$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c2aac561-04f2-3650-bcbe-844d7a9e370f.roa File: c2aac561-04f2-3650-bcbe-844d7a9e370f.roa (raw, json) Hash identifier: hkp0z4GqBjjJ5mr9NzA81H9JBw5dECcPuCFC3S4sTZc= Subject key identifier: 88:44:DB:DE:43:D9:CD:6F:56:2D:3A:E5:3E:75:E3:99:D6:E5:F0:7F Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584AA160D4EEEF9A7630205EFC60 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c2aac561-04f2-3650-bcbe-844d7a9e370f.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 11537 IP address blocks: 2001:468:c07::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d4:ee:ef:9a:76:30:20:5e:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=3750b589-d11b-4dcf-9dac-20ca52da6492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:41:c2:f7:fa:09:3d:b2:11:c2:cc:2e:7c:db: 40:9a:e7:dd:e0:56:0d:5b:b0:97:1a:00:13:44:9a: 61:3e:a9:0d:d9:e8:3f:04:85:bd:e0:18:5f:73:f5: 2e:e1:7c:89:59:9b:d0:62:87:da:39:d8:29:7e:82: 47:30:40:c6:ba:81:61:4c:a7:06:7f:63:03:75:35: 4b:f5:74:e4:a4:fa:3a:07:63:af:ea:bf:a7:74:ff: 0e:74:d6:7a:8b:ab:bf:d2:cd:31:50:95:44:d8:54: 27:e4:7a:28:8a:ba:d3:0f:fa:1e:24:5a:b8:2f:8e: 8e:47:df:83:06:8e:07:09:bf:78:07:48:82:02:72: f9:21:93:51:04:40:e2:1c:3e:34:51:dc:72:b1:f3: 6e:0d:ec:01:4a:85:2b:5e:f4:a0:3a:90:86:e2:f6: 27:c4:d2:32:ff:14:92:af:fd:84:a6:4c:c8:e7:b2: 2f:36:95:5e:ba:4b:2f:9d:15:b6:b1:87:fe:33:eb: 7b:92:42:a2:49:07:1d:81:ab:c6:cf:73:c1:19:0c: f1:4b:bd:ae:0c:1b:9a:a0:00:0f:47:e3:02:18:5c: f9:0b:aa:ca:58:60:f8:58:cd:74:d1:70:11:40:01: 97:b6:57:5c:95:59:af:33:5e:e8:23:ab:da:a7:32: e1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:44:DB:DE:43:D9:CD:6F:56:2D:3A:E5:3E:75:E3:99:D6:E5:F0:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c2aac561-04f2-3650-bcbe-844d7a9e370f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:c07::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:06:71:2e:88:90:2a:1e:a5:b0:0d:c6:66:c9:bc:b6:5c:34: 37:e1:97:b3:31:78:30:c2:8b:18:ff:17:2f:4f:06:4e:3e:38: fd:30:55:c8:a5:54:d1:d3:1d:aa:7e:ef:ce:99:54:32:77:b4: 75:b9:34:bb:48:72:d6:39:57:0b:e4:c5:82:02:c1:fe:d5:03: 3d:92:3d:03:69:bb:c0:ca:bb:59:c3:54:fe:0a:8c:f1:3a:63: a7:bf:c9:24:8c:1a:c1:61:a8:67:8b:80:92:5e:1b:ad:53:e4: 13:58:9e:f7:02:6a:20:94:3e:60:f3:7c:85:4d:b7:2a:4b:c4: 71:4e:70:04:c2:3f:f0:87:d2:b1:64:19:40:90:91:5e:c3:2b: c0:67:a2:7c:58:2e:d7:a0:97:71:9d:bc:54:6a:de:81:9b:f7: 99:2b:dd:99:4d:60:0c:ed:15:13:4d:b0:85:0d:95:15:3a:01: 9c:4f:d9:ea:85:ca:7b:9e:0f:fd:52:f8:3a:31:71:0e:3a:99: a6:86:83:9d:b6:86:df:51:62:0d:fe:b7:0f:32:a3:a7:13:a2: d6:79:d6:ed:a4:70:57:0f:81:01:ec:d3:f6:12:a8:68:41:8c: b2:7b:69:aa:bc:f8:0a:29:c0:1b:dc:05:23:b3:28:f7:f5:3e: 24:a5:33:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqhYNTu75p2MCBe/GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk Mzc1MGI1ODktZDExYi00ZGNmLTlkYWMtMjBjYTUyZGE2NDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEHC9/oJPbIRwswufNtAmufd4FYNW7CXGgAT RJphPqkN2eg/BIW94Bhfc/Uu4XyJWZvQYofaOdgpfoJHMEDGuoFhTKcGf2MDdTVL 9XTkpPo6B2Ov6r+ndP8OdNZ6i6u/0s0xUJVE2FQn5HooirrTD/oeJFq4L46OR9+D Bo4HCb94B0iCAnL5IZNRBEDiHD40UdxysfNuDewBSoUrXvSgOpCG4vYnxNIy/xSS r/2EpkzI57IvNpVeuksvnRW2sYf+M+t7kkKiSQcdgavGz3PBGQzxS72uDBuaoAAP R+MCGFz5C6rKWGD4WM100XARQAGXtldclVmvM17oI6vapzLh7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIhE295D2c1vVi065T5145nW5fB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYzJhYWM1NjEtMDRmMi0z NjUwLWJjYmUtODQ0ZDdhOWUzNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaAwH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQGcS6IkCoepbANxmbJvLZcNDfhl7MxeDDCixj/Fy9PBk4+OP0w VcilVNHTHap+786ZVDJ3tHW5NLtIctY5VwvkxYICwf7VAz2SPQNpu8DKu1nDVP4K jPE6Y6e/ySSMGsFhqGeLgJJeG61T5BNYnvcCaiCUPmDzfIVNtypLxHFOcATCP/CH 0rFkGUCQkV7DK8BnonxYLtegl3GdvFRq3oGb95kr3ZlNYAztFRNNsIUNlRU6AZxP 2eqFynueD/1S+DoxcQ46maaGg522ht9RYg3+tw8yo6cTotZ51u2kcFcPgQHs0/YS qGhBjLJ7aaq8+AopwBvcBSOzKPf1PiSlM3c= -----END CERTIFICATE-----Generated at Sun Jul 27 12:09:08 2025 by rpki-client