$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f053e8d3-b059-3c90-90ae-933fd26f0f4b.roa File: f053e8d3-b059-3c90-90ae-933fd26f0f4b.roa (raw, json) Hash identifier: BzQricXjtCsHPAvXu0bciDAIM0B+nSG4bW8gSH7BP4c= Subject key identifier: 4C:48:6B:F5:3A:75:61:87:5C:6D:C1:C8:55:9A:7C:06:00:BA:A4:D3 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A225ABD6DBC0C0AF98210B700 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f053e8d3-b059-3c90-90ae-933fd26f0f4b.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 16509 IP address blocks: 2605:4300:2c13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:bd:6d:bc:0c:0a:f9:82:10:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=4f31c257-a6c5-4e2d-8d2b-2e43c0a60f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:b4:cd:31:a2:4f:5a:a6:ea:b2:7d:c4:80: df:af:bb:df:9a:35:0a:77:1a:4e:85:39:4a:9b:76: a5:f3:07:7f:38:5b:d5:bc:c5:88:ba:53:70:06:ad: a4:66:f7:b6:f9:9c:91:21:2e:6c:ef:36:45:b5:64: 40:24:e2:7f:56:35:3f:b2:7c:16:d7:ef:7b:63:9a: 31:54:20:71:f5:e2:28:d5:cf:07:5c:d0:18:30:82: 74:48:05:92:eb:02:89:fc:64:85:04:ae:73:04:5d: 3a:b6:d4:e9:1c:f7:a8:1e:b4:d3:c5:d1:8b:a1:08: e3:18:73:67:f5:e7:12:90:32:45:94:53:f1:6b:61: a3:07:eb:4e:b3:13:79:1b:dc:12:a6:04:83:64:3b: 5c:16:63:25:05:d8:b3:c0:a8:83:38:f0:f0:b2:58: f0:81:fd:a3:2a:9b:60:ba:f0:a7:fd:56:bc:9d:ff: 38:e6:31:ed:98:ae:36:cc:9b:87:a9:98:b8:7a:97: d3:e3:ea:71:7e:b2:95:e7:b0:d1:a0:94:b5:ec:ef: e4:42:5d:7b:d9:10:a4:95:1a:ab:66:e9:ea:1c:08: c8:a0:e0:d9:d4:d1:25:dc:e2:83:ac:d4:db:08:6d: fc:24:a5:51:b2:fb:64:3b:0f:da:3c:be:41:8c:47: 6f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:48:6B:F5:3A:75:61:87:5C:6D:C1:C8:55:9A:7C:06:00:BA:A4:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f053e8d3-b059-3c90-90ae-933fd26f0f4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c13::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:22:04:ce:1b:af:92:30:fa:22:71:8a:a1:5e:09:18:5b:98: 5f:cc:69:cb:8f:e5:4c:5c:e7:cf:8e:ad:ca:b4:f5:8e:59:5d: ba:b6:86:b5:f7:41:cc:a7:3d:fd:df:6d:73:20:be:07:0a:57: 92:f1:25:36:79:bc:2b:ae:95:7a:40:18:91:ea:f3:52:2e:bc: 59:9f:96:38:46:c7:8c:ba:88:a4:c0:69:a0:f3:bf:80:45:50: 34:2c:f7:74:33:92:88:f0:db:2c:cc:dd:8b:7d:66:8f:86:6c: b0:a9:6c:44:99:53:74:eb:55:57:19:d2:0a:9f:6d:70:23:a8: 91:58:20:07:37:fb:98:41:6e:ee:f6:de:5e:a6:90:76:d7:01: d2:5e:78:64:66:79:0f:4b:9d:73:bb:21:05:63:44:63:94:3f: 8c:70:50:f0:08:d9:13:44:01:30:c0:88:29:46:e8:e2:13:c3: 7d:3e:99:c5:01:16:0f:fa:a9:ce:fb:38:2d:b5:77:ca:b9:3d: c7:fc:36:31:84:a7:eb:ca:d6:e1:88:e6:28:46:b7:10:1a:88: 7b:29:92:a4:0c:41:c0:06:80:e5:76:58:49:6b:07:c2:78:ad: 00:e2:d3:68:0a:9e:b9:b6:2e:0d:30:33:4b:20:44:f3:e5:99: ec:66:e9:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoiWr1tvAwK+YIQtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk NGYzMWMyNTctYTZjNS00ZTJkLThkMmItMmU0M2MwYTYwZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAK0zTGiT1qm6rJ9xIDfr7vfmjUKdxpOhTlK m3al8wd/OFvVvMWIulNwBq2kZve2+ZyRIS5s7zZFtWRAJOJ/VjU/snwW1+97Y5ox VCBx9eIo1c8HXNAYMIJ0SAWS6wKJ/GSFBK5zBF06ttTpHPeoHrTTxdGLoQjjGHNn 9ecSkDJFlFPxa2GjB+tOsxN5G9wSpgSDZDtcFmMlBdizwKiDOPDwsljwgf2jKptg uvCn/Va8nf845jHtmK42zJuHqZi4epfT4+pxfrKV57DRoJS17O/kQl172RCklRqr ZunqHAjIoODZ1NEl3OKDrNTbCG38JKVRsvtkOw/aPL5BjEdvYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFExIa/U6dWGHXG3ByFWafAYAuqTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjA1M2U4ZDMtYjA1OS0z YzkwLTkwYWUtOTMzZmQyNmYwZjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKEiBM4br5Iw+iJxiqFeCRhbmF/MacuP5Uxc58+Orcq09Y5ZXbq2 hrX3QcynPf3fbXMgvgcKV5LxJTZ5vCuulXpAGJHq81IuvFmfljhGx4y6iKTAaaDz v4BFUDQs93Qzkojw2yzM3Yt9Zo+GbLCpbESZU3TrVVcZ0gqfbXAjqJFYIAc3+5hB bu723l6mkHbXAdJeeGRmeQ9LnXO7IQVjRGOUP4xwUPAI2RNEATDAiClG6OITw30+ mcUBFg/6qc77OC21d8q5Pcf8NjGEp+vK1uGI5ihGtxAaiHspkqQMQcAGgOV2WElr B8J4rQDi02gKnrm2Lg0wM0sgRPPlmexm6a0= -----END CERTIFICATE-----Generated at Sun Jun 29 14:33:03 2025 by rpki-client