$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/de134596-72ab-3107-a025-23d85e847fa4.roa File: de134596-72ab-3107-a025-23d85e847fa4.roa (raw, json) Hash identifier: Z9YhYcBJ4+AG4Y5VHCsyHuKrZQBURFa9q82z5ormBwI= Subject key identifier: AF:32:2E:D7:08:7D:E0:C9:3C:40:2D:1E:B7:90:BD:ED:EA:45:61:44 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F4328584A3A157192EBB1FB351D70FA00 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/de134596-72ab-3107-a025-23d85e847fa4.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 13830 IP address blocks: 2604:4d40:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:71:92:eb:b1:fb:35:1d:70:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=b5e8a4ea-7dda-4615-8594-ae4926528be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:b3:53:41:71:ae:44:f9:b0:31:af:88:e8: 0f:e7:9e:81:3a:03:58:d1:6f:5a:1a:53:cd:d8:56: 0b:59:f3:89:3f:2c:06:30:a5:a0:2c:62:d6:f6:5d: 4b:14:4d:07:e0:d4:e4:1d:0d:2a:49:1d:9e:59:5b: 4f:8a:c0:94:27:4b:b4:d1:02:ac:04:2b:2a:93:67: 90:4e:d4:47:27:00:a9:ea:37:c4:f0:19:d4:42:07: 2b:27:17:92:23:af:c1:8a:dc:7e:c2:b2:63:ec:a9: c6:3a:d5:6b:2e:2a:e2:5c:51:b5:dc:59:d4:9e:e9: 0e:d9:f4:44:77:46:86:59:59:77:34:be:b7:c4:16: 4f:44:27:97:4b:15:ef:ff:e3:a1:f6:75:07:4c:7b: 6b:22:d3:b7:05:7e:7a:3d:82:64:a6:d4:ba:ce:05: 9e:7a:5c:4f:d8:28:f1:b3:32:38:69:85:e6:88:69: e2:fe:06:68:2e:89:b3:a6:7b:4d:c7:bc:85:40:0e: 72:2d:45:8b:62:de:38:d6:6c:80:16:6b:7e:72:f4: 2b:42:63:5c:10:5b:d4:90:95:95:54:e8:e7:5e:b8: 4a:f6:19:10:d5:ca:d0:34:a1:80:6f:52:36:b3:49: 1d:9d:65:8b:e2:1e:c5:7d:20:81:84:81:48:f3:15: 45:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:32:2E:D7:08:7D:E0:C9:3C:40:2D:1E:B7:90:BD:ED:EA:45:61:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/de134596-72ab-3107-a025-23d85e847fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv6: 2604:4d40:4000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:28:95:af:68:66:52:ee:4c:2e:90:41:90:27:da:6d:21:db: 98:d7:24:a6:7f:8a:f2:4a:15:64:e3:14:10:a8:52:d5:83:9d: d9:14:7b:fc:fc:f5:44:a0:9b:1b:f2:88:0a:e0:fa:f5:55:e9: 43:09:d9:62:4f:b7:8d:6d:b1:e5:3d:0b:2a:2c:57:14:8e:9f: d0:0e:3c:fc:31:a2:a9:50:69:ff:d3:a8:f8:de:6f:dc:35:54: 42:4e:a3:d4:28:3a:e7:46:e0:94:78:78:ee:fb:3c:cd:65:ec: e1:4f:fc:bd:75:4c:c7:f5:04:23:d4:de:44:99:63:f4:b3:6a: 45:b0:e3:35:af:54:3d:fe:cc:f9:15:6f:ab:c9:d2:49:f4:81: fc:33:a3:45:80:44:f0:bd:c6:be:9b:bb:d5:82:89:bc:72:9d: 8a:2f:2d:ff:54:ff:6a:01:33:86:5d:e5:fc:ce:b2:25:31:59: 48:2c:7e:d5:c2:5f:dc:80:06:f5:d4:c1:bc:12:f9:b4:52:17: a2:87:57:de:9e:50:28:3d:13:c6:5d:64:26:72:ee:04:dd:bd: 49:4b:06:cd:a5:c3:60:62:f2:c6:c4:e5:72:63:75:4e:7b:38: 17:47:bd:58:c4:cd:9e:6f:39:46:d5:3c:23:7b:59:1c:c8:db: c5:a0:5e:f9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEo6FXGS67H7NR1w+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk YjVlOGE0ZWEtN2RkYS00NjE1LTg1OTQtYWU0OTI2NTI4YmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC2zU0FxrkT5sDGviOgP556BOgNY0W9aGlPN 2FYLWfOJPywGMKWgLGLW9l1LFE0H4NTkHQ0qSR2eWVtPisCUJ0u00QKsBCsqk2eQ TtRHJwCp6jfE8BnUQgcrJxeSI6/Bitx+wrJj7KnGOtVrLiriXFG13FnUnukO2fRE d0aGWVl3NL63xBZPRCeXSxXv/+Oh9nUHTHtrItO3BX56PYJkptS6zgWeelxP2Cjx szI4aYXmiGni/gZoLomzpntNx7yFQA5yLUWLYt441myAFmt+cvQrQmNcEFvUkJWV VOjnXrhK9hkQ1crQNKGAb1I2s0kdnWWL4h7FfSCBhIFI8xVFtwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK8yLtcIfeDJPEAtHreQve3qRWFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZGUxMzQ1OTYtNzJhYi0z MTA3LWEwMjUtMjNkODVlODQ3ZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRNQEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADyiVr2hmUu5MLpBBkCfabSHbmNckpn+K8koVZOMUEKhS1YOd2RR7 /Pz1RKCbG/KICuD69VXpQwnZYk+3jW2x5T0LKixXFI6f0A48/DGiqVBp/9Oo+N5v 3DVUQk6j1Cg650bglHh47vs8zWXs4U/8vXVMx/UEI9TeRJlj9LNqRbDjNa9UPf7M +RVvq8nSSfSB/DOjRYBE8L3Gvpu71YKJvHKdii8t/1T/agEzhl3l/M6yJTFZSCx+ 1cJf3IAG9dTBvBL5tFIXoodX3p5QKD0Txl1kJnLuBN29SUsGzaXDYGLyxsTlcmN1 Tns4F0e9WMTNnm85RtU8I3tZHMjbxaBe+Q== -----END CERTIFICATE-----Generated at Tue Jul 1 07:04:37 2025 by rpki-client