$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/725248f3-6cd4-3191-b686-aae1fe549b6e.roa File: 725248f3-6cd4-3191-b686-aae1fe549b6e.roa (raw, json) Hash identifier: ZXsD+65KusYEp+es930IurWKg54501l66Zc2I5p95oc= Subject key identifier: 29:ED:81:60:3A:F5:7D:8B:F5:12:27:13:95:45:5F:EA:93:5D:C1:DE Certificate issuer: /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Certificate serial: 010D0C9F4328584A2EEABFCD275522319FE3C900 Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/725248f3-6cd4-3191-b686-aae1fe549b6e.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 53727 IP address blocks: 2602:f982::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:bf:cd:27:55:22:31:9f:e3:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=2e842df6-9873-47e2-9307-a9c926426e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:48:32:e3:14:1b:68:2c:a4:f5:d4:1d:15:7e: b9:95:b4:ae:4c:e5:0f:d9:c8:35:14:f8:73:e1:c6: ce:13:a8:a8:51:3d:76:74:99:ad:c2:df:88:56:78: b8:2a:8a:c3:cb:69:b6:6c:64:c2:c5:ba:41:d6:e4: 6a:a3:5b:15:69:f6:77:62:ce:ab:ac:34:ab:57:76: 92:a7:b0:58:a1:28:05:c1:59:80:3c:22:fe:4b:07: fa:1b:ad:1e:a2:ac:7c:78:48:f2:54:ec:d7:83:06: d4:f3:b9:95:d2:1c:e5:26:7f:64:7e:80:cb:09:57: 59:2c:79:16:57:ba:7a:54:e4:f9:70:db:78:e1:a2: 9e:c0:4e:d8:46:85:83:d4:21:bc:54:71:1e:5a:d7: 19:1c:e8:0c:08:13:22:35:92:c4:f4:5b:e1:fb:0c: 74:75:34:67:32:cf:83:75:f9:30:1b:c1:db:59:85: ac:5c:ef:0a:eb:11:43:6e:18:16:4d:63:a6:fb:39: 5b:22:30:97:bb:81:ee:91:f8:b5:7b:c5:d8:88:44: 12:ef:bc:18:f8:ef:df:fd:dc:c6:1c:90:c2:79:2c: f2:02:8f:20:8d:93:7b:0a:dd:d9:fd:2f:89:df:fb: 19:bf:fb:fc:98:02:89:c7:ba:21:c3:30:5c:40:93: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:ED:81:60:3A:F5:7D:8B:F5:12:27:13:95:45:5F:EA:93:5D:C1:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/725248f3-6cd4-3191-b686-aae1fe549b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl X509v3 Authority Key Identifier: keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f982::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:3c:39:aa:f1:52:32:6a:60:67:ff:ce:4f:26:cf:3a:9e:1a: 1a:a8:65:41:44:69:de:97:2c:e7:49:4b:80:1b:d1:2d:e1:b9: a7:c2:a9:b8:91:3c:fd:88:57:a1:83:df:09:12:f5:e1:5c:9a: b4:55:79:ac:c7:49:48:aa:be:35:1d:da:93:1b:20:aa:ce:ce: fc:11:67:d7:3d:3e:9b:da:3f:de:21:9b:5c:77:8f:5a:65:9c: d2:99:bb:68:af:6f:15:d2:b3:90:70:4d:60:55:c6:00:3f:52: 07:59:de:54:a4:47:0c:c8:f7:be:3f:26:3d:d6:35:b5:46:2d: f0:8b:80:e2:29:35:50:20:9c:41:c2:aa:e4:30:39:41:bb:02: c8:73:bd:ec:56:63:17:9a:1d:3e:04:bb:ce:87:c5:48:36:d6: cf:33:55:4c:6b:a7:95:ed:05:cb:22:94:67:d9:20:9b:47:15: e4:8a:b7:8a:fa:ca:60:38:c9:0d:d6:9d:7c:d5:ee:bb:15:5d: c9:fe:a5:cb:d2:03:a3:37:67:c4:0c:37:4f:6f:f3:a1:8c:03: b5:ff:5a:69:b4:98:a1:78:29:f4:96:11:21:51:72:66:16:71: b1:a0:32:bc:c1:89:8b:24:74:d2:ec:67:f1:22:43:5c:50:ce: 80:0b:f4:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEou6r/NJ1UiMZ/jyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3 MmYzMB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk MmU4NDJkZjYtOTg3My00N2UyLTkzMDctYTljOTI2NDI2ZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkgy4xQbaCyk9dQdFX65lbSuTOUP2cg1FPhz 4cbOE6ioUT12dJmtwt+IVni4KorDy2m2bGTCxbpB1uRqo1sVafZ3Ys6rrDSrV3aS p7BYoSgFwVmAPCL+Swf6G60eoqx8eEjyVOzXgwbU87mV0hzlJn9kfoDLCVdZLHkW V7p6VOT5cNt44aKewE7YRoWD1CG8VHEeWtcZHOgMCBMiNZLE9Fvh+wx0dTRnMs+D dfkwG8HbWYWsXO8K6xFDbhgWTWOm+zlbIjCXu4Hukfi1e8XYiEQS77wY+O/f/dzG HJDCeSzyAo8gjZN7Ct3Z/S+J3/sZv/v8mAKJx7ohwzBcQJOoowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCntgWA69X2L9RInE5VFX+qTXcHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvNzI1MjQ4ZjMtNmNkNC0z MTkxLWI2ODYtYWFlMWZlNTQ5YjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4 NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh ZjVhODcyZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ggAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACo8OarxUjJqYGf/zk8mzzqeGhqoZUFEad6XLOdJS4Ab0S3huafC qbiRPP2IV6GD3wkS9eFcmrRVeazHSUiqvjUd2pMbIKrOzvwRZ9c9PpvaP94hm1x3 j1plnNKZu2ivbxXSs5BwTWBVxgA/UgdZ3lSkRwzI974/Jj3WNbVGLfCLgOIpNVAg nEHCquQwOUG7AshzvexWYxeaHT4Eu86HxUg21s8zVUxrp5XtBcsilGfZIJtHFeSK t4r6ymA4yQ3WnXzV7rsVXcn+pcvSA6M3Z8QMN09v86GMA7X/Wmm0mKF4KfSWESFR cmYWcbGgMrzBiYskdNLsZ/EiQ1xQzoAL9Cg= -----END CERTIFICATE-----Generated at Mon Jun 30 05:40:46 2025 by rpki-client