$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/1defe652-8137-3aca-948a-42e69cc5dfc9.roa File: 1defe652-8137-3aca-948a-42e69cc5dfc9.roa (raw, json) Hash identifier: MJJyyVKdtvAXikHECHayiT6TpEz6jAccL1XdxZGCfrE= Subject key identifier: 0E:8F:D8:8F:B6:EA:D8:16:04:EF:96:00:C5:66:96:3A:D4:70:01:20 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584A4C3B0F7325D614AEFD9F5C40 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/1defe652-8137-3aca-948a-42e69cc5dfc9.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 6453 IP address blocks: 2001:5a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:0f:73:25:d6:14:ae:fd:9f:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=8536bc92-4c93-4759-89cd-b21219fad1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:08:da:9b:d6:c1:7f:02:06:74:6f:c5:b2: 6c:52:14:d7:3d:f7:72:46:79:ff:29:66:b9:12:38: 04:33:f9:31:c0:93:df:98:22:dd:a0:30:16:16:e7: 2d:9e:78:14:d9:30:ef:88:96:c6:00:7b:e1:b5:33: 71:b1:10:43:65:32:bb:63:e1:73:8f:5a:a9:49:08: bc:97:4c:42:24:46:04:7a:14:2a:83:37:d1:43:a1: b1:5d:97:c4:1f:c9:de:3a:ff:03:42:79:ec:46:6f: 70:b1:68:a3:cb:08:ba:01:30:32:76:7d:29:56:f4: 53:2b:44:74:69:d7:e0:a5:d0:24:cc:37:b1:67:32: c0:2f:75:0e:eb:2a:f3:53:9f:a9:25:dd:95:d2:30: f1:73:d5:2e:a4:73:72:f1:d9:74:f6:f1:ad:7a:41: 5a:86:2d:8b:c1:76:63:46:44:b8:61:c3:ec:41:03: 93:61:0c:0d:61:9d:7d:fd:64:b6:70:ab:3e:49:9c: 4b:7d:2a:76:7c:77:92:66:72:3e:68:8c:2d:d9:0f: 83:b3:e1:fa:54:47:e3:7c:0c:61:3d:8e:a4:ff:4d: 3c:6b:9b:65:2a:05:29:f5:0a:79:44:5d:14:3c:29: 1a:cf:4c:38:9c:55:f1:35:23:7f:64:ba:b7:62:7f: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8F:D8:8F:B6:EA:D8:16:04:EF:96:00:C5:66:96:3A:D4:70:01:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/1defe652-8137-3aca-948a-42e69cc5dfc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv6: 2001:5a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:de:92:88:96:09:0c:73:69:69:47:cf:53:fe:dd:89:57:3b: e9:35:a8:5e:3e:d2:dc:d9:b9:d1:62:d8:94:d5:69:73:77:ad: 8a:b1:42:10:af:27:fe:4a:20:c4:3e:8f:e0:38:08:ae:55:40: 2b:48:a4:f4:e4:a6:c0:56:1f:14:ef:82:d4:0b:61:a0:11:15: 4c:17:ea:a7:16:30:41:c3:ba:f2:3e:b8:c4:3c:73:dd:5a:70: 29:18:b9:a0:34:05:07:da:09:43:5e:79:73:10:12:01:ff:fe: 77:8f:a8:58:10:1e:c8:98:b4:bf:48:3f:27:c5:0a:b0:09:6d: 60:6b:b0:60:c2:30:3a:c8:78:14:90:88:2d:1d:4c:ab:d9:24: 00:3c:ca:03:a6:90:dc:87:bf:a7:fa:78:16:ee:1b:04:cf:66: a1:6b:82:13:97:75:c5:b1:59:0e:11:f9:e0:a1:67:e4:bb:90: 20:7f:da:0f:3b:ed:ab:fb:f5:11:ba:4d:f2:bf:d0:cc:f2:8d: 7a:85:12:d0:01:f4:b8:4c:a1:23:62:5b:92:65:59:d5:47:c6: ac:2b:ae:62:b5:e8:2c:d5:e7:f5:56:a7:36:03:f3:a0:d7:38: 7b:bb:cf:9a:be:94:64:b8:80:a0:71:79:d2:ad:c1:d6:41:95: 41:1b:ba:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpMOw9zJdYUrv2fXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ODUzNmJjOTItNGM5My00NzU5LTg5Y2QtYjIxMjE5ZmFkMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1QI2pvWwX8CBnRvxbJsUhTXPfdyRnn/KWa5 EjgEM/kxwJPfmCLdoDAWFuctnngU2TDviJbGAHvhtTNxsRBDZTK7Y+Fzj1qpSQi8 l0xCJEYEehQqgzfRQ6GxXZfEH8neOv8DQnnsRm9wsWijywi6ATAydn0pVvRTK0R0 adfgpdAkzDexZzLAL3UO6yrzU5+pJd2V0jDxc9UupHNy8dl09vGtekFahi2LwXZj RkS4YcPsQQOTYQwNYZ19/WS2cKs+SZxLfSp2fHeSZnI+aIwt2Q+Ds+H6VEfjfAxh PY6k/008a5tlKgUp9Qp5RF0UPCkaz0w4nFXxNSN/ZLq3Yn9qLwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA6P2I+26tgWBO+WAMVmljrUcAEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMWRlZmU2NTItODEzNy0z YWNhLTk0OGEtNDJlNjljYzVkZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEFoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBa3pKIlgkMc2lpR89T/t2JVzvpNahePtLc2bnRYtiU1Wlzd62KsUIQ ryf+SiDEPo/gOAiuVUArSKT05KbAVh8U74LUC2GgERVMF+qnFjBBw7ryPrjEPHPd WnApGLmgNAUH2glDXnlzEBIB//53j6hYEB7ImLS/SD8nxQqwCW1ga7BgwjA6yHgU kIgtHUyr2SQAPMoDppDch7+n+ngW7hsEz2aha4ITl3XFsVkOEfngoWfku5Agf9oP O+2r+/URuk3yv9DM8o16hRLQAfS4TKEjYluSZVnVR8asK65itegs1ef1Vqc2A/Og 1zh7u8+avpRkuICgcXnSrcHWQZVBG7qK -----END CERTIFICATE-----Generated at Tue Jul 1 14:53:43 2025 by rpki-client