$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa File: a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa (raw, json) Hash identifier: YY1QZG3ORSAAkFKuI9uqlliay3AfCRqN35uokm+bMsU= Subject key identifier: 33:D0:9E:91:14:F3:7D:2A:27:D2:A1:D7:52:AF:2E:CE:1C:CE:41:AF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A71EB3DBBFDBB125B39DFD100 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 2001:56b:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:3d:bb:fd:bb:12:5b:39:df:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=90a24eee-3057-4be2-83f1-d5515e4d0ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:87:3a:67:50:ed:fb:2a:c1:41:92:b8:60:2e: 78:bb:f3:a6:52:66:80:18:e6:a2:ed:5b:16:18:e2: 4d:a0:5f:0f:f7:d3:8e:71:36:03:29:2d:62:ce:b2: 6d:11:dc:50:a9:0f:8c:75:bb:4d:bc:ab:c4:86:2e: 6a:fa:aa:09:cc:52:67:4f:ea:2a:f3:5c:40:64:77: f5:32:ee:dd:69:ba:9a:2f:00:50:61:af:76:1d:2f: cb:c1:22:16:ed:d0:74:4c:9e:72:94:a0:84:c2:9d: 8e:04:72:aa:bd:17:1f:58:dd:af:6c:4b:25:27:12: fb:43:65:20:a2:0f:6d:4d:89:63:49:33:55:62:11: 3d:5d:e0:47:f2:f1:f0:65:00:80:a1:b5:ed:d8:ae: bb:7d:5b:14:67:06:63:66:3c:09:22:ff:01:36:25: 8e:63:fa:42:b9:ea:c4:8e:84:4b:3c:ed:8e:1a:02: bb:4c:e2:b7:da:8b:4b:15:5a:ec:02:7b:cf:b0:a7: 6d:5d:37:73:f0:1a:6b:a3:d0:80:3b:34:bf:b1:55: 10:50:f0:84:41:7e:d4:a3:fa:9f:71:74:6f:4f:d8: e0:48:10:62:ef:06:bc:84:bc:35:79:77:62:dc:ef: b2:68:86:41:90:98:33:f8:7f:ca:a9:3d:17:2b:e4: 8f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D0:9E:91:14:F3:7D:2A:27:D2:A1:D7:52:AF:2E:CE:1C:CE:41:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:d4:2f:3f:49:be:e5:59:e2:38:76:e5:cc:8c:c8:b0:b1:28: de:85:14:b5:c7:0f:dc:e7:37:96:e7:bf:3a:6f:92:2d:54:25: 8c:9b:3f:de:c3:72:56:8a:54:30:a5:0c:57:0f:7f:ba:53:8e: f8:3a:89:61:2d:a0:a9:f9:18:38:8f:aa:64:e8:da:97:c3:b6: 15:ed:b9:18:0e:d7:93:fa:a0:20:a1:77:57:25:8c:d7:dc:a8: e7:25:b9:5d:d7:d0:50:ab:c1:09:f9:9f:c9:e9:d6:46:71:d0: 36:f2:bc:0e:55:63:15:62:38:fe:60:1d:94:11:2c:59:cc:2e: e1:2b:88:19:18:85:00:8e:bf:f4:69:73:ed:d3:41:ca:8b:7c: c2:9c:fa:c3:4f:e5:85:ed:f5:ac:2a:a7:cf:5b:6a:26:fc:87: a5:9c:25:06:7a:7a:b5:80:e9:6d:0f:ef:b8:8a:30:9a:51:bc: 93:7c:12:d0:8e:49:6b:29:46:2f:3c:d1:88:cb:9b:77:84:bc: d2:dd:ed:03:db:18:02:8f:20:48:b1:9e:c0:d6:0a:01:ea:76: 30:97:a3:5d:e5:25:26:a4:8c:65:d0:d3:d4:07:67:bc:78:36: 61:d9:a2:32:5b:11:38:e6:2a:2e:b9:8e:b4:b7:53:e0:d7:48: b8:5b:36:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpx6z27/bsSWznf0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk OTBhMjRlZWUtMzA1Ny00YmUyLTgzZjEtZDU1MTVlNGQwZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oc6Z1Dt+yrBQZK4YC54u/OmUmaAGOai7VsW GOJNoF8P99OOcTYDKS1izrJtEdxQqQ+MdbtNvKvEhi5q+qoJzFJnT+oq81xAZHf1 Mu7dabqaLwBQYa92HS/LwSIW7dB0TJ5ylKCEwp2OBHKqvRcfWN2vbEslJxL7Q2Ug og9tTYljSTNVYhE9XeBH8vHwZQCAobXt2K67fVsUZwZjZjwJIv8BNiWOY/pCuerE joRLPO2OGgK7TOK32otLFVrsAnvPsKdtXTdz8Bpro9CAOzS/sVUQUPCEQX7Uo/qf cXRvT9jgSBBi7wa8hLw1eXdi3O+yaIZBkJgz+H/KqT0XK+SPUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDPQnpEU830qJ9Kh11KvLs4czkGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTRhNGJiMTEtMjZkYS0z MzBhLWJiNWItZGUyODAyZmU3NmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFawAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKXULz9JvuVZ4jh25cyMyLCxKN6FFLXHD9znN5bnvzpvki1UJYyb P97DclaKVDClDFcPf7pTjvg6iWEtoKn5GDiPqmTo2pfDthXtuRgO15P6oCChd1cl jNfcqOcluV3X0FCrwQn5n8np1kZx0DbyvA5VYxViOP5gHZQRLFnMLuEriBkYhQCO v/Rpc+3TQcqLfMKc+sNP5YXt9awqp89baib8h6WcJQZ6erWA6W0P77iKMJpRvJN8 EtCOSWspRi880YjLm3eEvNLd7QPbGAKPIEixnsDWCgHqdjCXo13lJSakjGXQ09QH Z7x4NmHZojJbETjmKi65jrS3U+DXSLhbNiY= -----END CERTIFICATE-----Generated at Fri Jul 25 19:38:01 2025 by rpki-client