$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa File: 8a673006-55a5-3418-963c-f9a5b7571cea.roa (raw, json) Hash identifier: hje87hWB1+N4rbKNsRAS/jJtscFcB9hB/7U/trw72ZY= Subject key identifier: B3:5D:43:4C:14:39:AA:2B:31:6A:67:84:14:1E:79:4D:C5:66:C4:52 Certificate issuer: /CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc Certificate serial: 010D0C9F4328584A4C3B11B1C53DF8A6D6032D40 Authority key identifier: 43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 393869 IP address blocks: 2620:11f:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:11:b1:c5:3d:f8:a6:d6:03:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=833ad4ce-ee6d-450d-8bd6-9e0096bbbe13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:28:96:0a:63:c3:bd:db:36:22:c1:88:65:da: 3d:f5:0b:2e:3e:c2:0d:15:1c:29:ba:73:51:52:87: a2:4b:f6:d2:3b:34:72:45:b6:0f:6b:d5:92:a7:37: cb:63:f3:53:f0:a2:bf:94:13:b6:c9:81:18:87:0e: b7:fc:00:17:0b:1f:de:2a:45:aa:7a:e5:80:3f:76: de:7b:78:a6:53:9c:e1:8b:41:c2:2c:a2:b9:3e:83: f7:cd:c5:11:ae:fa:d3:31:5e:c1:40:60:56:98:c8: a5:ce:35:7e:00:56:bc:bd:af:20:24:de:d1:a0:38: c1:e5:fb:05:cd:3b:7a:01:98:38:dd:a6:d9:49:9f: 8e:5d:f9:d4:21:35:7a:eb:76:ec:6f:72:f3:43:6c: be:e3:cd:7f:50:c2:1e:97:3f:08:da:db:28:fc:76: 1d:71:c4:bb:7e:9e:bf:e5:1d:40:06:45:ff:25:41: 30:b6:8c:82:f5:4c:ec:2a:2e:d5:4e:6c:f4:0f:c6: d6:3c:b0:6d:8f:03:56:a0:6e:ba:b3:d4:01:fa:f7: 74:bd:ec:36:0f:b3:10:5e:bf:5f:a1:53:84:b0:ba: 37:35:7a:66:c8:5f:a8:be:94:f9:4b:22:f1:f2:d0: 9e:cf:2d:52:15:54:4b:96:ca:fa:1f:80:07:8a:89: 1f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5D:43:4C:14:39:AA:2B:31:6A:67:84:14:1E:79:4D:C5:66:C4:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl X509v3 Authority Key Identifier: keyid:43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer sbgp-ipAddrBlock: critical IPv6: 2620:11f:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b4:24:09:70:7d:3d:e3:64:3b:51:24:d2:d4:32:93:f8:fc: 95:5b:6d:94:8b:2c:e0:fe:6c:69:9a:14:45:2a:f5:4a:1e:68: 4f:4d:37:96:cd:8e:2b:30:a9:04:d8:3c:ce:b7:c6:25:00:2b: b3:bb:4f:72:59:7c:d5:5b:2b:2c:a6:e6:cb:33:21:33:d6:c9: ea:21:96:56:b6:0d:65:56:c2:60:4b:07:7c:cf:a4:59:90:f5: 5c:3d:e4:e9:0c:88:57:16:b5:aa:5b:d0:e4:12:4b:ce:48:7e: 03:62:58:c0:e0:25:e8:ab:26:eb:62:17:04:47:73:01:ae:d2: 8c:99:b7:cc:6d:e3:6e:ec:61:17:4b:fc:6a:ef:52:21:dc:a0: 5e:86:d7:90:6c:71:15:b2:02:cf:9d:88:d3:cb:19:3d:97:3f: c0:c9:e4:01:31:a5:26:4c:15:70:fd:5e:31:33:3a:26:d2:e4: 6e:1c:e0:0c:bb:45:2a:da:9c:ab:c3:37:1f:38:cb:bd:b4:80: 44:60:ae:85:7e:16:ed:01:ca:1d:84:30:80:45:a3:0a:78:6e: 8d:c9:a5:ba:d2:f2:f1:95:00:c6:77:00:0b:c2:ff:30:09:9c: c6:b7:01:f1:88:ec:6e:51:61:c0:53:40:0a:9a:13:42:ba:a4: cc:91:2e:c0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpMOxGxxT34ptYDLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTllMmMxYWMtZTI1NS00MGZlLThkYzgtMzY3NTBiNTY5 YmZjMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ODMzYWQ0Y2UtZWU2ZC00NTBkLThiZDYtOWUwMDk2YmJiZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CiWCmPDvds2IsGIZdo99QsuPsINFRwpunNR UoeiS/bSOzRyRbYPa9WSpzfLY/NT8KK/lBO2yYEYhw63/AAXCx/eKkWqeuWAP3be e3imU5zhi0HCLKK5PoP3zcURrvrTMV7BQGBWmMilzjV+AFa8va8gJN7RoDjB5fsF zTt6AZg43abZSZ+OXfnUITV663bsb3LzQ2y+481/UMIelz8I2tso/HYdccS7fp6/ 5R1ABkX/JUEwtoyC9UzsKi7VTmz0D8bWPLBtjwNWoG66s9QB+vd0vew2D7MQXr9f oVOEsLo3NXpmyF+ovpT5SyLx8tCezy1SFVRLlsr6H4AHiokfKwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLNdQ0wUOaorMWpnhBQeeU3FZsRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUy YzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1MGI1NjliZmMvOGE2NzMwMDYtNTVhNS0z NDE4LTk2M2MtZjlhNWI3NTcxY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTllMmMxYWMtZTI1NS00MGZlLThk YzgtMzY3NTBiNTY5YmZjL2E5ZTJjMWFjLWUyNTUtNDBmZS04ZGM4LTM2NzUwYjU2 OWJmYy5jcmwwHwYDVR0jBBgwFoAUQ16gpiq9KrPgDx52W71+jvmA1x0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUyYzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1 MGI1NjliZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABH1Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVbQkCXB9PeNkO1Ek0tQyk/j8lVttlIss4P5saZoURSr1Sh5oT003 ls2OKzCpBNg8zrfGJQArs7tPcll81VsrLKbmyzMhM9bJ6iGWVrYNZVbCYEsHfM+k WZD1XD3k6QyIVxa1qlvQ5BJLzkh+A2JYwOAl6Ksm62IXBEdzAa7SjJm3zG3jbuxh F0v8au9SIdygXobXkGxxFbICz52I08sZPZc/wMnkATGlJkwVcP1eMTM6JtLkbhzg DLtFKtqcq8M3HzjLvbSARGCuhX4W7QHKHYQwgEWjCnhujcmlutLy8ZUAxncAC8L/ MAmcxrcB8YjsblFhwFNACpoTQrqkzJEuwA== -----END CERTIFICATE-----Generated at Tue Jul 1 17:07:41 2025 by rpki-client