$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa File: 4d778317-bfa9-32da-b5ef-d588603e5ac9.roa (raw, json) Hash identifier: L8/cWYxnr5l05g6b0FbQ4Tt/y7IaYi3A0yf2dmWTKwA= Subject key identifier: AE:7F:CE:10:5D:8F:50:F4:CC:81:F3:A7:F5:64:27:6A:01:D6:06:ED Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F4328584A119AA7645CA5142612CDF400 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 397026 IP address blocks: 2604:f840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:a7:64:5c:a5:14:26:12:cd:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=3c988cf8-a8a1-4105-a195-fb1a39175883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ad:d1:5e:d1:ac:81:84:54:f2:2b:18:b7:37: e0:e0:ba:62:fc:6c:c8:bb:f8:14:21:47:fc:c0:c5: b2:52:f3:c9:13:d8:84:8c:92:6d:e9:7b:87:b2:d6: e3:e0:c8:ea:7a:00:2e:9e:35:70:e2:24:e6:23:46: d8:d0:84:ad:ac:08:0c:f3:27:00:47:76:f0:ac:20: 02:a6:2d:e0:95:1e:22:af:ee:bb:bb:c7:bf:2a:0c: 0a:ea:f5:9e:78:6d:01:63:87:0a:ef:85:64:1e:b3: 08:d4:19:ee:c8:07:83:ca:9b:c1:6e:72:f8:bd:f1: 48:e5:c1:4f:b1:24:10:53:ac:f7:dd:18:ff:63:16: a6:44:af:73:51:b5:fc:08:68:ed:1b:df:5f:f3:cc: c6:cc:19:a6:a5:33:3a:3f:e7:0c:36:84:e4:a1:a7: 1d:bb:6c:69:2e:68:58:8a:8f:6b:53:9e:ba:2b:e6: 14:85:83:c7:26:7c:9c:f0:05:18:89:53:09:ae:c3: 9a:2a:28:29:1a:45:dd:d8:37:33:d8:3f:50:6c:f3: 9f:db:b2:58:e6:0c:ed:6f:34:e9:da:48:dd:a5:bd: 1f:5a:50:b4:5e:c2:69:ab:52:66:00:42:1a:5b:dd: 06:90:c6:8e:c3:73:e0:1f:b1:7b:b9:5f:dd:39:a5: 14:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7F:CE:10:5D:8F:50:F4:CC:81:F3:A7:F5:64:27:6A:01:D6:06:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv6: 2604:f840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:1a:05:79:95:cd:05:56:20:c3:33:6e:3f:00:58:26:24:c9: a3:61:a7:bd:a8:70:1d:3d:c6:e8:77:d0:59:a0:a8:ee:81:44: ae:53:8f:4c:9b:95:c9:6b:bf:25:bd:77:7a:e3:0b:fe:3a:6c: 9c:a2:80:3a:e9:e0:e9:0c:d3:4d:2e:24:af:7c:95:0c:76:57: ac:02:76:45:9b:f5:5c:6c:bf:53:6e:54:65:99:b5:33:93:22: cc:9a:e6:ce:ce:1c:d5:19:e0:2c:e4:77:4f:41:e0:84:d2:55: e4:bb:58:04:c7:e1:94:43:9c:0a:13:e7:dd:8e:41:39:76:ee: f8:9e:49:e4:14:d1:92:f8:0c:d7:ad:43:15:03:e4:2d:53:28: c0:e9:41:41:94:e8:c8:74:52:26:4f:2b:e1:83:69:82:bb:24: d1:e1:07:96:7a:0c:cf:6c:40:45:a3:54:6a:28:a6:6e:3a:cf: 48:0d:a0:a3:63:21:ed:01:12:d5:27:46:04:5d:52:ce:14:1c: d4:1c:1d:b4:b5:e8:f7:8a:e5:10:c8:73:10:f8:85:64:7b:52: 32:43:df:c8:29:1d:4d:7c:d3:03:ce:82:ac:b0:3a:c2:49:c1: 5d:f7:89:a9:88:aa:a9:5e:2e:73:5c:96:11:ee:1e:c3:17:e9: 3b:a7:b3:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoRmqdkXKUUJhLN9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk M2M5ODhjZjgtYThhMS00MTA1LWExOTUtZmIxYTM5MTc1ODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi63RXtGsgYRU8isYtzfg4Lpi/GzIu/gUIUf8 wMWyUvPJE9iEjJJt6XuHstbj4MjqegAunjVw4iTmI0bY0IStrAgM8ycAR3bwrCAC pi3glR4ir+67u8e/KgwK6vWeeG0BY4cK74VkHrMI1BnuyAeDypvBbnL4vfFI5cFP sSQQU6z33Rj/YxamRK9zUbX8CGjtG99f88zGzBmmpTM6P+cMNoTkoacdu2xpLmhY io9rU566K+YUhYPHJnyc8AUYiVMJrsOaKigpGkXd2Dcz2D9QbPOf27JY5gztbzTp 2kjdpb0fWlC0XsJpq1JmAEIaW90GkMaOw3PgH7F7uV/dOaUUGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK5/zhBdj1D0zIHzp/VkJ2oB1gbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvNGQ3NzgzMTctYmZhOS0z MmRhLWI1ZWYtZDU4ODYwM2U1YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT4QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALGgV5lc0FViDDM24/AFgmJMmjYae9qHAdPcbod9BZoKjugUSuU49M m5XJa78lvXd64wv+OmycooA66eDpDNNNLiSvfJUMdlesAnZFm/VcbL9TblRlmbUz kyLMmubOzhzVGeAs5HdPQeCE0lXku1gEx+GUQ5wKE+fdjkE5du74nknkFNGS+AzX rUMVA+QtUyjA6UFBlOjIdFImTyvhg2mCuyTR4QeWegzPbEBFo1RqKKZuOs9IDaCj YyHtARLVJ0YEXVLOFBzUHB20tej3iuUQyHMQ+IVke1IyQ9/IKR1NfNMDzoKssDrC ScFd94mpiKqpXi5zXJYR7h7DF+k7p7Pp -----END CERTIFICATE-----Generated at Thu Jul 3 03:43:33 2025 by rpki-client