$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa File: 0d8ac99f-834b-392d-8de0-99e74008bf17.roa (raw, json) Hash identifier: RqyP/o6P7/T8Ao+d9ahNOs8il2oOTG+9xHmvQ7aDAGs= Subject key identifier: E1:B5:BB:43:DA:9B:C5:66:82:B5:5D:8F:14:1A:38:62:8E:4A:F1:87 Certificate issuer: /CN=0575435f-d6e9-4d29-9519-fff0e513c74e Certificate serial: 010D0C9F4328584A43DAFCCFF30B1023BD8CCFFD Authority key identifier: 41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 396319 IP address blocks: 2601:1300::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:fc:cf:f3:0b:10:23:bd:8c:cf:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0575435f-d6e9-4d29-9519-fff0e513c74e Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=64285ba7-f2a2-4e6d-9074-2eafda006623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3f:6d:b2:09:ca:3a:cd:4e:39:8f:c3:13:c5: fe:2c:cd:a7:e0:f4:2f:d6:39:80:5c:4f:c0:28:98: cf:ed:0f:77:aa:92:61:73:4f:2c:2d:ff:fd:fd:f7: 2d:45:f9:01:56:fc:d1:3a:e1:52:c3:9a:30:67:7d: 48:d6:f4:9e:9d:74:22:8f:c6:f1:31:00:41:7e:8b: c1:54:6c:fb:de:cb:a5:8f:ed:cd:f3:9d:ca:b1:95: 13:1e:24:e5:ce:2e:1e:68:f2:ad:c7:35:3c:f7:9c: 58:63:9f:75:4d:f0:fc:2a:c0:22:eb:de:7c:90:94: a2:3f:d1:b3:d3:60:af:0e:dd:13:11:be:89:bc:35: f5:87:27:5a:25:92:d5:31:87:77:39:ab:c3:a0:8b: c7:68:1d:24:df:a9:b7:49:66:5e:0d:90:0e:89:47: 95:fa:5d:67:69:b3:31:26:c7:e6:3b:59:c7:1c:b3: 56:d9:68:6c:2a:41:e6:2f:43:ce:5c:0e:e8:b5:da: b2:b5:4d:d8:bb:0a:29:6a:23:4e:5b:fb:4b:7a:3f: 1a:14:ca:12:a9:89:8c:4c:82:20:28:92:de:55:8e: b4:4c:a4:f0:dd:36:fe:db:f0:c1:24:5f:be:03:96: 20:75:51:85:ec:ea:7c:2c:c5:fb:12:9c:d6:59:22: 58:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B5:BB:43:DA:9B:C5:66:82:B5:5D:8F:14:1A:38:62:8E:4A:F1:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl X509v3 Authority Key Identifier: keyid:41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer sbgp-ipAddrBlock: critical IPv6: 2601:1300::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:20:cc:90:5c:70:c2:fa:91:e7:d2:e5:1b:71:24:fa:f7:27: f3:b8:97:8c:8d:53:2f:91:15:40:d3:ce:46:5a:4d:d2:c8:01: ee:34:c0:dd:c0:7b:89:79:72:4b:27:f0:7c:b5:69:d3:16:b6: ac:9b:7b:e1:43:68:72:99:6d:8c:96:18:01:c3:94:70:c2:88: b2:06:6e:c0:01:b6:1b:2b:3f:ef:d5:23:8c:3d:3b:a4:2e:69: 91:1a:f1:20:24:2f:ca:8b:47:a6:b3:e0:c8:3b:e7:1d:41:2a: 7c:6b:16:6a:5c:a4:9e:4b:cd:88:2d:48:42:3f:03:19:18:01: 24:46:85:33:bd:79:71:ee:e1:ed:44:a4:e4:48:31:d2:61:52: 6b:b1:35:1e:7c:13:14:9d:d8:3f:ed:4a:5e:cb:da:c4:51:19: 35:59:ad:79:1d:c1:81:f5:f3:46:ef:0e:5d:75:b0:09:d6:48: 3d:fa:ac:07:1c:c0:52:0f:c0:dd:56:07:32:33:55:b6:fc:96: ba:c5:7b:c0:1a:92:13:6a:b7:8c:df:69:ee:be:77:10:c5:ad: 5a:53:79:b9:cb:89:2f:0e:e8:ef:c8:2a:71:f2:4a:fe:ee:75: 1d:c2:97:ce:c5:09:69:ef:09:f8:31:5a:73:ad:a3:c3:bc:4a: a0:e4:63:fb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpD2vzP8wsQI72Mz/0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU3NTQzNWYtZDZlOS00ZDI5LTk1MTktZmZmMGU1MTNj NzRlMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk NjQyODViYTctZjJhMi00ZTZkLTkwNzQtMmVhZmRhMDA2NjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij9tsgnKOs1OOY/DE8X+LM2n4PQv1jmAXE/A KJjP7Q93qpJhc08sLf/9/fctRfkBVvzROuFSw5owZ31I1vSenXQij8bxMQBBfovB VGz73sulj+3N853KsZUTHiTlzi4eaPKtxzU895xYY591TfD8KsAi6958kJSiP9Gz 02CvDt0TEb6JvDX1hydaJZLVMYd3OavDoIvHaB0k36m3SWZeDZAOiUeV+l1nabMx JsfmO1nHHLNW2WhsKkHmL0POXA7otdqytU3YuwopaiNOW/tLej8aFMoSqYmMTIIg KJLeVY60TKTw3Tb+2/DBJF++A5YgdVGF7Op8LMX7EpzWWSJY5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOG1u0Pam8VmgrVdjxQaOGKOSvGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNTc1 NDM1Zi1kNmU5LTRkMjktOTUxOS1mZmYwZTUxM2M3NGUvMGQ4YWM5OWYtODM0Yi0z OTJkLThkZTAtOTllNzQwMDhiZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDU3NTQzNWYtZDZlOS00ZDI5LTk1 MTktZmZmMGU1MTNjNzRlLzA1NzU0MzVmLWQ2ZTktNGQyOS05NTE5LWZmZjBlNTEz Yzc0ZS5jcmwwHwYDVR0jBBgwFoAUQcnxodTICWqyzEs1fgawzpF+7i0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNTc1NDM1Zi1kNmU5LTRkMjktOTUxOS1mZmYw ZTUxM2M3NGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgETADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJIMyQXHDC+pHn0uUbcST69yfzuJeMjVMvkRVA085GWk3SyAHuNMDd wHuJeXJLJ/B8tWnTFrasm3vhQ2hymW2MlhgBw5RwwoiyBm7AAbYbKz/v1SOMPTuk LmmRGvEgJC/Ki0ems+DIO+cdQSp8axZqXKSeS82ILUhCPwMZGAEkRoUzvXlx7uHt RKTkSDHSYVJrsTUefBMUndg/7Upey9rEURk1Wa15HcGB9fNG7w5ddbAJ1kg9+qwH HMBSD8DdVgcyM1W2/Ja6xXvAGpITareM32nuvncQxa1aU3m5y4kvDujvyCpx8kr+ 7nUdwpfOxQlp7wn4MVpzraPDvEqg5GP7 -----END CERTIFICATE-----Generated at Tue Jul 1 19:55:27 2025 by rpki-client