$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/4cb2cfa6-2ee0-39e4-b8b2-0386df10379c.roa File: 4cb2cfa6-2ee0-39e4-b8b2-0386df10379c.roa (raw, json) Hash identifier: ipoM6MbDT8GUw6nT+lO5ggLXEgBckpTjPpnyk9F0QPI= Subject key identifier: 19:93:38:09:E4:22:3A:85:80:29:C3:E6:6B:6A:94:E7:2D:96:82:42 Certificate issuer: /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Certificate serial: 010D0C9F4328584A4D2BF2B96C1C06690BE3DF80 Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/4cb2cfa6-2ee0-39e4-b8b2-0386df10379c.roa Signing time: Wed 28 May 2025 16:41:24 +0000 ROA not before: Wed 28 May 2025 16:41:24 +0000 ROA not after: Tue 26 Aug 2025 16:41:24 +0000 asID: 16509 IP address blocks: 2606:b740:1::/48 maxlen: 48 2606:b740:49::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:2b:f2:b9:6c:1c:06:69:0b:e3:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Validity Not Before: May 28 16:41:24 2025 GMT Not After : Aug 26 16:41:24 2025 GMT Subject: CN=061236a3-0449-4f4e-97bb-2b9f52c60d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:1a:50:d0:ae:31:f2:04:7a:4c:90:93:64: 17:1c:22:cc:ad:2f:71:14:b2:58:f0:9e:13:8a:95: 3a:a5:2d:8a:33:2b:7d:bf:0c:6c:42:48:f2:6f:56: df:80:65:b6:49:3f:c5:20:30:66:49:7e:34:de:cd: ec:11:2a:f2:83:7a:81:b1:a5:50:70:0b:fe:29:0c: b2:e2:6e:33:80:90:a0:e2:b3:13:bb:d3:f7:e1:be: 76:09:53:80:a4:df:59:ef:ba:63:ba:bb:12:6a:76: b6:50:54:83:8b:6a:13:8a:84:b1:65:50:7b:57:4c: f7:99:7f:f3:dc:e1:a5:b9:cc:db:2e:3d:47:44:a1: 99:ed:eb:8a:9b:85:6d:b6:2a:c5:c0:46:11:92:28: 89:e8:2d:9a:d1:b9:17:1b:d0:e8:48:b1:12:24:be: ec:8c:45:e7:8f:d8:5b:bc:5c:bd:e0:72:0a:4f:8a: 09:36:59:57:d6:ce:b8:b8:07:f7:77:ab:4b:00:76: b1:f5:6c:68:57:88:75:7b:46:cd:3e:86:b5:b3:60: 5c:91:8e:d3:8c:04:f6:05:bf:fa:16:49:f5:c0:c7: 97:9e:86:4e:d6:5f:ce:63:16:93:37:c1:19:73:04: 12:f1:53:ad:40:35:cc:c5:56:7c:0a:a5:26:cf:37: c6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:93:38:09:E4:22:3A:85:80:29:C3:E6:6B:6A:94:E7:2D:96:82:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/4cb2cfa6-2ee0-39e4-b8b2-0386df10379c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl X509v3 Authority Key Identifier: keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer sbgp-ipAddrBlock: critical IPv6: 2606:b740:1::/48 2606:b740:49::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:19:68:c0:16:34:fe:42:bc:24:ff:b0:07:ea:e4:0c:32:6d: 40:28:d3:ed:6c:a0:93:9c:f8:99:39:dd:ab:f5:a5:b5:68:4a: e9:af:53:30:14:49:a9:d5:b5:71:3c:cb:73:3e:44:47:b4:43: 62:05:a1:d0:ba:b4:2b:50:57:b9:2c:60:4a:71:e1:a9:8f:5b: df:dc:c4:50:62:60:4d:34:ef:af:f9:e3:b2:ce:27:6f:4b:45: 11:63:6b:04:aa:8f:7b:81:b2:74:1e:ad:e5:58:85:00:d2:82: 29:85:29:38:f3:6b:32:5d:11:25:62:41:e8:a7:9f:6c:7b:9e: 98:3f:9b:df:b0:10:f4:45:52:10:5c:c4:c4:e1:d1:bd:72:b8: 63:f1:71:a8:23:06:4e:9f:fd:e4:f4:48:da:15:ad:9f:2d:e7: ef:b4:b7:0a:f0:72:2b:92:f4:0c:38:37:a9:90:6f:02:56:73: 0e:1a:7f:48:47:78:85:cb:02:42:98:9c:5f:82:40:3f:1c:71: 74:89:65:50:4f:79:f9:21:d9:f3:ce:0a:31:35:d7:93:1c:9f: 39:3b:eb:77:9e:63:3d:ee:5f:a4:1c:2a:94:02:9f:9c:82:4f: c1:37:2a:00:89:15:7e:b9:4f:7a:79:ec:38:df:78:b6:52:7e: f4:55:b0:e7 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEpNK/K5bBwGaQvj34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM0NDBlZWItM2Q3YS00M2UzLWEwYTQtZmE5YTk5Mzc5 OGJlMB4XDTI1MDUyODE2NDEyNFoXDTI1MDgyNjE2NDEyNFowLzEtMCsGA1UEAxMk MDYxMjM2YTMtMDQ0OS00ZjRlLTk3YmItMmI5ZjUyYzYwZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKYaUNCuMfIEekyQk2QXHCLMrS9xFLJY8J4T ipU6pS2KMyt9vwxsQkjyb1bfgGW2ST/FIDBmSX403s3sESryg3qBsaVQcAv+KQyy 4m4zgJCg4rMTu9P34b52CVOApN9Z77pjursSana2UFSDi2oTioSxZVB7V0z3mX/z 3OGluczbLj1HRKGZ7euKm4VttirFwEYRkiiJ6C2a0bkXG9DoSLESJL7sjEXnj9hb vFy94HIKT4oJNllX1s64uAf3d6tLAHax9WxoV4h1e0bNPoa1s2BckY7TjAT2Bb/6 Fkn1wMeXnoZO1l/OYxaTN8EZcwQS8VOtQDXMxVZ8CqUmzzfG9wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBmTOAnkIjqFgCnD5mtqlOctloJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0 MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlhOTkzNzk4YmUvNGNiMmNmYTYtMmVlMC0z OWU0LWI4YjItMDM4NmRmMTAzNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzM0NDBlZWItM2Q3YS00M2UzLWEw YTQtZmE5YTk5Mzc5OGJlL2MzNDQwZWViLTNkN2EtNDNlMy1hMGE0LWZhOWE5OTM3 OThiZS5jcmwwHwYDVR0jBBgwFoAUiDcfaou/A6y4ImpcKZnxDN+IvRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlh OTkzNzk4YmUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJga3QAAB AwcAJga3QABJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIMZaMAWNP5CvCT/sAfq5AwybUAo0+1soJOc+Jk5 3av1pbVoSumvUzAUSanVtXE8y3M+REe0Q2IFodC6tCtQV7ksYEpx4amPW9/cxFBi YE0076/547LOJ29LRRFjawSqj3uBsnQereVYhQDSgimFKTjzazJdESViQeinn2x7 npg/m9+wEPRFUhBcxMTh0b1yuGPxcagjBk6f/eT0SNoVrZ8t5++0twrwciuS9Aw4 N6mQbwJWcw4af0hHeIXLAkKYnF+CQD8ccXSJZVBPefkh2fPOCjE115Mcnzk763ee Yz3uX6QcKpQCn5yCT8E3KgCJFX65T3p57DjfeLZSfvRVsOc= -----END CERTIFICATE-----Generated at Sun Jun 29 04:28:37 2025 by rpki-client