$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a9f0670-83b5-31d5-a58a-c5ed02d4fd59.roa File: 1a9f0670-83b5-31d5-a58a-c5ed02d4fd59.roa (raw, json) Hash identifier: vcJ3SlxLKzXtkXXYq3/YAuUwfVaY2d/lNlbVz2aXhd4= Subject key identifier: FD:B2:B2:D6:4E:F5:48:25:17:BD:F1:0A:B7:60:B4:6C:10:7F:3E:BE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F87A9FAD0E4E1C4E6C1ACD00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a9f0670-83b5-31d5-a58a-c5ed02d4fd59.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 13335 IP address blocks: 2606:4700:4008::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:9f:ad:0e:4e:1c:4e:6c:1a:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=8b9f0527-376b-4d7d-9992-d918d5803099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:59:a0:8e:d4:61:3f:8b:3f:9c:3b:9c:e4:33: e2:47:0b:15:a9:9f:a3:43:e7:3e:d0:63:34:a4:ed: 76:8a:2d:16:29:c1:2c:41:62:25:a1:b4:83:6d:0e: c1:fa:df:b6:e2:71:5d:7c:ef:fb:61:f5:41:e0:ca: 1c:a5:9c:50:3d:da:74:87:60:09:07:8f:6b:4a:be: a4:ae:ea:b5:77:50:ad:15:08:7b:aa:73:c6:0d:25: 50:f6:45:f5:97:9c:a5:06:14:ec:1b:13:38:c2:7b: 9c:63:33:19:8e:65:f4:0e:32:e4:68:d2:04:99:3d: ad:ec:be:2b:ad:ee:e5:1b:1b:db:ea:75:fc:00:ef: 80:40:6c:67:ad:66:a8:5b:46:1c:04:47:be:ba:c7: a6:bc:13:af:5c:b1:1e:ca:8e:d7:ca:01:10:f7:85: dd:d0:2e:de:c5:ed:72:28:e5:e2:9b:1a:83:45:dd: 5b:d2:1f:fc:d8:a1:1f:c7:f1:95:cb:8f:2b:f2:ed: 0c:48:b1:29:bb:95:46:00:21:68:22:a2:13:07:88: 64:eb:5d:a7:40:cf:67:8a:0a:86:df:a0:04:4a:b0: c9:75:1a:89:bc:4a:71:10:ad:66:2c:7f:19:54:ab: 79:8d:7d:89:52:a3:8f:b8:a5:46:e0:80:58:ce:54: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B2:B2:D6:4E:F5:48:25:17:BD:F1:0A:B7:60:B4:6C:10:7F:3E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a9f0670-83b5-31d5-a58a-c5ed02d4fd59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4008::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:43:a9:fe:13:05:de:5a:47:e5:15:2e:d5:6a:aa:37:cf:41: 21:a4:bb:53:4e:c6:ed:15:22:d3:e2:a4:a2:bd:73:24:ab:a3: a1:b7:e5:c9:1a:5f:4c:31:67:c4:a8:21:e4:ad:7f:55:73:03: dc:8e:92:70:a9:f3:e0:db:72:0b:ca:a8:ba:a5:83:01:af:8e: 96:34:0a:94:fe:c6:fc:f9:27:30:2c:41:a3:1d:07:1e:05:af: 01:09:bb:c7:f4:83:23:43:99:28:c3:e6:ec:05:a6:cc:37:77: 7a:7c:c2:c3:b3:c0:d2:06:3e:02:d1:34:65:8c:ef:25:86:e1: 0c:bb:8b:9e:20:c9:c7:12:50:d2:8a:a3:77:be:a7:02:3c:68: d6:77:7f:d5:4e:e6:ef:af:40:9e:b2:67:ce:08:52:69:74:05: 8f:b4:67:92:27:50:01:84:d7:38:c7:6d:27:9f:03:6b:d7:50: 44:aa:76:71:43:e0:a7:71:f6:fb:43:5e:bc:64:51:ad:b5:62: 46:18:91:26:ac:84:21:39:2a:32:0b:ce:81:5f:74:36:3d:22: 74:52:c1:21:b4:14:c2:a0:5c:0c:a6:6e:00:6e:0f:9b:10:b4: 5b:0d:18:88:37:38:df:1c:5d:09:d0:51:c8:47:d0:7c:ef:70: 0a:1f:3d:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn4ep+tDk4cTmwazQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk OGI5ZjA1MjctMzc2Yi00ZDdkLTk5OTItZDkxOGQ1ODAzMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FmgjtRhP4s/nDuc5DPiRwsVqZ+jQ+c+0GM0 pO12ii0WKcEsQWIlobSDbQ7B+t+24nFdfO/7YfVB4MocpZxQPdp0h2AJB49rSr6k ruq1d1CtFQh7qnPGDSVQ9kX1l5ylBhTsGxM4wnucYzMZjmX0DjLkaNIEmT2t7L4r re7lGxvb6nX8AO+AQGxnrWaoW0YcBEe+usemvBOvXLEeyo7XygEQ94Xd0C7exe1y KOXimxqDRd1b0h/82KEfx/GVy48r8u0MSLEpu5VGACFoIqITB4hk612nQM9nigqG 36AESrDJdRqJvEpxEK1mLH8ZVKt5jX2JUqOPuKVG4IBYzlSHkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP2ystZO9UglF73xCrdgtGwQfz6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWE5ZjA2NzAtODNiNS0z MWQ1LWE1OGEtYzVlZDAyZDRmZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgZHAEAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALBDqf4TBd5aR+UVLtVqqjfPQSGku1NOxu0VItPipKK9cySro6G3 5ckaX0wxZ8SoIeStf1VzA9yOknCp8+DbcgvKqLqlgwGvjpY0CpT+xvz5JzAsQaMd Bx4FrwEJu8f0gyNDmSjD5uwFpsw3d3p8wsOzwNIGPgLRNGWM7yWG4Qy7i54gyccS UNKKo3e+pwI8aNZ3f9VO5u+vQJ6yZ84IUml0BY+0Z5InUAGE1zjHbSefA2vXUESq dnFD4Kdx9vtDXrxkUa21YkYYkSashCE5KjILzoFfdDY9InRSwSG0FMKgXAymbgBu D5sQtFsNGIg3ON8cXQnQUchH0HzvcAofPUI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:27:59 2025 by rpki-client