$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa File: 8cad8b2d-6269-31fa-a87b-fc60824d517b.roa (raw, json) Hash identifier: xdjgi9evffynZ0iDhGqc2bKlZA9N+TYxCZqIotUG/Zs= Subject key identifier: CA:A2:59:B1:8C:DE:38:B1:C3:DF:32:23:83:97:B8:1D:01:88:06:56 Certificate issuer: /CN=8e2da239-793e-4082-afde-6458f2319e7e Certificate serial: 010D0C9F4328584A43DAFBB24AFBBA2B465D9C80 Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 3756 IP address blocks: 2620:f:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:fb:b2:4a:fb:ba:2b:46:5d:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=19c39312-79b2-4948-8b2d-7416d532f29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:00:18:4a:56:19:05:87:84:53:a6:ed:89:47: c5:43:07:9a:28:1f:52:81:ed:ba:12:d0:b1:db:0e: 0b:0d:09:7b:c9:cb:b1:0b:85:22:2e:4b:0f:9c:f9: 52:6a:cd:81:43:1c:01:18:10:a4:11:fc:16:2d:3e: 94:f1:cd:f7:58:d2:2e:2d:a6:36:dc:13:0a:a3:c0: 40:b5:bc:ff:91:5b:02:02:dd:fe:db:c0:79:26:dc: 36:63:7d:bd:3b:45:fa:c9:13:45:a5:24:f6:42:bf: 5b:74:0c:86:06:f2:b9:c9:bb:bd:1a:cb:6b:52:f4: c1:f1:c3:d5:ea:21:c4:31:ec:ba:d2:a4:85:61:07: 41:dc:8c:4d:dc:fc:c9:73:81:cb:9c:f8:8b:1d:d4: 44:b2:12:99:ca:db:a0:3c:1e:55:c6:c8:4e:b0:c1: 71:32:ca:7b:29:00:7b:0c:65:3c:d2:cf:0b:b9:7d: 8f:ab:92:21:78:64:9e:82:de:ea:b4:db:91:fb:c7: 7e:bf:c2:ad:67:ae:02:af:da:20:a1:35:ad:44:ba: ce:20:1a:de:0e:04:e0:3e:31:3d:6d:b2:92:6d:81: 4d:49:8c:13:34:ac:aa:f9:fd:e2:5f:b7:55:7d:b9: 37:45:fa:d1:af:b4:75:0f:78:c1:dd:15:ae:0b:a9: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A2:59:B1:8C:DE:38:B1:C3:DF:32:23:83:97:B8:1D:01:88:06:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl X509v3 Authority Key Identifier: keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer sbgp-ipAddrBlock: critical IPv6: 2620:f:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a1:b9:d1:48:96:1d:f9:2c:48:33:7d:e6:35:82:2d:2a:6d: 1f:ff:76:b3:fd:eb:ef:bc:a5:b5:cc:b5:71:b9:a3:d6:dd:b8: d8:b5:4a:e6:7f:b7:d5:b0:c0:80:6e:4f:58:ee:44:7c:7f:5a: 78:46:ce:1d:b8:b9:98:35:b9:e0:79:1e:d6:a6:36:f2:57:b9: 52:f9:9b:7e:28:88:df:23:56:a9:04:de:86:63:1e:de:61:f3: 0b:44:f8:a1:3e:90:04:8b:15:f9:d1:ef:c4:f7:65:e8:19:15: 2e:e4:b0:e0:fc:98:fa:b9:7e:20:43:76:de:26:e1:e7:df:9e: 36:4a:e4:56:f6:e1:f0:e7:f7:1c:d3:71:d6:7d:d2:d8:1c:b6: 17:fb:26:86:c1:c0:69:c0:66:2a:11:ea:99:d4:b3:3c:5f:4f: 69:5b:4a:76:fc:c3:7a:64:12:40:e4:1e:d7:8f:59:5f:1e:82: e8:b4:ed:71:70:e5:18:8e:1e:00:64:47:16:6c:f0:86:f3:9f: ce:30:ed:18:89:11:08:60:7f:fc:b2:ae:1a:7f:4f:04:03:2b: b6:47:62:1b:9f:58:81:f7:52:cd:86:1a:28:14:7e:69:23:28: 8a:9c:1a:86:2e:d7:ac:4c:fa:5d:25:62:fa:c5:88:ec:18:da: df:10:e4:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpD2vuySvu6K0ZdnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZGEyMzktNzkzZS00MDgyLWFmZGUtNjQ1OGYyMzE5 ZTdlMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk MTljMzkzMTItNzliMi00OTQ4LThiMmQtNzQxNmQ1MzJmMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQAYSlYZBYeEU6btiUfFQweaKB9Sge26EtCx 2w4LDQl7ycuxC4UiLksPnPlSas2BQxwBGBCkEfwWLT6U8c33WNIuLaY23BMKo8BA tbz/kVsCAt3+28B5Jtw2Y329O0X6yRNFpST2Qr9bdAyGBvK5ybu9GstrUvTB8cPV 6iHEMey60qSFYQdB3IxN3PzJc4HLnPiLHdREshKZytugPB5VxshOsMFxMsp7KQB7 DGU80s8LuX2Pq5IheGSegt7qtNuR+8d+v8KtZ64Cr9ogoTWtRLrOIBreDgTgPjE9 bbKSbYFNSYwTNKyq+f3iX7dVfbk3RfrRr7R1D3jB3RWuC6khtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMqiWbGM3jixw98yI4OXuB0BiAZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJk YTIzOS03OTNlLTQwODItYWZkZS02NDU4ZjIzMTllN2UvOGNhZDhiMmQtNjI2OS0z MWZhLWE4N2ItZmM2MDgyNGQ1MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGUyZGEyMzktNzkzZS00MDgyLWFm ZGUtNjQ1OGYyMzE5ZTdlLzhlMmRhMjM5LTc5M2UtNDA4Mi1hZmRlLTY0NThmMjMx OWU3ZS5jcmwwHwYDVR0jBBgwFoAUth6wyClvWdBkK0QvQaw4WOAHAegwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJkYTIzOS03OTNlLTQwODItYWZkZS02NDU4 ZjIzMTllN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAADwAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE6hudFIlh35LEgzfeY1gi0qbR//drP96++8pbXMtXG5o9bduNi1 SuZ/t9WwwIBuT1juRHx/WnhGzh24uZg1ueB5HtamNvJXuVL5m34oiN8jVqkE3oZj Ht5h8wtE+KE+kASLFfnR78T3ZegZFS7ksOD8mPq5fiBDdt4m4effnjZK5Fb24fDn 9xzTcdZ90tgcthf7JobBwGnAZioR6pnUszxfT2lbSnb8w3pkEkDkHtePWV8egui0 7XFw5RiOHgBkRxZs8Ibzn84w7RiJEQhgf/yyrhp/TwQDK7ZHYhufWIH3Us2GGigU fmkjKIqcGoYu16xM+l0lYvrFiOwY2t8Q5CE= -----END CERTIFICATE-----Generated at Tue Jul 1 13:54:53 2025 by rpki-client