$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa File: dede31bf-e82b-3380-8794-1fc710158b40.roa (raw, json) Hash identifier: chKdoAcPYfiEd7BuRKqc2ErxHPOTk151oZHi5pA7AB8= Subject key identifier: 35:73:29:DF:BB:42:A8:6D:12:41:BE:5A:2B:B2:64:07:76:D8:A2:8E Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F4328584A5CFB365AEBC6D4730FA8A7A0 Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 32242 IP address blocks: 2620:48:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:36:5a:eb:c6:d4:73:0f:a8:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=b3f54cf0-e7d0-435f-b4a7-3c95750140ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e8:20:7a:dc:09:0e:cc:49:df:90:6d:ef:af: be:e5:cb:63:39:61:70:d4:08:7e:e8:d6:ed:93:45: c8:00:f5:31:57:6c:6e:50:4f:f7:9f:ee:db:9f:33: 1d:e7:7f:0a:d8:e6:d3:a1:eb:d0:19:54:8c:f1:ee: a6:c1:77:5b:b2:72:d2:7a:7b:cc:9c:c6:a4:a7:6d: e7:c6:1b:58:00:7d:01:56:e2:5b:91:95:44:39:6c: e6:f4:92:8e:f7:26:1a:a6:b9:35:b8:14:15:22:ab: f1:9a:37:79:c5:13:d1:a6:3d:62:67:cb:10:78:c4: e4:0c:5e:e0:f4:3a:c6:50:3d:c0:9a:3e:d1:0b:92: e5:a9:2c:15:0b:bd:20:ca:a1:32:e1:5b:b2:2f:fa: 47:f6:b9:ea:2e:43:de:fd:d4:09:52:ec:08:ec:3a: fa:8d:31:95:8e:80:f1:6b:d6:fb:e6:41:ab:2b:08: 50:ee:91:16:eb:f1:1a:96:04:63:29:57:66:b6:81: c9:62:0c:63:9e:80:89:fa:41:07:f3:75:2e:10:bc: 77:32:c7:a7:93:92:5c:69:20:02:af:c2:35:55:9a: b1:ed:c3:ea:e5:84:de:85:82:72:71:a4:9a:9c:5c: f5:d8:d1:ac:6f:cf:fe:b4:8f:b8:6e:50:86:c0:00: 6a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:73:29:DF:BB:42:A8:6D:12:41:BE:5A:2B:B2:64:07:76:D8:A2:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv6: 2620:48:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:4d:f2:30:78:cf:89:f3:39:38:bb:48:46:01:51:19:94:67: de:76:a4:44:0f:08:8d:5e:31:f2:52:65:b3:7e:1a:b4:6b:22: e5:20:9e:56:52:99:a9:35:bb:5c:12:1f:25:25:4d:17:e5:a3: c4:f2:2d:ea:04:96:9d:c5:6c:ea:16:c0:50:b4:42:12:88:60: 20:98:50:dd:ca:c8:99:f1:2d:2c:81:30:51:39:84:78:8b:c9: 72:2b:7b:2b:5d:1e:5a:70:72:95:e2:9f:f5:84:82:ac:ae:b7: 29:8a:36:69:5b:f5:5a:3f:9b:67:93:45:6c:3d:e4:11:0d:69: 5d:a2:0a:7d:b1:2a:37:4a:97:c8:4b:ec:40:37:7d:53:76:67: 06:9d:5b:18:cc:66:25:e8:0b:a3:ec:b8:12:fe:4a:57:a0:55: e4:5c:88:a8:92:6e:ca:0a:b8:48:41:67:2d:05:e0:d0:64:84: 4a:43:94:a2:9b:49:f2:0a:68:1b:58:e8:94:25:0b:5c:24:ec: 28:f4:0c:6d:44:0d:56:49:0f:bd:c4:72:f5:ab:0b:b6:e3:0c: 1b:b3:ad:09:d4:57:e6:0d:71:37:87:fe:62:e0:c0:7d:e3:54: 17:bb:6d:b0:0e:52:d5:1d:8b:65:79:99:9c:f8:ff:75:f2:f1: a2:35:9c:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc+zZa68bUcw+op6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YjNmNTRjZjAtZTdkMC00MzVmLWI0YTctM2M5NTc1MDE0MGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+ggetwJDsxJ35Bt76++5ctjOWFw1Ah+6Nbt k0XIAPUxV2xuUE/3n+7bnzMd538K2ObToevQGVSM8e6mwXdbsnLSenvMnMakp23n xhtYAH0BVuJbkZVEOWzm9JKO9yYaprk1uBQVIqvxmjd5xRPRpj1iZ8sQeMTkDF7g 9DrGUD3Amj7RC5LlqSwVC70gyqEy4VuyL/pH9rnqLkPe/dQJUuwI7Dr6jTGVjoDx a9b75kGrKwhQ7pEW6/EalgRjKVdmtoHJYgxjnoCJ+kEH83UuELx3Msenk5JcaSAC r8I1VZqx7cPq5YTehYJycaSanFz12NGsb8/+tI+4blCGwABqMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDVzKd+7QqhtEkG+WiuyZAd22KKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvZGVkZTMxYmYtZTgyYi0z MzgwLTg3OTQtMWZjNzEwMTU4YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAASKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNN8jB4z4nzOTi7SEYBURmUZ952pEQPCI1eMfJSZbN+GrRrIuUg nlZSmak1u1wSHyUlTRflo8TyLeoElp3FbOoWwFC0QhKIYCCYUN3KyJnxLSyBMFE5 hHiLyXIreytdHlpwcpXin/WEgqyutymKNmlb9Vo/m2eTRWw95BENaV2iCn2xKjdK l8hL7EA3fVN2ZwadWxjMZiXoC6PsuBL+SlegVeRciKiSbsoKuEhBZy0F4NBkhEpD lKKbSfIKaBtY6JQlC1wk7Cj0DG1EDVZJD73EcvWrC7bjDBuzrQnUV+YNcTeH/mLg wH3jVBe7bbAOUtUdi2V5mZz4/3Xy8aI1nGk= -----END CERTIFICATE-----Generated at Mon Jun 30 21:25:29 2025 by rpki-client