$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/086797ac-4131-300b-91ec-e0fa2bf3a29b.roa File: 086797ac-4131-300b-91ec-e0fa2bf3a29b.roa (raw, json) Hash identifier: C5raydhXmhVIWsLFYT9g1J5D0qXX3A9+OIjfgFD6lck= Subject key identifier: 03:67:9F:44:B8:81:43:01:44:16:60:F9:5F:05:E8:05:7D:AB:45:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43085B11E6B2E0085C02240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/086797ac-4131-300b-91ec-e0fa2bf3a29b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 2601:409::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:85:b1:1e:6b:2e:00:85:c0:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=2229a80c-94f0-4e7f-8cd3-c3fe9d395b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:98:3b:ec:52:5b:97:b9:c6:98:30:43:0a:bb: 77:aa:72:16:b0:14:2a:93:f1:88:33:0c:85:83:3e: 89:05:31:4a:ea:9f:f8:bd:f8:ee:1c:4f:37:6b:4c: 2f:ed:e1:72:d6:d0:37:1f:6d:bb:f9:12:83:a4:25: 6a:13:f4:e5:ad:1c:f7:91:23:49:02:2c:3a:43:8b: f8:43:09:92:e6:de:e9:b5:96:28:3d:35:85:ae:f4: 7d:c2:11:de:82:21:2b:83:e4:9a:09:74:44:a1:50: 6b:52:dc:df:a3:83:68:2d:7e:65:c9:5e:c4:b6:27: c3:7a:48:dc:ca:db:fa:dc:5f:03:ee:2d:bf:40:2d: 88:1a:da:6d:a3:5c:d4:a0:3b:86:14:61:0b:49:32: 2f:a0:cb:be:ed:62:ed:08:b9:8b:8d:ab:b6:e0:40: f8:90:73:6f:59:17:48:8c:6c:50:54:ea:dd:6c:42: c9:d0:3b:c0:d3:d4:93:17:0f:5b:f4:8b:39:2f:42: 26:54:2c:cc:92:36:47:27:c4:d7:9e:87:bd:8e:fc: 1b:ba:75:10:a8:06:de:dd:a6:02:87:49:e6:50:cd: 4b:42:6d:c1:c7:a5:a1:70:da:18:38:fa:42:e0:55: 59:20:c3:be:35:9f:60:aa:ac:3b:b4:42:15:bb:a0: 55:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:67:9F:44:B8:81:43:01:44:16:60:F9:5F:05:E8:05:7D:AB:45:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/086797ac-4131-300b-91ec-e0fa2bf3a29b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:409::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:fc:24:d9:67:d6:b4:e4:0b:35:0a:27:50:ae:cb:3c:85:48: a0:41:e1:2b:2e:97:d3:d3:9a:bf:47:30:15:e6:2f:59:2b:6a: 6b:89:3a:ed:a4:3a:24:45:50:ec:c0:a5:a3:79:e0:4c:d7:80: 9a:61:08:9a:94:36:c2:06:45:8e:f3:cb:5a:b4:40:5d:76:b8: dc:de:ed:1c:7b:23:04:89:33:bd:bb:ee:20:c7:cd:83:f9:18: 31:79:9c:0e:6b:6b:46:5a:cc:9c:b3:d2:38:4f:88:ad:3d:9a: 12:db:84:ca:0f:75:48:05:a9:c0:38:07:bf:0d:73:aa:1e:af: d3:e7:f9:f7:4a:04:9b:49:b4:57:0b:e9:6d:f2:8a:7f:cc:a6: a1:15:c4:87:33:07:b8:63:40:99:e1:54:3f:c5:76:2f:15:a8: bc:4b:72:b0:e1:8f:b0:f4:c1:f6:82:3a:e3:42:fb:c9:c6:ea: 54:df:f6:67:f1:53:cf:8b:57:a4:16:46:7e:67:f0:8e:73:7e: bc:77:c1:aa:25:75:5e:d8:90:61:10:5a:72:d1:c7:d1:5d:59: e7:f1:17:76:fa:48:aa:e8:00:04:df:fb:05:5b:71:58:48:0e: d4:7a:7c:e3:5e:1c:2a:90:a4:28:f4:3f:54:d8:31:71:87:41: 29:ad:7f:c5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnUMIWxHmsuAIXAIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjIyOWE4MGMtOTRmMC00ZTdmLThjZDMtYzNmZTlkMzk1YjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpg77FJbl7nGmDBDCrt3qnIWsBQqk/GIMwyF gz6JBTFK6p/4vfjuHE83a0wv7eFy1tA3H227+RKDpCVqE/TlrRz3kSNJAiw6Q4v4 QwmS5t7ptZYoPTWFrvR9whHegiErg+SaCXREoVBrUtzfo4NoLX5lyV7EtifDekjc ytv63F8D7i2/QC2IGtpto1zUoDuGFGELSTIvoMu+7WLtCLmLjau24ED4kHNvWRdI jGxQVOrdbELJ0DvA09STFw9b9Is5L0ImVCzMkjZHJ8TXnoe9jvwbunUQqAbe3aYC h0nmUM1LQm3Bx6WhcNoYOPpC4FVZIMO+NZ9gqqw7tEIVu6BVtQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFANnn0S4gUMBRBZg+V8F6AV9q0UlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDg2Nzk3YWMtNDEzMS0z MDBiLTkxZWMtZTBmYTJiZjNhMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEECQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAO/wk2WfWtOQLNQonUK7LPIVIoEHhKy6X09Oav0cwFeYvWStqa4k6 7aQ6JEVQ7MClo3ngTNeAmmEImpQ2wgZFjvPLWrRAXXa43N7tHHsjBIkzvbvuIMfN g/kYMXmcDmtrRlrMnLPSOE+IrT2aEtuEyg91SAWpwDgHvw1zqh6v0+f590oEm0m0 VwvpbfKKf8ymoRXEhzMHuGNAmeFUP8V2LxWovEtysOGPsPTB9oI640L7ycbqVN/2 Z/FTz4tXpBZGfmfwjnN+vHfBqiV1XtiQYRBactHH0V1Z5/EXdvpIqugABN/7BVtx WEgO1Hp8414cKpCkKPQ/VNgxcYdBKa1/xQ== -----END CERTIFICATE-----Generated at Tue Jun 3 08:02:37 2025 by rpki-client