$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa File: 4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa (raw, json) Hash identifier: H2u6wQn0J6KXCHUn3xALCz+zjs6QqOYb/B+WvB3CJXg= Subject key identifier: 21:06:BA:FF:33:CA:12:FB:96:DF:FA:71:A5:FC:90:5E:57:18:A0:57 Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Certificate serial: 010D0C9F4328584A43DB08665BCDE3B64D3FB980 Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 16509 IP address blocks: 2600:400:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:08:66:5b:cd:e3:b6:4d:3f:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=869fa1c5-11b2-47e4-a1ff-35b799e21d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:ed:15:59:6e:a8:0f:68:c9:85:40:d3:e6: 88:b5:c3:49:b5:e1:7e:50:cb:2a:18:4c:1b:36:15: 55:16:57:30:78:72:b3:b4:33:06:2f:2d:1e:bd:98: e1:d7:54:17:5c:e5:dc:3a:93:0a:47:9e:b3:44:09: 61:18:a1:cc:c2:47:c5:00:05:d7:98:3e:2f:6d:72: 77:66:e3:d4:3b:87:b7:c6:85:6b:42:ff:d5:42:bb: 48:ef:d1:69:29:b4:9b:8c:11:7e:a1:ae:a3:05:48: 08:cd:d5:87:82:5e:90:bc:54:a4:21:73:33:6f:a5: 44:a4:c0:38:49:dd:14:11:7d:d9:1f:c1:68:e1:4e: ac:c5:c8:f1:78:cc:15:d2:5f:1c:50:05:21:4e:22: d9:25:03:2f:11:0c:38:08:89:c8:fb:98:b7:20:e7: af:49:68:a8:5c:20:0d:e1:11:86:46:4c:98:47:7b: 71:76:c3:da:e4:f8:7b:d6:6a:c9:08:94:63:cd:0e: 66:36:30:f6:77:97:d4:d2:eb:8c:a9:a3:66:75:4c: 2b:ee:38:07:95:c7:e2:8b:e2:a6:0c:6f:c9:8b:73: 86:0f:2f:0f:5f:b9:80:6b:72:4a:cc:b0:2b:f6:b0: bd:e4:96:e2:65:e2:08:62:7d:2d:f8:47:80:12:9a: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:06:BA:FF:33:CA:12:FB:96:DF:FA:71:A5:FC:90:5E:57:18:A0:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl X509v3 Authority Key Identifier: keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer sbgp-ipAddrBlock: critical IPv6: 2600:400:ff00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:be:80:89:6c:2c:94:f7:4c:66:7f:8e:75:9d:ed:e5:cf:d6: d4:bb:d8:cc:4c:dc:8d:f7:f1:c3:00:33:f4:b9:fa:5b:81:14: 17:3a:84:c4:a9:18:5d:b8:10:c9:1d:8f:da:b2:22:12:8b:22: 7e:2a:de:c9:c6:66:03:b4:9f:1d:2a:4a:5d:4f:9f:6b:7e:0b: b7:fe:74:06:3f:f5:4a:4a:d2:e2:56:d3:3c:70:af:0d:b3:f7: db:42:c2:5f:62:50:1f:5e:62:ef:3a:e6:55:bf:30:31:46:85: 1c:89:8e:bd:1b:df:a0:36:72:70:48:e6:f0:0c:4c:38:2e:ad: 21:45:66:28:60:69:ca:48:4a:ff:bb:2f:78:a0:b9:5c:ba:b2: 7e:7a:b0:b3:28:06:76:5f:2e:10:00:e5:fc:09:af:6d:07:52: 12:87:36:f4:48:55:df:69:cc:5a:3d:92:cb:a7:84:81:bf:29: 6d:32:f9:ae:95:68:5e:2e:76:63:9a:29:2e:93:5e:f4:dd:5f: 6e:88:2d:f9:13:e8:fb:72:36:3a:de:35:0b:5d:d6:b6:be:b0: 8f:66:d8:95:db:e2:9e:64:c8:3b:ed:5c:24:7b:18:d6:38:44: 12:3f:89:6a:8a:fc:75:67:04:34:c6:40:52:10:ef:59:c4:af: 22:ad:5b:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpD2whmW83jtk0/uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4 OTk2MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ODY5ZmExYzUtMTFiMi00N2U0LWExZmYtMzViNzk5ZTIxZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTXtFVluqA9oyYVA0+aItcNJteF+UMsqGEwb NhVVFlcweHKztDMGLy0evZjh11QXXOXcOpMKR56zRAlhGKHMwkfFAAXXmD4vbXJ3 ZuPUO4e3xoVrQv/VQrtI79FpKbSbjBF+oa6jBUgIzdWHgl6QvFSkIXMzb6VEpMA4 Sd0UEX3ZH8Fo4U6sxcjxeMwV0l8cUAUhTiLZJQMvEQw4CInI+5i3IOevSWioXCAN 4RGGRkyYR3txdsPa5Ph71mrJCJRjzQ5mNjD2d5fU0uuMqaNmdUwr7jgHlcfii+Km DG/Ji3OGDy8PX7mAa3JKzLAr9rC95JbiZeIIYn0t+EeAEppT/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCEGuv8zyhL7lt/6caX8kF5XGKBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvNGYwZmU2ZTctYjhhYi0z ZGFjLTkxNTUtMDAxYWM2NGRjMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy ZTA3ZDg5OTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAEAP8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABy+gIlsLJT3TGZ/jnWd7eXP1tS72MxM3I338cMAM/S5+luBFBc6 hMSpGF24EMkdj9qyIhKLIn4q3snGZgO0nx0qSl1Pn2t+C7f+dAY/9UpK0uJW0zxw rw2z99tCwl9iUB9eYu865lW/MDFGhRyJjr0b36A2cnBI5vAMTDgurSFFZihgacpI Sv+7L3iguVy6sn56sLMoBnZfLhAA5fwJr20HUhKHNvRIVd9pzFo9ksunhIG/KW0y +a6VaF4udmOaKS6TXvTdX26ILfkT6PtyNjreNQtd1ra+sI9m2JXb4p5kyDvtXCR7 GNY4RBI/iWqK/HVnBDTGQFIQ71nEryKtW8g= -----END CERTIFICATE-----Generated at Tue Jul 1 08:57:22 2025 by rpki-client