$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fe67d33-8c33-3951-84e8-37e377a0ca45.roa File: 5fe67d33-8c33-3951-84e8-37e377a0ca45.roa (raw, json) Hash identifier: RcM5ZJ7Yaadxn4dA+XI67uuiw681Uf9KZ/JHZnzQ4Ok= Subject key identifier: 35:AC:31:42:F6:64:09:65:82:C3:59:AF:AF:4C:EC:4A:B9:1C:34:B5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F7153171D3093884A2D3D400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fe67d33-8c33-3951-84e8-37e377a0ca45.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 2606:4700:3001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:31:71:d3:09:38:84:a2:d3:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=9cff3e51-b9aa-4d3a-90b3-cc47e924aa48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c1:98:c0:51:14:17:78:1c:af:e4:2a:a5:32: 47:1d:af:a0:47:46:c2:6f:2a:86:21:22:74:b1:20: 80:22:09:85:4e:a1:c9:3a:dc:1b:7b:68:25:6a:15: e1:0c:5d:52:53:bb:36:15:fc:34:62:0c:5f:4a:e3: 70:38:55:18:2e:dc:71:12:11:18:24:ed:34:9c:99: a1:1b:63:20:64:ab:24:a3:57:68:ec:16:90:ea:a4: fc:72:7a:b5:c6:31:aa:31:ce:49:64:1e:e2:74:36: 9c:7f:af:dc:7d:62:66:f8:49:fc:44:a6:59:4b:cb: f8:51:2a:ad:5f:89:66:ae:7d:73:e3:95:da:a1:31: 88:73:85:66:43:51:3b:78:06:dd:47:9a:33:28:75: ae:48:a0:13:d1:e0:89:7f:36:83:10:a2:c1:3e:69: 7e:62:44:ef:ae:b9:f2:b6:28:5e:77:ff:60:ba:ca: 60:03:b5:d3:53:f6:12:7a:24:5c:0d:20:95:0e:42: c6:80:de:bf:72:14:ad:bf:fe:3e:be:20:ef:17:ef: fd:8d:55:56:c7:9a:84:5a:ae:39:e5:1d:7c:4e:f9: fd:a6:a9:71:ad:c0:74:aa:b5:c5:34:41:3b:2e:62: 3b:a9:83:19:ab:f7:12:88:f3:59:0b:a6:b9:d1:5e: 75:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AC:31:42:F6:64:09:65:82:C3:59:AF:AF:4C:EC:4A:B9:1C:34:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fe67d33-8c33-3951-84e8-37e377a0ca45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:0c:f5:04:86:07:76:0c:a3:53:8b:17:e0:7a:b5:5d:d2:6c: cb:5d:e3:cf:b5:96:f1:ed:68:e4:19:2a:7d:be:47:51:ce:2e: e1:c4:d8:ec:98:42:a8:31:40:0d:2f:46:e5:bd:5d:4c:0f:6a: 20:b8:a6:66:53:39:c3:16:08:f6:b5:c5:50:c4:71:ce:52:58: 42:7a:6a:f3:09:ce:f9:22:3f:e8:d2:2a:0f:2a:61:12:01:89: 14:8e:5e:21:3d:cb:75:74:91:84:38:e5:bd:00:e9:8a:bc:a4: 82:17:56:8a:11:5b:ee:c7:81:4e:12:23:67:b0:fc:ed:44:e5: 59:15:9e:56:c7:46:db:e9:95:3a:fe:2a:9e:c5:c8:4f:92:8d: e0:b7:4c:11:d7:8e:4a:f9:52:9b:f0:1c:bd:c5:e0:8d:2c:51: 25:c2:b9:dc:4c:96:a0:93:ec:4f:a5:51:c3:6b:ab:9d:ff:6c: fd:c8:e5:96:da:c6:a5:ed:69:38:53:3c:0d:30:a9:e8:2d:5d: 77:4d:fa:50:43:88:6f:75:ea:82:4d:3d:ae:b7:f3:89:50:1c: 47:74:35:96:ca:ad:e0:39:62:97:f0:00:a5:92:19:24:ad:83: cc:8b:ef:b2:6c:e7:3b:0c:84:c7:ee:14:77:ca:5d:1e:86:21: b6:d7:e6:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn3FTFx0wk4hKLT1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk OWNmZjNlNTEtYjlhYS00ZDNhLTkwYjMtY2M0N2U5MjRhYTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsGYwFEUF3gcr+QqpTJHHa+gR0bCbyqGISJ0 sSCAIgmFTqHJOtwbe2glahXhDF1SU7s2Ffw0YgxfSuNwOFUYLtxxEhEYJO00nJmh G2MgZKsko1do7BaQ6qT8cnq1xjGqMc5JZB7idDacf6/cfWJm+En8RKZZS8v4USqt X4lmrn1z45XaoTGIc4VmQ1E7eAbdR5ozKHWuSKAT0eCJfzaDEKLBPml+YkTvrrny tihed/9guspgA7XTU/YSeiRcDSCVDkLGgN6/chStv/4+viDvF+/9jVVWx5qEWq45 5R18Tvn9pqlxrcB0qrXFNEE7LmI7qYMZq/cSiPNZC6a50V51cwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDWsMUL2ZAllgsNZr69M7Eq5HDS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWZlNjdkMzMtOGMzMy0z OTUxLTg0ZTgtMzdlMzc3YTBjYTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADkM9QSGB3YMo1OLF+B6tV3SbMtd48+1lvHtaOQZKn2+R1HOLuHE 2OyYQqgxQA0vRuW9XUwPaiC4pmZTOcMWCPa1xVDEcc5SWEJ6avMJzvkiP+jSKg8q YRIBiRSOXiE9y3V0kYQ45b0A6Yq8pIIXVooRW+7HgU4SI2ew/O1E5VkVnlbHRtvp lTr+Kp7FyE+SjeC3TBHXjkr5UpvwHL3F4I0sUSXCudxMlqCT7E+lUcNrq53/bP3I 5ZbaxqXtaThTPA0wqegtXXdN+lBDiG916oJNPa6384lQHEd0NZbKreA5YpfwAKWS GSStg8yL77Js5zsMhMfuFHfKXR6GIbbX5is= -----END CERTIFICATE-----Generated at Thu Jun 5 19:01:52 2025 by rpki-client