$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/a7b7e1b8-103e-3bb2-bc5f-89e1657fc951.roa File: a7b7e1b8-103e-3bb2-bc5f-89e1657fc951.roa (raw, json) Hash identifier: 3iY5wWQcWE8Kph0zgIbrxmwiFWOTU8ZGfBvCXt5VaLk= Subject key identifier: 40:F0:6B:C3:2E:5D:F1:47:52:AA:6D:F1:BC:68:62:70:B7:A6:5C:24 Certificate issuer: /CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Certificate serial: 010D0C9F4328584A4F05C96FA1E552621BA7C780 Authority key identifier: 22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/a7b7e1b8-103e-3bb2-bc5f-89e1657fc951.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 8075 IP address blocks: 2602:fc31:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:c9:6f:a1:e5:52:62:1b:a7:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=b9f2101e-9dc8-4da0-91b6-481a017c72bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:50:e7:4f:c5:85:b5:19:18:2d:68:06:33:7b: aa:ba:bd:52:35:45:5b:b7:a6:da:b2:30:c2:f0:fb: 28:0b:a4:20:56:80:b3:00:9f:23:15:01:b1:ae:0d: f3:b9:dc:8c:6f:48:23:32:a1:c3:93:4a:48:4d:a6: f3:7e:a3:57:4d:83:f9:19:f5:00:d9:ef:54:2d:d0: a4:e7:8c:18:4c:8a:94:65:00:3d:6b:b1:eb:26:e4: 66:58:bb:6e:7e:a5:d0:bd:68:56:33:e2:6b:b5:0e: f7:8a:c8:3c:30:be:44:63:df:38:e5:f6:50:e1:21: ab:54:7b:b8:77:56:44:20:eb:36:00:5e:cd:f1:87: c5:17:5c:d7:1d:29:90:e9:83:b9:1b:a0:bd:3c:b3: 57:47:7f:a7:85:de:1b:4c:5c:c9:64:94:01:af:41: 03:7f:53:ca:65:19:f5:39:49:e5:3e:bb:bf:e6:59: 38:2b:c4:02:16:bc:11:34:b7:ac:73:b5:fb:6f:7e: 51:0e:ce:8d:8a:94:ec:6b:51:f5:07:b1:d2:9a:d7: ea:94:ca:7a:aa:c7:ab:e2:4d:f3:89:3d:57:78:a0: 78:17:37:c5:a5:12:b1:17:ae:d9:3f:42:ee:e3:b5: db:dc:33:71:0b:72:0f:f9:c3:01:8a:ef:54:5e:17: 80:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F0:6B:C3:2E:5D:F1:47:52:AA:6D:F1:BC:68:62:70:B7:A6:5C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/a7b7e1b8-103e-3bb2-bc5f-89e1657fc951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl X509v3 Authority Key Identifier: keyid:22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc31:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:57:20:15:80:37:4f:5f:f2:32:b1:88:83:1f:63:2f:69:ec: 14:5f:16:43:da:f6:86:1b:d4:77:4f:76:1a:fd:73:fe:5d:8c: d6:38:59:9a:f6:de:73:30:27:bc:30:17:2c:82:fe:31:fe:38: 35:0f:7f:91:9a:c0:3d:6c:c6:f1:c7:74:d6:0d:99:0d:e6:59: d4:95:0f:5e:2e:11:47:fd:d3:fc:a7:62:b7:ba:0c:cd:d8:b5: fd:ca:f8:65:2f:6c:dd:5a:ee:88:13:0a:97:0c:6c:12:a2:1d: aa:26:72:68:aa:d9:6d:66:aa:1c:b8:a2:b3:4c:c8:de:de:dd: bf:70:54:27:9c:be:b4:65:25:2a:36:9c:da:ff:3d:00:18:fb: 33:2b:4b:ff:3c:2f:c9:bd:81:09:4b:3d:50:1b:dc:e5:5c:b7: 16:e7:ea:ff:44:f6:2f:2d:ca:75:d5:ff:22:76:a8:0a:46:bb: d6:2b:51:79:66:b0:a5:6b:80:9a:5c:ee:ef:db:74:d9:ca:0a: aa:1d:aa:58:52:99:e4:58:e6:94:58:ab:40:92:5e:4e:20:d2: 01:e8:14:cc:1e:f3:96:73:9c:55:5e:c9:85:3d:97:d5:65:a9: 51:16:0c:72:ad:a6:21:e8:44:ef:b6:78:b2:68:5b:9e:e9:80: 32:bd:78:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpPBclvoeVSYhunx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2NGYtZDI1MDgyY2Jj OTU0MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk YjlmMjEwMWUtOWRjOC00ZGEwLTkxYjYtNDgxYTAxN2M3MmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VDnT8WFtRkYLWgGM3uqur1SNUVbt6basjDC 8PsoC6QgVoCzAJ8jFQGxrg3zudyMb0gjMqHDk0pITabzfqNXTYP5GfUA2e9ULdCk 54wYTIqUZQA9a7HrJuRmWLtufqXQvWhWM+JrtQ73isg8ML5EY9845fZQ4SGrVHu4 d1ZEIOs2AF7N8YfFF1zXHSmQ6YO5G6C9PLNXR3+nhd4bTFzJZJQBr0EDf1PKZRn1 OUnlPru/5lk4K8QCFrwRNLesc7X7b35RDs6NipTsa1H1B7HSmtfqlMp6qser4k3z iT1XeKB4FzfFpRKxF67ZP0Lu47Xb3DNxC3IP+cMBiu9UXheADQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEDwa8MuXfFHUqpt8bxoYnC3plwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NDMz ZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUwODJjYmM5NTQvYTdiN2UxYjgtMTAzZS0z YmIyLWJjNWYtODllMTY1N2ZjOTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2 NGYtZDI1MDgyY2JjOTU0LzQ0MzNmYjRhLTBkNGMtNDBiNy1iNjRmLWQyNTA4MmNi Yzk1NC5jcmwwHwYDVR0jBBgwFoAUIuc6/P4lUE98qgNeJlMFyd8NIgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NDMzZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUw ODJjYmM5NTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8MQAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABNXIBWAN09f8jKxiIMfYy9p7BRfFkPa9oYb1HdPdhr9c/5djNY4 WZr23nMwJ7wwFyyC/jH+ODUPf5GawD1sxvHHdNYNmQ3mWdSVD14uEUf90/ynYre6 DM3Ytf3K+GUvbN1a7ogTCpcMbBKiHaomcmiq2W1mqhy4orNMyN7e3b9wVCecvrRl JSo2nNr/PQAY+zMrS/88L8m9gQlLPVAb3OVctxbn6v9E9i8tynXV/yJ2qApGu9Yr UXlmsKVrgJpc7u/bdNnKCqodqlhSmeRY5pRYq0CSXk4g0gHoFMwe85ZznFVeyYU9 l9VlqVEWDHKtpiHoRO+2eLJoW57pgDK9eAQ= -----END CERTIFICATE-----Generated at Sun Jun 29 16:16:09 2025 by rpki-client