$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f16e635-de93-3826-8e4b-34ff2c337298.roa File: 3f16e635-de93-3826-8e4b-34ff2c337298.roa (raw, json) Hash identifier: /YAN/N8sx+diNRbwFXigefcL9bSzXuw4/v/OJ31YxF0= Subject key identifier: 52:06:C3:8D:B0:1B:A0:38:A1:7E:97:58:10:73:AC:0F:4B:FF:7B:8F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A71EB3AFF92C5963D16548590 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f16e635-de93-3826-8e4b-34ff2c337298.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 2001:56a:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:3a:ff:92:c5:96:3d:16:54:85:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=0c5dcb09-7f1a-42e3-a7d1-4afdf024bc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:29:de:15:e7:d9:03:49:37:4f:67:2a:a1: 14:40:70:74:1e:5b:ac:e2:90:95:04:b8:93:a7:b3: b5:1d:9a:94:97:16:e1:30:b3:cf:fe:5d:09:e6:91: 1a:eb:18:b3:c2:33:91:cc:57:4e:9f:5a:07:48:fb: d7:cc:30:f7:be:fe:7d:b0:98:3c:ca:26:5d:1a:dd: fb:08:bb:9c:af:7b:fc:2a:0c:04:a2:e5:2f:8e:43: ad:1f:68:a7:f8:0b:19:67:e0:c5:ff:6f:fd:0c:c9: 6a:cb:e5:e3:8a:35:a9:ba:40:f9:ea:38:5b:47:6a: bb:d9:26:7f:c2:8d:ab:e8:6b:15:d1:e0:50:b7:95: 25:1c:b7:0e:84:5f:ae:c0:30:68:61:d5:32:74:c8: 1d:7b:f0:09:51:10:78:52:f3:27:c6:f9:60:f5:06: 02:b1:0b:01:18:aa:07:e6:3d:32:18:26:28:97:d0: 68:e0:e6:02:7a:42:2e:6c:36:51:32:6a:61:74:01: 73:5e:bf:a8:9f:6d:07:05:6f:7f:08:01:ed:b9:4f: a7:39:60:eb:e9:50:7f:c1:8e:66:0d:fb:b3:2c:18: a3:5f:ca:ae:79:58:59:42:39:43:fd:28:df:11:b6: 2b:e4:22:04:b6:67:30:75:92:66:cf:a1:a7:ca:f3: 71:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:06:C3:8D:B0:1B:A0:38:A1:7E:97:58:10:73:AC:0F:4B:FF:7B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f16e635-de93-3826-8e4b-34ff2c337298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56a:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5c:aa:48:6d:87:0f:19:72:d2:c9:24:9a:9b:9b:bb:d1:4d: 67:9a:6d:ef:71:ce:1c:07:9b:2c:56:76:3c:46:55:89:b1:0e: 07:b7:93:8e:a2:77:60:da:8f:b0:02:e7:b1:a2:06:45:ec:10: 2c:6f:a3:0e:06:51:6c:6b:17:34:95:af:e6:e6:78:a8:13:14: 44:46:af:d6:c7:27:2a:fb:fd:12:a9:2d:99:ae:42:6f:bc:79: 32:82:e4:74:15:63:1f:26:eb:68:57:84:f0:3c:51:a3:c5:10: da:4f:72:25:30:bb:0c:e9:84:f4:8a:23:04:03:09:f6:b4:5d: 63:08:81:28:79:5f:30:ee:21:d9:07:22:47:fa:24:4f:c8:bd: 8b:f3:5c:19:03:e8:aa:9f:1d:fa:1c:9f:a6:e6:a0:6f:6e:c0: 72:9c:c8:00:18:aa:21:31:19:eb:a7:1d:e1:41:21:f0:91:27: bd:c8:2c:e8:f9:60:9e:d3:33:fb:e4:c1:05:b6:e5:3d:23:c4: 48:7f:35:8f:61:1b:f1:98:e2:d6:0b:ad:a0:c5:73:77:b8:12: 3b:9c:9b:89:00:04:bf:d4:1e:83:33:fe:82:54:93:f6:c6:15: 60:32:58:de:5f:59:16:60:42:3f:ea:ae:49:52:84:6c:b9:bd: bd:26:6d:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpx6zr/ksWWPRZUhZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MGM1ZGNiMDktN2YxYS00MmUzLWE3ZDEtNGFmZGYwMjRiYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3kp3hXn2QNJN09nKqEUQHB0Hlus4pCVBLiT p7O1HZqUlxbhMLPP/l0J5pEa6xizwjORzFdOn1oHSPvXzDD3vv59sJg8yiZdGt37 CLucr3v8KgwEouUvjkOtH2in+AsZZ+DF/2/9DMlqy+XjijWpukD56jhbR2q72SZ/ wo2r6GsV0eBQt5UlHLcOhF+uwDBoYdUydMgde/AJURB4UvMnxvlg9QYCsQsBGKoH 5j0yGCYol9Bo4OYCekIubDZRMmphdAFzXr+on20HBW9/CAHtuU+nOWDr6VB/wY5m DfuzLBijX8queVhZQjlD/SjfEbYr5CIEtmcwdZJmz6GnyvNxUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFIGw42wG6A4oX6XWBBzrA9L/3uPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2YxNmU2MzUtZGU5My0z ODI2LThlNGItMzRmZjJjMzM3Mjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFagAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9cqkhthw8ZctLJJJqbm7vRTWeabe9xzhwHmyxWdjxGVYmxDge3 k46id2Daj7AC57GiBkXsECxvow4GUWxrFzSVr+bmeKgTFERGr9bHJyr7/RKpLZmu Qm+8eTKC5HQVYx8m62hXhPA8UaPFENpPciUwuwzphPSKIwQDCfa0XWMIgSh5XzDu IdkHIkf6JE/IvYvzXBkD6KqfHfocn6bmoG9uwHKcyAAYqiExGeunHeFBIfCRJ73I LOj5YJ7TM/vkwQW25T0jxEh/NY9hG/GY4tYLraDFc3e4Ejucm4kABL/UHoMz/oJU k/bGFWAyWN5fWRZgQj/qrklShGy5vb0mbVg= -----END CERTIFICATE-----Generated at Fri Jul 25 19:35:11 2025 by rpki-client