$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa File: d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa (raw, json) Hash identifier: MuEmdqwC+FkMdxNmPkbGxU2LIqHTAbEEGBhs0DQNRHc= Subject key identifier: A2:43:BE:AA:3F:7A:BD:61:7C:87:51:76:B1:E8:9E:72:3A:AA:04:0D Certificate issuer: /CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Certificate serial: 010D0C9F4328584A1B600EDD5578CEDECE5B6B80 Authority key identifier: D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 399825 IP address blocks: 2602:80a:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:0e:dd:55:78:ce:de:ce:5b:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=e443ca69-6789-4211-ba87-f18c4020c1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e6:e3:1c:96:47:10:7f:a9:fa:1a:96:25:65: 97:75:64:e0:70:86:97:17:61:c2:d8:be:02:68:9c: 62:bc:6d:a5:47:65:85:f5:1f:56:aa:89:88:3e:fe: 64:76:14:65:0f:53:d0:e9:96:4c:b9:3c:d8:fb:a8: 27:bb:d6:64:b7:c3:65:85:69:24:60:c5:ac:70:9b: 96:05:88:43:ea:73:df:b4:23:ce:70:a0:92:e2:ee: bc:cd:6c:d4:97:88:c1:55:cd:70:d6:9d:63:95:d5: e4:a4:64:7d:0f:dc:3e:fd:86:d8:df:b8:ce:84:9e: 8c:1d:4e:30:7f:b7:cf:64:80:90:e3:c5:3b:50:f3: 6f:69:b8:24:33:b8:80:93:b3:78:b1:2b:c3:2b:4e: 6b:85:f1:8d:95:94:f8:e1:23:5e:9d:b1:4e:5d:fc: 93:f1:59:0a:c4:78:3c:0f:49:0f:59:09:ed:41:e0: 00:94:02:ef:32:ca:a8:d8:8e:49:9c:0e:3f:a9:98: 79:31:23:a4:fc:6d:8d:d1:5a:3a:f7:aa:20:af:c5: 27:dd:2b:2f:6d:5e:ee:b6:c2:22:7c:5c:fc:8a:ca: 31:07:96:00:fb:b2:cc:71:f3:b7:3f:62:a9:cc:fa: d2:c6:19:a5:ad:52:51:7d:0e:eb:45:6f:e2:e7:17: 88:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:43:BE:AA:3F:7A:BD:61:7C:87:51:76:B1:E8:9E:72:3A:AA:04:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl X509v3 Authority Key Identifier: keyid:D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer sbgp-ipAddrBlock: critical IPv6: 2602:80a:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5e:0f:2f:30:ab:90:71:81:05:32:7f:90:40:6c:2f:96:61: 5a:d0:00:f9:d6:2e:7a:20:bb:c1:38:f2:b0:13:5f:ce:11:fd: 32:03:4a:23:ab:f7:55:bd:67:72:d3:34:23:33:e6:73:42:d6: cc:92:2d:9d:e4:e2:9d:f5:02:d0:32:5e:0d:9b:0b:7e:fc:62: 20:00:7d:2f:a2:d0:19:1f:c8:66:be:5e:c5:88:81:ae:b5:62: 0f:e4:2d:38:d4:47:0b:4b:c5:66:28:d1:61:a6:66:54:0e:de: 43:0e:ab:44:7f:f2:5e:87:e2:06:8a:32:6f:ac:49:bf:c7:c7: 68:c2:6f:6d:b8:91:e4:ee:5f:59:32:5e:db:84:b0:64:01:db: c0:f3:93:ca:1e:e9:38:9c:1e:45:bd:e4:f6:cc:30:37:40:ad: 16:d7:9f:1e:7d:d0:0b:8a:7b:78:d9:fe:35:a3:fd:a8:59:c6: c8:4a:fb:49:c6:ac:54:81:e5:c6:e2:05:be:47:38:c1:e3:06: 82:59:d2:21:2a:7c:72:01:65:4d:1d:fd:27:5f:08:f0:cd:c2: eb:34:9e:51:d7:96:9d:2f:41:89:9d:39:36:4d:34:2c:1d:18: e0:3c:fe:30:1e:52:d7:74:07:c8:d1:74:66:63:32:25:83:b0: d0:6f:ec:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEobYA7dVXjO3s5ba4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgyNWU4ZmItMWI5Yy00M2M0LThmOWYtNDBkZjFjNzE2 MjExMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ZTQ0M2NhNjktNjc4OS00MjExLWJhODctZjE4YzQwMjBjMWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+bjHJZHEH+p+hqWJWWXdWTgcIaXF2HC2L4C aJxivG2lR2WF9R9WqomIPv5kdhRlD1PQ6ZZMuTzY+6gnu9Zkt8NlhWkkYMWscJuW BYhD6nPftCPOcKCS4u68zWzUl4jBVc1w1p1jldXkpGR9D9w+/YbY37jOhJ6MHU4w f7fPZICQ48U7UPNvabgkM7iAk7N4sSvDK05rhfGNlZT44SNenbFOXfyT8VkKxHg8 D0kPWQntQeAAlALvMsqo2I5JnA4/qZh5MSOk/G2N0Vo696ogr8Un3SsvbV7utsIi fFz8isoxB5YA+7LMcfO3P2KpzPrSxhmlrVJRfQ7rRW/i5xeI0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKJDvqo/er1hfIdRdrHonnI6qgQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1 ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRmMWM3MTYyMTEvZDY3YTViNjEtMDhmZi0z ZDkwLWFmMGMtNDM1ZWQ4YTBhY2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODgyNWU4ZmItMWI5Yy00M2M0LThm OWYtNDBkZjFjNzE2MjExLzg4MjVlOGZiLTFiOWMtNDNjNC04ZjlmLTQwZGYxYzcx NjIxMS5jcmwwHwYDVR0jBBgwFoAU1MWAixuM7+uEMt0GMxiIU9SksN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRm MWM3MTYyMTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIICjAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFJeDy8wq5BxgQUyf5BAbC+WYVrQAPnWLnogu8E48rATX84R/TID SiOr91W9Z3LTNCMz5nNC1sySLZ3k4p31AtAyXg2bC378YiAAfS+i0BkfyGa+XsWI ga61Yg/kLTjURwtLxWYo0WGmZlQO3kMOq0R/8l6H4gaKMm+sSb/Hx2jCb224keTu X1kyXtuEsGQB28Dzk8oe6TicHkW95PbMMDdArRbXnx590AuKe3jZ/jWj/ahZxshK +0nGrFSB5cbiBb5HOMHjBoJZ0iEqfHIBZU0d/SdfCPDNwus0nlHXlp0vQYmdOTZN NCwdGOA8/jAeUtd0B8jRdGZjMiWDsNBv7AU= -----END CERTIFICATE-----Generated at Tue Jul 1 11:37:35 2025 by rpki-client