$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa File: d5daf9f5-1db5-37fb-be60-626d8a02b645.roa (raw, json) Hash identifier: 7gtmUZrlURXd3ggjbBeSk4GJ6VZO41RJZUE2eriuMAU= Subject key identifier: 09:FA:3E:F5:57:80:E2:25:AD:0B:41:14:B0:F0:8E:1F:C8:90:4A:E4 Certificate issuer: /CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1 Certificate serial: 010D0C9F4328584A58CB07AEED4058A9B8A3726F Authority key identifier: BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 395660 IP address blocks: 2620:133:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:07:ae:ed:40:58:a9:b8:a3:72:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=af6705d0-68e9-444a-b8c6-e152f6af6a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e7:e2:3a:b8:da:2e:0d:91:93:01:90:04:a0: 46:04:c6:fe:68:2a:c9:fc:d4:6d:58:b6:36:20:47: df:f9:aa:10:90:93:4f:6d:47:b1:7d:a9:fe:bd:4d: 64:60:da:ca:2d:f6:cd:5f:24:69:72:7c:99:13:01: 4b:d2:1f:37:f5:71:3e:36:47:07:3e:3b:ae:8a:c9: a0:fa:c4:6f:d2:7b:5f:10:b7:9e:aa:1b:95:fe:c8: 93:5a:c2:69:68:fc:9a:67:51:15:e5:e1:96:33:2d: 44:6f:f2:be:ff:0d:e4:45:59:52:fb:86:4e:fa:03: 8c:74:bb:1b:b1:62:7c:6c:a5:c9:54:64:65:c8:a4: be:d9:21:f2:88:79:f5:4a:ff:da:10:05:ed:9d:c5: 97:ba:c2:7c:a2:5b:fe:e4:c4:32:ca:f4:6f:51:ee: af:9e:f7:3f:17:0d:d6:a7:10:05:4b:65:53:97:51: 66:96:9b:6c:4e:4d:13:d9:2f:9d:a8:cc:44:ca:34: 81:05:6c:a0:fd:b4:69:e4:0b:47:15:06:d3:1e:28: 75:c2:9e:fd:00:3d:73:7d:ba:b6:9a:dd:8b:55:60: 82:d7:3a:89:23:98:c9:d7:e8:3e:a1:f5:9a:82:c9: 7d:f3:39:70:61:0d:fe:b9:e3:cc:8a:c4:44:19:36: 34:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FA:3E:F5:57:80:E2:25:AD:0B:41:14:B0:F0:8E:1F:C8:90:4A:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl X509v3 Authority Key Identifier: keyid:BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer sbgp-ipAddrBlock: critical IPv6: 2620:133:b000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b6:5d:a0:d6:30:b7:3a:69:c8:f7:65:0c:d9:ab:b9:c6:40: e3:16:84:cc:c2:f5:6c:ee:b4:09:32:5f:ff:c0:78:3f:9b:02: ee:fb:11:96:b8:fd:c0:57:0c:ce:db:3a:3a:f3:54:96:66:60: 06:34:19:36:eb:38:15:7b:71:a9:d2:bb:c0:a8:82:b5:f6:db: 0a:cc:a9:04:5a:87:fb:2a:17:d9:ca:bb:96:03:35:ec:69:2e: 7d:98:4c:96:88:be:c3:1d:ec:39:75:c4:0c:27:2e:e5:32:c4: 44:f0:3c:00:32:ce:7b:25:1d:59:33:c8:e8:c0:1a:ee:61:3f: 15:cd:ca:b8:f1:d2:68:a8:54:64:84:5a:87:8f:db:a6:a8:d4: bc:25:f4:33:37:59:ad:70:a1:e6:7d:bd:3b:26:71:49:d9:0e: 5e:f8:fc:f4:ff:c3:f3:99:03:a1:83:57:4b:6c:ea:04:73:38: 25:ca:bf:2e:e1:b2:69:c7:11:b4:9d:ff:81:97:9b:a5:d2:2a: 2b:31:75:66:0c:83:f2:25:4d:b7:5d:41:ef:56:f3:cb:04:76: 9b:67:d8:cf:98:f7:51:4d:17:4d:e7:e2:2c:38:2a:e0:5b:6e: f2:9d:dc:2b:52:c5:f5:c1:c4:c8:e7:d5:df:80:fa:b1:be:0d: ae:4d:5e:16 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpYyweu7UBYqbijcm8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE2OWNjYTUtYjZjMi00MWY0LWE5MmYtZTc0ZDU3MTNk MmMxMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk YWY2NzA1ZDAtNjhlOS00NDRhLWI4YzYtZTE1MmY2YWY2YTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOfiOrjaLg2RkwGQBKBGBMb+aCrJ/NRtWLY2 IEff+aoQkJNPbUexfan+vU1kYNrKLfbNXyRpcnyZEwFL0h839XE+NkcHPjuuismg +sRv0ntfELeeqhuV/siTWsJpaPyaZ1EV5eGWMy1Eb/K+/w3kRVlS+4ZO+gOMdLsb sWJ8bKXJVGRlyKS+2SHyiHn1Sv/aEAXtncWXusJ8olv+5MQyyvRvUe6vnvc/Fw3W pxAFS2VTl1FmlptsTk0T2S+dqMxEyjSBBWyg/bRp5AtHFQbTHih1wp79AD1zfbq2 mt2LVWCC1zqJI5jJ1+g+ofWagsl98zlwYQ3+uePMisREGTY0fwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAn6PvVXgOIlrQtBFLDwjh/IkErkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5 Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRkNTcxM2QyYzEvZDVkYWY5ZjUtMWRiNS0z N2ZiLWJlNjAtNjI2ZDhhMDJiNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDE2OWNjYTUtYjZjMi00MWY0LWE5 MmYtZTc0ZDU3MTNkMmMxL2QxNjljY2E1LWI2YzItNDFmNC1hOTJmLWU3NGQ1NzEz ZDJjMS5jcmwwHwYDVR0jBBgwFoAUvTnNefSLJO+PaY3cP5jNDKuB+JowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRk NTcxM2QyYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABM7Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATLZdoNYwtzppyPdlDNmrucZA4xaEzML1bO60CTJf/8B4P5sC7vsR lrj9wFcMzts6OvNUlmZgBjQZNus4FXtxqdK7wKiCtfbbCsypBFqH+yoX2cq7lgM1 7GkufZhMloi+wx3sOXXEDCcu5TLERPA8ADLOeyUdWTPI6MAa7mE/Fc3KuPHSaKhU ZIRah4/bpqjUvCX0MzdZrXCh5n29OyZxSdkOXvj89P/D85kDoYNXS2zqBHM4Jcq/ LuGyaccRtJ3/gZebpdIqKzF1ZgyD8iVNt11B71bzywR2m2fYz5j3UU0XTefiLDgq 4Ftu8p3cK1LF9cHEyOfV34D6sb4Nrk1eFg== -----END CERTIFICATE-----Generated at Mon Jun 30 00:44:19 2025 by rpki-client