$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/354f8722-5971-39a2-98d9-1365e96b2ead.roa File: 354f8722-5971-39a2-98d9-1365e96b2ead.roa (raw, json) Hash identifier: B8nYdxAisNGyN9PZC2MxB7KFUrVYkBludIzrwtGV/Ls= Subject key identifier: 93:C0:D0:52:8B:4D:79:2F:68:D8:50:F3:78:4A:0B:32:EB:3B:9D:7F Certificate issuer: /CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531 Certificate serial: 010D0C9F4328584A411050F9D7375911208F4100 Authority key identifier: 84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/354f8722-5971-39a2-98d9-1365e96b2ead.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 14618 IP address blocks: 2602:fd12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:50:f9:d7:37:59:11:20:8f:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=a1ebd00a-1586-4512-ab3a-1873bcdb3c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:2f:e6:5c:c9:a6:73:58:94:d5:38:74:f7: bc:f3:d8:47:f1:02:cb:d0:5a:05:ff:97:cf:f1:44: 03:3c:3e:1d:6f:d9:a4:82:ed:60:72:49:8e:37:e0: 79:65:39:7e:c5:9f:26:ec:c4:f9:cc:97:d3:93:22: cf:49:d8:23:f5:f7:4a:bc:e8:af:a6:e0:08:c9:f9: b0:26:56:5d:32:40:1a:c1:52:f0:81:67:be:b7:bd: 2e:7b:6e:57:51:c3:88:b1:d7:9a:8a:b8:14:67:b8: 59:62:9e:40:4b:91:0a:f6:82:59:48:34:95:5e:34: cf:f1:19:a8:ff:f2:f1:50:3f:91:b1:49:a4:8f:2c: 65:64:76:ef:b1:29:81:52:e9:49:01:0f:a7:b9:ce: cb:3e:2c:ed:53:a1:21:da:b0:39:0b:c7:5b:6f:fe: 29:56:41:71:60:58:25:43:bf:62:ab:8c:79:aa:88: 21:8b:0b:d1:5a:4f:e1:ac:81:31:ff:03:65:cd:b2: d9:60:26:43:70:71:94:e5:e5:ff:db:37:cc:6f:50: c9:81:c6:c0:e5:33:93:5b:bf:ed:7e:fd:d1:dd:5c: 65:d6:e3:4c:18:74:a1:ea:53:09:7e:88:2d:78:12: 39:73:ee:a2:78:63:36:d5:23:94:8b:b9:fd:d6:34: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C0:D0:52:8B:4D:79:2F:68:D8:50:F3:78:4A:0B:32:EB:3B:9D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/354f8722-5971-39a2-98d9-1365e96b2ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl X509v3 Authority Key Identifier: keyid:84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8e:04:16:8b:fe:c8:47:16:a2:25:a5:b4:d7:b5:33:16:a1: 59:81:2f:8b:5a:1c:f9:f6:8b:21:14:f1:9f:5e:b3:37:6e:84: 62:07:55:64:99:e0:e9:47:59:51:6f:03:39:2f:18:2e:e5:74: e3:a3:f5:9d:d1:c2:b2:61:33:31:de:d5:eb:f5:69:99:58:a7: d9:27:c6:5a:18:d6:12:89:c3:ef:ad:b7:af:f2:4c:88:39:8c: 4c:8f:e8:9e:25:72:83:8a:05:ec:92:dc:d5:e5:28:51:f6:3c: 62:3a:02:b0:30:47:e2:d7:1c:ca:9e:e7:62:6f:26:c6:90:14: a6:43:56:73:b9:88:9b:4f:cc:62:8d:bd:54:77:cf:85:f5:a7: 99:a4:1c:5a:a3:e9:dc:39:09:47:e3:24:9f:b0:86:04:6f:e8: 96:8e:6f:e0:5a:05:c6:d4:94:a2:5d:95:fc:b9:8b:82:80:23: cd:b8:5f:d3:78:b7:74:1c:14:9a:f1:1d:03:d0:93:71:5b:6c: 9e:e3:f9:99:f0:ac:84:2b:cd:1e:c4:8c:79:8d:2a:c9:e1:91: d2:52:42:30:1b:39:87:dd:00:63:19:9c:ba:10:11:3d:36:0d: 88:c3:a2:70:17:5e:31:74:01:5a:2c:0f:d3:e7:62:6a:fb:41: 97:44:b6:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpBEFD51zdZESCPQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkNDFjZDUtNmJkYS00ZDJiLWFmZjQtYjg5ODkzYWEx NTMxMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk YTFlYmQwMGEtMTU4Ni00NTEyLWFiM2EtMTg3M2JjZGIzYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWAv5lzJpnNYlNU4dPe889hH8QLL0FoF/5fP 8UQDPD4db9mkgu1gckmON+B5ZTl+xZ8m7MT5zJfTkyLPSdgj9fdKvOivpuAIyfmw JlZdMkAawVLwgWe+t70ue25XUcOIsdeairgUZ7hZYp5AS5EK9oJZSDSVXjTP8Rmo //LxUD+RsUmkjyxlZHbvsSmBUulJAQ+nuc7LPiztU6Eh2rA5C8dbb/4pVkFxYFgl Q79iq4x5qoghiwvRWk/hrIEx/wNlzbLZYCZDcHGU5eX/2zfMb1DJgcbA5TOTW7/t fv3R3Vxl1uNMGHSh6lMJfogteBI5c+6ieGM21SOUi7n91jQwLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJPA0FKLTXkvaNhQ83hKCzLrO51/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kOWQ0 MWNkNS02YmRhLTRkMmItYWZmNC1iODk4OTNhYTE1MzEvMzU0Zjg3MjItNTk3MS0z OWEyLTk4ZDktMTM2NWU5NmIyZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDlkNDFjZDUtNmJkYS00ZDJiLWFm ZjQtYjg5ODkzYWExNTMxL2Q5ZDQxY2Q1LTZiZGEtNGQyYi1hZmY0LWI4OTg5M2Fh MTUzMS5jcmwwHwYDVR0jBBgwFoAUhHX9C7HsZbP8HYUEqGw43MTNrUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kOWQ0MWNkNS02YmRhLTRkMmItYWZmNC1iODk4 OTNhYTE1MzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9EgAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEuOBBaL/shHFqIlpbTXtTMWoVmBL4taHPn2iyEU8Z9eszduhGIH VWSZ4OlHWVFvAzkvGC7ldOOj9Z3RwrJhMzHe1ev1aZlYp9knxloY1hKJw++tt6/y TIg5jEyP6J4lcoOKBeyS3NXlKFH2PGI6ArAwR+LXHMqe52JvJsaQFKZDVnO5iJtP zGKNvVR3z4X1p5mkHFqj6dw5CUfjJJ+whgRv6JaOb+BaBcbUlKJdlfy5i4KAI824 X9N4t3QcFJrxHQPQk3FbbJ7j+ZnwrIQrzR7EjHmNKsnhkdJSQjAbOYfdAGMZnLoQ ET02DYjDonAXXjF0AVosD9PnYmr7QZdEtpI= -----END CERTIFICATE-----Generated at Tue Jul 1 22:05:59 2025 by rpki-client