$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/19cefa01-5aa3-3c92-af6e-8b84b5ab306e.roa File: 19cefa01-5aa3-3c92-af6e-8b84b5ab306e.roa (raw, json) Hash identifier: slmCJj7ytwkX+kQDuYOaaw5dIG2eZGmgwmo+YNml/xg= Subject key identifier: A4:E0:0E:9A:E0:F8:58:A6:6B:9D:9D:61:F3:30:10:40:46:81:BD:1B Certificate issuer: /CN=65b40bd5-5bac-4926-93a3-fd16c7c31445 Certificate serial: 010D0C9F4328584A3A15805B58706DBA47DD6500 Authority key identifier: 37:DC:87:18:3B:B3:7C:17:41:53:1C:63:6B:18:62:08:05:1E:52:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/19cefa01-5aa3-3c92-af6e-8b84b5ab306e.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 32712 IP address blocks: 2607:8840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/65b40bd5-5bac-4926-93a3-fd16c7c31445.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/65b40bd5-5bac-4926-93a3-fd16c7c31445.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:80:5b:58:70:6d:ba:47:dd:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b40bd5-5bac-4926-93a3-fd16c7c31445 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=785163b3-45d7-4d81-9929-92e91122c497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cb:2a:e5:5d:d0:56:e2:0d:59:b2:ce:03:67: e3:18:c4:c2:58:42:58:5d:9e:fa:ed:a0:4a:54:05: 93:3a:b8:46:9d:16:94:62:3d:bc:b8:1b:f9:7c:1c: a6:5f:e4:c7:93:0d:e8:8d:1a:6c:60:4c:f0:5c:7d: 7e:50:3c:62:4c:53:84:53:95:8f:1d:cd:19:05:22: f2:97:a3:23:e2:42:d7:5d:75:eb:ab:32:06:7e:60: 97:1c:fe:41:85:a3:e4:f5:34:0d:72:a0:38:88:a5: 40:bd:c4:4c:2f:50:70:72:61:14:49:fd:5f:96:e8: 57:68:e7:93:4d:9d:02:f1:cd:71:ba:3d:d7:95:d7: 0a:cf:e3:36:5d:5b:c9:3c:4d:4c:0a:c9:95:00:34: 10:7f:1b:f5:5f:5b:4e:f6:e8:10:ff:d0:4f:83:1b: 71:4f:c4:f7:43:d3:e5:42:3e:df:2e:9c:90:a0:7f: 75:8d:83:88:8a:8e:b0:aa:f2:22:bb:89:d9:09:78: 61:fb:2f:da:3d:95:8e:06:30:06:ef:68:50:f8:4d: 21:0a:de:28:8b:ff:ae:a6:17:1e:95:0f:a4:fe:ee: 56:d0:e8:ee:62:fb:64:8c:86:b5:1a:aa:bb:30:bb: 40:26:98:b7:d3:d6:b6:80:a5:31:7c:d1:f5:3b:04: b8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E0:0E:9A:E0:F8:58:A6:6B:9D:9D:61:F3:30:10:40:46:81:BD:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/19cefa01-5aa3-3c92-af6e-8b84b5ab306e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/65b40bd5-5bac-4926-93a3-fd16c7c31445.crl X509v3 Authority Key Identifier: keyid:37:DC:87:18:3B:B3:7C:17:41:53:1C:63:6B:18:62:08:05:1E:52:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445.cer sbgp-ipAddrBlock: critical IPv6: 2607:8840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:db:14:96:0d:cd:33:a4:65:a3:4a:b1:ec:c0:2a:10:8d:fe: 27:96:8c:cf:8c:30:26:92:67:96:c2:75:89:58:a7:f2:03:33: c7:1b:fc:b7:ba:c6:1e:4a:05:2e:4b:aa:15:27:e9:ec:c2:8b: 0c:00:96:ba:f8:d4:60:a2:58:0a:e8:5b:8d:c0:88:8c:d4:1a: 73:2c:67:4a:5e:2d:93:9e:a9:37:28:70:d1:9b:80:18:f4:35: 7f:f5:82:b7:c7:27:3b:61:74:94:30:fd:36:17:1a:a7:90:42: 90:68:4d:b9:31:56:ce:e3:f4:68:9c:f8:ec:c7:e5:ac:8b:48: 28:30:0e:4f:e7:63:e7:6d:b5:7d:f6:40:3e:b0:88:b6:82:8b: b9:47:ef:58:eb:49:91:3b:2a:6a:fc:d7:32:05:a5:aa:7f:03: 50:27:2a:f8:2d:99:91:f3:3d:ea:ad:24:51:09:8d:ef:1c:b9: 05:1a:fa:c1:e2:b4:63:87:b8:ab:be:e4:e7:e7:fe:24:e4:4f: 0e:29:be:7f:86:cc:8c:b4:3d:45:a2:04:54:06:ba:6b:b1:d1: 1a:3d:82:c3:46:1c:65:4f:ca:81:d4:66:9b:44:3e:dc:80:13: c4:e1:5b:de:60:88:89:d6:ff:58:b7:13:30:22:fc:17:bd:82: b8:f8:ec:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEo6FYBbWHBtukfdZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjViNDBiZDUtNWJhYy00OTI2LTkzYTMtZmQxNmM3YzMx NDQ1MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk Nzg1MTYzYjMtNDVkNy00ZDgxLTk5MjktOTJlOTExMjJjNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcsq5V3QVuINWbLOA2fjGMTCWEJYXZ767aBK VAWTOrhGnRaUYj28uBv5fBymX+THkw3ojRpsYEzwXH1+UDxiTFOEU5WPHc0ZBSLy l6Mj4kLXXXXrqzIGfmCXHP5BhaPk9TQNcqA4iKVAvcRML1BwcmEUSf1fluhXaOeT TZ0C8c1xuj3XldcKz+M2XVvJPE1MCsmVADQQfxv1X1tO9ugQ/9BPgxtxT8T3Q9Pl Qj7fLpyQoH91jYOIio6wqvIiu4nZCXhh+y/aPZWOBjAG72hQ+E0hCt4oi/+uphce lQ+k/u5W0OjuYvtkjIa1Gqq7MLtAJpi309a2gKUxfNH1OwS4qQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKTgDprg+Fima52dYfMwEEBGgb0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NWI0 MGJkNS01YmFjLTQ5MjYtOTNhMy1mZDE2YzdjMzE0NDUvMTljZWZhMDEtNWFhMy0z YzkyLWFmNmUtOGI4NGI1YWIzMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjViNDBiZDUtNWJhYy00OTI2LTkz YTMtZmQxNmM3YzMxNDQ1LzY1YjQwYmQ1LTViYWMtNDkyNi05M2EzLWZkMTZjN2Mz MTQ0NS5jcmwwHwYDVR0jBBgwFoAUN9yHGDuzfBdBUxxjaxhiCAUeUrQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NWI0MGJkNS01YmFjLTQ5MjYtOTNhMy1mZDE2 YzdjMzE0NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeIQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCU2xSWDc0zpGWjSrHswCoQjf4nlozPjDAmkmeWwnWJWKfyAzPHG/y3 usYeSgUuS6oVJ+nswosMAJa6+NRgolgK6FuNwIiM1BpzLGdKXi2Tnqk3KHDRm4AY 9DV/9YK3xyc7YXSUMP02FxqnkEKQaE25MVbO4/RonPjsx+Wsi0goMA5P52PnbbV9 9kA+sIi2gou5R+9Y60mROypq/NcyBaWqfwNQJyr4LZmR8z3qrSRRCY3vHLkFGvrB 4rRjh7irvuTn5/4k5E8OKb5/hsyMtD1FogRUBrprsdEaPYLDRhxlT8qB1GabRD7c gBPE4VveYIiJ1v9YtxMwIvwXvYK4+Oyi -----END CERTIFICATE-----Generated at Mon Jun 30 16:35:15 2025 by rpki-client