$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/c93a5639-93f0-33f9-b74e-35038db77530.roa File: c93a5639-93f0-33f9-b74e-35038db77530.roa (raw, json) Hash identifier: qlIF2E6pX/I8om/WtdLNadQKUDu98P9cm21Nf90adKI= Subject key identifier: 1E:00:39:DC:30:2D:BB:99:A5:EC:5A:7B:A5:6E:CF:8A:E3:2A:2C:75 Certificate issuer: /CN=0f420918-35e5-40cb-b0bd-59d73276fa1e Certificate serial: 010D0C9F43285849D85FA3624FFB49530DE6FC60 Authority key identifier: CE:14:8A:A5:94:96:10:E8:87:9B:1A:BC:34:C7:E1:CB:01:F3:24:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/c93a5639-93f0-33f9-b74e-35038db77530.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 398146 IP address blocks: 2606:9d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/0f420918-35e5-40cb-b0bd-59d73276fa1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/0f420918-35e5-40cb-b0bd-59d73276fa1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a3:62:4f:fb:49:53:0d:e6:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f420918-35e5-40cb-b0bd-59d73276fa1e Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=42b6d5b6-165c-4b03-8671-ccbc93b35508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:5f:88:93:5b:c2:46:0a:cb:6f:8c:63:35: 34:38:01:26:c8:b9:08:c1:64:48:7f:31:f3:48:22: cf:c4:4f:a7:a5:a0:38:fe:71:d7:c9:42:5f:3a:94: 59:01:e1:ad:17:47:a4:d5:54:51:59:ef:b2:c6:72: 61:e0:1d:70:76:6e:68:cd:65:4f:42:62:58:75:fb: 11:51:49:ce:a8:87:3a:5e:63:d7:2b:37:07:e8:81: fc:39:e0:0d:87:6c:e1:4e:44:9b:fd:15:e6:7e:67: 76:a0:8f:0a:ee:4b:93:94:2c:51:25:38:15:3d:21: 4b:9b:f9:86:ab:0e:ad:31:3c:97:5f:52:19:53:50: 32:00:9f:f2:99:c0:e3:16:37:a2:a6:d9:de:a6:62: 8c:5f:25:33:53:83:f0:8a:d0:a9:23:3f:0e:06:b1: 63:8e:06:06:62:ae:16:73:9e:ec:55:02:05:26:c5: b5:e6:26:93:56:20:5f:1a:8d:40:a9:be:3b:0f:17: 8f:87:97:26:90:0b:ca:7f:89:9c:d3:0b:77:2a:eb: 32:a8:85:42:e2:48:0e:ae:4b:df:fc:e9:72:3c:23: 13:1e:2f:a2:6f:d2:57:13:64:2a:b4:dc:a3:64:22: 77:f1:33:ab:53:ea:4f:cb:2d:10:ca:bc:c7:3b:18: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:00:39:DC:30:2D:BB:99:A5:EC:5A:7B:A5:6E:CF:8A:E3:2A:2C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/c93a5639-93f0-33f9-b74e-35038db77530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/0f420918-35e5-40cb-b0bd-59d73276fa1e.crl X509v3 Authority Key Identifier: keyid:CE:14:8A:A5:94:96:10:E8:87:9B:1A:BC:34:C7:E1:CB:01:F3:24:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e.cer sbgp-ipAddrBlock: critical IPv6: 2606:9d40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:2c:cc:f2:87:4e:4e:ca:a4:97:4e:a1:f8:d6:b7:fe:9a:08: e4:0b:22:8f:3e:ab:56:30:02:83:29:ad:f1:7b:da:3e:0e:67: a0:35:d8:99:85:c6:94:fe:a3:a2:7e:1f:d7:64:99:67:76:fb: 26:59:c1:d2:bb:0e:7c:87:e5:ce:1f:c2:83:da:06:a8:5c:68: 84:1d:79:46:85:7c:b2:48:c6:0a:ab:7a:d3:fc:62:16:e2:f6: 8e:e8:23:b9:e4:6d:ec:20:93:f3:aa:94:a3:0d:63:c9:4a:6b: 27:4e:16:d1:76:be:cf:5a:92:e0:62:35:a4:69:fe:aa:75:ba: 08:1a:7d:ac:93:98:16:76:92:5c:3a:1f:c9:73:44:3f:f0:2f: 99:7f:ff:cf:67:45:d9:af:4a:73:c1:5d:7e:8d:b0:5b:b6:3d: f8:34:8d:d2:59:d0:36:2b:ed:7c:d3:9e:e8:81:64:0c:27:5d: 0d:97:f7:5f:ed:dd:44:b9:20:3a:30:01:2e:c0:0c:17:5e:48: 1f:02:45:51:a8:95:0e:90:2f:93:c5:09:a7:71:4d:9a:99:bb: 30:ed:7a:68:df:5a:0c:59:99:a6:67:aa:2f:f0:80:bb:a0:a0: 8f:f3:3c:20:b5:2b:bf:90:57:bd:2b:4c:90:b2:cb:d2:68:8f: 5c:2f:f5:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnYX6NiT/tJUw3m/GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY0MjA5MTgtMzVlNS00MGNiLWIwYmQtNTlkNzMyNzZm YTFlMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NDJiNmQ1YjYtMTY1Yy00YjAzLTg2NzEtY2NiYzkzYjM1NTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7VfiJNbwkYKy2+MYzU0OAEmyLkIwWRIfzHz SCLPxE+npaA4/nHXyUJfOpRZAeGtF0ek1VRRWe+yxnJh4B1wdm5ozWVPQmJYdfsR UUnOqIc6XmPXKzcH6IH8OeANh2zhTkSb/RXmfmd2oI8K7kuTlCxRJTgVPSFLm/mG qw6tMTyXX1IZU1AyAJ/ymcDjFjeiptnepmKMXyUzU4PwitCpIz8OBrFjjgYGYq4W c57sVQIFJsW15iaTViBfGo1Aqb47DxePh5cmkAvKf4mc0wt3KusyqIVC4kgOrkvf /OlyPCMTHi+ib9JXE2QqtNyjZCJ38TOrU+pPyy0QyrzHOxhVRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB4AOdwwLbuZpexae6Vuz4rjKix1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZjQy MDkxOC0zNWU1LTQwY2ItYjBiZC01OWQ3MzI3NmZhMWUvYzkzYTU2MzktOTNmMC0z M2Y5LWI3NGUtMzUwMzhkYjc3NTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGY0MjA5MTgtMzVlNS00MGNiLWIw YmQtNTlkNzMyNzZmYTFlLzBmNDIwOTE4LTM1ZTUtNDBjYi1iMGJkLTU5ZDczMjc2 ZmExZS5jcmwwHwYDVR0jBBgwFoAUzhSKpZSWEOiHmxq8NMfhywHzJCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZjQyMDkxOC0zNWU1LTQwY2ItYjBiZC01OWQ3 MzI3NmZhMWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgadQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6LMzyh05OyqSXTqH41rf+mgjkCyKPPqtWMAKDKa3xe9o+DmegNdiZ hcaU/qOifh/XZJlndvsmWcHSuw58h+XOH8KD2gaoXGiEHXlGhXyySMYKq3rT/GIW 4vaO6CO55G3sIJPzqpSjDWPJSmsnThbRdr7PWpLgYjWkaf6qdboIGn2sk5gWdpJc Oh/Jc0Q/8C+Zf//PZ0XZr0pzwV1+jbBbtj34NI3SWdA2K+18057ogWQMJ10Nl/df 7d1EuSA6MAEuwAwXXkgfAkVRqJUOkC+TxQmncU2ambsw7Xpo31oMWZmmZ6ov8IC7 oKCP8zwgtSu/kFe9K0yQssvSaI9cL/Xm -----END CERTIFICATE-----Generated at Mon Jun 30 08:42:08 2025 by rpki-client