$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a21b6903-d5e4-3748-9b67-77206fb7f440.roa File: a21b6903-d5e4-3748-9b67-77206fb7f440.roa (raw, json) Hash identifier: vD1LLSUEon75jJ4prLr45Guhe9jyDAdHdPKEdG31yXE= Subject key identifier: B7:AB:4B:80:A7:20:84:2D:8A:0C:6B:9E:86:55:41:62:19:03:17:75 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584A3CE02DAE0046B7F8253228E0 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a21b6903-d5e4-3748-9b67-77206fb7f440.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 137409 IP address blocks: 2606:f18b::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:2d:ae:00:46:b7:f8:25:32:28:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=3e28df1f-7ea4-428b-88c6-365483f21454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:45:17:48:ff:ea:30:cf:62:2f:09:86:81:e7: c3:69:d7:76:dd:08:ee:46:b5:c2:c6:7e:5f:07:62: 7d:10:67:88:f8:dd:c4:51:f6:90:0d:ee:48:a0:b7: 9c:24:3d:a1:a5:64:01:35:dd:0d:ce:db:01:30:b6: 46:6c:b4:ff:5d:9e:75:83:f9:03:d2:d3:20:62:09: e2:12:39:cb:8a:3d:83:66:56:da:22:b4:55:41:6c: 72:70:e6:fe:dc:c2:6f:71:2f:f1:38:fc:53:fa:f7: 40:9c:9b:e7:c5:17:c9:fb:ad:e1:7b:40:5a:d1:19: c0:6a:a9:92:e6:4d:fe:82:0e:83:3f:f8:bc:16:1f: 65:90:cb:3c:55:d5:15:5b:3d:ee:d0:99:78:c4:8f: 96:24:e9:d0:dd:0c:c6:58:6f:15:e9:12:90:2e:bc: a3:51:e6:4e:c6:dc:60:1c:fa:db:48:63:9d:ee:06: fa:09:71:21:d0:ef:54:0d:be:52:de:9a:d7:11:e8: fc:c9:13:52:e9:d9:9a:7f:48:9c:26:e6:32:53:95: 16:5f:3e:dc:f7:9e:1b:72:a9:1b:68:54:e6:77:76: 3f:6c:ce:19:ee:5b:1e:3e:39:f2:c2:e4:3f:94:fb: de:81:e7:b6:9b:33:83:7d:22:d6:42:c4:9e:49:f7: d9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AB:4B:80:A7:20:84:2D:8A:0C:6B:9E:86:55:41:62:19:03:17:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a21b6903-d5e4-3748-9b67-77206fb7f440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2606:f18b::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:af:7a:e7:2b:a6:14:10:a6:50:b5:98:1e:55:92:a5:25:c8: f8:6a:0e:96:01:5e:1b:8e:0c:6f:1c:08:c6:ac:38:35:b7:3d: 2f:0c:e1:ae:b8:23:c0:8a:81:1c:5a:36:23:f6:e8:2c:20:2c: 0f:f5:da:d0:37:20:e5:03:e6:28:b1:7b:e9:f7:be:3c:4d:fe: bd:f7:0b:8a:e9:a4:49:4b:9a:fb:e9:30:71:6d:f7:f7:ca:65: 88:b8:fb:b0:fb:5f:68:5b:ff:80:94:30:46:e7:c6:79:2e:00: 3c:2a:c2:d5:30:b1:a1:a0:14:81:29:ef:29:91:72:92:d4:49: 47:c2:33:84:a5:dd:46:78:4e:a0:66:9c:7f:2f:bf:57:d4:f3: d1:c9:ef:c2:5e:c5:b0:3b:e0:66:15:7b:78:59:74:b3:6e:dd: 19:20:a4:5a:a5:91:a5:2e:78:a9:9f:fc:1a:37:ee:45:e9:1c: 08:da:bd:01:c7:50:c2:a5:96:68:d0:0d:7c:82:14:6a:2c:dc: 2c:e1:fa:10:95:cf:da:2f:39:f6:19:f2:74:8b:a7:6e:36:0f: 1a:bd:e0:8b:2b:55:72:63:e6:06:a4:be:59:2e:14:79:24:33: c4:3a:30:c5:88:21:b9:59:a3:20:c5:d2:b1:a8:11:19:26:45: d2:f5:f9:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEo84C2uAEa3+CUyKOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk M2UyOGRmMWYtN2VhNC00MjhiLTg4YzYtMzY1NDgzZjIxNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0UXSP/qMM9iLwmGgefDadd23QjuRrXCxn5f B2J9EGeI+N3EUfaQDe5IoLecJD2hpWQBNd0NztsBMLZGbLT/XZ51g/kD0tMgYgni EjnLij2DZlbaIrRVQWxycOb+3MJvcS/xOPxT+vdAnJvnxRfJ+63he0Ba0RnAaqmS 5k3+gg6DP/i8Fh9lkMs8VdUVWz3u0Jl4xI+WJOnQ3QzGWG8V6RKQLryjUeZOxtxg HPrbSGOd7gb6CXEh0O9UDb5S3prXEej8yRNS6dmaf0icJuYyU5UWXz7c954bcqkb aFTmd3Y/bM4Z7lsePjnywuQ/lPvegee2mzODfSLWQsSeSffZdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLerS4CnIIQtigxrnoZVQWIZAxd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYTIxYjY5MDMtZDVlNC0z NzQ4LTliNjctNzcyMDZmYjdmNDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbxizBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALr3rnK6YUEKZQtZgeVZKlJcj4ag6WAV4bjgxvHAjGrDg1tz0vDOGu uCPAioEcWjYj9ugsICwP9drQNyDlA+YosXvp9748Tf699wuK6aRJS5r76TBxbff3 ymWIuPuw+19oW/+AlDBG58Z5LgA8KsLVMLGhoBSBKe8pkXKS1ElHwjOEpd1GeE6g Zpx/L79X1PPRye/CXsWwO+BmFXt4WXSzbt0ZIKRapZGlLnipn/waN+5F6RwI2r0B x1DCpZZo0A18ghRqLNws4foQlc/aLzn2GfJ0i6duNg8aveCLK1VyY+YGpL5ZLhR5 JDPEOjDFiCG5WaMgxdKxqBEZJkXS9fny -----END CERTIFICATE-----Generated at Thu Jul 10 08:08:35 2025 by rpki-client