$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa File: 5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa (raw, json) Hash identifier: 4WvM/1+vGNFkfxf/dc0/R0bXpBbRS+FD+R0L5SfIaTk= Subject key identifier: EE:E2:96:56:62:A7:C2:12:F0:7F:9B:36:3B:A5:D8:DB:C7:8F:84:4C Certificate issuer: /CN=ac870f3e-b014-4387-bb59-63f4192b5665 Certificate serial: 010D0C9F43285849E4EFB9978E4FC177BF310E80 Authority key identifier: AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 395400 IP address blocks: 2604:49c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:b9:97:8e:4f:c1:77:bf:31:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac870f3e-b014-4387-bb59-63f4192b5665 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=4ba840cd-49a7-47f4-8d3f-397b7cce5671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:6c:fa:6b:e3:48:e3:a5:f9:2a:ab:a8:96: 2f:45:08:22:e5:31:03:7f:5f:36:69:2a:40:b1:d5: 38:0c:08:5e:32:3d:38:54:21:ec:43:33:a5:10:ad: 57:38:da:9c:44:36:3a:f4:ca:6a:39:18:ba:26:d9: 7d:c5:ac:58:3b:0e:d7:8a:72:f8:7b:f1:b0:0f:dc: a2:be:b4:7c:7e:a4:8a:6d:e8:92:32:3c:7b:7d:89: 54:4f:d1:2f:6f:79:8e:ba:12:1b:24:fa:72:f8:83: 54:37:50:1e:05:d5:fc:7d:4a:2b:e9:39:25:a9:20: 27:37:bd:93:47:e7:59:51:78:95:5e:58:21:f8:d6: 57:2c:63:b8:15:d7:2c:79:ad:23:56:0e:e7:97:d4: 5f:b9:97:62:d9:85:fc:c4:f2:3c:38:b3:55:c3:f2: d1:3d:17:bc:9c:82:f4:ec:90:c4:dc:15:4e:30:72: d1:c2:a8:c5:e1:7a:cb:5d:0d:f0:53:f9:20:36:45: 54:2e:86:74:2f:10:5b:de:0e:0c:68:01:6a:6a:45: 8d:8e:10:af:3e:a7:3a:29:e5:6e:1a:89:00:2b:83: 8a:ce:2d:fd:2d:1d:56:64:14:b8:dd:40:f3:c2:26: d8:16:3b:26:9f:2d:39:b2:06:e2:54:e2:9c:c2:ab: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E2:96:56:62:A7:C2:12:F0:7F:9B:36:3B:A5:D8:DB:C7:8F:84:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl X509v3 Authority Key Identifier: keyid:AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer sbgp-ipAddrBlock: critical IPv6: 2604:49c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b0:20:4d:73:0d:e4:75:50:a3:9a:05:05:92:e2:e3:93:13: e9:71:97:f0:54:2f:fd:17:b6:c5:6c:dd:78:91:7a:d3:28:c2: 3c:f0:91:9b:90:26:59:55:d2:94:7d:e4:40:49:89:fd:d9:dd: c6:c2:a9:09:26:2a:d7:80:cc:44:f0:45:4b:c3:80:44:34:82: 3e:94:f7:8b:2e:4b:ee:ad:7f:08:5e:3f:e7:ca:ac:47:99:16: 78:87:da:05:36:e2:28:76:c8:fe:63:22:fe:56:4f:98:ae:88: 55:3e:0d:b0:9a:e1:30:41:9c:95:6d:57:14:c1:b3:32:6f:98: d1:2c:9e:da:da:2f:48:a3:4a:2e:cc:bd:10:d7:9d:35:8f:bf: bb:1c:a2:e9:0f:22:81:75:e2:bf:fa:ba:78:aa:87:c9:25:35: ba:5c:88:e4:57:7b:e3:e1:ce:25:60:78:ea:96:c9:2c:d3:58: 71:e2:24:e0:46:7f:ae:44:ce:ba:ef:9a:03:ac:b6:5a:3f:b9: 3a:96:ad:c6:5e:68:38:bb:ce:c1:48:e8:47:07:9f:f4:bc:51: e1:e1:6d:30:5a:c2:f9:47:df:14:85:8e:86:be:57:50:69:fb: 1b:7d:11:f6:72:ea:4f:3f:fb:c7:df:3c:32:13:a9:12:0f:97: 94:b3:51:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnk77mXjk/Bd78xDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM4NzBmM2UtYjAxNC00Mzg3LWJiNTktNjNmNDE5MmI1 NjY1MB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NGJhODQwY2QtNDlhNy00N2Y0LThkM2YtMzk3YjdjY2U1NjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHxs+mvjSOOl+SqrqJYvRQgi5TEDf182aSpA sdU4DAheMj04VCHsQzOlEK1XONqcRDY69MpqORi6Jtl9xaxYOw7XinL4e/GwD9yi vrR8fqSKbeiSMjx7fYlUT9Evb3mOuhIbJPpy+INUN1AeBdX8fUor6TklqSAnN72T R+dZUXiVXlgh+NZXLGO4Fdcsea0jVg7nl9RfuZdi2YX8xPI8OLNVw/LRPRe8nIL0 7JDE3BVOMHLRwqjF4XrLXQ3wU/kgNkVULoZ0LxBb3g4MaAFqakWNjhCvPqc6KeVu GokAK4OKzi39LR1WZBS43UDzwibYFjsmny05sgbiVOKcwqvZ0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO7illZip8IS8H+bNjul2NvHj4RMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg3 MGYzZS1iMDE0LTQzODctYmI1OS02M2Y0MTkyYjU2NjUvNWZlMjM3YjItZjVhNS0z ZGZkLWIwOWEtNTg5YmRhNzZiYWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM4NzBmM2UtYjAxNC00Mzg3LWJi NTktNjNmNDE5MmI1NjY1L2FjODcwZjNlLWIwMTQtNDM4Ny1iYjU5LTYzZjQxOTJi NTY2NS5jcmwwHwYDVR0jBBgwFoAUr+waQxcWVf3AqPhLqFxA+OUeicYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg3MGYzZS1iMDE0LTQzODctYmI1OS02M2Y0 MTkyYjU2NjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRJwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABsCBNcw3kdVCjmgUFkuLjkxPpcZfwVC/9F7bFbN14kXrTKMI88JGb kCZZVdKUfeRASYn92d3GwqkJJirXgMxE8EVLw4BENII+lPeLLkvurX8IXj/nyqxH mRZ4h9oFNuIodsj+YyL+Vk+YrohVPg2wmuEwQZyVbVcUwbMyb5jRLJ7a2i9Io0ou zL0Q1501j7+7HKLpDyKBdeK/+rp4qofJJTW6XIjkV3vj4c4lYHjqlsks01hx4iTg Rn+uRM6675oDrLZaP7k6lq3GXmg4u87BSOhHB5/0vFHh4W0wWsL5R98UhY6GvldQ afsbfRH2cupPP/vH3zwyE6kSD5eUs1GG -----END CERTIFICATE-----Generated at Wed Jul 2 00:29:34 2025 by rpki-client