$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/87ccbfe3-8659-3f36-ad24-7412da6698c2.roa File: 87ccbfe3-8659-3f36-ad24-7412da6698c2.roa (raw, json) Hash identifier: y1pJwKcaCZ56yxXd1KV/wmA09xPUldG8HkLYrOQ3QGI= Subject key identifier: 34:0B:A2:F7:CD:38:C0:F8:CA:50:77:AA:70:9D:C4:71:94:48:BB:14 Certificate issuer: /CN=29cf59bb-49d4-46dc-a312-da9c10dc336e Certificate serial: 010D0C9F4328584A5FC5DAA020CBB8504202D6C0 Authority key identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/87ccbfe3-8659-3f36-ad24-7412da6698c2.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 10866 IP address blocks: 2620:0:5300::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:da:a0:20:cb:b8:50:42:02:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29cf59bb-49d4-46dc-a312-da9c10dc336e Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=e82cd188-6b9b-4633-bbf0-84b58bb880f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:62:a9:7c:68:75:2c:db:01:9b:08:c9:47: f1:01:01:7f:55:df:b1:17:86:07:0a:4a:65:a5:fe: 54:66:43:23:cd:a0:d6:98:30:ca:be:0d:1f:b2:b6: 67:d7:84:ae:52:cd:91:79:c8:90:60:98:5b:4d:45: f1:12:df:c5:c3:f8:e6:d6:3a:f8:87:1a:3d:b5:45: c6:af:23:ac:f8:60:f6:9f:d8:23:40:b8:65:79:70: c1:ea:df:78:30:13:53:a1:7b:ca:b7:78:fc:f4:88: e4:84:22:07:47:ab:d5:01:20:89:6a:c9:a9:fc:cd: c0:c0:7a:8e:38:67:69:7c:1d:1b:c4:e9:02:86:ad: 9f:03:aa:b0:95:3e:6e:94:30:07:cf:3a:de:de:7c: 44:0c:d8:4b:02:0f:f0:e1:00:89:5d:63:f9:e6:f6: 5d:5c:e0:40:3c:4e:92:22:83:69:58:88:7b:e0:57: 7c:a8:20:14:b8:cd:a8:ca:b4:5e:a3:65:ef:68:a3: 5b:86:e5:ff:76:09:25:4f:ad:28:ab:17:00:b2:9e: 40:ff:43:22:19:56:b4:09:71:ae:97:c6:83:d1:96: 5f:9a:77:46:20:2d:b9:a4:3d:0f:c0:d9:78:79:cf: 1f:26:9d:a2:e4:29:06:c3:a2:f0:6e:2d:5a:e9:91: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0B:A2:F7:CD:38:C0:F8:CA:50:77:AA:70:9D:C4:71:94:48:BB:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/87ccbfe3-8659-3f36-ad24-7412da6698c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl X509v3 Authority Key Identifier: keyid:75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5300::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:26:a0:6a:71:51:f3:69:cf:c1:4c:c5:c5:d9:23:be:5b:f8: 44:e0:ad:a7:b5:de:7c:e1:c9:77:0a:07:4f:76:e4:ad:fe:5d: 14:94:81:54:c1:6c:be:ae:bc:ca:c3:d7:5c:6b:17:33:0c:65: 48:22:4d:1a:31:a7:38:e6:37:08:de:38:05:59:99:07:3f:2d: d5:5a:9e:b4:fa:75:74:15:b3:34:29:d3:b6:53:3c:b7:c8:64: a6:0d:3d:ea:86:e8:c5:b3:e5:5e:f8:6a:6a:d8:94:e5:07:a7: 9a:b3:a5:95:54:49:87:ae:11:93:5c:33:81:cc:79:ef:5e:95: 34:88:b7:e0:04:91:0e:a0:dc:ce:3b:3e:f5:a6:d6:c2:99:91: 88:aa:ab:43:00:30:91:8b:3f:c0:8c:88:ba:28:a7:ae:59:3e: cd:1f:b4:6a:90:ba:8d:bf:f2:88:53:8f:e9:de:88:a9:1b:78: 48:b7:cd:6d:41:bd:9a:7e:f2:d1:72:71:a8:2c:5d:89:0f:de: 22:ed:a5:ed:c3:3b:b7:93:00:ec:17:63:b7:42:51:6b:20:aa: e1:77:5f:fb:62:bd:3e:b4:5c:43:4d:f5:96:df:ed:cd:73:de: 82:2e:95:db:57:fe:1c:90:52:e1:f6:ed:81:30:14:8f:a8:90: ae:2c:9c:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxdqgIMu4UEIC1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljZjU5YmItNDlkNC00NmRjLWEzMTItZGE5YzEwZGMz MzZlMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZTgyY2QxODgtNmI5Yi00NjMzLWJiZjAtODRiNThiYjg4MGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTNiqXxodSzbAZsIyUfxAQF/Vd+xF4YHCkpl pf5UZkMjzaDWmDDKvg0fsrZn14SuUs2ReciQYJhbTUXxEt/Fw/jm1jr4hxo9tUXG ryOs+GD2n9gjQLhleXDB6t94MBNToXvKt3j89IjkhCIHR6vVASCJasmp/M3AwHqO OGdpfB0bxOkChq2fA6qwlT5ulDAHzzre3nxEDNhLAg/w4QCJXWP55vZdXOBAPE6S IoNpWIh74Fd8qCAUuM2oyrReo2XvaKNbhuX/dgklT60oqxcAsp5A/0MiGVa0CXGu l8aD0ZZfmndGIC25pD0PwNl4ec8fJp2i5CkGw6Lwbi1a6ZF1OwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDQLovfNOMD4ylB3qnCdxHGUSLsUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNm NTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTljMTBkYzMzNmUvODdjY2JmZTMtODY1OS0z ZjM2LWFkMjQtNzQxMmRhNjY5OGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljZjU5YmItNDlkNC00NmRjLWEz MTItZGE5YzEwZGMzMzZlLzI5Y2Y1OWJiLTQ5ZDQtNDZkYy1hMzEyLWRhOWMxMGRj MzM2ZS5jcmwwHwYDVR0jBBgwFoAUdW0571VxSnE3LJO8R28dqLw0I5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNmNTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTlj MTBkYzMzNmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAAFMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABkmoGpxUfNpz8FMxcXZI75b+ETgrae13nzhyXcKB0925K3+XRSU gVTBbL6uvMrD11xrFzMMZUgiTRoxpzjmNwjeOAVZmQc/LdVanrT6dXQVszQp07ZT PLfIZKYNPeqG6MWz5V74amrYlOUHp5qzpZVUSYeuEZNcM4HMee9elTSIt+AEkQ6g 3M47PvWm1sKZkYiqq0MAMJGLP8CMiLoop65ZPs0ftGqQuo2/8ohTj+neiKkbeEi3 zW1BvZp+8tFycagsXYkP3iLtpe3DO7eTAOwXY7dCUWsgquF3X/tivT60XENN9Zbf 7c1z3oIuldtX/hyQUuH27YEwFI+okK4snII= -----END CERTIFICATE-----Generated at Tue Jul 1 15:07:29 2025 by rpki-client