$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/708a0fce-faf3-3bf4-879c-98c847a3d670.roa File: 708a0fce-faf3-3bf4-879c-98c847a3d670.roa (raw, json) Hash identifier: Dd7AZMoGK2fapOZVfN31GPd2sHqQc/jtQHt7LD1CxfE= Subject key identifier: CF:32:60:21:1E:D4:0F:91:81:1A:35:8E:1A:B4:D5:11:C5:4A:29:44 Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584A43DB05E95DCD88BDAD7FCEC0 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/708a0fce-faf3-3bf4-879c-98c847a3d670.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 394625 IP address blocks: 2606:d280:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:05:e9:5d:cd:88:bd:ad:7f:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=8d5e4908-351f-473a-8237-f83ea6f561d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:1c:12:35:42:5d:66:2c:8e:70:21:6f:63: 94:54:ca:f1:6d:4d:4d:69:ca:53:03:04:03:cb:44: f7:e2:35:2e:3a:65:33:e5:1a:c1:bb:0b:99:4b:79: 2d:98:7e:2b:4c:2f:1c:cd:48:a7:20:d5:99:af:88: f0:ed:70:35:f3:6d:43:f7:ec:ea:d5:0a:48:04:8a: 2d:84:ca:27:f1:a1:16:92:2f:fa:2d:b2:f3:c1:56: 1f:de:17:63:f8:3c:55:e1:7a:4a:f6:ff:cb:15:b4: 08:54:e8:f1:6b:38:57:1d:d2:94:ef:fb:df:62:96: c5:01:93:90:b1:13:ec:34:e8:70:43:a1:47:43:7d: b5:1a:d9:76:57:79:6e:8d:7b:c0:54:1f:a9:cc:b4: 78:75:7f:ab:e6:73:e4:43:dd:fb:1a:b1:d0:fa:95: f1:05:5c:68:c0:b7:91:ac:ce:ec:bf:7b:63:a7:70: f7:b4:26:62:0e:7d:12:03:33:89:7b:f4:cd:bd:e4: c5:70:e7:dd:e9:4e:44:f4:4c:07:37:25:3b:4f:b4: 22:20:bd:51:c4:08:9a:59:09:74:ec:4b:a1:a5:88: c6:4e:f6:57:8d:91:a7:44:b5:66:f6:0c:52:19:d6: 1b:9b:c7:2a:ac:22:6c:85:f9:50:a1:10:54:ad:5f: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:32:60:21:1E:D4:0F:91:81:1A:35:8E:1A:B4:D5:11:C5:4A:29:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/708a0fce-faf3-3bf4-879c-98c847a3d670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:d280:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1a:01:9a:da:b2:37:8e:17:75:13:5f:25:0d:19:9c:7b:0a: e6:6e:50:08:3f:ac:79:33:23:07:cc:a8:8c:64:58:aa:9f:7d: e3:9d:31:4c:16:ba:f5:55:e0:94:5f:d8:84:25:f6:fe:14:0f: a4:a7:cf:a6:ac:e4:c2:40:5a:b7:66:fb:43:23:d9:8e:a8:d8: 3f:c8:c6:c9:1b:3b:67:2b:f4:cf:3e:55:6e:fc:de:0b:6d:80: 28:b3:fa:c6:7d:f5:b3:46:55:dd:32:13:43:2e:fd:1e:f2:9f: dc:28:dd:33:4f:2d:60:9f:cd:fa:d5:e5:00:a7:71:9b:89:d3: 35:9d:65:53:2c:ef:5a:42:a7:cd:98:8a:84:6d:2c:db:4f:f1: 97:39:dd:4d:a3:90:5c:0a:8e:46:cd:85:e2:fd:65:f8:ea:7e: 31:41:f0:74:5b:fd:bc:d9:37:92:67:e4:d8:06:45:0c:c5:d1: 28:19:63:c4:35:a7:2b:fe:d7:52:ac:e5:8c:aa:2f:8c:82:ae: 6a:d0:87:51:d1:75:fd:d1:7d:e9:86:ba:d7:c7:71:7e:92:6a: b9:ec:a4:64:f4:39:37:ae:54:73:01:6b:58:7b:c9:b6:4c:30: f2:d9:b1:5c:99:7d:72:f8:49:f4:60:89:1e:06:28:05:41:ab: 3c:4a:e6:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpD2wXpXc2Iva1/zsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk OGQ1ZTQ5MDgtMzUxZi00NzNhLTgyMzctZjgzZWE2ZjU2MWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVMcEjVCXWYsjnAhb2OUVMrxbU1NacpTAwQD y0T34jUuOmUz5RrBuwuZS3ktmH4rTC8czUinINWZr4jw7XA1821D9+zq1QpIBIot hMon8aEWki/6LbLzwVYf3hdj+DxV4XpK9v/LFbQIVOjxazhXHdKU7/vfYpbFAZOQ sRPsNOhwQ6FHQ321Gtl2V3lujXvAVB+pzLR4dX+r5nPkQ937GrHQ+pXxBVxowLeR rM7sv3tjp3D3tCZiDn0SAzOJe/TNveTFcOfd6U5E9EwHNyU7T7QiIL1RxAiaWQl0 7EuhpYjGTvZXjZGnRLVm9gxSGdYbm8cqrCJshflQoRBUrV+yoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM8yYCEe1A+RgRo1jhq01RHFSilEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvNzA4YTBmY2UtZmFmMy0z YmY0LTg3OWMtOThjODQ3YTNkNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbSgAAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA0aAZrasjeOF3UTXyUNGZx7CuZuUAg/rHkzIwfMqIxkWKqffeOd MUwWuvVV4JRf2IQl9v4UD6Snz6as5MJAWrdm+0Mj2Y6o2D/IxskbO2cr9M8+VW78 3gttgCiz+sZ99bNGVd0yE0Mu/R7yn9wo3TNPLWCfzfrV5QCncZuJ0zWdZVMs71pC p82YioRtLNtP8Zc53U2jkFwKjkbNheL9ZfjqfjFB8HRb/bzZN5Jn5NgGRQzF0SgZ Y8Q1pyv+11Ks5YyqL4yCrmrQh1HRdf3RfemGutfHcX6SarnspGT0OTeuVHMBa1h7 ybZMMPLZsVyZfXL4SfRgiR4GKAVBqzxK5lo= -----END CERTIFICATE-----Generated at Mon Jun 30 13:57:06 2025 by rpki-client