$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22cb438d-638d-4c26-a4b7-2541b0d8a6b5/188e79f5-aa2e-3ba6-ae40-a67b248d750c.roa File: 188e79f5-aa2e-3ba6-ae40-a67b248d750c.roa (raw, json) Hash identifier: QNIp8BAkpQ4tRS3/saFAKC1YjVybecFr98II24QoVvY= Subject key identifier: 12:01:FB:AC:55:24:3D:93:34:55:F1:A6:1F:E6:D0:CC:35:FE:76:FD Certificate issuer: /CN=22cb438d-638d-4c26-a4b7-2541b0d8a6b5 Certificate serial: 010D0C9F4328584A3E45A21B65F0E369C3F253C0 Authority key identifier: A8:75:83:C4:28:21:70:64:38:E4:A2:D3:CF:EF:88:5C:EA:93:99:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22cb438d-638d-4c26-a4b7-2541b0d8a6b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22cb438d-638d-4c26-a4b7-2541b0d8a6b5/188e79f5-aa2e-3ba6-ae40-a67b248d750c.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 399143 IP address blocks: 2606:8240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22cb438d-638d-4c26-a4b7-2541b0d8a6b5/22cb438d-638d-4c26-a4b7-2541b0d8a6b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22cb438d-638d-4c26-a4b7-2541b0d8a6b5/22cb438d-638d-4c26-a4b7-2541b0d8a6b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22cb438d-638d-4c26-a4b7-2541b0d8a6b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:a2:1b:65:f0:e3:69:c3:f2:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22cb438d-638d-4c26-a4b7-2541b0d8a6b5 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=3d04c066-c583-4a8b-bbe1-c0051d134fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:00:77:dc:a9:8f:31:33:c0:be:6d:39:79: 26:1c:d5:1a:b4:f8:02:bc:85:da:0a:b8:06:b5:c9: 74:d5:3b:7e:4c:a9:e5:d3:cc:8a:e6:c8:34:cd:b0: 92:f1:aa:0c:46:1a:8f:52:a1:87:ff:6e:ba:8d:77: e8:99:a0:25:60:b1:c6:89:16:5d:27:d2:c4:4b:1d: ad:c5:c7:ae:0d:f5:a4:31:4a:9f:69:e4:be:64:70: 8a:10:45:7b:f2:ce:f6:39:84:42:9d:0a:9d:aa:b4: 02:08:38:4d:24:9e:1b:2b:1a:0d:36:ed:6a:c3:1c: ba:c6:a7:8f:8f:4a:a6:97:0a:a9:2f:ee:31:3c:9e: 44:92:04:8c:8a:19:eb:97:c8:db:60:dd:ef:21:a8: 7d:8b:7c:9c:03:78:9a:ea:f4:f2:a9:1c:ed:7a:82: e1:49:ae:70:a7:e3:95:4f:99:01:f5:b3:c1:2b:41: f5:8d:9f:27:21:6f:21:60:00:f4:ab:2b:05:08:cc: 1d:bf:74:72:a0:99:b3:81:ce:30:c9:ff:6e:a1:b3: 0b:5a:26:3c:7d:89:b0:cb:62:02:0b:90:2d:61:8b: a1:6f:89:c2:fb:27:3a:da:42:a9:0a:10:a3:be:b9: a5:ee:e8:78:13:2b:a1:31:e8:6a:df:8a:8b:7e:83: 89:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:01:FB:AC:55:24:3D:93:34:55:F1:A6:1F:E6:D0:CC:35:FE:76:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22cb438d-638d-4c26-a4b7-2541b0d8a6b5/188e79f5-aa2e-3ba6-ae40-a67b248d750c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22cb438d-638d-4c26-a4b7-2541b0d8a6b5/22cb438d-638d-4c26-a4b7-2541b0d8a6b5.crl X509v3 Authority Key Identifier: keyid:A8:75:83:C4:28:21:70:64:38:E4:A2:D3:CF:EF:88:5C:EA:93:99:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22cb438d-638d-4c26-a4b7-2541b0d8a6b5.cer sbgp-ipAddrBlock: critical IPv6: 2606:8240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9f:46:81:a5:a1:91:30:e9:94:5f:65:c4:fd:e1:f6:1f:d4: 0c:fe:67:0c:2e:81:60:23:c5:ba:02:da:c5:ab:4d:1d:3d:ee: f4:30:ec:28:a8:89:e7:01:db:66:39:d7:3f:9a:ad:97:82:dc: 98:1b:db:f2:bb:27:44:ec:2d:eb:13:8c:5e:db:c0:b6:af:f0: 4c:cf:ff:39:2f:dc:ec:32:ca:19:63:ee:ad:4a:e5:5c:9e:6c: 86:cd:7b:94:f1:a2:1b:96:08:7d:7d:e6:b1:33:d6:f8:5f:41: 51:25:2f:20:d6:17:0c:a0:29:49:14:07:14:e0:0e:00:68:91: a4:f0:ec:85:62:77:7b:ce:10:89:4c:ab:28:2a:b5:d9:d1:4b: c6:60:ce:d4:60:86:ec:4a:cd:76:d1:d0:a3:5c:e6:d8:e7:cd: 29:ea:52:4f:61:75:d2:2b:74:d6:ac:d0:8d:ea:64:ee:ed:68: d7:62:cf:2a:10:ba:15:b2:24:da:ac:28:c6:77:e2:5d:21:e6: fc:5a:97:32:ef:3c:24:a6:ea:af:ef:85:31:1d:e9:68:a6:8e: 27:0d:0f:4b:00:30:01:26:82:14:fc:b9:d6:f9:96:20:18:03: 81:6c:8e:80:ef:7a:71:17:a4:db:64:ea:11:a6:22:27:1c:f5: f9:a4:ef:76 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEo+RaIbZfDjacPyU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJjYjQzOGQtNjM4ZC00YzI2LWE0YjctMjU0MWIwZDhh NmI1MB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk M2QwNGMwNjYtYzU4My00YThiLWJiZTEtYzAwNTFkMTM0ZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6cAd9ypjzEzwL5tOXkmHNUatPgCvIXaCrgG tcl01Tt+TKnl08yK5sg0zbCS8aoMRhqPUqGH/266jXfomaAlYLHGiRZdJ9LESx2t xceuDfWkMUqfaeS+ZHCKEEV78s72OYRCnQqdqrQCCDhNJJ4bKxoNNu1qwxy6xqeP j0qmlwqpL+4xPJ5EkgSMihnrl8jbYN3vIah9i3ycA3ia6vTyqRzteoLhSa5wp+OV T5kB9bPBK0H1jZ8nIW8hYAD0qysFCMwdv3RyoJmzgc4wyf9uobMLWiY8fYmwy2IC C5AtYYuhb4nC+yc62kKpChCjvrml7uh4EyuhMehq34qLfoOJBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBIB+6xVJD2TNFXxph/m0Mw1/nb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmNi NDM4ZC02MzhkLTRjMjYtYTRiNy0yNTQxYjBkOGE2YjUvMTg4ZTc5ZjUtYWEyZS0z YmE2LWFlNDAtYTY3YjI0OGQ3NTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJjYjQzOGQtNjM4ZC00YzI2LWE0 YjctMjU0MWIwZDhhNmI1LzIyY2I0MzhkLTYzOGQtNGMyNi1hNGI3LTI1NDFiMGQ4 YTZiNS5jcmwwHwYDVR0jBBgwFoAUqHWDxCghcGQ45KLTz++IXOqTmcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmNiNDM4ZC02MzhkLTRjMjYtYTRiNy0yNTQx YjBkOGE2YjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaCQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkn0aBpaGRMOmUX2XE/eH2H9QM/mcMLoFgI8W6AtrFq00dPe70MOwo qInnAdtmOdc/mq2XgtyYG9vyuydE7C3rE4xe28C2r/BMz/85L9zsMsoZY+6tSuVc nmyGzXuU8aIblgh9feaxM9b4X0FRJS8g1hcMoClJFAcU4A4AaJGk8OyFYnd7zhCJ TKsoKrXZ0UvGYM7UYIbsSs120dCjXObY580p6lJPYXXSK3TWrNCN6mTu7WjXYs8q ELoVsiTarCjGd+JdIeb8Wpcy7zwkpuqv74UxHelopo4nDQ9LADABJoIU/LnW+ZYg GAOBbI6A73pxF6TbZOoRpiInHPX5pO92 -----END CERTIFICATE-----Generated at Mon Jun 30 01:04:59 2025 by rpki-client