$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa File: 998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa (raw, json) Hash identifier: LYD9zsXg7QpvB+1yAuKpOMwSrpCpvUKfIStJ763ip7Q= Subject key identifier: 1A:70:93:DA:A1:6C:3F:35:AB:8A:BE:6C:7D:3E:9F:A6:0F:0B:1F:13 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285849D594F090DC2E61A8196FFE30 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 60781 IP address blocks: 2607:f5b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f0:90:dc:2e:61:a8:19:6f:fe:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=d8a778bc-3476-497b-a57f-b41b38c5b253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5e:4f:f2:46:b9:7e:ed:e0:2d:eb:0f:db:e1: 63:71:29:d2:0c:c4:f2:42:49:95:d6:45:af:a3:37: 4b:72:89:a8:75:33:64:29:77:e3:00:a7:2e:e2:59: 7c:f5:bf:05:52:f7:67:81:36:c5:2c:6f:27:43:a9: e2:f1:70:2a:66:6d:68:43:df:ab:44:84:31:08:6f: 05:b4:47:67:df:db:25:da:77:58:cc:2a:e3:ae:f9: 27:5a:37:15:cd:59:d8:24:1c:90:0e:24:b6:53:b8: 9c:65:9b:a8:ec:83:80:f8:be:f2:18:95:26:53:4f: 05:21:ab:a8:49:ef:76:a9:04:ac:a6:c0:13:81:9e: e1:c3:9a:c0:e6:e6:99:de:96:89:8b:02:26:53:7d: cf:39:00:30:b2:e0:06:e8:76:e3:ab:d6:85:5b:cb: 94:2b:d3:30:b8:ec:c7:94:b4:ee:dd:69:bc:54:2c: a7:1c:1c:ae:00:c3:00:e1:1d:3c:8b:80:8d:45:e6: 3a:19:db:04:52:63:82:14:f3:1d:9d:94:16:ac:f8: f6:7e:31:82:f6:dd:db:ff:e7:c6:d3:ce:27:b8:6f: 77:ff:17:56:4a:81:70:43:2e:cc:e2:4f:95:00:a0: ee:9c:d7:94:3e:c5:7c:e9:5a:48:f8:a3:5b:32:43: 5c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:70:93:DA:A1:6C:3F:35:AB:8A:BE:6C:7D:3E:9F:A6:0F:0B:1F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:4d:25:97:e5:29:a4:41:35:55:af:13:e3:14:0a:93:9c:33: 4e:c6:d4:f4:fa:fc:cc:ff:4b:a3:0f:ce:58:97:5d:21:c5:04: 52:cd:ae:2e:6b:8b:4d:8d:86:c8:3e:d6:0f:27:9b:a6:a2:5a: 6d:7d:60:cb:be:4b:58:73:c6:b4:af:6a:0c:5c:4c:3b:f8:51: 24:0a:35:40:6b:41:e4:10:13:20:07:86:21:35:19:08:f6:1f: a8:ed:74:47:8e:85:72:6a:7a:ce:a7:43:24:08:8a:c9:b5:28: 4a:f5:ce:bc:92:8e:5f:9d:8b:2c:a6:a6:e9:4f:49:d9:8c:28: b9:d2:83:6d:36:21:92:a8:8c:c8:10:4b:b1:b4:f5:2e:c8:7e: 21:a5:51:53:bf:e5:86:7f:00:65:a7:02:ee:a1:46:87:72:0c: 6c:8e:c0:c1:41:51:0d:50:9f:c7:c2:39:32:11:e1:37:44:d1: a3:f5:6b:e9:67:65:a6:42:d2:ff:ae:a9:d0:20:37:ab:30:58: 72:1b:e0:2e:0d:a6:fe:c6:f2:c7:a8:e7:cd:0a:c1:2c:77:0a: 9f:cb:7b:d5:56:8a:fb:c3:b6:9f:ee:38:08:af:46:7d:90:df: ef:31:91:18:6b:f6:f3:6e:1f:cb:78:7f:f5:69:64:dd:d0:8a: 5d:12:36:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnVlPCQ3C5hqBlv/jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ZDhhNzc4YmMtMzQ3Ni00OTdiLWE1N2YtYjQxYjM4YzViMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh15P8ka5fu3gLesP2+FjcSnSDMTyQkmV1kWv ozdLcomodTNkKXfjAKcu4ll89b8FUvdngTbFLG8nQ6ni8XAqZm1oQ9+rRIQxCG8F tEdn39sl2ndYzCrjrvknWjcVzVnYJByQDiS2U7icZZuo7IOA+L7yGJUmU08FIauo Se92qQSspsATgZ7hw5rA5uaZ3paJiwImU33POQAwsuAG6Hbjq9aFW8uUK9MwuOzH lLTu3Wm8VCynHByuAMMA4R08i4CNReY6GdsEUmOCFPMdnZQWrPj2fjGC9t3b/+fG 084nuG93/xdWSoFwQy7M4k+VAKDunNeUPsV86VpI+KNbMkNc4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBpwk9qhbD81q4q+bH0+n6YPCx8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTk4ZGZjNjctMWU3NS0z YzQzLWEwZmMtYzUxMmUwZjM0NzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAItNJZflKaRBNVWvE+MUCpOcM07G1PT6/Mz/S6MPzliXXSHFBFLN ri5ri02Nhsg+1g8nm6aiWm19YMu+S1hzxrSvagxcTDv4USQKNUBrQeQQEyAHhiE1 GQj2H6jtdEeOhXJqes6nQyQIism1KEr1zrySjl+diyympulPSdmMKLnSg202IZKo jMgQS7G09S7IfiGlUVO/5YZ/AGWnAu6hRodyDGyOwMFBUQ1Qn8fCOTIR4TdE0aP1 a+lnZaZC0v+uqdAgN6swWHIb4C4Npv7G8seo580KwSx3Cp/Le9VWivvDtp/uOAiv Rn2Q3+8xkRhr9vNuH8t4f/VpZN3Qil0SNlU= -----END CERTIFICATE-----Generated at Sun Jun 29 07:44:37 2025 by rpki-client