$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dfe7e74b-e11b-3e5c-9d51-9d3c71471aa6.roa File: dfe7e74b-e11b-3e5c-9d51-9d3c71471aa6.roa (raw, json) Hash identifier: sZLiZCvCmtMohwfwbEzXFMQhvtFNkNbW0xwx+S4VfuE= Subject key identifier: DC:52:34:5A:89:3B:19:7C:D5:DB:57:6A:90:45:26:BF:FB:79:46:F5 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584A41105892E258FD8F8705CD60 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dfe7e74b-e11b-3e5c-9d51-9d3c71471aa6.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 20253 IP address blocks: 2606:bc40:f17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:58:92:e2:58:fd:8f:87:05:cd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=811457db-a2d4-4982-83c9-a77a144e29ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8c:ae:4d:5f:17:50:87:a1:3f:d9:5b:3d:e9: b0:4a:87:9d:a8:2d:8b:d2:13:37:ce:88:e2:a5:e6: bf:bd:e1:d4:ac:b7:9a:29:14:a8:30:f2:52:76:3d: e2:48:2b:4b:8c:1a:57:98:c3:52:ce:8e:47:a2:1b: e7:75:b8:7b:2d:3d:d3:b8:f5:b0:23:cb:73:9a:3c: 9e:17:c5:9d:cc:23:cf:44:ce:1d:13:15:04:3e:12: fa:73:18:d8:38:72:7a:6a:d1:f9:03:67:36:8f:72: ec:03:cf:74:84:85:b4:0f:e6:ac:c8:98:4a:32:6b: e9:54:8e:c7:ba:19:ad:c6:1e:1b:7f:b1:c7:2a:ec: c8:4c:22:a0:df:bb:22:6b:0f:b5:6e:2f:be:97:ea: 33:7f:a2:4b:c3:61:ed:5a:4a:67:85:09:82:1c:fc: 7c:61:a9:9c:21:72:a1:f9:0b:f7:b8:b8:07:d8:0c: 8a:43:e0:5e:25:2a:d7:c7:6d:36:c2:34:3f:92:45: a3:b2:3f:b4:bb:05:0d:da:e1:e3:dd:1c:58:4b:c2: a4:e0:56:77:c1:b7:9d:52:5e:88:5a:bd:08:21:f8: 2b:7a:d0:de:87:44:9c:05:4b:b5:a8:43:97:60:30: 9d:76:b1:44:56:6f:92:da:7d:28:83:97:ce:ad:26: 81:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:52:34:5A:89:3B:19:7C:D5:DB:57:6A:90:45:26:BF:FB:79:46:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dfe7e74b-e11b-3e5c-9d51-9d3c71471aa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:14:d7:14:df:5c:20:cd:de:97:0b:08:89:b6:ab:57:e6:b4: 62:a2:bd:e5:da:85:8e:6b:0b:51:65:65:de:e2:9c:86:07:64: 4b:30:03:46:76:a2:7b:79:10:32:6b:89:82:15:8e:4d:94:b8: 28:23:f4:8b:79:ef:77:e8:b2:3f:fd:f9:4c:11:41:00:3c:47: bd:eb:a9:23:b1:87:40:87:dd:9f:ec:67:e3:b7:9c:9d:e4:63: 46:9e:88:cc:c6:64:ed:10:53:56:e5:6c:34:6a:7a:0a:a1:57: 2a:fa:75:5a:fd:91:bc:9f:2f:bb:7d:b8:48:d1:9c:85:04:1f: 72:0a:c8:fc:59:f3:30:a6:d3:25:a5:d8:94:d0:52:f7:88:71: a2:af:b4:61:cb:b8:b1:3f:cd:5a:78:63:41:56:e7:d7:05:86: 55:c3:4a:3f:2d:96:56:1f:05:05:f1:7e:bf:82:ea:dd:0b:d3: 03:23:91:02:70:54:9d:1e:e2:ae:04:80:27:25:75:72:47:ae: dd:77:b2:35:4b:71:64:b6:ed:55:9a:61:dd:53:50:75:17:e0: f9:29:99:9e:e2:b2:77:cd:98:a2:7a:ee:49:e7:33:ef:82:af: d4:e5:20:73:54:11:e6:b0:89:c9:70:c5:6e:27:dd:bf:cd:ba: ec:7d:d9:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpBEFiS4lj9j4cFzWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ODExNDU3ZGItYTJkNC00OTgyLTgzYzktYTc3YTE0NGUyOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4yuTV8XUIehP9lbPemwSoedqC2L0hM3zoji pea/veHUrLeaKRSoMPJSdj3iSCtLjBpXmMNSzo5Hohvndbh7LT3TuPWwI8tzmjye F8WdzCPPRM4dExUEPhL6cxjYOHJ6atH5A2c2j3LsA890hIW0D+asyJhKMmvpVI7H uhmtxh4bf7HHKuzITCKg37siaw+1bi++l+ozf6JLw2HtWkpnhQmCHPx8YamcIXKh +Qv3uLgH2AyKQ+BeJSrXx202wjQ/kkWjsj+0uwUN2uHj3RxYS8Kk4FZ3wbedUl6I Wr0IIfgretDeh0ScBUu1qEOXYDCddrFEVm+S2n0og5fOrSaB+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNxSNFqJOxl81dtXapBFJr/7eUb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZGZlN2U3NGItZTExYi0z ZTVjLTlkNTEtOWQzYzcxNDcxYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8X MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADwU1xTfXCDN3pcLCIm2q1fmtGKiveXahY5rC1FlZd7inIYHZEsw A0Z2ont5EDJriYIVjk2UuCgj9It573fosj/9+UwRQQA8R73rqSOxh0CH3Z/sZ+O3 nJ3kY0aeiMzGZO0QU1blbDRqegqhVyr6dVr9kbyfL7t9uEjRnIUEH3IKyPxZ8zCm 0yWl2JTQUveIcaKvtGHLuLE/zVp4Y0FW59cFhlXDSj8tllYfBQXxfr+C6t0L0wMj kQJwVJ0e4q4EgCcldXJHrt13sjVLcWS27VWaYd1TUHUX4PkpmZ7isnfNmKJ67knn M++Cr9TlIHNUEeawiclwxW4n3b/Nuux92WI= -----END CERTIFICATE-----Generated at Mon Jun 30 00:41:12 2025 by rpki-client