$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa File: eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa (raw, json) Hash identifier: LNJKSI/KElBHzyZgwZM+oEtX574xgHSISov8ZK66wHU= Subject key identifier: 69:F1:F1:F6:83:52:CE:A2:FA:58:4C:BD:05:CD:B6:52:F3:84:BE:13 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584A29556779E998CB6548B76900 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 393885 IP address blocks: 2604:4a00:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:67:79:e9:98:cb:65:48:b7:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=5f4b3160-3d7b-4740-b811-5bd4b65ca1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:68:f7:e1:5f:e2:70:00:25:2b:fb:14:45:30: 9b:5d:d8:63:cb:37:98:b1:01:f8:be:cd:91:b4:f5: 38:57:af:83:9f:46:64:0b:f2:d9:ed:01:97:22:cb: 09:9f:55:ba:d4:11:58:f7:40:43:97:40:01:34:66: d9:2a:e3:d6:43:d1:ed:62:b4:94:20:94:84:91:9a: e9:45:d0:96:ae:25:1f:5d:2b:eb:a7:67:d6:97:c3: 86:30:61:f1:4a:ba:87:ba:1d:63:2d:b0:cb:35:60: 7f:da:23:f0:be:6b:32:c8:bf:ba:ba:5b:aa:6d:44: ea:d4:22:2d:b1:35:30:19:18:40:a1:cb:21:f0:2e: 31:22:d6:04:05:79:07:da:0a:c5:52:90:c8:f8:c4: 20:36:ac:80:b4:ef:df:4e:f1:de:74:c1:0d:fb:62: d0:b0:f5:fb:ff:ef:e0:2c:e0:2c:c6:1f:43:f5:58: 6e:ab:9d:3b:56:ea:69:d6:0d:0e:7b:46:9c:2c:f0: 3a:83:54:a2:44:46:25:1a:cc:de:02:3e:bf:a5:7b: f0:ad:81:c8:c8:45:a0:58:e2:ae:7f:73:0f:1d:f9: 1e:c6:bc:a9:71:5b:e4:6d:4f:25:da:a1:42:66:08: 47:37:79:fb:93:9c:4f:1d:29:82:73:a9:31:03:6d: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F1:F1:F6:83:52:CE:A2:FA:58:4C:BD:05:CD:B6:52:F3:84:BE:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a00:8000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fd:9a:30:31:90:e7:6f:e7:ff:eb:27:66:34:de:43:b6:2c: 23:28:db:60:7f:ad:2a:aa:04:fe:2b:40:99:ac:b8:92:80:ac: f5:6e:40:f3:0e:d2:2c:ee:b1:54:26:79:9f:43:16:f6:b8:f9: 0b:a7:7b:a2:14:82:7b:c0:eb:36:cc:3b:cc:6f:78:1a:20:3d: 0c:94:41:c6:6d:cd:b4:8c:9e:34:69:99:12:06:ff:c6:41:e6: 50:e2:2d:83:26:d4:ca:e8:f0:e6:50:23:eb:90:75:08:21:9a: 1b:70:a9:ae:42:33:ad:ee:ba:84:4c:7a:dd:89:46:5e:f0:79: 31:69:90:38:9f:46:e6:37:fd:c1:f5:1e:30:d6:5c:26:82:17: cf:31:f0:53:68:77:d9:6e:68:97:e3:48:76:b5:6d:a9:5c:16: 46:3c:f4:9b:e6:4a:ad:13:39:77:4a:b8:db:18:75:46:77:c3: 47:fc:32:4c:8a:b1:b4:89:ef:01:29:e4:31:5c:65:b3:53:37: fd:ec:c1:c5:35:07:b6:65:9c:ba:af:89:f1:97:4f:01:05:12: 1d:4d:71:5b:6b:fa:49:7d:65:62:9d:3e:2d:9b:22:14:1e:cf: 27:8e:97:4c:20:1a:7a:38:b7:7f:d1:d3:ff:1b:26:78:90:3e: ba:97:a4:45 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEopVWd56ZjLZUi3aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk NWY0YjMxNjAtM2Q3Yi00NzQwLWI4MTEtNWJkNGI2NWNhMWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2j34V/icAAlK/sURTCbXdhjyzeYsQH4vs2R tPU4V6+Dn0ZkC/LZ7QGXIssJn1W61BFY90BDl0ABNGbZKuPWQ9HtYrSUIJSEkZrp RdCWriUfXSvrp2fWl8OGMGHxSrqHuh1jLbDLNWB/2iPwvmsyyL+6uluqbUTq1CIt sTUwGRhAocsh8C4xItYEBXkH2grFUpDI+MQgNqyAtO/fTvHedMEN+2LQsPX7/+/g LOAsxh9D9Vhuq507Vupp1g0Oe0acLPA6g1SiREYlGszeAj6/pXvwrYHIyEWgWOKu f3MPHfkexrypcVvkbU8l2qFCZghHN3n7k5xPHSmCc6kxA23PgQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGnx8faDUs6i+lhMvQXNtlLzhL4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvZWFhMDRjNWUtZjJiNi0z YmJhLTk0NTktZDE2Y2M2ZjUwZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKAIAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZP2aMDGQ52/n/+snZjTeQ7YsIyjbYH+tKqoE/itAmay4koCs9W5A 8w7SLO6xVCZ5n0MW9rj5C6d7ohSCe8DrNsw7zG94GiA9DJRBxm3NtIyeNGmZEgb/ xkHmUOItgybUyujw5lAj65B1CCGaG3CprkIzre66hEx63YlGXvB5MWmQOJ9G5jf9 wfUeMNZcJoIXzzHwU2h32W5ol+NIdrVtqVwWRjz0m+ZKrRM5d0q42xh1RnfDR/wy TIqxtInvASnkMVxls1M3/ezBxTUHtmWcuq+J8ZdPAQUSHU1xW2v6SX1lYp0+LZsi FB7PJ46XTCAaeji3f9HT/xsmeJA+upekRQ== -----END CERTIFICATE-----Generated at Mon Jun 30 00:31:30 2025 by rpki-client