$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/1f6577cf-e47b-3d7c-94d1-94f909f55bee.roa File: 1f6577cf-e47b-3d7c-94d1-94f909f55bee.roa (raw, json) Hash identifier: UCDnEJzY4x/9i+7ym7AOqgb/3lpG1ewQZwYAh5umcZs= Subject key identifier: 0A:54:DE:6C:C7:89:79:9F:15:EB:4A:4D:3B:58:C3:1B:09:EE:7B:94 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584A5765C1C216B1D7E391EBB480 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/1f6577cf-e47b-3d7c-94d1-94f909f55bee.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 400097 IP address blocks: 2606:3d40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:c1:c2:16:b1:d7:e3:91:eb:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=8cbbf8cd-34e6-4817-8186-f3fdfb4c3adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:ba:78:b8:5a:65:49:08:00:44:ed:8d:11: 7c:5b:c5:1c:a9:ca:e2:75:db:15:04:f8:d5:78:4b: d5:9e:bb:33:8f:d2:76:c9:51:9f:52:b3:ec:f5:c9: 66:37:5b:86:40:81:c1:17:d6:0b:48:82:be:28:90: 79:39:ac:5a:69:11:1d:db:cb:5a:4a:0b:de:f0:a4: 07:5b:5b:dd:d1:a4:ad:3b:cf:55:a0:51:f6:bf:29: 80:da:b0:35:69:8a:ee:be:94:9c:d4:9f:3f:8d:2a: 51:d1:c9:28:69:15:a4:0f:eb:21:b2:c6:d2:39:a9: 07:c1:51:6b:5a:75:37:d4:7b:b9:ed:90:26:9b:a2: d1:77:f1:fc:63:ae:35:20:46:3b:21:f3:80:29:19: d0:b6:38:1c:bd:1b:98:cc:21:19:bd:8f:14:92:12: f6:e2:eb:9a:07:d0:17:72:92:cb:97:ef:e6:5c:07: 8d:c0:a2:04:17:9c:31:b1:5c:db:73:c2:3f:4a:b5: e0:8c:d3:60:f8:9e:5a:b3:c0:f3:22:8a:77:31:24: 41:a2:98:2a:68:f0:11:bc:2e:60:65:5d:c5:f4:c3: 21:d0:5f:9f:0e:91:01:ea:35:74:8e:45:a8:b8:31: 0d:40:d8:ae:fc:c4:fa:a6:c9:e5:68:cb:d1:59:59: 33:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:54:DE:6C:C7:89:79:9F:15:EB:4A:4D:3B:58:C3:1B:09:EE:7B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/1f6577cf-e47b-3d7c-94d1-94f909f55bee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4d:f8:0a:d3:27:a5:22:72:a4:c5:86:69:87:eb:0e:62:60: 79:7b:69:6d:7a:2b:4e:9b:d5:b5:44:0d:d9:b0:1e:01:28:ac: c2:b3:28:bb:4e:03:4a:35:57:de:b7:37:55:33:26:0b:da:3a: 75:35:7f:76:30:1e:43:a4:08:59:fd:f1:a7:f3:15:3d:ad:3f: b9:f1:da:c3:09:14:3b:ab:a5:03:cb:68:03:7b:74:b1:85:22: 27:3e:f4:1b:48:6b:78:b0:8b:93:f5:a6:fe:e5:c3:13:95:26: ed:47:ed:88:60:84:ed:05:c0:cd:13:86:14:a5:ad:8f:64:80: 45:f8:9b:c2:10:e0:cd:c3:bb:7e:f0:1c:56:ac:fc:ae:e3:c0: 01:bb:8b:fa:27:80:be:58:3f:06:30:68:50:cf:72:89:4d:d7: dd:65:6b:85:22:4a:15:b8:c8:09:ba:07:0f:29:ea:97:9b:d6: ef:e8:19:64:ff:d7:08:3f:d9:78:7b:2c:30:6a:ef:4a:d9:0b: a5:eb:a0:01:c6:36:67:29:79:1e:7d:f6:6f:e4:47:77:ae:b5: 8b:9d:f9:03:62:00:29:16:ad:90:e2:9a:36:a6:bb:5c:3c:0d: 9b:3e:1b:39:a7:53:49:ad:14:a1:fd:c3:c7:b8:20:c6:6d:ec: 85:05:1c:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpXZcHCFrHX45HrtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk OGNiYmY4Y2QtMzRlNi00ODE3LTgxODYtZjNmZGZiNGMzYWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6u6eLhaZUkIAETtjRF8W8UcqcriddsVBPjV eEvVnrszj9J2yVGfUrPs9clmN1uGQIHBF9YLSIK+KJB5OaxaaREd28taSgve8KQH W1vd0aStO89VoFH2vymA2rA1aYruvpSc1J8/jSpR0ckoaRWkD+shssbSOakHwVFr WnU31Hu57ZAmm6LRd/H8Y641IEY7IfOAKRnQtjgcvRuYzCEZvY8UkhL24uuaB9AX cpLLl+/mXAeNwKIEF5wxsVzbc8I/SrXgjNNg+J5as8DzIop3MSRBopgqaPARvC5g ZV3F9MMh0F+fDpEB6jV0jkWouDENQNiu/MT6psnlaMvRWVkz0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFApU3mzHiXmfFetKTTtYwxsJ7nuUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvMWY2NTc3Y2YtZTQ3Yi0z ZDdjLTk0ZDEtOTRmOTA5ZjU1YmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABZN+ArTJ6UicqTFhmmH6w5iYHl7aW16K06b1bVEDdmwHgEorMKz KLtOA0o1V963N1UzJgvaOnU1f3YwHkOkCFn98afzFT2tP7nx2sMJFDurpQPLaAN7 dLGFIic+9BtIa3iwi5P1pv7lwxOVJu1H7YhghO0FwM0ThhSlrY9kgEX4m8IQ4M3D u37wHFas/K7jwAG7i/ongL5YPwYwaFDPcolN191la4UiShW4yAm6Bw8p6peb1u/o GWT/1wg/2Xh7LDBq70rZC6XroAHGNmcpeR599m/kR3eutYud+QNiACkWrZDimjam u1w8DZs+GzmnU0mtFKH9w8e4IMZt7IUFHMY= -----END CERTIFICATE-----Generated at Tue Jul 1 23:25:10 2025 by rpki-client