$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/8f853da6-5e39-39b8-aef0-7c61c02dc15b.roa File: 8f853da6-5e39-39b8-aef0-7c61c02dc15b.roa (raw, json) Hash identifier: pB0LrAmtUX1AMu1BOXELNMUqtiwg8JPqvUfXbpLnJzM= Subject key identifier: 9F:0D:43:63:84:31:75:06:E4:85:4A:40:E4:5A:D1:6F:7A:6B:78:AB Certificate issuer: /CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e Certificate serial: 010D0C9F4328584A5CFB3234FA634BEBBA9AEC80 Authority key identifier: D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/8f853da6-5e39-39b8-aef0-7c61c02dc15b.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 14749 IP address blocks: 2606:fbc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:32:34:fa:63:4b:eb:ba:9a:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=b419ca6d-a5aa-4259-83e2-c9c53b70a038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:ee:51:74:82:93:cf:a3:26:19:0e:46:74: 3a:c9:64:21:2f:99:ad:be:5c:b4:a4:38:ce:db:56: c6:74:51:cd:82:99:d7:9e:71:36:8f:8f:7d:cf:f2: 9e:cc:70:57:05:84:30:0a:81:91:a3:68:39:7f:d7: f3:8e:87:2c:da:fb:69:d5:b9:9b:b4:ef:4d:58:b7: 2f:5e:23:95:71:74:60:23:48:de:34:0a:1d:56:27: 8a:7d:f6:9b:e2:c2:7e:76:17:d4:8c:9f:3f:06:3f: b5:cc:62:0a:a5:18:f8:be:eb:d1:83:c5:41:73:2a: 97:ba:ad:29:b9:d9:a4:63:4f:20:8b:5e:0c:24:cb: c7:b1:74:ff:90:70:c7:48:9e:5e:75:ad:42:a8:2e: aa:e1:38:31:b2:03:cd:fd:65:53:00:17:60:e4:c5: 18:d4:94:81:3e:67:55:9b:cb:c0:78:bf:a2:79:01: db:43:24:76:16:3c:75:4e:ca:f9:4f:98:9a:14:34: a4:04:d9:ee:ea:2e:98:75:32:eb:99:c0:14:61:a5: 3a:74:8b:b3:c5:57:59:58:a6:a1:00:0f:31:95:32: db:eb:71:da:c6:b0:d9:30:34:85:21:52:16:5f:15: d8:37:f1:bf:fc:16:e7:ae:e1:20:48:97:a0:5c:fb: 62:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0D:43:63:84:31:75:06:E4:85:4A:40:E4:5A:D1:6F:7A:6B:78:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/8f853da6-5e39-39b8-aef0-7c61c02dc15b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl X509v3 Authority Key Identifier: keyid:D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer sbgp-ipAddrBlock: critical IPv6: 2606:fbc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:95:5c:26:44:85:d6:b4:49:6b:87:8e:26:c3:16:5e:40:0e: 7f:8d:6b:88:47:57:9c:90:e7:0d:9a:ba:87:2b:34:e3:c9:f6: c7:a9:55:61:f9:86:7c:a6:0c:d8:55:e5:47:bc:41:ec:f3:c0: 78:e0:b6:e0:f2:77:de:ed:18:a0:41:05:07:7d:4f:4d:15:10: ad:15:31:d4:e9:52:91:2c:91:8a:da:0e:40:79:a3:88:c9:5b: 29:ad:14:8c:aa:7f:0a:03:d3:6b:8f:ae:e2:e6:fc:5a:03:dd: 7e:0d:bb:fd:ff:1f:27:1e:82:c5:f3:b3:fa:17:8f:32:0d:4d: c9:97:aa:c6:10:5c:59:71:1e:e9:4b:ae:c0:9b:a5:2c:13:33: 8d:83:c8:aa:90:8b:8c:69:15:2b:03:95:59:4b:35:1d:1b:fd: 29:c9:26:c1:49:16:ea:ff:d8:02:8d:c2:a3:a0:6f:2e:bc:aa: 41:ec:59:84:20:51:78:ad:1f:a8:3d:81:ae:69:47:19:e6:13: 67:8d:58:45:81:13:e7:15:f0:1e:5a:9d:15:8d:28:f5:fd:3d: c6:44:a2:59:80:30:d3:6e:73:b3:e0:23:64:a6:f9:89:cd:8f: aa:9b:8d:01:f0:d9:32:d9:03:85:e4:00:e0:8e:dd:5b:1c:6c: 90:ac:2d:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpc+zI0+mNL67qa7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ1OTQxMmMtNmJmNS00ZTJkLTkwZDktNGQ4ZWM1Y2Qz ZDBlMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YjQxOWNhNmQtYTVhYS00MjU5LTgzZTItYzljNTNiNzBhMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSPuUXSCk8+jJhkORnQ6yWQhL5mtvly0pDjO 21bGdFHNgpnXnnE2j499z/KezHBXBYQwCoGRo2g5f9fzjocs2vtp1bmbtO9NWLcv XiOVcXRgI0jeNAodVieKffab4sJ+dhfUjJ8/Bj+1zGIKpRj4vuvRg8VBcyqXuq0p udmkY08gi14MJMvHsXT/kHDHSJ5eda1CqC6q4TgxsgPN/WVTABdg5MUY1JSBPmdV m8vAeL+ieQHbQyR2Fjx1Tsr5T5iaFDSkBNnu6i6YdTLrmcAUYaU6dIuzxVdZWKah AA8xlTLb63HaxrDZMDSFIVIWXxXYN/G//BbnruEgSJegXPtiewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ8NQ2OEMXUG5IVKQORa0W96a3irMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NDU5 NDEyYy02YmY1LTRlMmQtOTBkOS00ZDhlYzVjZDNkMGUvOGY4NTNkYTYtNWUzOS0z OWI4LWFlZjAtN2M2MWMwMmRjMTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDQ1OTQxMmMtNmJmNS00ZTJkLTkw ZDktNGQ4ZWM1Y2QzZDBlLzQ0NTk0MTJjLTZiZjUtNGUyZC05MGQ5LTRkOGVjNWNk M2QwZS5jcmwwHwYDVR0jBBgwFoAU1SoN3FX3gFYYcW6aEyrpS+0lkzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NDU5NDEyYy02YmY1LTRlMmQtOTBkOS00ZDhl YzVjZDNkMGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb7wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCwlVwmRIXWtElrh44mwxZeQA5/jWuIR1eckOcNmrqHKzTjyfbHqVVh +YZ8pgzYVeVHvEHs88B44Lbg8nfe7RigQQUHfU9NFRCtFTHU6VKRLJGK2g5AeaOI yVsprRSMqn8KA9Nrj67i5vxaA91+Dbv9/x8nHoLF87P6F48yDU3Jl6rGEFxZcR7p S67Am6UsEzONg8iqkIuMaRUrA5VZSzUdG/0pySbBSRbq/9gCjcKjoG8uvKpB7FmE IFF4rR+oPYGuaUcZ5hNnjVhFgRPnFfAeWp0VjSj1/T3GRKJZgDDTbnOz4CNkpvmJ zY+qm40B8Nky2QOF5ADgjt1bHGyQrC0v -----END CERTIFICATE-----Generated at Mon Jun 30 22:30:46 2025 by rpki-client