$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a338d603-009d-38f4-ab6b-12f8f20c0959.roa File: a338d603-009d-38f4-ab6b-12f8f20c0959.roa (raw, json) Hash identifier: fAzA5I/qqTZ73cebxjc6eUBnyRIchXn7IQ8r2OUcOM0= Subject key identifier: 53:E8:83:4E:46:BE:9C:88:91:B5:E3:4E:DE:76:C7:8D:1D:D6:76:11 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584A4C3B1BD9B977E970BAE0EE80 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a338d603-009d-38f4-ab6b-12f8f20c0959.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 30103 IP address blocks: 2620:123:2085::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1b:d9:b9:77:e9:70:ba:e0:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=2e4ad673-a7de-468b-835f-38a5acb6229c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:ce:a7:08:f5:86:bf:3c:dd:3c:ff:5e:6c: 5c:c4:cd:84:cb:e2:10:df:d6:6f:88:2b:0d:72:b0: cf:fd:ad:ce:b7:14:bb:9a:04:6e:9e:7d:2c:18:33: 73:eb:fc:fe:9d:2d:d5:de:89:58:ff:71:4a:64:14: 25:0e:15:c4:87:d8:6a:35:d9:99:45:e3:b6:98:04: a3:89:c7:a4:4c:b9:ba:d6:80:f8:3d:84:f1:98:e0: 85:93:28:85:e5:98:af:99:9b:90:dc:fb:06:c9:12: a0:0c:e4:aa:c0:8f:36:df:2e:bc:0b:3e:f8:27:1c: c9:2a:a5:e8:ae:05:f3:54:24:a1:bb:b5:8f:31:62: b7:f5:ab:b9:fb:73:f0:8e:5f:04:7b:fa:8c:8b:cb: e0:4d:16:44:46:14:96:55:6a:6e:ce:1b:ce:91:96: d9:a0:33:3d:f9:2e:07:9a:eb:65:7c:ac:b9:1e:ce: 29:84:88:7d:1b:2d:47:80:df:2b:4d:1c:52:5a:9f: a9:37:72:9b:1c:1a:ef:7c:a3:f3:00:21:38:d1:62: 0d:37:8e:cc:e5:c3:90:7c:1a:8e:15:50:34:00:61: a7:32:d2:32:76:d7:6a:a4:7b:80:bb:cc:72:b2:58: a3:cf:e5:69:83:ef:44:a8:96:44:2f:a0:6f:b6:ec: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E8:83:4E:46:BE:9C:88:91:B5:E3:4E:DE:76:C7:8D:1D:D6:76:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a338d603-009d-38f4-ab6b-12f8f20c0959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:2085::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d5:b2:d1:42:d7:f6:0a:18:8a:a5:df:d4:5e:36:74:4b:ce: ae:46:b2:c0:29:b6:f9:50:db:f8:0e:ea:f1:25:54:16:64:b3: 1c:f9:53:78:53:34:80:8b:55:35:99:f4:ba:9c:43:63:b0:a5: d9:47:66:97:e8:d2:a0:87:54:1a:de:5b:d2:59:6e:a4:9e:36: 1f:64:25:90:4c:1e:cb:ff:81:ce:52:b9:ec:cc:2f:cb:cb:fa: 34:ef:5c:78:d8:e9:45:ec:ac:91:73:d2:f2:c7:dd:49:4d:90: ea:b2:ab:07:2f:64:15:d5:2f:c4:08:64:87:6f:c8:26:57:da: 42:ac:cf:9b:a6:4e:d8:ac:de:e8:ee:e1:7b:2b:1c:69:c0:99: 22:c5:22:4d:1e:17:9e:ef:7a:da:b3:cb:d4:97:28:fc:b0:38: 65:8c:c5:db:9d:a1:08:aa:af:e3:2c:b9:b3:8b:e5:17:a7:de: 0b:f3:d1:7c:93:34:4e:20:fb:1f:82:9a:94:0b:03:5f:ed:1d: 6d:1a:0d:a8:6b:0c:42:2d:8a:5d:ec:70:03:21:df:c4:31:20: d9:b8:99:fa:d0:62:c8:0c:84:d3:9f:51:c2:23:35:15:e3:90: 40:a3:95:d9:c8:f9:59:51:3e:03:f5:0b:7b:ee:1b:07:49:6e: 51:e5:fc:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpMOxvZuXfpcLrg7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MmU0YWQ2NzMtYTdkZS00NjhiLTgzNWYtMzhhNWFjYjYyMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRvOpwj1hr883Tz/XmxcxM2Ey+IQ39ZviCsN crDP/a3OtxS7mgRunn0sGDNz6/z+nS3V3olY/3FKZBQlDhXEh9hqNdmZReO2mASj icekTLm61oD4PYTxmOCFkyiF5ZivmZuQ3PsGyRKgDOSqwI823y68Cz74JxzJKqXo rgXzVCShu7WPMWK39au5+3Pwjl8Ee/qMi8vgTRZERhSWVWpuzhvOkZbZoDM9+S4H mutlfKy5Hs4phIh9Gy1HgN8rTRxSWp+pN3KbHBrvfKPzACE40WINN47M5cOQfBqO FVA0AGGnMtIydtdqpHuAu8xyslijz+Vpg+9EqJZEL6BvtuwjiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFPog05GvpyIkbXjTt52x40d1nYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYTMzOGQ2MDMtMDA5ZC0z OGY0LWFiNmItMTJmOGYyMGMwOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyCF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfVstFC1/YKGIql39ReNnRLzq5GssAptvlQ2/gO6vElVBZksxz5 U3hTNICLVTWZ9LqcQ2OwpdlHZpfo0qCHVBreW9JZbqSeNh9kJZBMHsv/gc5SuezM L8vL+jTvXHjY6UXsrJFz0vLH3UlNkOqyqwcvZBXVL8QIZIdvyCZX2kKsz5umTtis 3uju4XsrHGnAmSLFIk0eF57vetqzy9SXKPywOGWMxdudoQiqr+MsubOL5Ren3gvz 0XyTNE4g+x+CmpQLA1/tHW0aDahrDEItil3scAMh38QxINm4mfrQYsgMhNOfUcIj NRXjkECjldnI+VlRPgP1C3vuGwdJblHl/CA= -----END CERTIFICATE-----Generated at Sun Jun 29 23:36:10 2025 by rpki-client