$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa File: cfc0aa13-2df9-3952-848a-2c1df7879358.roa (raw, json) Hash identifier: zPdZiIfpbug23RbLA9uphdCj658UeB4p9/SPLMjoqgU= Subject key identifier: 35:1A:7A:D4:8C:23:A4:60:A8:41:5D:C0:F4:81:DA:1A:46:57:D4:D0 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584A295567F357D394DE5BB31A00 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 393885 IP address blocks: 2604:4a00:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:67:f3:57:d3:94:de:5b:b3:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=d9f54dbb-7ee9-4b71-8080-ac496cc4b8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:14:9c:b8:a2:a0:c7:2c:17:90:95:01:67:88: 70:8d:4d:04:95:05:26:1d:e2:c5:29:04:30:47:7b: 41:bb:c9:68:58:e9:35:36:6e:80:8b:a5:22:ac:68: a3:08:31:80:a6:cd:5e:b8:e4:77:b8:73:1a:4d:36: 83:e8:ab:06:84:92:e6:5a:22:24:df:2b:09:f2:79: 95:4a:5c:30:a8:bf:16:d8:9d:cf:0c:aa:05:ea:e0: d4:5c:18:a9:82:6b:45:bd:b9:16:43:06:52:36:b5: 1c:b9:9e:08:51:89:c1:c3:9d:f3:9f:8c:2e:91:02: de:cf:5b:97:2d:53:31:3e:33:69:2a:10:70:ef:f7: 02:df:e4:e6:98:22:0c:43:c1:34:47:96:e5:40:cc: d4:da:f0:b7:b2:1c:68:b4:de:f7:ab:89:7a:08:ff: 3d:34:78:dc:23:df:8e:b4:b2:3c:69:94:bf:70:c1: 6d:63:9d:f7:e4:94:6f:f9:01:f9:90:6a:fe:dd:33: f1:b1:1f:3d:83:9d:2f:93:27:c6:18:96:92:dc:97: ae:0f:74:3c:e1:4d:98:f5:b3:5b:4e:3e:8c:49:63: 7e:25:46:d4:4b:b3:0e:93:d7:1d:56:d0:79:92:92: 0f:ee:e9:79:91:6c:b0:f5:fa:18:20:7c:96:ac:2d: 3a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1A:7A:D4:8C:23:A4:60:A8:41:5D:C0:F4:81:DA:1A:46:57:D4:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a00:f000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:bf:81:dd:1e:48:6c:09:b2:bd:db:43:e3:22:57:00:8b:6d: de:35:10:f1:0b:76:90:4f:c3:58:4a:db:99:8c:52:2c:50:e9: 9e:60:4e:04:04:3f:35:3c:8a:40:75:f9:06:cc:eb:79:54:a7: dd:9e:a5:74:c3:ea:9d:bc:d8:f7:4a:05:b3:03:18:48:3d:6b: 59:27:3f:ab:37:b1:10:97:c4:b3:93:9e:b6:5f:a9:cd:e1:d9: a1:fc:53:87:1f:de:57:98:28:ba:ce:5f:59:06:03:68:9d:a6: 19:d8:ec:7f:0c:be:55:b3:81:9a:41:d1:44:4f:9c:32:c6:6c: 56:3d:3a:03:e0:f1:29:53:43:ab:74:31:a3:16:9b:8f:20:57: 31:c1:ff:e2:72:4a:a8:8f:0d:d2:89:bd:87:60:99:d7:39:5a: ca:e3:8f:86:d6:b7:d3:a0:f7:4c:ba:fa:aa:f8:97:b7:e7:6c: 4d:30:7d:19:f0:d7:5f:5d:5f:0e:e0:01:69:fc:5d:b9:78:1f: 44:8b:f7:11:8d:ab:3d:a6:a2:d1:42:53:91:ae:f1:f8:70:54: e2:6d:bc:c4:59:0a:41:67:38:c4:18:2d:01:b4:72:e2:81:a1: fb:64:4c:8b:a8:e0:9f:62:59:95:9e:79:1e:78:2b:ce:38:7c: b4:9e:1c:64 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEopVWfzV9OU3luzGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk ZDlmNTRkYmItN2VlOS00YjcxLTgwODAtYWM0OTZjYzRiOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xScuKKgxywXkJUBZ4hwjU0ElQUmHeLFKQQw R3tBu8loWOk1Nm6Ai6UirGijCDGAps1euOR3uHMaTTaD6KsGhJLmWiIk3ysJ8nmV SlwwqL8W2J3PDKoF6uDUXBipgmtFvbkWQwZSNrUcuZ4IUYnBw53zn4wukQLez1uX LVMxPjNpKhBw7/cC3+TmmCIMQ8E0R5blQMzU2vC3shxotN73q4l6CP89NHjcI9+O tLI8aZS/cMFtY5335JRv+QH5kGr+3TPxsR89g50vkyfGGJaS3JeuD3Q84U2Y9bNb Tj6MSWN+JUbUS7MOk9cdVtB5kpIP7ul5kWyw9foYIHyWrC06JwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDUaetSMI6RgqEFdwPSB2hpGV9TQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvY2ZjMGFhMTMtMmRmOS0z OTUyLTg0OGEtMmMxZGY3ODc5MzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKAPAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAeL+B3R5IbAmyvdtD4yJXAItt3jUQ8Qt2kE/DWErbmYxSLFDpnmBO BAQ/NTyKQHX5BszreVSn3Z6ldMPqnbzY90oFswMYSD1rWSc/qzexEJfEs5Oetl+p zeHZofxThx/eV5gous5fWQYDaJ2mGdjsfwy+VbOBmkHRRE+cMsZsVj06A+DxKVND q3QxoxabjyBXMcH/4nJKqI8N0om9h2CZ1zlayuOPhta306D3TLr6qviXt+dsTTB9 GfDXX11fDuABafxduXgfRIv3EY2rPaai0UJTka7x+HBU4m28xFkKQWc4xBgtAbRy 4oGh+2RMi6jgn2JZlZ55Hngrzjh8tJ4cZA== -----END CERTIFICATE-----Generated at Mon Jun 30 00:40:49 2025 by rpki-client