ed:d5:b0:d2:d8:72:76: a5:a9:ba:f0:59:90:bf:97:65:d3:71:f8:65:e4:e3: 59:30:7a:b3:24:71:c3:08:49:21:5b:1d:67:2a:06: 03:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:91:F9:B1:9E:2D:77:34:AD:DB:E6:7C:36:D0:CB:C9:05:6E:61:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4820::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:dd:4d:f7:40:83:fd:66:bb:c9:95:2f:fb:8f:5e:00:7e:f6: ca:c9:63:8f:f8:cf:7c:f2:cc:c5:3e:2d:70:b5:53:ce:ce:83: bb:5b:8c:bd:96:ce:83:57:fb:ef:4b:10:f1:8c:f5:9c:ac:79: 1b:9a:48:41:ad:17:38:7c:26:ea:05:81:ae:f7:c4:b0:a8:99: 21:58:4e:5a:1e:66:3e:13:01:30:6d:c9:18:39:25:d6:9d:b9: 38:1e:8b:0d:14:6a:67:2e:85:dc:1a:b4:de:31:b9:7c:84:39: 84:04:32:a9:2b:50:5a:60:ff:c9:5c:4c:b1:b1:a9:ff:2a:38: 12:4b:61:f7:a3:5a:4d:bd:ac:da:63:56:9a:30:6a:5c:72:27: a8:34:03:92:f8:77:2f:b3:a0:54:d1:ae:d6:86:af:2e:fd:7a: 2b:70:d9:44:80:2c:e3:83:95:92:d6:95:03:7d:87:e6:8b:d3: 5b:4f:cf:7d:d3:0a:bb:14:e6:0b:4e:14:b6:3f:7d:8d:95:3a: fb:f1:a1:03:6d:c9:d4:69:20:03:0c:a3:c5:3d:d9:ef:b6:77: ba:90:77:bd:10:c9:32:45:37:81:59:3d:f5:2c:82:3f:0d:7f: a2:97:f8:3d:04:54:e6:aa:1b:78:67:ed:36:a1:2a:0d:6a:16: 9a:9e:16:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEjzFJmH9rXNpcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZGJkZmU5YmYtYWM3MC00YzAyLTlkNWUtOThjYzVkMmZkMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1mT8dsp298uoKkoVsLq/Ld6a7xSLW+zRJ49 1oVdV2F8KV9pYSXths02HCOCx1yQVrnP0Ork6s/yy4Uv2hafNcErAx8meOQxXce7 lMSEPT6GtELO/r/KTdOGAkZjc2eXc5e3yfrdYxvyxiKrrxG2xBdGEmTPBkwAFCQE bxt36jcMy+uyyisGmBySi+djs9WNRpMKT907dA9ClINSxa/Zvnh0RY6/aWoK8HGm 8yOh1nryNZ1LAZQnU4lnAu9+5xs3EuD3gVhxUf43Z4wtcRFuwzNaA8HK4H++Te3V sNLYcnalqbrwWZC/l2XTcfhl5ONZMHqzJHHDCEkhWx1nKgYDewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMiR+bGeLXc0rdvmfDbQy8kFbmEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDU4ZTg5NTEtNjI0My0z ZTA5LTllYTQtOWM1ZjgyODY3MWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADLdTfdAg/1mu8mVL/uPXgB+9srJY4/4z3zyzMU+LXC1U87Og7tb jL2WzoNX++9LEPGM9ZyseRuaSEGtFzh8JuoFga73xLComSFYTloeZj4TATBtyRg5 JdaduTgeiw0UamcuhdwatN4xuXyEOYQEMqkrUFpg/8lcTLGxqf8qOBJLYfejWk29 rNpjVpowalxyJ6g0A5L4dy+zoFTRrtaGry79eitw2USALOODlZLWlQN9h+aL01tP z33TCrsU5gtOFLY/fY2VOvvxoQNtydRpIAMMo8U92e+2d7qQd70QyTJFN4FZPfUs gj8Nf6KX+D0EVOaqG3hn7TahKg1qFpqeFjs= -----END CERTIFICATE-----Generated at Mon Aug 4 15:06:18 2025 by rpki-client