$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa File: 8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa (raw, json) Hash identifier: QzFB9/dUfRW9LAbf9lZuG2tRnpVfwlwK0e37ppeyzJw= Subject key identifier: 99:83:77:69:56:22:0C:D9:7B:C0:AA:05:91:EB:60:8C:33:E5:5B:16 Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F4328584A3A1574B05719B9460961AD20 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 237 IP address blocks: 2001:48a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:74:b0:57:19:b9:46:09:61:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=4bd17660-4832-4a16-9d92-eb4057d28038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:df:0d:e3:1a:bd:cc:4d:47:ca:45:28:79:e4: 8f:aa:93:26:6d:7e:ce:7f:9f:bd:62:d9:dc:f6:ff: ff:3e:d9:ac:95:76:ff:25:a5:6b:49:79:3f:40:1c: f8:7b:f9:55:2a:12:8c:f6:bc:91:84:66:b9:46:af: 04:f0:33:d7:4f:90:86:fb:4c:c4:89:b9:9e:2e:ca: 6c:21:69:25:c2:e1:19:b1:7e:a2:e3:00:d3:90:b5: 90:9e:0c:22:71:ed:98:08:17:c6:ab:46:00:d8:ec: ca:65:6b:8a:bb:e1:4a:3b:bf:60:15:4e:a7:ef:54: 22:d9:bf:6c:0d:f1:48:90:7d:b0:d5:ed:90:09:db: bf:ac:7e:10:b7:eb:d0:cf:ab:8b:32:a7:49:02:18: 95:33:b4:b2:1e:39:b3:5a:8d:7c:da:02:f5:e8:1e: 31:ff:f7:67:7f:e1:80:f8:f2:06:39:03:71:ab:15: 68:0c:42:af:08:c9:70:d2:1b:0d:68:f0:7e:a1:75: 88:00:a9:6e:21:40:07:84:a3:e1:8f:7c:ff:69:e7: 5a:74:d7:16:ef:68:fc:f3:75:17:8c:18:86:e1:71: ac:0e:a8:db:75:ea:37:50:30:36:8c:89:df:8b:e5: e2:27:79:42:45:0d:51:5f:96:de:53:b1:65:6a:10: 64:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:83:77:69:56:22:0C:D9:7B:C0:AA:05:91:EB:60:8C:33:E5:5B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:34:d0:7e:07:4e:64:9d:6f:4c:9f:d0:e6:81:76:63:57:c4: 1f:87:5d:25:bb:9e:b4:27:5f:ad:7e:34:ea:ed:40:2d:27:56: 19:c9:7b:33:05:ea:b3:46:77:07:ce:b0:20:46:2e:48:e5:f5: 92:1d:1b:4e:3f:6d:1d:47:b7:03:26:d8:94:6d:35:52:aa:a0: 76:4d:cd:a5:d0:b2:c5:a2:60:24:48:0e:73:59:da:d7:68:fb: 2d:e0:59:34:68:a9:c5:a4:19:39:28:33:98:07:dd:33:eb:72: a7:58:f8:76:8b:48:d0:b1:5f:da:e7:84:15:ef:90:e4:67:21: 16:c1:48:94:9a:6b:9c:d0:de:de:41:40:20:70:df:aa:f6:be: d4:6a:48:b8:76:55:21:57:24:84:d8:d3:f1:11:9d:c1:ba:a8: c9:b9:a3:8d:2f:da:34:76:a2:06:61:43:ae:c7:00:11:15:d3: 03:7f:e7:6d:e0:9d:4a:ba:96:94:21:8b:ff:64:59:85:2c:1e: c7:b6:9f:42:af:e0:4c:8c:7b:f3:ca:90:81:76:18:37:f0:bb: 88:19:49:8a:6f:46:71:5c:30:2d:af:3d:88:bd:e4:ea:3c:5b: ff:35:a7:75:51:2e:59:da:23:cf:f8:96:9e:49:8b:7c:35:41: d7:95:38:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEo6FXSwVxm5RglhrSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NGJkMTc2NjAtNDgzMi00YTE2LTlkOTItZWI0MDU3ZDI4MDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt8N4xq9zE1HykUoeeSPqpMmbX7Of5+9Ytnc 9v//PtmslXb/JaVrSXk/QBz4e/lVKhKM9ryRhGa5Rq8E8DPXT5CG+0zEibmeLsps IWklwuEZsX6i4wDTkLWQngwice2YCBfGq0YA2OzKZWuKu+FKO79gFU6n71Qi2b9s DfFIkH2w1e2QCdu/rH4Qt+vQz6uLMqdJAhiVM7SyHjmzWo182gL16B4x//dnf+GA +PIGOQNxqxVoDEKvCMlw0hsNaPB+oXWIAKluIUAHhKPhj3z/aedadNcW72j883UX jBiG4XGsDqjbdeo3UDA2jInfi+XiJ3lCRQ1RX5beU7FlahBkCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJmDd2lWIgzZe8CqBZHrYIwz5VsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvOGUyOWQ3NWMtZWE2Zi0z MmRjLWFkN2YtNTZkMGY0YTMxOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFIqDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJNNB+B05knW9Mn9DmgXZjV8Qfh10lu560J1+tfjTq7UAtJ1YZyXsz BeqzRncHzrAgRi5I5fWSHRtOP20dR7cDJtiUbTVSqqB2Tc2l0LLFomAkSA5zWdrX aPst4Fk0aKnFpBk5KDOYB90z63KnWPh2i0jQsV/a54QV75DkZyEWwUiUmmuc0N7e QUAgcN+q9r7Uaki4dlUhVySE2NPxEZ3BuqjJuaONL9o0dqIGYUOuxwARFdMDf+dt 4J1KupaUIYv/ZFmFLB7Htp9Cr+BMjHvzypCBdhg38LuIGUmKb0ZxXDAtrz2IveTq PFv/Nad1US5Z2iPP+JaeSYt8NUHXlTgK -----END CERTIFICATE-----Generated at Mon Jun 30 04:32:54 2025 by rpki-client