$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/be0423cd-3e30-33b2-905e-76cb963a377d.roa File: be0423cd-3e30-33b2-905e-76cb963a377d.roa (raw, json) Hash identifier: TKdxplg4Z6PEu/KMk+XOISRPEUAvCjN9TDZ4RjsAs1Y= Subject key identifier: 2A:3D:0D:F1:68:48:A3:CB:C0:F1:23:41:A0:66:1F:AE:CB:4C:62:14 Certificate issuer: /CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f Certificate serial: 010D0C9F43285849E2253F09C46B2ACBCA5DEC00 Authority key identifier: 1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/be0423cd-3e30-33b2-905e-76cb963a377d.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 399788 IP address blocks: 2607:d440::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:3f:09:c4:6b:2a:cb:ca:5d:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=9b4d8ca3-ed0e-4797-a981-73e445bde12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4b:c4:38:a2:45:c3:da:9b:f8:50:6c:44:d0: c9:d7:28:b9:3d:fb:59:b1:b1:65:22:ec:7f:fa:ab: a7:37:be:d6:4a:57:a0:9e:1e:d2:9b:ca:55:91:ab: 30:79:54:cc:c0:9d:b3:1a:4e:8e:a9:1c:c2:8d:b9: ad:b8:04:7f:8a:37:e9:5e:32:11:d7:53:49:1d:9b: 57:51:48:0a:6d:71:42:cc:ae:33:a5:88:8d:c2:4c: f3:81:0d:cc:a9:f2:95:27:8a:7d:ce:06:7b:2b:4c: 7b:c3:7b:cf:60:49:9f:a5:e4:a2:15:dd:78:62:83: b8:7c:29:8c:11:e3:46:7a:37:29:cd:b4:5b:66:2b: 7f:04:88:4c:47:b4:2c:d5:08:75:aa:0a:18:dd:53: 74:4a:31:07:53:4d:e3:35:78:ae:4a:8a:ac:44:9a: f5:b5:e5:b2:05:b0:54:5e:fc:57:5f:23:cb:a8:7d: 24:10:8c:ef:b4:04:44:6f:56:33:28:b7:00:26:bf: 7a:63:46:4c:24:5a:f0:29:97:04:78:d4:52:79:d4: 91:3d:ba:ae:b4:30:7a:a0:aa:79:df:48:0a:06:fd: c9:2b:86:34:7d:5e:92:ba:4a:e4:0f:d5:d8:54:82: 5e:41:bd:bd:1d:e5:4b:6f:75:bb:d7:10:94:47:91: 85:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3D:0D:F1:68:48:A3:CB:C0:F1:23:41:A0:66:1F:AE:CB:4C:62:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/be0423cd-3e30-33b2-905e-76cb963a377d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.crl X509v3 Authority Key Identifier: keyid:1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer sbgp-ipAddrBlock: critical IPv6: 2607:d440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a5:35:a9:54:25:1f:eb:a9:be:1d:f5:a0:df:25:43:65:90: 35:f8:d7:79:cb:78:cf:23:4a:0e:03:16:47:e5:45:f5:01:16: 1f:12:98:4b:a5:2a:37:db:66:c4:e6:cb:c4:2e:86:05:8d:5f: 89:97:3a:4a:45:b9:00:18:39:d9:a6:f2:ff:75:09:51:f6:38: 1c:4e:dc:bf:a4:d5:91:83:84:b4:ae:28:54:ca:98:7f:98:8b: d2:a1:27:5e:9d:0b:56:dd:a0:c5:a6:ea:0e:d9:b0:00:08:8c: 6c:58:3a:6d:7a:2b:33:44:62:d4:9c:1d:5c:24:ae:7e:00:b3: d8:35:33:16:e1:1e:52:16:4d:3e:43:83:70:7c:3e:e3:22:cb: 06:47:24:37:f4:dc:af:87:2f:1a:19:42:e3:b3:2b:e5:98:29: 8b:ca:12:30:7f:46:73:bd:2e:5b:99:03:7e:a7:13:a8:d5:f8: bb:4d:1c:88:01:93:76:7f:5d:43:23:9b:58:78:9b:60:29:f1: 86:e8:35:c7:93:9c:ca:09:f0:db:b7:c0:a8:81:c1:a4:ec:ca: 87:57:be:cd:bd:9b:33:1b:19:4f:1b:c3:98:84:cd:9f:0c:1f: 14:cf:95:b5:96:6c:09:0c:5b:62:13:0c:5b:66:d2:b4:01:8e: 29:d3:e4:da -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEniJT8JxGsqy8pd7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI1NzlhYzEtYThiZS00M2M1LThkNmMtZGMwMmI5Zjdh MzVmMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk OWI0ZDhjYTMtZWQwZS00Nzk3LWE5ODEtNzNlNDQ1YmRlMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEvEOKJFw9qb+FBsRNDJ1yi5PftZsbFlIux/ +qunN77WSlegnh7Sm8pVkasweVTMwJ2zGk6OqRzCjbmtuAR/ijfpXjIR11NJHZtX UUgKbXFCzK4zpYiNwkzzgQ3MqfKVJ4p9zgZ7K0x7w3vPYEmfpeSiFd14YoO4fCmM EeNGejcpzbRbZit/BIhMR7Qs1Qh1qgoY3VN0SjEHU03jNXiuSoqsRJr1teWyBbBU XvxXXyPLqH0kEIzvtAREb1YzKLcAJr96Y0ZMJFrwKZcEeNRSedSRPbqutDB6oKp5 30gKBv3JK4Y0fV6SukrkD9XYVIJeQb29HeVLb3W71xCUR5GFBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCo9DfFoSKPLwPEjQaBmH67LTGIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMjU3 OWFjMS1hOGJlLTQzYzUtOGQ2Yy1kYzAyYjlmN2EzNWYvYmUwNDIzY2QtM2UzMC0z M2IyLTkwNWUtNzZjYjk2M2EzNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDI1NzlhYzEtYThiZS00M2M1LThk NmMtZGMwMmI5ZjdhMzVmLzAyNTc5YWMxLWE4YmUtNDNjNS04ZDZjLWRjMDJiOWY3 YTM1Zi5jcmwwHwYDVR0jBBgwFoAUGuutVOSPgfAfDrmVzeyJmDru2akwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMjU3OWFjMS1hOGJlLTQzYzUtOGQ2Yy1kYzAy YjlmN2EzNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfUQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBkpTWpVCUf66m+HfWg3yVDZZA1+Nd5y3jPI0oOAxZH5UX1ARYfEphL pSo322bE5svELoYFjV+JlzpKRbkAGDnZpvL/dQlR9jgcTty/pNWRg4S0rihUyph/ mIvSoSdenQtW3aDFpuoO2bAACIxsWDpteiszRGLUnB1cJK5+ALPYNTMW4R5SFk0+ Q4NwfD7jIssGRyQ39Nyvhy8aGULjsyvlmCmLyhIwf0ZzvS5bmQN+pxOo1fi7TRyI AZN2f11DI5tYeJtgKfGG6DXHk5zKCfDbt8CogcGk7MqHV77NvZszGxlPG8OYhM2f DB8Uz5W1lmwJDFtiEwxbZtK0AY4p0+Ta -----END CERTIFICATE-----Generated at Mon Jun 30 14:32:57 2025 by rpki-client