$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa File: 42446862-1602-3fe1-8bf3-b4a41f6898f6.roa (raw, json) Hash identifier: BaF6QRxiEX5U6HdoEAlzUwRH+82gVdJNpGV/weJgY8A= Subject key identifier: B7:66:49:20:DD:D3:1E:C3:93:27:D1:66:4F:F5:AF:ED:E9:9A:3B:01 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A7BB0B695FC8497560941FB80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 54138 IP address blocks: 2604:c980:2400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b6:95:fc:84:97:56:09:41:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=91bf35d4-6bea-4d31-953f-25af8a1e293b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:36:b5:50:09:2a:20:d6:ec:f0:e7:71:7b: ee:37:c1:f5:2d:a9:a8:00:8b:bc:47:f1:15:cc:59: d8:a8:44:1a:82:7a:97:2b:42:c9:c2:25:ec:22:a4: 34:28:74:76:6d:8d:ad:4e:69:63:2f:12:3f:af:26: 34:1a:33:81:10:6a:bc:3a:45:37:c0:2d:d6:a2:99: 7d:5f:1d:3d:3f:d6:25:47:42:8e:be:60:9c:31:9c: 86:5b:80:34:c2:48:99:4c:fc:20:68:ff:ab:05:fa: 47:e3:6e:90:25:49:0f:3a:3a:97:06:ef:0c:ed:c8: 3e:c9:47:d9:6e:c7:a6:05:7a:40:34:e5:10:1b:3a: 95:34:b3:1f:92:58:22:59:cc:dc:a5:2c:2a:88:99: 7a:48:7f:ed:b9:c9:4a:f4:50:ec:1a:63:a5:0f:e3: 0e:2d:32:c0:48:03:11:2f:08:1e:a6:60:ae:0f:af: c2:8e:43:62:b1:0a:c0:56:ab:ab:2a:dd:bc:8d:4a: 4b:a9:eb:67:c1:d6:3c:76:50:2e:0f:be:5d:72:8c: 5d:e6:19:af:b1:f8:92:90:35:28:99:c1:d7:a7:57: 56:f7:6b:ba:0d:0b:21:7c:1f:71:0c:91:20:4b:68: f1:05:72:6a:59:2b:49:0a:4c:13:39:a3:ca:41:8a: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:66:49:20:DD:D3:1E:C3:93:27:D1:66:4F:F5:AF:ED:E9:9A:3B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2604:c980:2400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:1b:a0:f0:43:61:c6:9d:37:d5:14:a0:41:75:18:32:86:da: e9:0a:0e:db:56:85:c8:4c:e3:46:1d:5d:e7:ba:c3:75:28:6d: 66:d9:fe:ab:c5:48:62:33:9f:5c:d6:1b:9d:0e:df:0f:2a:14: e2:a5:1a:66:67:8c:f7:61:7b:90:20:75:ca:82:f8:5b:4d:72: 51:68:65:ab:ce:80:c7:d5:1c:3d:ac:23:24:69:3b:38:c6:65: 25:c9:cc:53:a8:f2:90:54:18:b6:5f:c8:3c:92:c4:19:69:6a: cb:dc:c8:2b:dd:75:fa:7d:10:33:46:b6:bb:56:88:64:a6:7e: 70:d8:1e:e2:f6:aa:e7:b8:2f:77:9e:b6:d9:96:fc:36:f4:ec: b2:a3:c4:c6:88:e2:0c:88:91:1f:64:1f:29:71:bb:43:a0:b4: da:81:95:4a:fa:ea:52:30:9e:ce:ca:e4:cf:89:1a:94:78:1c: 19:fc:7d:a2:5d:9b:42:ec:b2:42:3e:f2:7f:c4:0c:74:65:12: 7c:41:f7:21:3d:04:45:dc:02:c7:8d:aa:bf:17:ca:cb:7c:a2: b3:83:c0:f5:44:de:3a:00:fa:d3:27:fb:14:99:8f:01:98:cd: 48:ae:b0:85:c7:b7:4f:4a:09:95:07:4b:0d:fd:58:f1:21:a4: ee:8c:f8:7e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEp7sLaV/ISXVglB+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk OTFiZjM1ZDQtNmJlYS00ZDMxLTk1M2YtMjVhZjhhMWUyOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRk2tVAJKiDW7PDncXvuN8H1LamoAIu8R/EV zFnYqEQagnqXK0LJwiXsIqQ0KHR2bY2tTmljLxI/ryY0GjOBEGq8OkU3wC3Wopl9 Xx09P9YlR0KOvmCcMZyGW4A0wkiZTPwgaP+rBfpH426QJUkPOjqXBu8M7cg+yUfZ bsemBXpANOUQGzqVNLMfklgiWczcpSwqiJl6SH/tuclK9FDsGmOlD+MOLTLASAMR LwgepmCuD6/CjkNisQrAVqurKt28jUpLqetnwdY8dlAuD75dcoxd5hmvsfiSkDUo mcHXp1dW92u6DQshfB9xDJEgS2jxBXJqWStJCkwTOaPKQYrf8QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLdmSSDd0x7DkyfRZk/1r+3pmjsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNDI0NDY4NjItMTYwMi0z ZmUxLThiZjMtYjRhNDFmNjg5OGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTJgCQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADxug8ENhxp031RSgQXUYMoba6QoO21aFyEzjRh1d57rDdShtZtn+ q8VIYjOfXNYbnQ7fDyoU4qUaZmeM92F7kCB1yoL4W01yUWhlq86Ax9UcPawjJGk7 OMZlJcnMU6jykFQYtl/IPJLEGWlqy9zIK911+n0QM0a2u1aIZKZ+cNge4vaq57gv d5622Zb8NvTssqPExojiDIiRH2QfKXG7Q6C02oGVSvrqUjCezsrkz4kalHgcGfx9 ol2bQuyyQj7yf8QMdGUSfEH3IT0ERdwCx42qvxfKy3yis4PA9UTeOgD60yf7FJmP AZjNSK6whce3T0oJlQdLDf1Y8SGk7oz4fg== -----END CERTIFICATE-----Generated at Tue Jul 22 20:23:42 2025 by rpki-client