$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa File: dad7d956-91ce-309d-a710-c9e480e1eb82.roa (raw, json) Hash identifier: eJkOGLEc0UUid+tgMWQXT2dxQ9aLi+qa1IpEFrVvp+w= Subject key identifier: C7:BF:CF:BC:B8:E5:5F:95:78:1E:E3:86:6E:CB:A0:E5:78:4A:1C:CF Certificate issuer: /CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Certificate serial: 010D0C9F4328584A51D06A6242EF09DBB4342C00 Authority key identifier: 02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 400644 IP address blocks: 2620:aa:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:6a:62:42:ef:09:db:b4:34:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=974a8b71-10eb-451f-8b49-edf1ac262c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:3e:54:d9:fd:9c:2a:47:d5:fe:0c:51:3c: a2:42:3c:ee:20:3f:47:cf:cc:86:04:18:cb:d0:e8: 06:ec:d6:01:27:f9:d7:2d:e6:6a:31:c4:53:64:a3: 3e:72:83:65:2f:e9:e3:1e:50:fb:d3:b1:1f:f3:a3: 27:02:3c:4b:58:a8:23:49:2d:93:df:c8:5b:be:7c: 11:51:c1:f7:cf:a4:0f:e7:c0:83:6e:4d:3c:d0:45: 30:79:08:37:1c:42:88:e8:05:d2:29:c2:97:f1:c2: 52:1f:ad:fc:07:92:95:06:24:d1:ff:1a:76:95:e3: 13:d3:2b:03:12:8e:7a:ea:36:76:01:55:c0:44:80: 01:d9:84:d6:10:f3:0f:10:d0:a1:da:3f:e9:32:11: dd:92:75:f5:bb:df:e3:2a:aa:47:6e:f9:f5:5a:e6: 9c:17:be:c5:f4:80:97:34:ba:bb:bd:31:01:28:b8: 4b:c8:a0:2c:5b:f8:eb:4b:72:6b:1b:05:52:34:fc: ea:97:6b:8b:17:91:82:a1:58:ab:0d:ae:f6:07:dc: 55:2e:8f:44:1e:e2:ff:aa:f2:85:d8:2b:7a:e4:b2: 1e:b4:98:6f:d7:02:b0:74:cf:3c:29:5c:97:70:dc: 33:d4:88:66:f6:17:60:1e:86:a7:40:b5:a7:bd:3d: fd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BF:CF:BC:B8:E5:5F:95:78:1E:E3:86:6E:CB:A0:E5:78:4A:1C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl X509v3 Authority Key Identifier: keyid:02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer sbgp-ipAddrBlock: critical IPv6: 2620:aa:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:92:2f:bb:88:df:16:2d:a1:81:ed:ac:50:fc:c4:04:07:99: 5e:32:2e:d8:f9:e9:8d:78:39:d7:95:31:85:e8:ae:56:e5:4d: 3e:be:c3:43:b9:9d:66:b5:08:4c:0c:ff:86:e3:7c:c1:98:93: 00:72:bb:8c:8a:e8:26:99:fd:d5:93:24:85:7c:78:33:9d:55: 83:f9:8f:ea:96:97:88:aa:39:f9:74:d6:cb:09:ad:6a:c0:4b: 66:70:e0:88:ee:2f:e9:9a:8c:8d:ca:6a:c4:72:36:85:6a:19: d5:41:24:a9:85:fa:b1:12:29:a7:2f:c8:04:95:50:11:98:88: 3e:ed:83:27:88:00:86:60:72:e8:71:16:c2:8c:8e:4b:d1:bd: 1b:72:42:8a:b8:ac:ed:75:a9:a6:56:4d:55:10:2d:21:99:34: fe:25:4c:0e:8c:61:ec:d3:c2:07:5b:67:93:c3:84:a3:3a:f3: 20:7f:b0:f4:25:20:8f:65:84:f2:f8:3a:fe:89:4e:2d:24:df: f7:c6:59:62:3b:5e:fa:2d:8a:b4:90:38:4b:cd:1f:63:72:3c: 54:40:29:41:bc:89:87:fb:bd:19:46:e5:8a:a6:66:98:01:f4: 2d:bd:38:f1:4b:3c:fe:e4:ff:30:86:2c:64:64:fa:e1:09:82: f9:af:8e:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpR0GpiQu8J27Q0LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhMWFhOGEtYmFkNi00ZTA5LWE0YzYtYWM0MjRmMDRm NWNhMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk OTc0YThiNzEtMTBlYi00NTFmLThiNDktZWRmMWFjMjYyYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmQ+VNn9nCpH1f4MUTyiQjzuID9Hz8yGBBjL 0OgG7NYBJ/nXLeZqMcRTZKM+coNlL+njHlD707Ef86MnAjxLWKgjSS2T38hbvnwR UcH3z6QP58CDbk080EUweQg3HEKI6AXSKcKX8cJSH638B5KVBiTR/xp2leMT0ysD Eo566jZ2AVXARIAB2YTWEPMPENCh2j/pMhHdknX1u9/jKqpHbvn1WuacF77F9ICX NLq7vTEBKLhLyKAsW/jrS3JrGwVSNPzql2uLF5GCoVirDa72B9xVLo9EHuL/qvKF 2Ct65LIetJhv1wKwdM88KVyXcNwz1Ihm9hdgHoanQLWnvT39PQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMe/z7y45V+VeB7jhm7LoOV4ShzPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YmEx YWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQyNGYwNGY1Y2EvZGFkN2Q5NTYtOTFjZS0z MDlkLWE3MTAtYzllNDgwZTFlYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWJhMWFhOGEtYmFkNi00ZTA5LWE0 YzYtYWM0MjRmMDRmNWNhLzViYTFhYThhLWJhZDYtNGUwOS1hNGM2LWFjNDI0ZjA0 ZjVjYS5jcmwwHwYDVR0jBBgwFoAUAl+OPxoz9iI0GZDO8RmrK5tbr3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YmExYWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQy NGYwNGY1Y2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAqqAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGaSL7uI3xYtoYHtrFD8xAQHmV4yLtj56Y14OdeVMYXorlblTT6+ w0O5nWa1CEwM/4bjfMGYkwByu4yK6CaZ/dWTJIV8eDOdVYP5j+qWl4iqOfl01ssJ rWrAS2Zw4IjuL+majI3KasRyNoVqGdVBJKmF+rESKacvyASVUBGYiD7tgyeIAIZg cuhxFsKMjkvRvRtyQoq4rO11qaZWTVUQLSGZNP4lTA6MYezTwgdbZ5PDhKM68yB/ sPQlII9lhPL4Ov6JTi0k3/fGWWI7XvotirSQOEvNH2NyPFRAKUG8iYf7vRlG5Yqm ZpgB9C29OPFLPP7k/zCGLGRk+uEJgvmvjo8= -----END CERTIFICATE-----Generated at Mon Jun 30 08:29:26 2025 by rpki-client