$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ae0f2957-b0a8-3b21-88a3-5e9c8a505e8a.roa File: ae0f2957-b0a8-3b21-88a3-5e9c8a505e8a.roa (raw, json) Hash identifier: Dy8HHXt0qA/o+5AhR+OknRrRorQDc88UFgD89IgcwCI= Subject key identifier: 12:31:EE:37:50:43:2F:97:28:DE:5F:70:41:86:E4:66:83:48:9B:9C Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584A5765C9C56A223B21C85B0900 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ae0f2957-b0a8-3b21-88a3-5e9c8a505e8a.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 400097 IP address blocks: 2606:3d40:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:c9:c5:6a:22:3b:21:c8:5b:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=67653029-37f3-4679-ae96-34a2d582edc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:14:51:d7:ea:af:2e:56:dd:b0:94:e8:de:cf: ba:08:77:1b:5d:e8:e9:7f:3a:9f:e0:00:d2:79:28: 9c:04:a7:06:2c:c2:3d:8c:de:0b:b7:68:7d:a4:84: d5:38:10:04:43:61:ae:ea:a4:c5:16:13:f1:23:1f: 23:74:9f:27:60:87:ef:2c:d8:f0:68:ce:6d:35:50: 64:f7:e4:5d:aa:31:a6:0e:0e:ef:5b:67:86:ed:d4: 7b:f6:1e:f1:38:57:f4:d3:b6:81:e2:e0:68:d9:16: 1b:6f:9c:ae:10:58:24:aa:65:d8:64:d4:ad:e6:4d: d7:a6:f5:bf:86:04:6a:7b:5d:b2:6e:ed:c3:ff:d3: 5b:82:ea:be:94:0e:80:72:f5:8a:51:57:8c:25:19: 20:e7:f6:df:87:c6:64:0e:fc:40:0c:5f:fd:ed:4f: 31:32:b1:79:0b:b4:59:c1:9d:b4:5b:55:47:77:a7: f0:1a:0b:c5:12:6e:0c:e1:5f:55:ec:f3:c2:15:a7: 9b:be:9e:d1:ff:60:24:95:32:b4:98:cd:45:dc:c6: 7b:49:29:f7:c3:1f:e0:32:db:14:4b:b1:cd:d4:c9: ec:39:3b:bb:b7:44:f4:98:4c:89:95:24:e8:14:c8: 20:a0:60:07:d7:08:9b:9b:ae:45:30:75:7f:40:9a: 2c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:31:EE:37:50:43:2F:97:28:DE:5F:70:41:86:E4:66:83:48:9B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ae0f2957-b0a8-3b21-88a3-5e9c8a505e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:ff:d7:8b:42:c7:4a:4a:e4:28:8f:7e:97:be:b4:32:70:c0: 75:47:10:7c:56:35:c4:da:7b:fb:08:7a:61:55:7b:2e:16:09: da:9d:1b:54:51:9e:14:94:d7:76:a1:f6:37:98:10:f6:56:50: 14:45:c5:88:77:37:b4:ae:db:a5:3d:6b:c4:d1:5c:8d:26:22: 71:8a:4d:ed:b1:07:f5:6c:f1:84:fd:48:11:ca:88:bf:f8:17: b1:1c:1c:53:10:60:57:42:1f:fd:f6:64:a1:1a:be:31:d2:d6: 7f:d0:e1:85:16:51:b0:16:c5:98:e1:e9:90:7e:9b:21:04:57: c1:35:28:dd:7b:0e:9e:0d:b7:bd:f2:d0:14:2f:16:3b:e2:3c: 4c:71:96:09:7e:1c:bb:be:73:bd:db:85:ef:db:94:12:41:d4: 37:35:0c:4f:a7:0f:66:06:c4:2f:5a:db:55:71:47:34:5d:a9: b1:16:81:4e:8f:4e:3e:30:3f:9b:16:ce:1f:db:5e:2e:6b:5c: ee:ef:8c:8f:41:9b:ad:40:62:03:1a:82:01:b5:16:4b:97:5a: 05:ea:8d:9b:73:3c:9d:01:91:5b:ec:fc:e5:74:8e:47:ea:dd: fc:a3:05:7d:0d:e7:43:64:5f:90:7c:f7:09:22:3c:fc:9a:5d: 22:21:d8:25 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpXZcnFaiI7IchbCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk Njc2NTMwMjktMzdmMy00Njc5LWFlOTYtMzRhMmQ1ODJlZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRRR1+qvLlbdsJTo3s+6CHcbXejpfzqf4ADS eSicBKcGLMI9jN4Lt2h9pITVOBAEQ2Gu6qTFFhPxIx8jdJ8nYIfvLNjwaM5tNVBk 9+RdqjGmDg7vW2eG7dR79h7xOFf007aB4uBo2RYbb5yuEFgkqmXYZNSt5k3XpvW/ hgRqe12ybu3D/9Nbguq+lA6AcvWKUVeMJRkg5/bfh8ZkDvxADF/97U8xMrF5C7RZ wZ20W1VHd6fwGgvFEm4M4V9V7PPCFaebvp7R/2AklTK0mM1F3MZ7SSn3wx/gMtsU S7HN1MnsOTu7t0T0mEyJlSToFMggoGAH1wibm65FMHV/QJosIQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBIx7jdQQy+XKN5fcEGG5GaDSJucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvYWUwZjI5NTctYjBhOC0z YjIxLTg4YTMtNWU5YzhhNTA1ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgY9QAEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmP/Xi0LHSkrkKI9+l760MnDAdUcQfFY1xNp7+wh6YVV7LhYJ2p0b VFGeFJTXdqH2N5gQ9lZQFEXFiHc3tK7bpT1rxNFcjSYicYpN7bEH9WzxhP1IEcqI v/gXsRwcUxBgV0If/fZkoRq+MdLWf9DhhRZRsBbFmOHpkH6bIQRXwTUo3XsOng23 vfLQFC8WO+I8THGWCX4cu75zvduF79uUEkHUNzUMT6cPZgbEL1rbVXFHNF2psRaB To9OPjA/mxbOH9teLmtc7u+Mj0GbrUBiAxqCAbUWS5daBeqNm3M8nQGRW+z85XSO R+rd/KMFfQ3nQ2RfkHz3CSI8/JpdIiHYJQ== -----END CERTIFICATE-----Generated at Tue Jul 1 23:27:20 2025 by rpki-client