$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2077fbb3-a712-382e-8a9f-fa3151f59015.roa File: 2077fbb3-a712-382e-8a9f-fa3151f59015.roa (raw, json) Hash identifier: XIa+3MhwoMOfMQLAQFbtkpu12KYcPhvjpaIN5KvFm3M= Subject key identifier: FA:F4:86:04:A8:16:BF:E3:5E:4B:84:7C:9F:76:EC:B5:65:7F:47:7F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A9C168DC0A7A31259FA00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2077fbb3-a712-382e-8a9f-fa3151f59015.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 2606:4700:68::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:9c:16:8d:c0:a7:a3:12:59:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=a09cecbb-0471-400c-bd32-34b48c642088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:de:d5:3e:62:f0:00:41:15:0b:6c:5a:3c:74: fe:a2:f2:1a:06:37:38:05:54:e0:de:1c:a3:cb:82: 99:d1:4d:10:4a:9d:06:a4:a6:f9:d2:8c:48:e1:d6: 9b:d9:30:a2:48:6b:14:6a:9b:75:69:4b:bd:89:df: e9:ad:66:40:6a:4f:65:05:a8:b9:68:ac:ce:82:6a: a2:64:ff:33:97:74:7d:4e:34:5a:3b:13:18:be:95: d9:b1:da:13:25:54:50:2f:84:e1:54:22:28:82:c0: 81:e4:29:70:db:60:4e:25:e0:b3:fa:3b:11:99:43: d2:4d:76:8f:67:6a:39:40:04:eb:ff:55:6b:9a:ee: a9:0c:78:67:1f:77:a0:31:1f:6f:76:ae:91:17:bc: 7e:e7:bb:2b:35:58:18:73:9e:bc:6b:f3:c6:13:97: a0:c3:ee:f5:e9:47:5e:cf:d7:88:a4:6d:57:75:58: 6a:54:b1:a3:ff:3f:e8:bd:24:18:ad:2a:cf:87:24: c5:97:6a:e9:6c:85:5e:14:b2:81:43:e4:9a:ab:3a: ed:ff:fb:d0:10:8d:fe:ee:c3:57:81:7d:c3:7d:30: 62:e8:9b:ce:f0:7f:20:d3:f1:d6:2a:a4:fe:3f:86: 96:0a:38:c2:ed:dc:0f:3e:4a:68:dd:03:fa:bd:6b: 4f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F4:86:04:A8:16:BF:E3:5E:4B:84:7C:9F:76:EC:B5:65:7F:47:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2077fbb3-a712-382e-8a9f-fa3151f59015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:68::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:27:01:c2:f3:02:4a:ab:da:62:bb:ca:a4:4c:24:df:52:31: 49:0b:e1:a4:9b:92:25:19:8d:18:41:43:c5:dd:b5:f4:b9:c7: b8:6a:51:26:94:a2:a4:a9:4b:0b:84:cd:14:56:0f:26:cd:f1: 37:b1:f8:9e:01:cc:84:c2:72:e6:d9:1a:a0:e7:34:4a:f0:00: df:ae:80:bd:cd:83:3d:7c:20:27:66:b1:1c:c9:c5:2d:cd:65: 70:39:c3:30:db:4b:cc:c9:6b:e1:bc:f8:38:7f:69:8d:6b:ec: 8f:93:a2:5b:eb:c1:b5:3a:82:6b:ac:b4:e4:43:96:60:9a:f3: cf:3a:d7:b3:d4:3c:5d:b0:14:ac:a3:6c:89:1c:60:67:07:54: 13:4d:70:6f:28:2c:38:bf:20:a5:10:89:60:e5:d7:cd:c6:28: 64:24:0c:2d:24:02:f1:7c:71:24:60:39:32:8a:15:8b:5b:91: 24:40:1b:95:20:6d:7f:9d:80:e1:12:68:ed:4c:49:0f:09:f4: c9:fc:92:79:1d:ab:67:be:8b:14:3a:db:1c:d2:d7:3d:a6:34: bc:1b:ba:27:3d:f1:ed:c9:3d:5a:2b:3a:16:12:26:9d:b6:e1: f4:ba:13:37:85:60:04:c8:3f:d8:8e:e5:ab:6c:25:f6:e4:25: 01:a2:df:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnwGpwWjcCnoxJZ+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk YTA5Y2VjYmItMDQ3MS00MDBjLWJkMzItMzRiNDhjNjQyMDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi97VPmLwAEEVC2xaPHT+ovIaBjc4BVTg3hyj y4KZ0U0QSp0GpKb50oxI4dab2TCiSGsUapt1aUu9id/prWZAak9lBai5aKzOgmqi ZP8zl3R9TjRaOxMYvpXZsdoTJVRQL4ThVCIogsCB5Clw22BOJeCz+jsRmUPSTXaP Z2o5QATr/1Vrmu6pDHhnH3egMR9vdq6RF7x+57srNVgYc568a/PGE5egw+716Ude z9eIpG1XdVhqVLGj/z/ovSQYrSrPhyTFl2rpbIVeFLKBQ+Saqzrt//vQEI3+7sNX gX3DfTBi6JvO8H8g0/HWKqT+P4aWCjjC7dwPPkpo3QP6vWtPuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPr0hgSoFr/jXkuEfJ927LVlf0d/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjA3N2ZiYjMtYTcxMi0z ODJlLThhOWYtZmEzMTUxZjU5MDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgZHAABo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwnAcLzAkqr2mK7yqRMJN9SMUkL4aSbkiUZjRhBQ8XdtfS5x7hq USaUoqSpSwuEzRRWDybN8Tex+J4BzITCcubZGqDnNErwAN+ugL3Ngz18ICdmsRzJ xS3NZXA5wzDbS8zJa+G8+Dh/aY1r7I+TolvrwbU6gmustORDlmCa888617PUPF2w FKyjbIkcYGcHVBNNcG8oLDi/IKUQiWDl183GKGQkDC0kAvF8cSRgOTKKFYtbkSRA G5UgbX+dgOESaO1MSQ8J9Mn8knkdq2e+ixQ62xzS1z2mNLwbuic98e3JPVorOhYS Jp224fS6EzeFYATIP9iO5atsJfbkJQGi30k= -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:41 2025 by rpki-client