$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa File: 2189e87f-7779-3596-9c34-f01904d2e2a0.roa (raw, json) Hash identifier: 3Tbp9TWyQDOCeuiXiimNOpl7B/pcd/hm9mp2V1EC4AY= Subject key identifier: 35:7B:37:17:2D:0D:AB:BB:88:21:E1:C7:BA:58:A3:B7:0D:B6:AA:48 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A71EB3B41BB1E16B36B6AA180 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 2001:56b:3f60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:3b:41:bb:1e:16:b3:6b:6a:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=f41b4c57-a231-4ff0-9b26-b3fa61faf06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d9:fc:c2:18:8b:f8:0c:0c:86:03:e6:20:5a: bb:63:76:0f:4c:e4:21:f5:b4:63:76:39:bd:07:ee: be:99:8d:59:4d:88:3c:17:5a:db:88:03:fc:85:31: f1:a5:00:a1:63:dd:05:a4:ab:9d:87:5e:67:d0:a3: ef:37:d1:9f:c7:ac:c8:09:b7:5e:c1:e8:7c:17:40: 7e:29:26:ca:d1:c0:e5:5a:49:b8:f2:02:bd:70:cc: cb:1f:88:bb:a0:6f:0a:03:53:db:ed:7d:28:4b:b8: aa:13:09:ed:07:81:b1:42:45:d1:e1:4b:7a:3c:3e: b5:0a:62:47:33:76:c5:85:65:31:67:01:0b:08:fc: c1:c6:86:54:6b:30:cd:66:fd:53:da:4b:99:6f:f6: 5f:db:40:02:36:60:d4:8d:03:38:38:ba:56:a8:fb: b1:f5:b6:9a:b1:ec:3e:25:d0:23:5f:30:89:18:21: b6:22:d4:f3:51:d0:e8:e5:d8:ac:13:8b:52:d5:9d: 33:a9:49:13:61:67:bd:7d:36:7c:ba:09:d6:2e:3b: 82:e1:11:09:cb:40:78:39:83:70:9c:0b:ff:c1:15: d2:f2:5d:08:cd:51:ec:37:30:ef:5b:74:06:ff:13: a8:d5:8a:98:ac:4a:39:dd:87:3e:24:23:4f:01:23: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7B:37:17:2D:0D:AB:BB:88:21:E1:C7:BA:58:A3:B7:0D:B6:AA:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:3f60::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:5f:12:8c:57:73:fd:b6:cc:e6:7f:87:e2:b5:8f:42:69:ac: e4:7c:c6:ce:83:4a:5a:cd:b8:1b:2b:d3:74:2d:42:01:a4:dd: bc:75:76:5a:3b:14:85:3c:24:d8:15:b7:2b:be:11:4e:bb:7c: 10:33:60:fd:cf:41:00:e7:58:28:43:09:5c:37:e1:9b:a6:b3: c0:65:4f:fa:8c:cf:68:b0:2d:97:39:95:05:f5:ea:9a:34:9a: 9a:90:4a:e8:63:c1:20:5a:3f:1a:a6:d1:25:51:3a:fe:15:cf: 8d:9f:e4:36:c3:28:de:09:0f:dc:b8:82:28:a0:35:ac:85:d9: e5:6a:86:d2:65:c7:44:d8:96:db:48:5d:c8:cc:40:e3:b9:e6: e8:20:9e:5c:44:fe:72:39:25:33:a3:20:48:3d:bb:06:22:e3: 98:f6:87:70:c1:51:a0:35:18:5c:1b:6b:01:c8:c9:7e:1e:fe: 7d:b6:b5:aa:d0:29:38:cb:36:c2:dd:b4:85:40:b0:39:f2:d2: 48:c7:9d:a0:7d:ba:9e:9c:6b:25:82:62:5b:bb:36:ff:01:3d: 09:6b:58:40:de:a0:50:1c:88:ed:22:3c:b1:88:1e:43:ca:6c: 86:7c:84:a0:fe:c5:36:f2:63:88:ca:5e:d6:65:b7:23:4d:0b: f1:35:fe:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpx6ztBux4Ws2tqoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk ZjQxYjRjNTctYTIzMS00ZmYwLTliMjYtYjNmYTYxZmFmMDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNn8whiL+AwMhgPmIFq7Y3YPTOQh9bRjdjm9 B+6+mY1ZTYg8F1rbiAP8hTHxpQChY90FpKudh15n0KPvN9Gfx6zICbdeweh8F0B+ KSbK0cDlWkm48gK9cMzLH4i7oG8KA1Pb7X0oS7iqEwntB4GxQkXR4Ut6PD61CmJH M3bFhWUxZwELCPzBxoZUazDNZv1T2kuZb/Zf20ACNmDUjQM4OLpWqPux9baasew+ JdAjXzCJGCG2ItTzUdDo5disE4tS1Z0zqUkTYWe9fTZ8ugnWLjuC4REJy0B4OYNw nAv/wRXS8l0IzVHsNzDvW3QG/xOo1YqYrEo53Yc+JCNPASPGVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDV7NxctDau7iCHhx7pYo7cNtqpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjE4OWU4N2YtNzc3OS0z NTk2LTljMzQtZjAxOTA0ZDJlMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFaz9g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFRfEoxXc/22zOZ/h+K1j0JprOR8xs6DSlrNuBsr03QtQgGk3bx1 dlo7FIU8JNgVtyu+EU67fBAzYP3PQQDnWChDCVw34Zums8BlT/qMz2iwLZc5lQX1 6po0mpqQSuhjwSBaPxqm0SVROv4Vz42f5DbDKN4JD9y4giigNayF2eVqhtJlx0TY lttIXcjMQOO55uggnlxE/nI5JTOjIEg9uwYi45j2h3DBUaA1GFwbawHIyX4e/n22 tarQKTjLNsLdtIVAsDny0kjHnaB9up6cayWCYlu7Nv8BPQlrWEDeoFAciO0iPLGI HkPKbIZ8hKD+xTbyY4jKXtZltyNNC/E1/k4= -----END CERTIFICATE-----Generated at Fri Jul 25 19:33:26 2025 by rpki-client