$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa File: 04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa (raw, json) Hash identifier: PR9o2phFhWiEpTi7JHnelSBT8LBbShIjSIEiPqbT7Bw= Subject key identifier: F1:15:9C:2A:6B:49:B4:C7:A2:11:A6:B0:85:82:5A:ED:08:A7:BB:03 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584A3A157D0473EC48B36A01E880 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 53841 IP address blocks: 2605:8900:1000::/36 maxlen: 36 2605:8900:3000::/36 maxlen: 36 2605:8900:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:7d:04:73:ec:48:b3:6a:01:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=b70d9830-e75d-4594-ad04-2ef86a207b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:66:b7:c9:77:82:96:b2:bc:09:ac:4f:c8:2c: 8a:db:50:e3:b6:19:49:a5:da:09:21:22:42:c6:f6: 90:bd:14:df:74:22:6f:c1:76:32:fe:38:fb:14:b1: 59:aa:42:cb:4c:49:d2:c7:1d:2f:e9:7d:be:5f:b8: 75:32:08:dd:f1:72:2f:0a:3d:9b:c2:fa:56:62:4a: ea:4a:05:8d:53:d9:29:57:2e:4c:19:2b:55:ff:a1: 6b:69:04:99:4e:93:1f:c4:b1:3f:e5:85:8f:49:9a: e4:0e:5b:68:69:27:6e:15:4a:c0:e3:c8:6b:cf:61: f6:2e:8b:27:5e:be:49:ba:b6:6c:86:2e:03:67:fb: 24:c6:0f:f9:76:84:05:0b:bc:36:fa:ae:2c:6e:21: b4:95:d0:32:4d:18:fe:73:84:14:70:d2:9a:be:eb: 3e:fc:52:bb:34:2e:52:b8:3f:a4:8a:e2:8d:ee:16: 38:e4:e7:6e:36:17:f0:82:9b:f0:86:b8:f4:8e:1a: 80:b0:ae:cb:3f:e2:cf:fc:66:a2:00:2f:06:fd:4d: 0c:9e:1f:56:61:1d:6c:77:fe:60:e2:cd:bd:c7:0c: fc:55:5e:6b:d4:b6:f1:39:2a:95:35:9b:0f:4f:92: ad:37:d7:19:bb:d1:10:e5:39:c3:dc:03:17:5b:20: d6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:15:9C:2A:6B:49:B4:C7:A2:11:A6:B0:85:82:5A:ED:08:A7:BB:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv6: 2605:8900:1000::/36 2605:8900:3000::/36 2605:8900:5000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:73:6f:0a:12:cf:49:cc:88:27:8a:4e:4b:0c:9b:f4:33:b4: 62:a0:f3:75:69:f9:30:29:6c:6f:25:2d:55:e7:38:4e:62:56: 4c:59:57:d0:4a:34:52:1a:85:9b:0f:2e:14:0a:fd:ce:56:71: 23:8b:00:5a:c3:cd:99:eb:d1:0f:ac:d5:54:da:80:60:8a:03: f3:bc:f7:2b:10:53:1d:80:b2:a9:4a:8d:b3:49:ff:d5:a1:c9: 07:e8:d3:ea:4a:ba:ab:15:0a:b2:74:0e:5a:7a:a0:05:84:fa: e6:78:e0:20:fb:fd:7f:7f:44:0b:ac:8e:99:2f:4d:60:51:20: c9:ab:e0:2b:5c:7b:95:0e:f6:63:ca:a5:18:07:db:80:c3:25: 81:01:37:c8:b6:ee:ed:1d:67:e4:46:38:2d:0f:75:da:c2:9d: 20:9c:a1:82:1d:80:3a:f2:39:15:83:9f:d7:4c:83:e8:90:43: d8:e8:ec:08:db:29:c5:f6:51:6f:4a:2d:60:2e:97:91:5a:73: 4e:27:d7:88:97:be:8d:50:dc:74:9a:3b:5b:24:21:b7:a4:c4: 81:c2:09:91:77:f0:4a:45:ca:10:4c:8c:69:4f:94:b9:f3:e5: 26:c6:ba:9e:55:c7:96:8a:ad:f8:da:6b:97:e1:df:7b:6d:9e: d3:ae:1d:e9 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEo6FX0Ec+xIs2oB6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk YjcwZDk4MzAtZTc1ZC00NTk0LWFkMDQtMmVmODZhMjA3YjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62a3yXeClrK8CaxPyCyK21DjthlJpdoJISJC xvaQvRTfdCJvwXYy/jj7FLFZqkLLTEnSxx0v6X2+X7h1Mgjd8XIvCj2bwvpWYkrq SgWNU9kpVy5MGStV/6FraQSZTpMfxLE/5YWPSZrkDltoaSduFUrA48hrz2H2Losn Xr5JurZshi4DZ/skxg/5doQFC7w2+q4sbiG0ldAyTRj+c4QUcNKavus+/FK7NC5S uD+kiuKN7hY45OduNhfwgpvwhrj0jhqAsK7LP+LP/GaiAC8G/U0Mnh9WYR1sd/5g 4s29xwz8VV5r1LbxOSqVNZsPT5KtN9cZu9EQ5TnD3AMXWyDW/QIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFPEVnCprSbTHohGmsIWCWu0Ip7sDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMDRhYTZhMzAtZjc5Mi0z YjI0LWFkNjAtMTBhYTlmOWFlZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYEJgWJABAD BgQmBYkAMAMGBCYFiQBQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIRzbwoSz0nMiCeKTksMm/QztGKg83Vp +TApbG8lLVXnOE5iVkxZV9BKNFIahZsPLhQK/c5WcSOLAFrDzZnr0Q+s1VTagGCK A/O89ysQUx2AsqlKjbNJ/9WhyQfo0+pKuqsVCrJ0Dlp6oAWE+uZ44CD7/X9/RAus jpkvTWBRIMmr4Ctce5UO9mPKpRgH24DDJYEBN8i27u0dZ+RGOC0PddrCnSCcoYId gDryORWDn9dMg+iQQ9jo7AjbKcX2UW9KLWAul5Fac04n14iXvo1Q3HSaO1skIbek xIHCCZF38EpFyhBMjGlPlLnz5SbGup5Vx5aKrfjaa5fh33ttntOuHek= -----END CERTIFICATE-----Generated at Tue Jul 1 06:04:55 2025 by rpki-client