$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/af2b6aa7-90f5-33a6-8fd6-8c316298bcc7.roa File: af2b6aa7-90f5-33a6-8fd6-8c316298bcc7.roa (raw, json) Hash identifier: YqKFaihlg7agbZFpNE9E5e+KcLzDx1n3MKvopSSWRzs= Subject key identifier: 35:0E:52:D2:4F:03:18:D2:D0:90:13:BC:B4:B2:41:30:82:49:1E:F1 Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584A363FEBA86AA337EC84E6F800 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/af2b6aa7-90f5-33a6-8fd6-8c316298bcc7.roa Signing time: Mon 16 Jun 2025 16:03:12 +0000 ROA not before: Mon 16 Jun 2025 16:03:12 +0000 ROA not after: Sun 14 Sep 2025 16:03:12 +0000 asID: 13371 IP address blocks: 2600:2704:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3f:eb:a8:6a:a3:37:ec:84:e6:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: Jun 16 16:03:12 2025 GMT Not After : Sep 14 16:03:12 2025 GMT Subject: CN=81aec6b5-fe6b-463b-be2f-1c76fdfd2920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:72:42:e9:5f:25:2c:94:03:6e:59:23:6b: 69:fc:38:2e:d9:23:e4:2d:3f:f8:b8:d3:4f:4d:40: 15:6d:71:8d:35:af:f5:b2:68:9b:ea:7f:8e:ff:9d: 15:e7:44:79:2d:00:56:ec:3c:04:91:25:d8:f9:46: d7:b0:6b:5b:d8:7e:2e:14:30:b4:a2:1d:22:88:96: eb:c5:f9:c9:1e:a1:f3:40:99:88:a7:bf:b2:32:ed: f7:9f:3b:f0:3f:31:fc:be:1e:c6:ca:e0:00:2b:14: 78:35:38:cd:65:c7:e2:b6:2b:73:ab:59:aa:97:43: f0:86:78:63:b7:ad:7d:0f:1c:67:40:ff:41:24:13: 62:98:09:20:29:0c:1d:23:99:7b:84:2d:ca:8a:e0: 9b:91:2c:bf:47:9d:97:42:9c:77:b1:a3:52:f8:09: 46:23:61:62:87:39:a8:d9:4d:17:c8:8e:d8:47:43: d7:1f:c1:c2:aa:ab:8c:42:8e:cf:20:47:41:ab:bb: 12:8b:a4:8f:7b:5b:5a:3c:4c:eb:ec:e7:02:dc:97: 3a:c7:3c:8d:f5:d0:13:e7:af:a2:4d:c9:f1:b2:40: 1f:54:74:bb:22:60:5b:4c:41:87:77:ed:5f:45:91: 7a:1d:f6:62:7f:bf:07:4e:1f:97:96:6e:e8:77:f1: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0E:52:D2:4F:03:18:D2:D0:90:13:BC:B4:B2:41:30:82:49:1E:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/af2b6aa7-90f5-33a6-8fd6-8c316298bcc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2600:2704:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:62:b8:0c:74:1a:9c:4c:43:a0:e6:46:15:66:ac:75:93:11: a0:db:57:5a:26:20:73:30:30:4e:5f:0c:de:a9:ca:72:50:1d: f1:d3:01:da:4b:3d:4d:a5:ff:25:3b:4d:2d:ce:bd:6a:eb:93: 0b:d5:10:cb:8e:b9:3e:6c:5b:a1:83:96:e6:cf:e7:ab:15:e8: 95:b4:9e:8d:95:87:ff:c8:1d:3e:e3:0d:e0:12:45:4c:94:0b: 3d:f3:2e:9e:72:6d:a2:53:c5:99:22:3c:e2:a3:b4:67:4f:7d: 9d:ad:5f:ef:e5:9b:6f:2e:4b:58:f6:98:7a:5a:4a:4e:d6:35: 53:17:c5:9c:30:c8:46:34:b6:40:25:75:57:8f:7e:d0:8f:64: 55:25:3b:7a:69:33:b4:6c:05:d8:52:2d:36:14:31:b5:c0:f3: ca:ac:fc:8b:83:28:e4:0b:04:82:8c:67:2d:3d:77:5e:f1:1b: a4:e3:7d:1b:9c:1c:48:84:0e:f0:69:68:e2:3d:8b:73:9f:80: 39:9b:c8:7d:01:94:d0:7b:a3:95:ef:5f:8b:df:82:3c:cb:8d: 6b:f1:7b:ca:ba:80:1d:92:3d:c3:b6:27:48:ab:85:2e:6e:1c: 3f:eb:50:bd:94:14:30:43:73:e4:9c:af:34:c2:36:a0:8c:f8: a5:ff:31:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo2P+uoaqM37ITm+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI1MDYxNjE2MDMxMloXDTI1MDkxNDE2MDMxMlowLzEtMCsGA1UEAxMk ODFhZWM2YjUtZmU2Yi00NjNiLWJlMmYtMWM3NmZkZmQyOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb5yQulfJSyUA25ZI2tp/Dgu2SPkLT/4uNNP TUAVbXGNNa/1smib6n+O/50V50R5LQBW7DwEkSXY+UbXsGtb2H4uFDC0oh0iiJbr xfnJHqHzQJmIp7+yMu33nzvwPzH8vh7GyuAAKxR4NTjNZcfititzq1mql0Pwhnhj t619DxxnQP9BJBNimAkgKQwdI5l7hC3KiuCbkSy/R52XQpx3saNS+AlGI2Fihzmo 2U0XyI7YR0PXH8HCqquMQo7PIEdBq7sSi6SPe1taPEzr7OcC3Jc6xzyN9dAT56+i TcnxskAfVHS7ImBbTEGHd+1fRZF6HfZif78HTh+Xlm7od/ENRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDUOUtJPAxjS0JATvLSyQTCCSR7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvYWYyYjZhYTctOTBmNS0z M2E2LThmZDYtOGMzMTYyOThiY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAnBAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHdiuAx0GpxMQ6DmRhVmrHWTEaDbV1omIHMwME5fDN6pynJQHfHT AdpLPU2l/yU7TS3OvWrrkwvVEMuOuT5sW6GDlubP56sV6JW0no2Vh//IHT7jDeAS RUyUCz3zLp5ybaJTxZkiPOKjtGdPfZ2tX+/lm28uS1j2mHpaSk7WNVMXxZwwyEY0 tkAldVePftCPZFUlO3ppM7RsBdhSLTYUMbXA88qs/IuDKOQLBIKMZy09d17xG6Tj fRucHEiEDvBpaOI9i3OfgDmbyH0BlNB7o5XvX4vfgjzLjWvxe8q6gB2SPcO2J0ir hS5uHD/rUL2UFDBDc+ScrzTCNqCM+KX/MfE= -----END CERTIFICATE-----Generated at Tue Jul 1 02:32:37 2025 by rpki-client