$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/e5b8e88d-d1c8-3192-8f83-30f1061b40d8.roa File: e5b8e88d-d1c8-3192-8f83-30f1061b40d8.roa (raw, json) Hash identifier: Zeyj4Ywq32FnlKLgAG8tYonAY32RUIASDFB4CM7Sziw= Subject key identifier: 63:00:18:5C:9D:84:A7:8A:EA:59:49:CD:BB:C0:F2:62:FA:C7:6D:C7 Certificate issuer: /CN=47bc9f14-b382-49d7-83c7-57ffd2164eea Certificate serial: 010D0C9F4328584A4F05CDE060E4DBF3FE8B1710 Authority key identifier: CB:93:C8:F7:73:55:9C:E8:AE:6B:79:E3:8E:7E:B5:DA:2A:8C:B3:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/e5b8e88d-d1c8-3192-8f83-30f1061b40d8.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 21681 IP address blocks: 2604:cf40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/47bc9f14-b382-49d7-83c7-57ffd2164eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/47bc9f14-b382-49d7-83c7-57ffd2164eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:cd:e0:60:e4:db:f3:fe:8b:17:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47bc9f14-b382-49d7-83c7-57ffd2164eea Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=016f5007-1970-4bea-ad06-787d99a005c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:1b:a6:3c:19:dc:8e:32:dd:81:78:a1:31: 29:5b:b2:6a:ae:8f:19:a1:31:03:c6:d6:28:44:42: 6b:36:51:ae:cc:ad:07:68:08:54:52:05:15:e6:d2: 49:b0:c6:1d:09:33:e4:5d:a1:7a:7f:96:a2:5e:51: fd:cf:ec:29:9d:da:59:30:1f:7d:67:ef:85:b1:d2: 23:c3:1c:30:ef:98:0c:fd:82:b8:8e:48:5d:48:57: 04:9f:4f:6d:48:2d:12:de:a1:14:d2:80:65:52:3f: 19:f9:de:98:e5:66:93:66:e0:f6:71:6f:2c:84:3b: 62:37:30:0f:84:73:a2:bd:2d:95:65:4d:26:c3:69: fd:fe:54:05:79:53:d8:6c:a3:7c:79:24:f8:9f:da: f6:d1:c5:e7:9e:11:99:df:f9:6c:32:73:a7:23:b0: 66:63:99:c8:1b:c9:fe:6f:29:f5:7b:99:1b:66:39: 01:6f:86:79:94:04:62:dd:55:07:6e:db:59:78:29: 60:2b:26:9b:c5:60:dd:58:f9:04:87:c9:28:98:f1: 8e:b7:da:ff:25:4c:88:d8:1a:27:4a:fb:37:b9:f9: d4:86:32:16:dc:34:3a:8b:ee:0e:c0:9c:ed:d0:cf: 33:6d:ff:a2:a1:5c:79:90:8b:87:f8:5b:2a:3e:08: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:00:18:5C:9D:84:A7:8A:EA:59:49:CD:BB:C0:F2:62:FA:C7:6D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/e5b8e88d-d1c8-3192-8f83-30f1061b40d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/47bc9f14-b382-49d7-83c7-57ffd2164eea.crl X509v3 Authority Key Identifier: keyid:CB:93:C8:F7:73:55:9C:E8:AE:6B:79:E3:8E:7E:B5:DA:2A:8C:B3:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer sbgp-ipAddrBlock: critical IPv6: 2604:cf40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:34:5f:61:87:0a:b0:2b:d1:eb:bb:fa:87:b0:fb:b3:7c:ad: 9f:a9:dd:eb:80:aa:85:83:9a:7d:5e:59:ea:fe:d3:fe:26:f7: 90:8d:7b:14:d9:5e:35:3e:d1:4c:65:8b:58:a9:55:de:97:8c: 43:fb:a5:ba:27:28:6f:7a:48:89:b7:b8:4f:cf:eb:dd:96:92: cc:00:ff:bf:54:0b:18:4d:ab:ce:f3:c7:f7:2b:c8:3b:37:a9: 1a:56:c3:e7:17:44:ba:77:28:2e:ed:a9:eb:99:3d:00:e1:67: 1e:ce:02:16:cf:e2:d2:d4:3f:a2:42:ee:7e:78:a3:26:7f:0d: a0:d3:c0:5b:76:10:f1:13:ac:01:f0:2d:39:00:bf:77:a0:3e: 83:ad:77:93:ee:fd:8a:ca:b5:08:0a:a8:e1:5d:d8:ae:72:9e: 28:83:e7:ed:b2:0e:fb:c8:71:b8:4a:ff:b8:03:43:95:6c:ef: d1:1f:f3:4e:0e:c8:0d:37:bf:5c:01:47:8c:b9:0f:64:5e:6c: b8:86:4d:ae:4a:09:61:82:87:dc:7b:ba:4f:75:bf:00:a1:bc: 5f:d3:37:8c:10:2b:16:0c:c0:72:85:64:8a:2e:29:d3:89:b8: 6f:39:88:c7:42:c4:cf:8a:7d:f2:ff:94:1f:b1:3a:2b:2b:e5: c2:58:bf:25 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpPBc3gYOTb8/6LFxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdiYzlmMTQtYjM4Mi00OWQ3LTgzYzctNTdmZmQyMTY0 ZWVhMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk MDE2ZjUwMDctMTk3MC00YmVhLWFkMDYtNzg3ZDk5YTAwNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXYbpjwZ3I4y3YF4oTEpW7Jqro8ZoTEDxtYo REJrNlGuzK0HaAhUUgUV5tJJsMYdCTPkXaF6f5aiXlH9z+wpndpZMB99Z++FsdIj wxww75gM/YK4jkhdSFcEn09tSC0S3qEU0oBlUj8Z+d6Y5WaTZuD2cW8shDtiNzAP hHOivS2VZU0mw2n9/lQFeVPYbKN8eST4n9r20cXnnhGZ3/lsMnOnI7BmY5nIG8n+ byn1e5kbZjkBb4Z5lARi3VUHbttZeClgKyabxWDdWPkEh8komPGOt9r/JUyI2Bon Svs3ufnUhjIW3DQ6i+4OwJzt0M8zbf+ioVx5kIuH+FsqPgjx1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGMAGFydhKeK6llJzbvA8mL6x23HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80N2Jj OWYxNC1iMzgyLTQ5ZDctODNjNy01N2ZmZDIxNjRlZWEvZTViOGU4OGQtZDFjOC0z MTkyLThmODMtMzBmMTA2MWI0MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDdiYzlmMTQtYjM4Mi00OWQ3LTgz YzctNTdmZmQyMTY0ZWVhLzQ3YmM5ZjE0LWIzODItNDlkNy04M2M3LTU3ZmZkMjE2 NGVlYS5jcmwwHwYDVR0jBBgwFoAUy5PI93NVnOiua3njjn612iqMszQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80N2JjOWYxNC1iMzgyLTQ5ZDctODNjNy01N2Zm ZDIxNjRlZWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTPQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABNF9hhwqwK9Hru/qHsPuzfK2fqd3rgKqFg5p9Xlnq/tP+JveQjXsU 2V41PtFMZYtYqVXel4xD+6W6JyhvekiJt7hPz+vdlpLMAP+/VAsYTavO88f3K8g7 N6kaVsPnF0S6dygu7anrmT0A4WcezgIWz+LS1D+iQu5+eKMmfw2g08BbdhDxE6wB 8C05AL93oD6DrXeT7v2KyrUICqjhXdiucp4og+ftsg77yHG4Sv+4A0OVbO/RH/NO DsgNN79cAUeMuQ9kXmy4hk2uSglhgofce7pPdb8Aobxf0zeMECsWDMByhWSKLinT ibhvOYjHQsTPin3y/5QfsTorK+XCWL8l -----END CERTIFICATE-----Generated at Mon Jun 30 13:43:19 2025 by rpki-client