$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1ece9b12-0d51-3831-9ce3-ffac34c75e24.roa File: 1ece9b12-0d51-3831-9ce3-ffac34c75e24.roa (raw, json) Hash identifier: k8BHCPpmy5OEX/o1+xJiu2nPN+WZJhwK+akCuQXyYFU= Subject key identifier: F7:3D:C9:7E:01:3A:0B:9C:B2:54:02:F4:96:1B:1D:7B:8C:C8:55:7E Certificate issuer: /CN=2531a4ba-6abc-447c-add8-67edc3c483ab Certificate serial: 010D0C9F4328584A3A1580C7321CEE5AA74BE560 Authority key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1ece9b12-0d51-3831-9ce3-ffac34c75e24.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 395585 IP address blocks: 2620:12a:c001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:80:c7:32:1c:ee:5a:a7:4b:e5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2531a4ba-6abc-447c-add8-67edc3c483ab Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=2b2bde6a-24e3-4b43-b44b-c9323f0d3452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:09:ec:8b:19:2b:99:02:c6:46:7b:a7:9e:73: 8b:5e:94:a8:ba:84:83:81:c2:e6:2c:3a:b1:b3:10: b4:91:0b:3f:98:6d:a0:23:8c:3f:90:02:a4:d2:65: 45:26:ae:52:d0:2c:c7:00:6f:2e:fd:fb:99:a0:71: 36:26:d1:1a:25:a8:4e:21:eb:a9:42:2e:37:54:38: 56:b9:0b:cc:47:6f:a1:94:da:f9:ed:78:1b:64:93: 13:b1:d8:e9:c5:ee:77:20:5b:4e:ab:3a:9b:62:72: 60:db:88:ac:76:06:b4:a7:c7:77:c4:3f:87:f9:a0: 94:51:55:5d:a7:74:c0:ff:f1:30:f7:a6:30:82:3f: ff:69:8d:83:5b:b3:30:8f:c9:13:8f:4e:ab:1b:99: 8e:54:df:3c:f9:47:18:00:a4:d0:a7:8b:e6:eb:2c: dc:19:0f:6d:08:7a:fb:73:06:89:ff:53:60:2c:72: fb:29:41:48:ed:64:6b:d3:d2:f0:40:72:83:22:0c: 98:87:28:d9:92:25:4e:74:c1:e5:e3:31:f4:c4:3d: ed:e0:cc:f9:07:c8:db:b5:22:9e:8e:4a:b3:80:ed: e1:57:4a:d0:54:e9:3d:42:8b:bd:0c:64:c6:c0:4c: 2a:f4:12:0b:60:53:b6:58:c3:cf:61:64:29:d4:1e: b6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3D:C9:7E:01:3A:0B:9C:B2:54:02:F4:96:1B:1D:7B:8C:C8:55:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1ece9b12-0d51-3831-9ce3-ffac34c75e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl X509v3 Authority Key Identifier: keyid:9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer sbgp-ipAddrBlock: critical IPv6: 2620:12a:c001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:9b:c9:6f:19:2e:f0:28:ae:68:03:2b:59:f4:cc:77:78:78: 3b:69:85:0e:bc:ec:82:31:2b:ce:56:e3:31:52:7e:a9:ee:f8: ab:ea:3b:78:46:96:28:44:fe:fa:fd:e2:ec:98:5c:c1:8e:bc: d1:9f:29:54:37:21:56:5d:45:aa:1e:ea:a6:6b:4c:51:90:d4: 22:46:6e:74:91:6e:c3:71:42:c8:73:c1:bb:12:33:da:bc:af: 5a:87:09:dd:02:35:53:48:aa:3b:c2:19:0e:02:e8:a2:d5:11: e6:8e:e9:b3:14:43:de:05:f5:37:17:25:cf:c6:16:67:b1:be: 59:6e:1f:8e:9e:a7:44:df:81:db:7e:ab:b0:13:80:dd:2c:51: f6:bf:d0:83:d7:49:cc:f7:ed:6e:09:fa:a6:d9:09:9c:51:01: 79:ae:ea:b6:57:29:30:e5:42:90:70:a5:ee:bc:5f:ce:06:27: 53:05:63:38:46:37:46:a3:a4:97:54:31:13:72:46:fd:89:7a: bc:c1:22:68:9b:3a:7e:60:de:6d:e6:83:fd:30:36:4b:5b:05: 29:28:f0:f6:95:c0:88:77:50:83:99:8d:6d:6e:4a:ae:7b:62: 5f:9a:54:cd:9d:8a:45:f5:79:cd:bd:70:9d:2c:94:65:2f:1c: 34:5b:24:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo6FYDHMhzuWqdL5WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzMWE0YmEtNmFiYy00NDdjLWFkZDgtNjdlZGMzYzQ4 M2FiMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MmIyYmRlNmEtMjRlMy00YjQzLWI0NGItYzkzMjNmMGQzNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAnsixkrmQLGRnunnnOLXpSouoSDgcLmLDqx sxC0kQs/mG2gI4w/kAKk0mVFJq5S0CzHAG8u/fuZoHE2JtEaJahOIeupQi43VDhW uQvMR2+hlNr57XgbZJMTsdjpxe53IFtOqzqbYnJg24isdga0p8d3xD+H+aCUUVVd p3TA//Ew96Ywgj//aY2DW7Mwj8kTj06rG5mOVN88+UcYAKTQp4vm6yzcGQ9tCHr7 cwaJ/1NgLHL7KUFI7WRr09LwQHKDIgyYhyjZkiVOdMHl4zH0xD3t4Mz5B8jbtSKe jkqzgO3hV0rQVOk9Qou9DGTGwEwq9BILYFO2WMPPYWQp1B621QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPc9yX4BOgucslQC9JYbHXuMyFV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNTMx YTRiYS02YWJjLTQ0N2MtYWRkOC02N2VkYzNjNDgzYWIvMWVjZTliMTItMGQ1MS0z ODMxLTljZTMtZmZhYzM0Yzc1ZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjUzMWE0YmEtNmFiYy00NDdjLWFk ZDgtNjdlZGMzYzQ4M2FiLzI1MzFhNGJhLTZhYmMtNDQ3Yy1hZGQ4LTY3ZWRjM2M0 ODNhYi5jcmwwHwYDVR0jBBgwFoAUnjqfdPlsZO1jn6yB8uQ3Qy72OwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNTMxYTRiYS02YWJjLTQ0N2MtYWRkOC02N2Vk YzNjNDgzYWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKsAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACabyW8ZLvAormgDK1n0zHd4eDtphQ687IIxK85W4zFSfqnu+Kvq O3hGlihE/vr94uyYXMGOvNGfKVQ3IVZdRaoe6qZrTFGQ1CJGbnSRbsNxQshzwbsS M9q8r1qHCd0CNVNIqjvCGQ4C6KLVEeaO6bMUQ94F9TcXJc/GFmexvlluH46ep0Tf gdt+q7ATgN0sUfa/0IPXScz37W4J+qbZCZxRAXmu6rZXKTDlQpBwpe68X84GJ1MF YzhGN0ajpJdUMRNyRv2JerzBImibOn5g3m3mg/0wNktbBSko8PaVwIh3UIOZjW1u Sq57Yl+aVM2dikX1ec29cJ0slGUvHDRbJHc= -----END CERTIFICATE-----Generated at Tue Jul 1 12:08:58 2025 by rpki-client