$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8504ca86-4012-3e3a-91f5-5ade509a7941.roa File: 8504ca86-4012-3e3a-91f5-5ade509a7941.roa (raw, json) Hash identifier: Ga09ZAvDFplnGJpkKV2D61OX+LsVptOL4dlyRxw24EU= Subject key identifier: D7:1B:48:90:3F:B2:6F:B2:24:1E:DD:A8:38:18:9F:86:16:35:5D:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06D11B3AA591FFACACB180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8504ca86-4012-3e3a-91f5-5ade509a7941.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 2601:645:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:d1:1b:3a:a5:91:ff:ac:ac:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=a3f29222-5922-4be3-a962-a68a370a69a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:91:41:d9:47:50:44:b1:b2:e8:58:1d:86:9d: 6e:06:b8:b3:4f:b0:ea:f8:dc:ed:82:2f:5b:d8:81: 30:89:ca:97:06:06:12:83:91:9f:1d:27:a0:2f:33: f2:fa:a5:bb:08:71:5b:74:37:3e:48:12:23:7c:75: 86:1d:df:7a:00:99:2c:84:f6:b8:ed:74:81:d6:ef: d7:02:fc:c3:26:c5:bf:d2:80:56:89:3d:ce:ab:cb: 68:c9:24:38:19:02:8b:17:98:c3:3f:b5:0d:9f:8e: d2:5d:5c:62:b4:64:5f:a9:47:d6:8a:43:91:6a:a4: b2:6e:d3:6b:7e:1c:ae:34:fd:e3:e6:a5:bb:e3:28: 50:df:1b:d7:d0:39:94:da:27:11:24:e2:fe:35:0b: 5f:05:d1:f1:de:f8:fb:ac:c7:44:23:99:15:61:34: e4:cb:0d:f1:c8:2b:f6:f3:24:d5:ca:1a:d6:b8:f7: 69:7e:99:c8:a3:fd:21:0c:e9:8b:25:70:a9:ea:dd: 40:0b:80:aa:0d:b7:4d:e9:28:96:95:4c:db:d4:36: b1:46:24:7c:19:95:19:82:42:ee:40:54:76:a9:09: 5f:4b:c2:46:bc:70:f2:4d:ad:f7:9b:b6:71:68:65: bb:a5:c5:fc:27:0c:52:f6:33:d1:d5:a1:c2:8d:4b: 60:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1B:48:90:3F:B2:6F:B2:24:1E:DD:A8:38:18:9F:86:16:35:5D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8504ca86-4012-3e3a-91f5-5ade509a7941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:645:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2a:e2:9c:c1:da:99:18:ad:d8:22:db:ac:47:93:9e:bb:97: c8:40:4a:39:8e:3d:c1:9c:4a:b8:5c:54:b0:5a:84:07:b8:d4: 94:6d:d1:1e:8c:66:68:96:c7:b4:84:15:22:ed:25:78:e7:d2: 74:3a:19:d4:b9:4e:79:a6:2f:74:09:bb:cf:85:bd:c3:22:6a: 95:5f:82:39:90:cb:2c:b0:f3:e0:96:c7:71:75:65:a6:b3:ed: 64:f4:0c:5f:fe:8c:89:20:3a:0d:bd:a2:26:1b:93:e9:e1:65: 47:5a:51:f6:02:cb:d2:85:5c:a3:11:54:38:51:19:ac:46:05: ba:fe:e1:bb:1a:69:3f:36:00:82:38:6d:1d:a5:3e:32:87:4f: b1:82:5a:33:9f:75:54:4c:41:13:d4:97:7b:11:ff:2f:31:b4: 75:15:1c:7f:c8:33:59:e9:42:17:f3:29:e6:c2:f2:7c:c1:fd: 9c:be:22:8b:4c:10:ba:e0:e7:22:7b:9e:0a:37:59:e4:5b:13: 23:42:53:ee:ae:2c:42:35:d2:6c:19:d4:d6:1b:50:e6:85:b7: 6b:75:a1:8c:20:a4:93:a9:f8:97:18:a3:90:a9:03:2b:c6:3d: 62:63:3b:b9:34:34:85:a1:1e:ef:2e:d4:99:f4:83:ab:f4:7b: d3:40:18:b5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoMBtEbOqWR/6yssYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YTNmMjkyMjItNTkyMi00YmUzLWE5NjItYTY4YTM3MGE2OWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45FB2UdQRLGy6Fgdhp1uBrizT7Dq+Nztgi9b 2IEwicqXBgYSg5GfHSegLzPy+qW7CHFbdDc+SBIjfHWGHd96AJkshPa47XSB1u/X AvzDJsW/0oBWiT3Oq8toySQ4GQKLF5jDP7UNn47SXVxitGRfqUfWikORaqSybtNr fhyuNP3j5qW74yhQ3xvX0DmU2icRJOL+NQtfBdHx3vj7rMdEI5kVYTTkyw3xyCv2 8yTVyhrWuPdpfpnIo/0hDOmLJXCp6t1AC4CqDbdN6SiWlUzb1DaxRiR8GZUZgkLu QFR2qQlfS8JGvHDyTa33m7ZxaGW7pcX8JwxS9jPR1aHCjUtgXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNcbSJA/sm+yJB7dqDgYn4YWNV01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODUwNGNhODYtNDAxMi0z ZTNhLTkxZjUtNWFkZTUwOWE3OTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEGRUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhCrinMHamRit2CLbrEeTnruXyEBKOY49wZxKuFxUsFqEB7jUlG3R HoxmaJbHtIQVIu0leOfSdDoZ1LlOeaYvdAm7z4W9wyJqlV+COZDLLLDz4JbHcXVl prPtZPQMX/6MiSA6Db2iJhuT6eFlR1pR9gLL0oVcoxFUOFEZrEYFuv7huxppPzYA gjhtHaU+ModPsYJaM591VExBE9SXexH/LzG0dRUcf8gzWelCF/Mp5sLyfMH9nL4i i0wQuuDnInueCjdZ5FsTI0JT7q4sQjXSbBnU1htQ5oW3a3WhjCCkk6n4lxijkKkD K8Y9YmM7uTQ0haEe7y7UmfSDq/R700AYtQ== -----END CERTIFICATE-----Generated at Tue Jun 3 06:28:14 2025 by rpki-client