$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa File: 2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa (raw, json) Hash identifier: XJXM3kuCNhz/q35ZLFHiN794l5zD2gnnTCJRLr0AskA= Subject key identifier: 52:F9:FC:49:C6:4E:99:5F:62:7C:89:9D:4F:96:2C:E3:76:EE:25:87 Certificate issuer: /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Certificate serial: 010D0C9F4328584A43DAF7289418EDF9F52AC500 Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 36374 IP address blocks: 2604:4200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:f7:28:94:18:ed:f9:f5:2a:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=bc34ea8e-7b3d-4c04-896d-c056fbcacc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ba:41:8a:76:0c:34:e7:07:89:d8:6c:18:ac: 3b:17:08:b6:4c:45:6f:ce:4c:57:9a:f2:81:cd:3a: 0b:80:aa:81:53:2f:20:3d:a3:64:78:77:4c:54:3f: 05:1b:a7:72:3c:16:6c:c5:31:91:34:f8:a2:38:bf: eb:d8:55:33:51:a6:45:9c:73:be:b4:c3:14:fd:83: 61:16:08:77:0b:79:2e:de:3c:bc:2b:c9:74:f8:e8: e4:e8:51:9f:62:ff:e2:3c:df:dc:fb:2c:47:b9:27: af:15:9a:c4:2d:3d:3f:c2:15:40:3d:db:cd:5f:53: 0e:b2:ed:33:7a:b1:bd:0b:95:43:3d:78:c0:57:46: 1d:45:dd:f7:4f:75:1c:1b:e2:d5:37:ff:ac:3c:40: ad:e1:d8:7c:d3:e4:f9:09:d3:8c:46:70:e1:3e:33: 65:0b:11:08:fd:b0:e6:67:17:73:4b:78:49:2e:f4: 6d:16:56:03:83:68:2f:16:4e:34:60:a8:87:cb:28: d8:84:25:86:17:67:5e:72:7c:bc:f2:3b:04:ee:fb: 07:4d:55:77:8f:22:18:f2:d3:14:9d:d1:ef:4f:db: b3:e4:e5:8f:1e:34:79:75:11:03:1f:69:13:02:70: 44:92:c6:22:d4:c1:0e:e2:12:8b:36:68:ea:87:a5: e9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F9:FC:49:C6:4E:99:5F:62:7C:89:9D:4F:96:2C:E3:76:EE:25:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl X509v3 Authority Key Identifier: keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer sbgp-ipAddrBlock: critical IPv6: 2604:4200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:29:37:fa:15:a5:70:60:d3:23:18:28:ef:42:17:3e:67:63: 70:13:17:04:04:c7:b5:ed:63:a6:68:cb:02:26:96:f1:b4:ce: 8d:b3:2f:fa:23:a4:13:73:f6:52:a1:59:6d:f9:51:5c:e6:99: 34:75:b2:e5:d5:46:61:8c:3c:f0:2f:39:d8:07:85:16:70:c4: 49:36:1e:46:48:57:42:92:b8:ea:fe:1e:ef:f5:47:bd:27:38: e4:8e:61:65:77:74:db:dc:7e:16:61:5a:f8:96:dd:30:ad:5f: f3:c5:0f:4d:03:a6:9b:6f:e6:74:d0:a4:aa:09:69:b3:ea:d6: a3:4e:c6:c9:76:f4:43:d9:75:4c:d7:ca:9e:c1:d0:73:06:40: 40:90:c7:05:40:3c:84:76:38:24:8b:66:ed:4b:df:e4:89:7b: 9a:c8:af:fd:29:7f:2f:4f:ba:3c:e3:93:bc:43:ad:c8:89:59: 69:9b:7a:4c:a9:78:28:8c:00:b8:a2:c6:06:46:a6:97:73:4f: e4:0d:da:54:00:9a:81:af:96:70:ed:5c:3a:6f:08:21:e3:1b: c8:3d:d3:6f:16:c3:cb:9f:4c:12:f6:37:da:dd:29:54:1d:d4: 20:73:02:ba:10:5e:ae:49:54:7e:80:26:80:82:e3:4b:a9:b7: 72:90:5e:c7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpD2vcolBjt+fUqxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E2MjBkNDUtMWYyNi00NjBjLTlhM2UtOWJjMGNjNGE1 ZDU5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk YmMzNGVhOGUtN2IzZC00YzA0LTg5NmQtYzA1NmZiY2FjYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrpBinYMNOcHidhsGKw7Fwi2TEVvzkxXmvKB zToLgKqBUy8gPaNkeHdMVD8FG6dyPBZsxTGRNPiiOL/r2FUzUaZFnHO+tMMU/YNh Fgh3C3ku3jy8K8l0+Ojk6FGfYv/iPN/c+yxHuSevFZrELT0/whVAPdvNX1MOsu0z erG9C5VDPXjAV0YdRd33T3UcG+LVN/+sPECt4dh80+T5CdOMRnDhPjNlCxEI/bDm ZxdzS3hJLvRtFlYDg2gvFk40YKiHyyjYhCWGF2decny88jsE7vsHTVV3jyIY8tMU ndHvT9uz5OWPHjR5dREDH2kTAnBEksYi1MEO4hKLNmjqh6Xp3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFL5/EnGTplfYnyJnU+WLON27iWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTYy MGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMwY2M0YTVkNTkvMmUyNWQ4N2YtMDUxZC0z ZDZlLWE3NTUtYzAzYjZmYjNmMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2E2MjBkNDUtMWYyNi00NjBjLTlh M2UtOWJjMGNjNGE1ZDU5LzdhNjIwZDQ1LTFmMjYtNDYwYy05YTNlLTliYzBjYzRh NWQ1OS5jcmwwHwYDVR0jBBgwFoAUKRxwwEbJq9wo7iaQmtx92QAr9MIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTYyMGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMw Y2M0YTVkNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRCADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCgKTf6FaVwYNMjGCjvQhc+Z2NwExcEBMe17WOmaMsCJpbxtM6Nsy/6 I6QTc/ZSoVlt+VFc5pk0dbLl1UZhjDzwLznYB4UWcMRJNh5GSFdCkrjq/h7v9Ue9 JzjkjmFld3Tb3H4WYVr4lt0wrV/zxQ9NA6abb+Z00KSqCWmz6tajTsbJdvRD2XVM 18qewdBzBkBAkMcFQDyEdjgki2btS9/kiXuayK/9KX8vT7o845O8Q63IiVlpm3pM qXgojAC4osYGRqaXc0/kDdpUAJqBr5Zw7Vw6bwgh4xvIPdNvFsPLn0wS9jfa3SlU HdQgcwK6EF6uSVR+gCaAguNLqbdykF7H -----END CERTIFICATE-----Generated at Mon Jun 30 03:54:54 2025 by rpki-client