$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa File: 8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa (raw, json) Hash identifier: 0ZZdubExlHMrIDBtGavmCYK9qWI7YwLfxGm9a3/Ri9k= Subject key identifier: 77:BA:A0:25:C2:B5:6A:8C:A2:3E:DC:B4:E7:CC:9F:CF:CB:E1:82:A1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F71532E1EC3B1F241917FB00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 2606:4700:4021::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:32:e1:ec:3b:1f:24:19:17:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=9cda5aa2-122e-40cd-8125-9dfdcf019476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:13:c0:f9:f2:36:e5:99:d5:fc:d3:ed:9d:7c: bb:c4:8a:1c:3d:4a:f8:b1:87:dd:67:da:77:61:65: 51:d7:d6:ea:17:4a:f9:64:df:31:60:0c:9a:98:23: bf:d4:92:d9:a8:84:31:5d:a2:33:98:e3:38:d3:2a: 12:75:26:43:71:63:a4:73:16:fd:0f:7e:0d:7c:c9: f0:90:56:29:7c:22:84:f8:74:72:04:03:4c:be:1b: e4:b5:c7:c2:a5:c0:53:5a:8a:c7:60:f2:3d:51:ed: 7e:8b:53:38:03:9a:0c:b1:a6:3f:b8:66:26:92:f9: 52:75:c7:69:3d:48:cc:98:59:c0:86:75:81:85:34: e2:45:f4:d8:c8:72:ee:1a:67:29:d1:82:9a:87:45: f5:e9:9c:a2:71:c6:75:1a:67:43:6f:f2:27:6b:0d: 44:e8:8b:19:20:07:9e:e4:5a:5e:20:b6:fa:93:bb: 01:eb:ed:8e:9e:6b:5a:f0:df:7f:7d:5d:63:e8:af: 32:16:cc:fe:3a:9d:67:c4:6e:02:22:67:00:27:e0: 22:05:e2:f6:b5:bd:0d:83:0e:26:d6:b6:dc:72:c1: 7d:97:11:2b:1e:bb:2d:02:dd:90:63:ce:e9:cf:d1: f9:6d:62:64:21:79:d0:0e:0a:0a:52:3f:b9:ef:8c: ae:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BA:A0:25:C2:B5:6A:8C:A2:3E:DC:B4:E7:CC:9F:CF:CB:E1:82:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4021::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:97:0b:3b:ba:5e:f6:89:f5:71:47:2d:f7:f4:eb:5d:21:74: 4c:46:c2:34:9f:37:22:48:e5:2a:e9:6b:3e:4e:5f:34:35:c9: 73:b3:17:a4:75:63:68:62:7e:fe:5d:d5:29:e5:0e:c3:74:6a: b1:8c:00:e1:6d:63:a6:cf:c7:56:f6:d2:20:08:7f:09:c8:47: 20:e4:8a:69:6a:8f:60:25:77:46:4f:c4:33:28:36:05:17:29: b5:5a:57:76:c0:aa:05:ac:cd:46:b6:72:ec:1b:42:ef:52:90: af:6a:51:cc:37:3e:a1:e4:06:49:be:27:a4:c3:f7:0e:86:f2: f1:43:ba:d6:24:df:cb:e2:16:25:7f:80:2c:eb:81:b8:72:8c: 82:22:55:82:43:f1:cf:f5:3e:01:20:f4:9e:7f:e9:bc:3f:59: 3d:d2:69:b3:d0:bc:74:94:d5:f6:3d:e1:35:50:8c:d6:e9:6e: 2f:b5:98:47:7b:0b:15:73:46:0e:3a:e9:f5:35:86:8e:d1:84: 2d:f9:25:fc:2c:7c:d9:5c:0b:e6:50:7d:94:79:2f:9c:a9:c2: b5:00:65:10:2e:7d:3c:88:49:e3:39:05:7e:40:f6:15:f4:0c: 20:1f:44:13:3b:76:34:7b:26:92:ce:5e:fc:09:36:87:b8:55: 4a:2d:bf:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn3FTLh7DsfJBkX+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk OWNkYTVhYTItMTIyZS00MGNkLTgxMjUtOWRmZGNmMDE5NDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphPA+fI25ZnV/NPtnXy7xIocPUr4sYfdZ9p3 YWVR19bqF0r5ZN8xYAyamCO/1JLZqIQxXaIzmOM40yoSdSZDcWOkcxb9D34NfMnw kFYpfCKE+HRyBANMvhvktcfCpcBTWorHYPI9Ue1+i1M4A5oMsaY/uGYmkvlSdcdp PUjMmFnAhnWBhTTiRfTYyHLuGmcp0YKah0X16ZyiccZ1GmdDb/Inaw1E6IsZIAee 5FpeILb6k7sB6+2Onmta8N9/fV1j6K8yFsz+Op1nxG4CImcAJ+AiBeL2tb0Ngw4m 1rbccsF9lxErHrstAt2QY87pz9H5bWJkIXnQDgoKUj+574yuSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHe6oCXCtWqMoj7ctOfMn8/L4YKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGY3OGExZTItMWQwYi0z N2Q5LTlmZTUtOGVkOTEzZmFjM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACCXCzu6XvaJ9XFHLff0610hdExGwjSfNyJI5Srpaz5OXzQ1yXOz F6R1Y2hifv5d1SnlDsN0arGMAOFtY6bPx1b20iAIfwnIRyDkimlqj2Ald0ZPxDMo NgUXKbVaV3bAqgWszUa2cuwbQu9SkK9qUcw3PqHkBkm+J6TD9w6G8vFDutYk38vi FiV/gCzrgbhyjIIiVYJD8c/1PgEg9J5/6bw/WT3SabPQvHSU1fY94TVQjNbpbi+1 mEd7CxVzRg466fU1ho7RhC35JfwsfNlcC+ZQfZR5L5ypwrUAZRAufTyISeM5BX5A 9hX0DCAfRBM7djR7JpLOXvwJNoe4VUotvxk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:48 2025 by rpki-client