$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/21d6dfd9-a746-3a75-bfef-433bb1514f52.roa File: 21d6dfd9-a746-3a75-bfef-433bb1514f52.roa (raw, json) Hash identifier: ks9a1QWpYlJqqGl10VhglSQc6mDVVc3D1l9CvahLM2M= Subject key identifier: 38:FF:BE:9A:3D:BF:5D:48:94:E7:2D:C1:B4:3C:1E:17:D3:56:CD:80 Certificate issuer: /CN=a75ece7f-5380-409e-b027-b6733c088c34 Certificate serial: 010D0C9F4328584A56005574BD52EBE548827520 Authority key identifier: 41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/21d6dfd9-a746-3a75-bfef-433bb1514f52.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 59 IP address blocks: 2607:f388::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:55:74:bd:52:eb:e5:48:82:75:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a75ece7f-5380-409e-b027-b6733c088c34 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=00b5c3d8-3a48-4bfa-80ba-9c704fcb6ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a3:1d:91:ca:63:2d:77:f1:9e:42:54:f6:03: 5f:f9:b9:1c:08:4d:2c:ed:14:bc:cc:f8:47:19:52: 0d:15:38:b6:f3:b8:05:33:a6:02:ef:4a:84:07:97: 94:48:3d:03:c9:6d:69:d5:1d:64:08:13:d3:ea:8c: 63:d3:74:87:a4:74:77:d0:d9:60:11:05:36:f9:78: 60:90:f4:94:c4:4b:c4:ad:b4:98:73:6f:e1:22:1a: dd:4c:06:a7:9b:2c:05:9b:6f:36:c8:eb:ec:1a:0e: 5a:c2:f8:b9:0e:18:42:75:01:06:82:e7:2d:40:38: b4:c9:83:d5:32:10:b9:aa:d9:87:8b:2c:28:21:b2: 8f:e0:fc:ab:cf:07:0f:0a:67:03:c8:38:42:0b:7c: 55:cd:8b:e0:83:95:54:32:ae:6c:d5:8f:49:3b:1e: 77:fe:08:2b:87:d0:39:58:26:8f:b6:3e:a9:e8:1a: 25:e4:67:e9:bd:8b:7f:f1:74:3d:27:15:87:87:3f: d7:04:11:19:97:96:0f:ce:57:ff:aa:e6:59:7c:d5: 7d:bd:9e:9a:68:b2:86:b8:ff:86:40:ee:f9:b3:ed: b5:67:5e:9e:20:92:73:95:57:0c:fd:6d:33:65:e2: f6:5a:af:17:0a:ed:ce:e3:86:22:4e:06:ff:28:71: 74:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FF:BE:9A:3D:BF:5D:48:94:E7:2D:C1:B4:3C:1E:17:D3:56:CD:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/21d6dfd9-a746-3a75-bfef-433bb1514f52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl X509v3 Authority Key Identifier: keyid:41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer sbgp-ipAddrBlock: critical IPv6: 2607:f388::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:78:09:1f:56:3d:a0:ef:08:50:9c:68:d0:3f:28:0f:d8:be: 85:ae:51:f6:68:99:90:bb:2f:da:f2:4a:1e:2f:d8:37:f2:9d: 1a:36:af:98:96:a2:8b:ce:63:3f:0c:90:07:e4:1a:73:8f:b5: 61:8f:a1:9b:ee:ac:88:8f:bf:40:e2:5c:cc:f4:54:8b:83:ad: 6b:a6:eb:6d:fb:1d:a8:1a:35:ee:8a:b4:68:93:03:52:87:ed: 30:6a:83:db:8a:4a:54:bf:37:f4:0e:7a:24:81:7e:07:da:38: 94:5f:85:4e:ad:60:36:6c:ab:d4:04:5c:94:e6:01:7e:e2:a4: 78:4a:f7:12:d2:ee:e8:65:13:48:92:fd:83:70:9f:ee:51:bf: fb:bb:47:a0:b1:11:9d:a6:e9:c9:82:a0:59:76:ac:2e:97:d2: 08:74:88:e0:db:4b:17:79:cf:30:59:58:f2:89:d0:a9:cc:c4: 4b:85:f0:c5:a0:2e:55:46:6f:1b:57:56:35:9f:4e:e9:e2:1a: cf:70:d2:dc:e5:31:35:0f:b5:de:3d:fa:f0:82:31:19:89:d0: eb:a1:10:be:51:fd:5c:84:61:65:42:ce:bc:02:65:47:14:1a: f9:33:09:15:3e:aa:16:f3:45:c3:14:5d:82:6d:24:69:a3:62: 76:23:7d:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpWAFV0vVLr5UiCdSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc1ZWNlN2YtNTM4MC00MDllLWIwMjctYjY3MzNjMDg4 YzM0MB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk MDBiNWMzZDgtM2E0OC00YmZhLTgwYmEtOWM3MDRmY2I2ZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqMdkcpjLXfxnkJU9gNf+bkcCE0s7RS8zPhH GVINFTi287gFM6YC70qEB5eUSD0DyW1p1R1kCBPT6oxj03SHpHR30NlgEQU2+Xhg kPSUxEvErbSYc2/hIhrdTAanmywFm282yOvsGg5awvi5DhhCdQEGguctQDi0yYPV MhC5qtmHiywoIbKP4PyrzwcPCmcDyDhCC3xVzYvgg5VUMq5s1Y9JOx53/ggrh9A5 WCaPtj6p6Bol5GfpvYt/8XQ9JxWHhz/XBBEZl5YPzlf/quZZfNV9vZ6aaLKGuP+G QO75s+21Z16eIJJzlVcM/W0zZeL2Wq8XCu3O44YiTgb/KHF04QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDj/vpo9v11IlOctwbQ8HhfTVs2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNzVl Y2U3Zi01MzgwLTQwOWUtYjAyNy1iNjczM2MwODhjMzQvMjFkNmRmZDktYTc0Ni0z YTc1LWJmZWYtNDMzYmIxNTE0ZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTc1ZWNlN2YtNTM4MC00MDllLWIw MjctYjY3MzNjMDg4YzM0L2E3NWVjZTdmLTUzODAtNDA5ZS1iMDI3LWI2NzMzYzA4 OGMzNC5jcmwwHwYDVR0jBBgwFoAUQZyloIg+h3f4w5MnJRJ6n44lziEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNzVlY2U3Zi01MzgwLTQwOWUtYjAyNy1iNjcz M2MwODhjMzQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfziDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCHeAkfVj2g7whQnGjQPygP2L6FrlH2aJmQuy/a8koeL9g38p0aNq+Y lqKLzmM/DJAH5Bpzj7Vhj6Gb7qyIj79A4lzM9FSLg61rputt+x2oGjXuirRokwNS h+0waoPbikpUvzf0DnokgX4H2jiUX4VOrWA2bKvUBFyU5gF+4qR4SvcS0u7oZRNI kv2DcJ/uUb/7u0egsRGdpunJgqBZdqwul9IIdIjg20sXec8wWVjyidCpzMRLhfDF oC5VRm8bV1Y1n07p4hrPcNLc5TE1D7XePfrwgjEZidDroRC+Uf1chGFlQs68AmVH FBr5MwkVPqoW80XDFF2CbSRpo2J2I33p -----END CERTIFICATE-----Generated at Tue Jul 1 05:02:09 2025 by rpki-client