$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/c36d6062-bd68-39e3-a7e3-d7f313b3c094.roa File: c36d6062-bd68-39e3-a7e3-d7f313b3c094.roa (raw, json) Hash identifier: jfkZgK2agJUVENHn9qoQmLdakNpQmuMx/uIuP6cM1SI= Subject key identifier: D9:75:B7:56:A2:FE:6A:4D:E5:A8:13:42:1A:22:AB:88:E5:C0:96:0F Certificate issuer: /CN=794b722c-8055-4835-a39e-50fadbb9af0e Certificate serial: 010D0C9F4328584A3E459C3EDB0972F5DD042290 Authority key identifier: 27:29:30:12:21:72:38:E7:76:06:4E:7C:84:99:CE:3D:4F:49:5F:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/c36d6062-bd68-39e3-a7e3-d7f313b3c094.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 400075 IP address blocks: 2606:df40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:9c:3e:db:09:72:f5:dd:04:22:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=794b722c-8055-4835-a39e-50fadbb9af0e Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=dd802cf4-86c6-43b6-8f2c-bd0c7b75c8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1c:ea:ee:65:1c:99:49:cf:f1:27:ba:f5:7a: ef:a8:e8:93:0e:ba:df:9b:6d:97:23:3d:fa:22:28: f2:ea:dc:31:98:5a:eb:6e:aa:23:b7:d9:c9:e6:db: ab:52:18:1b:55:7c:4e:3d:58:de:1f:c2:80:a8:9a: be:ff:1d:d1:6b:5e:ef:87:fe:b5:73:8e:5d:25:53: 66:3e:5b:f9:65:2e:1d:e8:7e:05:42:bd:bd:83:67: b2:2d:d8:6c:05:60:09:e8:1d:d3:81:85:74:a6:7e: da:5f:f2:45:80:72:de:f1:7d:b3:bc:58:6a:f2:b7: 6f:08:a1:ac:a0:5b:80:e7:c3:a9:da:cd:b1:20:2a: 4a:8f:1a:b7:10:84:6b:25:2b:c8:76:db:58:4b:76: e5:94:90:fa:1f:94:60:69:d3:f2:8c:99:ed:b2:b3: 2e:14:6f:04:82:f3:99:56:e3:a3:7b:78:47:4f:e5: af:99:9e:b2:6c:3a:66:3f:22:ad:1d:1e:58:24:a4: 80:f3:50:e1:4e:e7:89:63:90:71:9e:0d:8f:26:04: 0c:f8:eb:6f:3b:4c:56:f8:37:23:03:10:e9:4c:32: a9:4a:01:57:74:c9:bb:b0:26:34:99:e0:4c:b3:cc: 41:b7:b9:13:42:5c:6b:39:b2:00:d2:82:c8:22:3b: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:75:B7:56:A2:FE:6A:4D:E5:A8:13:42:1A:22:AB:88:E5:C0:96:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/c36d6062-bd68-39e3-a7e3-d7f313b3c094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.crl X509v3 Authority Key Identifier: keyid:27:29:30:12:21:72:38:E7:76:06:4E:7C:84:99:CE:3D:4F:49:5F:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e.cer sbgp-ipAddrBlock: critical IPv6: 2606:df40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:66:5f:bf:12:9f:1e:83:7e:16:62:ca:99:74:0e:93:67:e2: 7e:e1:32:5a:36:11:ec:a4:97:21:f1:78:6c:55:ec:88:97:78: 43:f4:99:d5:23:71:6a:9b:aa:94:10:bb:7f:64:d9:2c:82:9c: 0b:23:be:d8:2f:b5:c8:d1:4a:c2:bb:da:eb:95:8d:45:d0:29: c1:46:da:7f:06:44:0a:e7:b2:fd:62:5e:23:cb:cd:35:15:96: 7e:81:00:44:ad:e2:fc:2e:7a:1f:09:be:a3:b4:94:e8:8f:fc: b1:40:25:fb:5d:cc:ff:a7:62:23:cf:b3:10:8f:d0:e6:e7:82: 0c:ba:22:2e:90:ba:b4:ee:2c:9b:eb:87:db:d2:f1:6b:bb:9a: ca:df:8d:87:52:b2:6b:7c:70:36:e8:4b:9f:fa:54:62:a5:47: b9:0d:00:26:6a:f1:84:d0:00:66:37:4c:30:e1:7f:48:cd:d9: c9:09:fc:78:dd:1f:2d:26:89:cf:1d:f7:f3:86:97:03:b2:ef: f6:82:ce:ba:c0:02:43:01:09:0b:04:d0:d4:71:af:5a:cf:21: 0f:ba:ab:b8:d0:30:99:c0:c4:e7:47:85:f9:bd:9e:f2:4d:f3: c8:20:64:5b:39:71:9a:95:4c:61:b6:2b:0a:d0:e8:48:af:be: 10:7b:16:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEo+RZw+2wly9d0EIpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzk0YjcyMmMtODA1NS00ODM1LWEzOWUtNTBmYWRiYjlh ZjBlMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk ZGQ4MDJjZjQtODZjNi00M2I2LThmMmMtYmQwYzdiNzVjOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRzq7mUcmUnP8Se69XrvqOiTDrrfm22XIz36 Iijy6twxmFrrbqojt9nJ5turUhgbVXxOPVjeH8KAqJq+/x3Ra17vh/61c45dJVNm Plv5ZS4d6H4FQr29g2eyLdhsBWAJ6B3TgYV0pn7aX/JFgHLe8X2zvFhq8rdvCKGs oFuA58Op2s2xICpKjxq3EIRrJSvIdttYS3bllJD6H5RgadPyjJntsrMuFG8EgvOZ VuOje3hHT+WvmZ6ybDpmPyKtHR5YJKSA81DhTueJY5Bxng2PJgQM+OtvO0xW+Dcj AxDpTDKpSgFXdMm7sCY0meBMs8xBt7kTQlxrObIA0oLIIjvyqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNl1t1ai/mpN5agTQhoiq4jlwJYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OTRi NzIyYy04MDU1LTQ4MzUtYTM5ZS01MGZhZGJiOWFmMGUvYzM2ZDYwNjItYmQ2OC0z OWUzLWE3ZTMtZDdmMzEzYjNjMDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzk0YjcyMmMtODA1NS00ODM1LWEz OWUtNTBmYWRiYjlhZjBlLzc5NGI3MjJjLTgwNTUtNDgzNS1hMzllLTUwZmFkYmI5 YWYwZS5jcmwwHwYDVR0jBBgwFoAUJykwEiFyOOd2Bk58hJnOPU9JX7kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OTRiNzIyYy04MDU1LTQ4MzUtYTM5ZS01MGZh ZGJiOWFmMGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbfQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPZl+/Ep8eg34WYsqZdA6TZ+J+4TJaNhHspJch8XhsVeyIl3hD9JnV I3Fqm6qUELt/ZNksgpwLI77YL7XI0UrCu9rrlY1F0CnBRtp/BkQK57L9Yl4jy801 FZZ+gQBEreL8LnofCb6jtJToj/yxQCX7Xcz/p2Ijz7MQj9Dm54IMuiIukLq07iyb 64fb0vFru5rK342HUrJrfHA26Euf+lRipUe5DQAmavGE0ABmN0ww4X9IzdnJCfx4 3R8tJonPHffzhpcDsu/2gs66wAJDAQkLBNDUca9azyEPuqu40DCZwMTnR4X5vZ7y TfPIIGRbOXGalUxhtisK0OhIr74QexaA -----END CERTIFICATE-----Generated at Tue Jul 1 15:59:21 2025 by rpki-client