$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa File: fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa (raw, json) Hash identifier: P2cPO0Lyg8puxAj/Na13XuMADg8oz0JthY5FYrG9c7M= Subject key identifier: 9A:10:AC:B0:2E:7C:7B:1A:E6:A3:6E:D9:F1:D8:62:03:9A:4D:E9:BD Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F4328584A68260C7E3F1CDF67E96F6F00 Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 46962 IP address blocks: 2606:2ac0::/33 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:0c:7e:3f:1c:df:67:e9:6f:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=6afb1c9d-b38a-4394-abd1-7c3ed84385e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8c:fc:fd:72:09:03:bc:e6:ab:e1:d2:47:4c: fb:d4:95:5f:7c:1e:1f:d4:e6:af:ea:33:f9:1e:98: a2:46:5f:29:2b:ba:10:4e:0b:82:32:f3:4a:53:c9: bd:cb:cb:b1:eb:23:ff:1e:55:2d:1d:3e:04:21:1b: 34:6a:01:9e:d2:ea:89:a2:fd:37:eb:f3:98:27:8a: 0f:71:40:bb:4f:98:0e:77:09:51:6e:3d:20:e4:f8: 0f:ce:cb:e5:1f:f9:d7:6a:51:65:72:96:58:42:9e: 19:5b:cd:55:13:9e:1d:5e:b5:4b:30:a7:27:3f:c7: 49:ce:f5:1e:0d:48:29:b8:b5:c5:24:5a:95:18:67: 75:5b:27:58:d1:97:ed:11:7e:aa:f8:c3:2b:d5:0e: 40:70:63:98:e3:de:81:09:a9:1d:cb:57:96:5b:49: ab:cf:54:b0:73:53:df:79:79:59:3a:de:02:01:ec: 5d:72:d1:18:87:09:86:94:ed:79:c0:1a:79:10:0a: b9:99:9d:32:57:c7:b5:34:2b:77:cb:60:5e:a5:77: b2:8f:32:e1:af:0d:8b:b2:3a:c2:66:64:1a:11:82: 81:a9:c4:e3:18:09:c8:28:03:8d:8b:ac:bd:f6:99: c5:8a:ce:93:e9:fe:72:2a:fe:d0:3e:5f:04:99:87: 4d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:10:AC:B0:2E:7C:7B:1A:E6:A3:6E:D9:F1:D8:62:03:9A:4D:E9:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv6: 2606:2ac0::/33 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c7:fc:e6:22:26:95:69:49:51:94:b5:4b:71:ea:6c:39:ab: d1:52:44:1c:3e:5d:ad:56:8b:06:28:3e:4b:dc:3f:4d:7f:7e: 7d:ca:a5:56:ca:87:ad:19:7f:db:f2:33:54:1e:ce:0b:2a:d5: a3:6d:80:cc:39:d0:dd:91:25:4d:db:97:9b:56:28:bd:5a:48: 1a:29:34:f1:eb:7e:12:17:5b:2a:14:dc:f1:3d:f0:bc:bb:36: 2b:90:cd:16:1a:14:b1:79:01:ec:b3:82:c9:61:68:f7:66:3e: 36:bf:d4:d3:61:3e:15:ea:9c:34:50:67:9b:01:65:bf:63:77: f9:f6:fa:77:67:5d:fe:5c:2c:27:e2:3e:65:ef:58:79:ab:55: d2:3e:ec:0a:c7:5a:6a:38:18:04:ad:f9:c1:d4:1b:f9:a7:49: 91:49:f7:05:50:0a:08:dd:0a:8d:ca:4a:79:ae:6f:72:31:29: 89:cd:90:d2:23:65:cb:fc:d6:ba:b6:c4:d8:86:43:75:9f:fb: 4c:51:79:0e:a7:bc:7c:13:e5:c9:07:f2:35:2c:38:22:f2:4d: 5e:65:fd:75:06:5e:2f:f0:4e:5f:6e:c0:f4:b5:2a:2e:f3:ff: f5:1f:57:42:ac:69:de:08:bf:bc:09:7d:be:e6:27:29:e1:5e: 32:47:62:59 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpoJgx+PxzfZ+lvbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NmFmYjFjOWQtYjM4YS00Mzk0LWFiZDEtN2MzZWQ4NDM4NWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yz8/XIJA7zmq+HSR0z71JVffB4f1Oav6jP5 HpiiRl8pK7oQTguCMvNKU8m9y8ux6yP/HlUtHT4EIRs0agGe0uqJov036/OYJ4oP cUC7T5gOdwlRbj0g5PgPzsvlH/nXalFlcpZYQp4ZW81VE54dXrVLMKcnP8dJzvUe DUgpuLXFJFqVGGd1WydY0ZftEX6q+MMr1Q5AcGOY496BCakdy1eWW0mrz1Swc1Pf eXlZOt4CAexdctEYhwmGlO15wBp5EAq5mZ0yV8e1NCt3y2BepXeyjzLhrw2LsjrC ZmQaEYKBqcTjGAnIKAONi6y99pnFis6T6f5yKv7QPl8EmYdN3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJoQrLAufHsa5qNu2fHYYgOaTem9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvZmNjN2VkOGYtZjIxOC0z YzAwLThmMDUtZmFkZTJlZmE0MzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJgYqwAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAb8f85iImlWlJUZS1S3HqbDmr0VJEHD5drVaLBig+S9w/TX9+fcql VsqHrRl/2/IzVB7OCyrVo22AzDnQ3ZElTduXm1YovVpIGik08et+EhdbKhTc8T3w vLs2K5DNFhoUsXkB7LOCyWFo92Y+Nr/U02E+FeqcNFBnmwFlv2N3+fb6d2dd/lws J+I+Ze9YeatV0j7sCsdaajgYBK35wdQb+adJkUn3BVAKCN0KjcpKea5vcjEpic2Q 0iNly/zWurbE2IZDdZ/7TFF5Dqe8fBPlyQfyNSw4IvJNXmX9dQZeL/BOX27A9LUq LvP/9R9XQqxp3gi/vAl9vuYnKeFeMkdiWQ== -----END CERTIFICATE-----Generated at Fri Jul 4 21:10:03 2025 by rpki-client