$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa File: ac48a2d3-854c-3155-92d9-311295bde213.roa (raw, json) Hash identifier: 89JoUX5t44LHcWEbxTwjo7arIzoZKK3JiJ8OWElPc0k= Subject key identifier: D2:3A:6F:C6:4E:1E:1A:95:D6:DB:57:78:C5:03:F1:F7:15:AC:C2:76 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584A82AB46AAE3358C12E305B780 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 11537 IP address blocks: 2001:468:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:46:aa:e3:35:8c:12:e3:05:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=0f94e580-a567-4f42-bdc3-e5a224d4bc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:d6:a9:fb:3e:24:b0:02:a3:9c:4b:f3:de: a7:a3:15:60:25:3e:38:c9:33:2a:d1:c5:a2:17:57: 00:4c:0e:24:0b:3e:b1:ef:21:a4:53:f9:80:fa:50: 85:65:25:f1:f6:da:ce:bd:61:c9:93:23:33:95:d5: f0:46:01:41:27:94:c0:10:45:da:a5:52:de:12:de: 12:7f:13:51:10:3b:38:b9:24:d0:9e:82:df:fd:5c: d9:48:5b:6b:03:a2:81:a4:4c:63:54:1f:e8:4d:00: 5b:93:01:0b:48:6c:68:36:df:09:26:40:c1:42:2f: 9d:e4:d9:03:37:0d:83:83:f8:f6:7b:aa:ef:82:50: 41:2b:b2:e8:5c:ad:bc:03:27:74:65:9c:16:0c:a0: 53:a2:ce:84:e0:40:e9:df:37:ce:67:7b:fd:e2:99: 51:cc:fd:fd:e7:bb:41:40:36:99:af:77:a7:9f:ee: a5:f8:09:cc:43:b9:47:c8:c7:73:02:a2:5d:56:ba: a8:e5:ab:23:ee:66:6e:61:a6:1f:e7:a0:13:5a:1e: 2e:7a:db:1f:ed:b4:b2:11:fd:fb:d2:82:d6:3b:1c: 23:9e:a6:69:59:f5:f2:90:c0:a7:f5:a8:d4:1d:2e: d4:3e:0f:54:14:79:29:84:1f:98:98:fa:58:59:73: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3A:6F:C6:4E:1E:1A:95:D6:DB:57:78:C5:03:F1:F7:15:AC:C2:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f7:76:11:df:64:91:f8:a8:02:d0:ae:82:98:92:2e:e3:96: 8f:44:13:1e:d7:41:13:49:59:ec:5e:5e:07:a3:3a:e3:de:f9: 61:ba:52:47:e3:8d:7e:57:5e:15:91:c0:7a:24:8f:00:0f:cc: 39:16:a0:57:76:c2:51:0f:ea:6b:5d:cc:54:f3:52:4d:0b:0e: 45:73:a1:02:8f:b0:e5:ae:0c:5f:63:66:b1:c2:86:8d:d1:3a: 4d:34:9d:dc:b8:08:c5:9a:ab:15:9a:fe:f5:5d:6f:f1:76:59: b4:a2:5b:2e:80:8b:c6:a8:a1:26:2b:26:bb:f7:1c:fb:62:dd: 00:4a:24:67:1f:52:76:b0:f7:05:f2:16:3b:8e:41:7e:f4:8d: e5:29:5e:79:11:fa:1f:bb:75:e4:91:b4:a3:e6:17:95:c4:88: 4b:77:85:1a:86:ef:61:a2:9a:11:bd:b0:6d:56:d4:e4:34:5a: 8b:59:dd:62:3d:d4:1d:f6:62:54:bb:3a:d1:40:ac:9b:e8:f2: e1:9c:4e:40:59:ee:1f:d4:b1:2d:bc:38:f3:26:21:6a:72:1e: 80:12:ef:dd:a3:16:57:8d:af:3c:58:4f:53:a0:5d:23:8d:cf: 69:db:0d:e3:b9:da:a7:36:c2:38:04:a9:38:8d:3f:06:aa:4e: 99:3f:b3:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqCq0aq4zWMEuMFt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk MGY5NGU1ODAtYTU2Ny00ZjQyLWJkYzMtZTVhMjI0ZDRiYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslXWqfs+JLACo5xL896noxVgJT44yTMq0cWi F1cATA4kCz6x7yGkU/mA+lCFZSXx9trOvWHJkyMzldXwRgFBJ5TAEEXapVLeEt4S fxNREDs4uSTQnoLf/VzZSFtrA6KBpExjVB/oTQBbkwELSGxoNt8JJkDBQi+d5NkD Nw2Dg/j2e6rvglBBK7LoXK28Ayd0ZZwWDKBTos6E4EDp3zfOZ3v94plRzP3957tB QDaZr3enn+6l+AnMQ7lHyMdzAqJdVrqo5asj7mZuYaYf56ATWh4uetsf7bSyEf37 0oLWOxwjnqZpWfXykMCn9ajUHS7UPg9UFHkphB+YmPpYWXNFOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNI6b8ZOHhqV1ttXeMUD8fcVrMJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYWM0OGEyZDMtODU0Yy0z MTU1LTkyZDktMzExMjk1YmRlMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACT3dhHfZJH4qALQroKYki7jlo9EEx7XQRNJWexeXgejOuPe+WG6 UkfjjX5XXhWRwHokjwAPzDkWoFd2wlEP6mtdzFTzUk0LDkVzoQKPsOWuDF9jZrHC ho3ROk00ndy4CMWaqxWa/vVdb/F2WbSiWy6Ai8aooSYrJrv3HPti3QBKJGcfUnaw 9wXyFjuOQX70jeUpXnkR+h+7deSRtKPmF5XEiEt3hRqG72GimhG9sG1W1OQ0WotZ 3WI91B32YlS7OtFArJvo8uGcTkBZ7h/UsS28OPMmIWpyHoAS792jFleNrzxYT1Og XSONz2nbDeO52qc2wjgEqTiNPwaqTpk/s3Q= -----END CERTIFICATE-----Generated at Sun Jul 27 12:11:51 2025 by rpki-client