$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/79a75857-a8dd-342c-933c-947c4710fda2.roa File: 79a75857-a8dd-342c-933c-947c4710fda2.roa (raw, json) Hash identifier: +w1Wey5y/nPHHQ9A61hMheId8eBwHwtyUr+zmJTLOz8= Subject key identifier: 95:FF:08:67:0B:F2:05:67:DB:5E:EF:48:68:5C:08:4A:59:21:07:42 Certificate issuer: /CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Certificate serial: 010D0C9F4328584A4C3B1B4C33F7CD020C0ED0C0 Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/79a75857-a8dd-342c-933c-947c4710fda2.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 49791 IP address blocks: 2606:2040:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1b:4c:33:f7:cd:02:0c:0e:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=77ad347b-b5c8-4493-b73f-1b3f46c423b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:77:92:a9:fb:8e:fc:ef:6e:2e:e4:be:74:6e: 06:4d:b5:64:57:26:87:b0:42:2d:58:98:64:fa:5e: e7:23:cb:85:f1:dc:c8:0c:83:98:60:7a:58:93:4c: f7:d3:6f:2f:29:a5:c6:37:28:e2:5b:42:68:ce:c0: 24:20:ad:6e:c5:6c:82:85:fb:35:27:80:cb:36:07: 58:c9:11:7d:e9:d5:92:c1:64:5a:86:be:a5:f6:d9: cb:c7:c8:a5:57:3f:54:dc:be:3c:40:f4:15:82:31: a1:9b:14:32:be:67:76:f7:21:b8:5f:81:7b:40:df: 2c:4a:bd:0c:54:7e:fa:01:2d:aa:fe:1f:61:d4:24: 9b:7a:b3:fc:86:64:b8:b7:59:75:34:78:cc:19:dd: ff:87:89:5f:6f:da:6f:4e:c3:f0:04:dd:3a:a8:27: 4b:e7:77:e1:69:96:3a:81:28:1d:aa:56:bc:41:4d: f1:a9:38:94:e7:1e:ee:7d:3e:39:63:42:d3:10:35: 32:05:04:f0:6c:eb:e2:17:e8:6c:cc:95:77:78:12: a5:54:62:ef:54:fd:61:f7:4c:f6:c1:14:46:49:b5: 29:58:7f:c3:a7:91:91:a7:8b:5d:6f:d9:4b:c0:e2: 2d:96:7d:c0:e8:12:d6:04:7d:fa:06:7f:b2:e0:06: e6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FF:08:67:0B:F2:05:67:DB:5E:EF:48:68:5C:08:4A:59:21:07:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/79a75857-a8dd-342c-933c-947c4710fda2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl X509v3 Authority Key Identifier: keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer sbgp-ipAddrBlock: critical IPv6: 2606:2040:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:e8:7d:ae:39:58:16:84:a4:fc:37:3f:21:d7:95:fd:b2:05: 7f:97:b2:2f:6b:ba:c5:7e:37:0a:b4:77:2f:3d:4b:a7:99:1c: 04:48:b6:77:a9:4c:46:fd:d5:24:63:74:f4:8f:6c:b6:c6:d3: b6:b8:17:f8:9b:22:04:f4:10:34:a4:ba:2d:c1:75:97:7b:fb: b5:7c:d0:a2:cb:ae:38:25:9f:5d:fa:d5:7d:54:34:42:3f:21: 97:22:01:70:df:0e:bf:a4:9a:b0:22:2d:52:9f:53:b1:6e:af: 85:5c:e6:ee:be:62:e8:38:46:a6:ed:fe:c7:d6:4e:4c:43:73: b8:0f:db:83:3a:65:bd:90:6d:40:ba:5e:f5:0f:23:d6:3c:16: 8a:94:72:4b:9d:2d:c4:69:06:8d:fb:96:13:33:1d:25:9a:39: c1:d5:57:12:aa:32:83:30:fd:25:03:51:a2:da:51:f7:a5:61: 39:d8:e5:ba:54:e6:22:7e:cf:4d:85:71:1e:ad:0f:0a:4b:4b: 78:19:18:a1:35:eb:a3:70:01:9f:d4:79:65:84:47:d3:9a:dc: d8:c8:8f:33:e0:42:b9:9c:1a:bb:86:01:9e:79:67:56:f9:b9: d2:ed:c8:ce:6e:f8:8b:40:46:b0:a1:0f:b9:c3:67:a5:2b:0d: c6:9b:03:f2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpMOxtMM/fNAgwO0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1 ODU0MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NzdhZDM0N2ItYjVjOC00NDkzLWI3M2YtMWIzZjQ2YzQyM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3eSqfuO/O9uLuS+dG4GTbVkVyaHsEItWJhk +l7nI8uF8dzIDIOYYHpYk0z3028vKaXGNyjiW0JozsAkIK1uxWyChfs1J4DLNgdY yRF96dWSwWRahr6l9tnLx8ilVz9U3L48QPQVgjGhmxQyvmd29yG4X4F7QN8sSr0M VH76AS2q/h9h1CSberP8hmS4t1l1NHjMGd3/h4lfb9pvTsPwBN06qCdL53fhaZY6 gSgdqla8QU3xqTiU5x7ufT45Y0LTEDUyBQTwbOviF+hszJV3eBKlVGLvVP1h90z2 wRRGSbUpWH/Dp5GRp4tdb9lLwOItln3A6BLWBH36Bn+y4AbmTQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJX/CGcL8gVn217vSGhcCEpZIQdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNj ZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvNzlhNzU4NTctYThkZC0z NDJjLTkzM2MtOTQ3YzQ3MTBmZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGMzY2YzNDItNDMzNy00NGJmLWFj NDUtZDA3NzJhZDc1ODU0LzBjM2NmMzQyLTQzMzctNDRiZi1hYzQ1LWQwNzcyYWQ3 NTg1NC5jcmwwHwYDVR0jBBgwFoAUM+Vte7hq+1lyLTX3lZ0qh5UflWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3 MmFkNzU4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgYgQBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAxeh9rjlYFoSk/Dc/IdeV/bIFf5eyL2u6xX43CrR3Lz1Lp5kcBEi2 d6lMRv3VJGN09I9stsbTtrgX+JsiBPQQNKS6LcF1l3v7tXzQosuuOCWfXfrVfVQ0 Qj8hlyIBcN8Ov6SasCItUp9TsW6vhVzm7r5i6DhGpu3+x9ZOTENzuA/bgzplvZBt QLpe9Q8j1jwWipRyS50txGkGjfuWEzMdJZo5wdVXEqoygzD9JQNRotpR96VhOdjl ulTmIn7PTYVxHq0PCktLeBkYoTXro3ABn9R5ZYRH05rc2MiPM+BCuZwau4YBnnln Vvm50u3Izm74i0BGsKEPucNnpSsNxpsD8g== -----END CERTIFICATE-----Generated at Sun Jun 29 17:52:27 2025 by rpki-client