$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c974c9ea-3c31-3e99-8a30-4ee4a4d4f077.roa File: c974c9ea-3c31-3e99-8a30-4ee4a4d4f077.roa (raw, json) Hash identifier: 0zg7qmXKzt6JY07aRRZvt4rhMo/ywY3jLF3qdd5CcZI= Subject key identifier: 7E:D8:72:CA:C1:73:32:75:54:06:3D:00:1E:71:4E:85:04:36:E3:DB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD2850B4CBA74B305E5500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c974c9ea-3c31-3e99-8a30-4ee4a4d4f077.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33660 IP address blocks: 2603:2680::/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:28:50:b4:cb:a7:4b:30:5e:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=d2520616-54f2-47e8-9067-1033d2862da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:da:9a:89:ed:d9:a0:8a:6a:3d:a6:11:89: 3e:52:0d:9e:27:3d:e8:a5:55:7f:e1:b9:ed:28:c3: 17:5a:0d:ad:7d:e3:e7:23:45:23:ff:8e:f5:a7:8b: ec:49:92:f3:59:c8:72:50:5a:a8:1c:70:14:00:d8: 1d:11:a5:45:e5:17:2f:a5:a1:9d:65:24:68:2e:32: ae:55:e9:88:d9:36:4e:98:66:ae:e9:7a:55:94:07: 16:fd:f9:f0:20:72:f8:69:6f:f5:c7:26:67:c6:81: 82:31:c2:f6:74:48:e6:7d:dc:38:9e:87:bb:4a:3e: 52:02:6b:71:96:43:ec:0a:7f:20:24:58:43:67:a1: 1c:54:f8:84:fa:55:bc:f1:8e:9b:29:14:29:18:70: a8:8a:f7:1c:9c:6f:95:0e:dc:a9:cd:8a:be:d1:ff: 73:79:5b:6e:81:09:15:4f:6b:1e:f8:7a:6e:26:22: 15:41:32:5f:69:c6:be:fa:50:0f:d9:2d:fc:b3:08: 3e:c7:60:d6:6e:ed:0a:fc:12:76:42:cf:7e:5f:ff: b5:09:ef:84:54:f5:a0:53:87:c4:f9:f3:7d:79:14: 92:54:23:c2:4f:18:cb:00:a1:a6:75:cb:17:69:4c: a9:7a:65:a8:51:99:6e:63:36:be:57:b4:be:2d:79: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D8:72:CA:C1:73:32:75:54:06:3D:00:1E:71:4E:85:04:36:E3:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c974c9ea-3c31-3e99-8a30-4ee4a4d4f077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2680::/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:4a:3f:d1:f3:39:5b:ba:41:c6:2c:0b:57:ee:da:70:e2:a2: 4a:ef:f8:10:20:4c:ec:bd:ad:6f:63:aa:46:26:79:81:41:61: 23:f9:20:1f:8b:2c:47:d8:a4:3d:05:01:c1:a5:17:1c:e7:bb: 25:29:1a:92:6d:30:70:c7:ac:b8:f9:c2:96:6c:63:42:9e:cf: 87:9e:c5:bc:b3:a9:7b:83:01:d2:7f:fd:8b:5c:ec:cd:47:3c: 2c:50:e3:18:a4:76:13:a7:de:1c:03:ad:ec:91:6e:e7:ca:d6: 5e:95:26:f2:36:bf:e6:8f:3c:1c:8c:76:19:73:6c:b7:13:3e: 3c:66:65:4a:38:8b:82:78:78:63:10:23:26:92:c9:c7:56:0d: f1:52:60:9e:0f:9e:e9:73:ac:c5:15:34:de:b3:1e:a6:ba:ef: d7:f1:b9:87:31:b4:d1:26:a0:15:fd:d3:01:31:b5:0f:1d:10: 19:2e:4a:50:2c:57:66:e5:36:f5:c4:45:c3:13:d4:96:87:d4: 56:ee:fb:99:63:6e:35:0b:08:e8:bc:37:c1:d0:50:1c:b7:85: 9a:5a:fd:d7:77:89:cc:2e:e7:d6:f4:f5:f1:2a:23:43:3a:5a: f2:06:9b:14:b4:37:88:a1:be:d3:b7:62:39:04:70:54:85:c0: 85:a7:2d:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpc/ShQtMunSzBeVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZDI1MjA2MTYtNTRmMi00N2U4LTkwNjctMTAzM2QyODYyZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPzamont2aCKaj2mEYk+Ug2eJz3opVV/4bnt KMMXWg2tfePnI0Uj/471p4vsSZLzWchyUFqoHHAUANgdEaVF5RcvpaGdZSRoLjKu VemI2TZOmGau6XpVlAcW/fnwIHL4aW/1xyZnxoGCMcL2dEjmfdw4noe7Sj5SAmtx lkPsCn8gJFhDZ6EcVPiE+lW88Y6bKRQpGHCoivccnG+VDtypzYq+0f9zeVtugQkV T2se+HpuJiIVQTJfaca++lAP2S38swg+x2DWbu0K/BJ2Qs9+X/+1Ce+EVPWgU4fE +fN9eRSSVCPCTxjLAKGmdcsXaUypemWoUZluYza+V7S+LXmVUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH7YcsrBczJ1VAY9AB5xToUENuPbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzk3NGM5ZWEtM2MzMS0z ZTk5LThhMzAtNGVlNGE0ZDRmMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUGJgMmgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeSj/R8zlbukHGLAtX7tpw4qJK7/gQIEzsva1vY6pGJnmBQWEj+SAf iyxH2KQ9BQHBpRcc57slKRqSbTBwx6y4+cKWbGNCns+HnsW8s6l7gwHSf/2LXOzN RzwsUOMYpHYTp94cA63skW7nytZelSbyNr/mjzwcjHYZc2y3Ez48ZmVKOIuCeHhj ECMmksnHVg3xUmCeD57pc6zFFTTesx6muu/X8bmHMbTRJqAV/dMBMbUPHRAZLkpQ LFdm5Tb1xEXDE9SWh9RW7vuZY241CwjovDfB0FAct4WaWv3Xd4nMLufW9PXxKiND OlryBpsUtDeIob7Tt2I5BHBUhcCFpy1I -----END CERTIFICATE-----Generated at Sun Jul 20 17:11:33 2025 by rpki-client