$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa File: 885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa (raw, json) Hash identifier: dmnwp8uM2Q7k5JlS/QfLSZCGtJN9lt+r+mYIFDkQ4pA= Subject key identifier: 1A:FE:3D:4B:89:EC:22:C1:24:50:87:E3:A4:A9:5F:1D:D9:9B:43:F4 Certificate issuer: /CN=acd38b39-740a-4881-b923-26d1a20ffbfe Certificate serial: 010D0C9F4328584A5FC5DF5CD665AE501914B780 Authority key identifier: E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 33724 IP address blocks: 2604:240::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:df:5c:d6:65:ae:50:19:14:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acd38b39-740a-4881-b923-26d1a20ffbfe Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=94dd68ca-5bc7-4a7c-9a21-c4a5227ea2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:fa:75:51:b4:15:09:62:32:9b:39:be:00: 2d:5d:e5:c6:fe:53:19:44:78:57:a3:c7:b2:6c:10: 51:2b:38:c3:9e:7c:04:24:3b:b0:9a:64:ba:ca:cf: 31:c6:32:19:0e:c8:cb:d9:5b:d7:73:40:87:a7:aa: 5d:7c:9e:e3:56:e2:ba:fd:ac:b1:ae:68:4a:47:bf: 02:97:c1:f2:28:0d:35:69:fd:02:66:24:52:fa:ad: f9:d0:27:6c:cb:95:cb:59:a3:b3:89:21:b2:c2:51: 13:89:0f:10:a0:df:02:7a:b7:19:65:21:87:40:df: d3:de:15:1c:24:e3:69:50:64:9e:d6:d5:37:ce:33: 01:ab:ba:64:d1:d2:6d:21:e6:ce:7f:6c:e2:ed:70: b2:70:b9:4e:6b:36:81:f6:ca:4f:84:b4:46:e9:f3: 86:82:c0:ac:0a:0e:ff:fb:f5:a5:a0:b6:44:ab:07: 8d:83:03:f4:a1:3e:15:db:51:d8:e6:fd:a9:2e:f2: 6e:a1:ba:7c:7e:74:67:2c:05:72:55:5d:fa:64:8f: 6a:7d:1e:bd:d7:16:b3:73:ca:b5:9f:58:e3:d0:aa: 05:9b:2c:11:e2:90:59:af:79:29:8d:1f:02:ac:be: 3f:bc:47:cf:88:05:2e:4d:7f:53:0e:6e:12:88:45: 42:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FE:3D:4B:89:EC:22:C1:24:50:87:E3:A4:A9:5F:1D:D9:9B:43:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.crl X509v3 Authority Key Identifier: keyid:E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer sbgp-ipAddrBlock: critical IPv6: 2604:240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:53:41:55:2d:bd:74:c7:23:f9:57:1c:68:e2:be:c9:87:4b: dc:52:f7:c4:4b:25:ff:98:fe:ac:84:1e:7c:ed:48:c4:2b:aa: 22:c4:c5:bb:73:6d:fd:0a:80:29:8a:ab:e5:c1:5c:ae:cc:9f: 41:a3:dd:e3:a8:fd:c4:4b:60:32:0e:b9:0e:f7:05:96:33:8b: 42:b8:0e:e8:60:20:f2:bb:b5:14:ee:b7:7c:38:35:a1:4b:e8: a1:6f:77:a2:f3:e2:da:d2:a0:e2:38:f3:10:e6:9c:76:18:7f: 85:47:6d:c6:c6:86:0a:35:41:9c:ec:37:4a:d8:5e:3e:e7:f4: ec:42:c6:64:82:72:ed:ab:3d:2b:bb:0c:c4:7d:f2:5a:15:59: 0c:b7:12:0e:e9:9d:5e:3d:7e:85:d6:15:0d:a2:90:bd:04:be: 89:37:2d:3a:ef:4c:0c:3c:87:8a:c8:0f:42:ff:eb:e5:9c:50: b5:01:72:7b:38:30:de:33:3f:23:7b:1b:ec:3b:dd:b8:d8:22: 24:82:c7:35:41:6e:8f:3c:d0:64:4a:5a:9d:48:71:31:b0:ae: df:ce:11:1d:34:67:b9:b4:ec:f0:5e:d9:72:89:e2:25:07:01: 08:af:05:8d:aa:9e:2e:27:e4:10:ac:76:33:00:d1:c3:e2:12: 22:da:a5:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpfxd9c1mWuUBkUt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNkMzhiMzktNzQwYS00ODgxLWI5MjMtMjZkMWEyMGZm YmZlMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk OTRkZDY4Y2EtNWJjNy00YTdjLTlhMjEtYzRhNTIyN2VhMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsT6dVG0FQliMps5vgAtXeXG/lMZRHhXo8ey bBBRKzjDnnwEJDuwmmS6ys8xxjIZDsjL2VvXc0CHp6pdfJ7jVuK6/ayxrmhKR78C l8HyKA01af0CZiRS+q350Cdsy5XLWaOziSGywlETiQ8QoN8CercZZSGHQN/T3hUc JONpUGSe1tU3zjMBq7pk0dJtIebOf2zi7XCycLlOazaB9spPhLRG6fOGgsCsCg7/ +/WloLZEqweNgwP0oT4V21HY5v2pLvJuobp8fnRnLAVyVV36ZI9qfR691xazc8q1 n1jj0KoFmywR4pBZr3kpjR8CrL4/vEfPiAUuTX9TDm4SiEVCwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBr+PUuJ7CLBJFCH46SpXx3Zm0P0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hY2Qz OGIzOS03NDBhLTQ4ODEtYjkyMy0yNmQxYTIwZmZiZmUvODg1YWZkOWEtOGQ4OC0z OGRjLWI2MDgtOWYwMzkyZjRiOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWNkMzhiMzktNzQwYS00ODgxLWI5 MjMtMjZkMWEyMGZmYmZlL2FjZDM4YjM5LTc0MGEtNDg4MS1iOTIzLTI2ZDFhMjBm ZmJmZS5jcmwwHwYDVR0jBBgwFoAU6Q0P7Uf9egfuRa9jApRKORG1u2IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hY2QzOGIzOS03NDBhLTQ4ODEtYjkyMy0yNmQx YTIwZmZiZmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQCQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDOU0FVLb10xyP5Vxxo4r7Jh0vcUvfESyX/mP6shB587UjEK6oixMW7 c239CoApiqvlwVyuzJ9Bo93jqP3ES2AyDrkO9wWWM4tCuA7oYCDyu7UU7rd8ODWh S+ihb3ei8+La0qDiOPMQ5px2GH+FR23GxoYKNUGc7DdK2F4+5/TsQsZkgnLtqz0r uwzEffJaFVkMtxIO6Z1ePX6F1hUNopC9BL6JNy0670wMPIeKyA9C/+vlnFC1AXJ7 ODDeMz8jexvsO9242CIkgsc1QW6PPNBkSlqdSHExsK7fzhEdNGe5tOzwXtlyieIl BwEIrwWNqp4uJ+QQrHYzANHD4hIi2qUJ -----END CERTIFICATE-----Generated at Tue Jul 1 20:18:03 2025 by rpki-client