$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/de35d089-77f9-3823-9f5b-ee26a6b6fdf2.roa File: de35d089-77f9-3823-9f5b-ee26a6b6fdf2.roa (raw, json) Hash identifier: 1ucoklejn+J2pK8Uyoukt4lrUNPVzMZLSurQvpaJ/yM= Subject key identifier: 50:63:30:A6:1D:FA:92:65:B6:A3:B2:19:72:FA:F8:0F:C7:7D:4F:23 Certificate issuer: /CN=2f9ba919-b6ef-456f-b272-bb7d311a635a Certificate serial: 010D0C9F4328584A5335A23A29D9B23DA777DF80 Authority key identifier: CA:51:AF:A4:A5:ED:FA:86:BA:B9:31:B7:3D:41:6E:63:42:A2:EE:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/de35d089-77f9-3823-9f5b-ee26a6b6fdf2.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 25769 IP address blocks: 2604:8500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/2f9ba919-b6ef-456f-b272-bb7d311a635a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/2f9ba919-b6ef-456f-b272-bb7d311a635a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a2:3a:29:d9:b2:3d:a7:77:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f9ba919-b6ef-456f-b272-bb7d311a635a Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=16fd0550-1ecf-4487-b170-a63e2b55159a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:55:c2:5e:e9:9b:fd:58:9c:a5:db:17:aa:af: 5d:b5:5c:5d:99:a1:c2:bc:92:ed:a2:76:42:b1:20: 8c:fd:c2:bc:6c:42:4f:de:ee:d2:6c:08:27:2f:a0: 36:e7:2b:c6:19:6e:a3:9f:3d:21:fe:59:6f:4d:b3: f5:25:94:d7:a3:b3:ea:d1:d3:08:b8:8f:18:4e:3b: 57:55:a4:b6:b1:8d:f4:2a:fa:ad:4d:c0:7a:7c:f1: d1:7e:66:a3:62:26:39:aa:95:96:28:bd:c0:9c:19: 3e:85:4b:5c:f1:c8:f4:6d:3f:ee:63:bc:e3:e5:c7: f5:75:7c:85:c6:f0:5c:ab:06:a2:68:4e:f1:99:0d: 11:c5:c5:f6:47:ef:6e:86:39:55:e8:98:a4:3b:b5: 52:b9:0f:83:fb:50:21:29:80:0e:9a:04:12:5e:bf: 8a:1e:44:63:1d:fd:c3:df:95:51:23:69:da:69:88: fe:2d:4a:5a:3c:d1:67:7b:9f:65:80:45:3a:8c:65: 34:a7:46:d8:a6:54:c4:4c:d6:7d:52:22:d0:5f:49: 49:39:bc:2d:f9:49:9b:13:18:16:1b:c6:65:72:b9: ae:4e:d7:23:bf:23:6e:31:5c:a8:a4:32:7d:d4:4c: e2:fc:f2:af:0a:27:cb:99:f3:3a:95:85:6b:de:c3: d6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:63:30:A6:1D:FA:92:65:B6:A3:B2:19:72:FA:F8:0F:C7:7D:4F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/de35d089-77f9-3823-9f5b-ee26a6b6fdf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/2f9ba919-b6ef-456f-b272-bb7d311a635a.crl X509v3 Authority Key Identifier: keyid:CA:51:AF:A4:A5:ED:FA:86:BA:B9:31:B7:3D:41:6E:63:42:A2:EE:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a.cer sbgp-ipAddrBlock: critical IPv6: 2604:8500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:8f:43:d6:b3:b0:cf:19:b2:95:02:6b:30:b7:7e:86:05:47: 1d:ea:27:9c:a5:3a:e4:82:1a:31:9f:6f:65:6d:08:44:ad:bd: 83:39:e0:11:6e:2c:9e:1c:4c:bd:11:40:e0:4a:45:27:66:c2: 27:87:24:2a:2d:21:df:69:e1:fa:43:fb:26:c1:cb:2f:42:4f: 7f:68:2d:75:88:eb:a2:2a:4e:77:70:15:8a:42:cc:c7:e1:b2: d9:d8:fe:6f:53:45:ef:f8:37:e5:e0:39:09:94:22:1a:fe:65: 52:4a:30:7f:11:0c:8c:f2:6b:82:95:20:fa:3c:38:82:97:bb: 68:3b:20:eb:19:cc:26:d9:bb:45:15:c5:7c:c5:63:41:71:6b: 78:e6:4a:6a:9c:8b:d5:3e:40:78:2b:52:fa:8d:18:3d:5a:c7: a6:35:2c:ad:56:63:0c:36:7c:62:3f:92:19:c2:1b:9c:b7:f1: 74:b3:73:79:f6:e8:28:77:c5:e2:cf:af:a9:51:26:91:45:34: f4:92:8b:99:71:57:6e:c6:7b:a1:f1:f9:6b:e8:93:a1:fe:57: 60:54:34:75:ca:de:80:c9:ac:a7:0b:b5:1c:b0:a9:6e:e8:06: 73:cb:43:b9:06:ed:c7:69:01:69:43:27:83:65:f9:29:79:d6: b4:3f:66:ea -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpTNaI6KdmyPad334AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY5YmE5MTktYjZlZi00NTZmLWIyNzItYmI3ZDMxMWE2 MzVhMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk MTZmZDA1NTAtMWVjZi00NDg3LWIxNzAtYTYzZTJiNTUxNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVXCXumb/VicpdsXqq9dtVxdmaHCvJLtonZC sSCM/cK8bEJP3u7SbAgnL6A25yvGGW6jnz0h/llvTbP1JZTXo7Pq0dMIuI8YTjtX VaS2sY30KvqtTcB6fPHRfmajYiY5qpWWKL3AnBk+hUtc8cj0bT/uY7zj5cf1dXyF xvBcqwaiaE7xmQ0RxcX2R+9uhjlV6JikO7VSuQ+D+1AhKYAOmgQSXr+KHkRjHf3D 35VRI2naaYj+LUpaPNFne59lgEU6jGU0p0bYplTETNZ9UiLQX0lJObwt+UmbExgW G8ZlcrmuTtcjvyNuMVyopDJ91Ezi/PKvCifLmfM6lYVr3sPWSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFBjMKYd+pJltqOyGXL6+A/HfU8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yZjli YTkxOS1iNmVmLTQ1NmYtYjI3Mi1iYjdkMzExYTYzNWEvZGUzNWQwODktNzdmOS0z ODIzLTlmNWItZWUyNmE2YjZmZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmY5YmE5MTktYjZlZi00NTZmLWIy NzItYmI3ZDMxMWE2MzVhLzJmOWJhOTE5LWI2ZWYtNDU2Zi1iMjcyLWJiN2QzMTFh NjM1YS5jcmwwHwYDVR0jBBgwFoAUylGvpKXt+oa6uTG3PUFuY0Ki7nIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yZjliYTkxOS1iNmVmLTQ1NmYtYjI3Mi1iYjdk MzExYTYzNWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSFADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJj0PWs7DPGbKVAmswt36GBUcd6iecpTrkghoxn29lbQhErb2DOeAR biyeHEy9EUDgSkUnZsInhyQqLSHfaeH6Q/smwcsvQk9/aC11iOuiKk53cBWKQszH 4bLZ2P5vU0Xv+Dfl4DkJlCIa/mVSSjB/EQyM8muClSD6PDiCl7toOyDrGcwm2btF FcV8xWNBcWt45kpqnIvVPkB4K1L6jRg9WsemNSytVmMMNnxiP5IZwhuct/F0s3N5 9ugod8Xiz6+pUSaRRTT0kouZcVduxnuh8flr6JOh/ldgVDR1yt6AyaynC7UcsKlu 6AZzy0O5Bu3HaQFpQyeDZfkpeda0P2bq -----END CERTIFICATE-----Generated at Mon Jun 30 13:42:01 2025 by rpki-client