$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa File: 9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa (raw, json) Hash identifier: PmiT5pLSF7FkjtjfGeozYEC6oONrCUfLSE61PWo59aQ= Subject key identifier: 96:3A:6E:0A:1E:B6:7C:B7:FC:88:88:63:19:C3:01:54:0F:7A:81:32 Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F43285849EEB4FC51FAFAC3251E1AE280 Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 22413 IP address blocks: 2604:f140::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b4:fc:51:fa:fa:c3:25:1e:1a:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=38528861-6ec5-4ff4-84be-7e7b7ae2ab7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f0:bf:55:18:c2:78:cd:29:d0:14:60:79:68: 0e:e0:6e:d6:05:ee:1b:d6:22:1b:d8:c3:19:e5:f0: 51:d1:e4:67:d5:82:5f:28:1d:94:9f:4d:08:6b:17: 52:7c:ab:34:2c:cf:72:2f:30:9d:10:a2:b8:53:76: c1:fe:8b:7e:85:84:8a:7d:bc:31:78:68:bd:18:2e: 63:d9:b1:d0:11:75:fe:f3:2f:00:65:30:e9:13:b9: b0:aa:13:5c:cf:6c:8c:a1:8a:54:9b:1f:2d:59:8f: 4d:6a:45:c4:1c:38:06:57:86:8a:8b:d2:c1:aa:b6: ef:64:a0:c9:04:88:43:86:74:21:54:b1:e6:83:18: f9:51:47:9c:ac:00:25:9a:5d:a5:20:a4:b3:4e:7a: 11:d9:29:b9:14:ed:8c:ba:6d:6e:69:ce:bd:da:32: 09:6c:fa:93:e4:72:32:a5:40:01:d2:3a:75:79:76: 22:62:7e:69:b6:cb:c6:f4:9b:da:42:59:5a:8c:b0: ec:9e:21:c7:f6:e3:a8:5e:dc:c1:43:59:62:a7:98: e9:2c:1c:61:1f:6d:e1:84:72:18:78:f8:b4:e0:a7: f1:80:e0:47:b4:8a:a5:74:c3:0e:88:c3:ec:b9:03: c7:ee:24:11:49:31:fc:98:ad:2f:56:11:63:2c:68: 6b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3A:6E:0A:1E:B6:7C:B7:FC:88:88:63:19:C3:01:54:0F:7A:81:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv6: 2604:f140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9c:3e:5c:5c:e5:66:e7:29:f4:47:f6:6e:f5:62:ea:a6:f7: 8c:d4:01:3a:93:c0:6c:33:52:dc:36:ac:2d:e6:ca:bc:d3:5c: 54:57:b4:4f:c3:5a:ff:32:62:06:23:e6:e3:ab:82:88:9d:6e: 02:ff:c4:bb:ab:0a:4d:5a:c2:03:5c:3f:8e:85:99:b7:cc:e2: 7f:a3:48:93:52:67:cf:76:86:14:c4:db:c0:5c:30:bb:d9:9c: 2e:ad:2e:d5:ab:0f:98:76:c7:75:85:5c:71:87:ea:44:8f:1c: 41:e3:80:74:9c:d1:ae:ca:a8:f9:38:93:94:b9:19:13:a2:0e: 37:af:6d:b6:e4:73:9d:2a:69:76:d9:84:71:b2:66:d8:c9:23: 4d:73:f8:1a:3b:18:31:90:46:ec:fc:72:d7:83:ce:d6:72:bc: 8f:4f:5d:66:d3:23:a5:3f:dd:01:74:35:b8:1c:f4:74:f6:56: 95:9d:40:11:32:a5:0d:81:e7:08:dd:ea:8f:6b:2d:5d:94:85: ed:f2:8a:c6:e7:53:04:5f:39:1c:fe:a5:c6:28:42:ed:25:04: cb:47:f0:e6:05:b4:5f:d6:6b:12:4f:d4:ac:34:63:d8:2e:3b: 5f:60:45:d6:b2:f0:9b:6a:df:a2:e5:d0:2d:c7:09:48:8c:fc: c3:a0:03:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnutPxR+vrDJR4a4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk Mzg1Mjg4NjEtNmVjNS00ZmY0LTg0YmUtN2U3YjdhZTJhYjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivC/VRjCeM0p0BRgeWgO4G7WBe4b1iIb2MMZ 5fBR0eRn1YJfKB2Un00IaxdSfKs0LM9yLzCdEKK4U3bB/ot+hYSKfbwxeGi9GC5j 2bHQEXX+8y8AZTDpE7mwqhNcz2yMoYpUmx8tWY9NakXEHDgGV4aKi9LBqrbvZKDJ BIhDhnQhVLHmgxj5UUecrAAlml2lIKSzTnoR2Sm5FO2Mum1uac692jIJbPqT5HIy pUAB0jp1eXYiYn5ptsvG9JvaQllajLDsniHH9uOoXtzBQ1lip5jpLBxhH23hhHIY ePi04KfxgOBHtIqldMMOiMPsuQPH7iQRSTH8mK0vVhFjLGhr3wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJY6bgoetny3/IiIYxnDAVQPeoEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvOWRkM2E5N2MtOWQ2Yi0z ZTdmLWExZjQtNDIwNGZjZTllMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTxQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdnD5cXOVm5yn0R/Zu9WLqpveM1AE6k8BsM1LcNqwt5sq801xUV7RP w1r/MmIGI+bjq4KInW4C/8S7qwpNWsIDXD+OhZm3zOJ/o0iTUmfPdoYUxNvAXDC7 2ZwurS7Vqw+Ydsd1hVxxh+pEjxxB44B0nNGuyqj5OJOUuRkTog43r2225HOdKml2 2YRxsmbYySNNc/gaOxgxkEbs/HLXg87WcryPT11m0yOlP90BdDW4HPR09laVnUAR MqUNgecI3eqPay1dlIXt8orG51MEXzkc/qXGKELtJQTLR/DmBbRf1msST9SsNGPY LjtfYEXWsvCbat+i5dAtxwlIjPzDoANk -----END CERTIFICATE-----Generated at Tue Jul 1 15:40:01 2025 by rpki-client