$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa File: c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa (raw, json) Hash identifier: Oc0Rsu+6VYcY4NR362MPdoiDPz8Us5qJBJNq8YNR9FM= Subject key identifier: 63:31:6F:F8:FF:8B:19:0D:52:F6:C5:1B:76:06:3D:A6:E1:B4:C4:5B Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F43285849FCAA6E6C5AA93B385D897930 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 6939 IP address blocks: 2604:ebc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:6e:6c:5a:a9:3b:38:5d:89:79:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=55fc0ed0-8d2c-4fa3-88cf-b1697efc5fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bb:6f:af:cf:4b:26:8f:26:41:fd:5c:77:f4: 00:6f:76:d3:dc:81:de:22:6c:7c:fa:97:73:6f:fe: 51:2a:5c:cb:d2:7f:20:4a:56:dd:58:ce:36:9e:52: c9:01:20:4f:65:c6:af:74:2b:ea:41:b6:c3:17:3f: 57:bc:06:52:ac:e5:8b:b0:e9:da:ba:91:bf:ef:bf: cf:20:33:a2:29:82:51:10:38:44:23:0b:3c:4f:f4: 2e:61:d0:f9:e8:d1:af:2a:1f:12:ad:48:2a:0b:5a: 53:a5:4d:5b:69:b0:f3:cb:d0:b8:b8:15:49:fa:f7: 2b:28:27:05:f4:13:f9:6c:a5:a3:e1:76:fe:05:0a: 58:35:e0:8c:c6:5d:13:5b:a1:ae:a0:fa:53:08:c3: 8f:0a:02:1a:5a:8f:39:49:01:56:45:e8:e9:15:93: 74:d1:88:83:13:3e:fd:c4:75:63:b9:f0:e0:af:fd: 51:e6:6f:14:cd:96:de:7f:25:cf:ed:9f:54:ef:08: ee:35:61:dd:a3:4c:8e:c8:2c:ad:a8:16:d6:06:f4: 67:d3:67:57:42:03:ef:0d:13:61:f0:ae:66:ef:a9: e4:10:e2:36:80:84:f8:10:9a:81:5a:21:06:cd:b4: 6b:23:25:33:8f:1b:aa:48:c6:dd:84:a5:90:19:76: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:31:6F:F8:FF:8B:19:0D:52:F6:C5:1B:76:06:3D:A6:E1:B4:C4:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv6: 2604:ebc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e5:7b:b2:09:75:bf:ad:99:ed:7f:00:fd:46:29:d3:1d:08: 29:d7:4f:32:5a:f2:46:b0:f6:ca:63:ce:81:0e:d5:03:37:7c: 6e:6c:68:63:8e:c5:bb:d9:3b:08:a7:6d:83:7d:43:ea:b1:42: 73:bf:01:70:b7:b1:06:f6:4d:a4:5c:5e:3d:2a:2f:6c:c9:e1: 2b:ff:01:5b:e6:2a:7f:69:0d:4b:77:16:ad:f4:09:7c:2b:e1: 44:91:19:ab:86:be:19:86:0d:78:71:f9:52:ff:4c:0a:1c:ac: ac:f3:2e:d9:08:5e:ce:64:b7:28:12:21:a6:a4:57:63:26:0b: db:48:8f:f4:1c:6d:38:86:c7:51:25:2a:dc:a8:af:cc:f2:03: 78:1b:bc:7c:a9:0c:12:38:3d:e3:45:f2:92:bb:a0:b1:47:9d: 04:5d:59:5d:5a:08:58:40:88:12:74:ed:d7:c8:49:f2:ee:7f: 42:12:7e:24:d7:a6:0f:45:88:18:62:b6:72:21:87:2a:12:9e: a0:98:a1:39:30:fb:3a:13:36:45:f0:76:c4:b6:cd:d6:09:ce: 47:1f:ec:4d:86:ee:d7:9d:3d:87:98:08:da:bc:29:48:3f:16: e9:42:2b:46:5b:05:c0:d7:58:6b:e5:68:98:30:78:d1:e8:26: b5:77:b3:f6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn8qm5sWqk7OF2JeTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NTVmYzBlZDAtOGQyYy00ZmEzLTg4Y2YtYjE2OTdlZmM1ZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rtvr89LJo8mQf1cd/QAb3bT3IHeImx8+pdz b/5RKlzL0n8gSlbdWM42nlLJASBPZcavdCvqQbbDFz9XvAZSrOWLsOnaupG/77/P IDOiKYJREDhEIws8T/QuYdD56NGvKh8SrUgqC1pTpU1babDzy9C4uBVJ+vcrKCcF 9BP5bKWj4Xb+BQpYNeCMxl0TW6GuoPpTCMOPCgIaWo85SQFWRejpFZN00YiDEz79 xHVjufDgr/1R5m8UzZbefyXP7Z9U7wjuNWHdo0yOyCytqBbWBvRn02dXQgPvDRNh 8K5m76nkEOI2gIT4EJqBWiEGzbRrIyUzjxuqSMbdhKWQGXZfdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGMxb/j/ixkNUvbFG3YGPabhtMRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvYzlmOGQ0OGEtYzlmMS0z YWQ4LWEyYjktNDhlNTQwYTJmOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJ5XuyCXW/rZntfwD9RinTHQgp108yWvJGsPbKY86BDtUDN3xubGhj jsW72TsIp22DfUPqsUJzvwFwt7EG9k2kXF49Ki9syeEr/wFb5ip/aQ1Ldxat9Al8 K+FEkRmrhr4Zhg14cflS/0wKHKys8y7ZCF7OZLcoEiGmpFdjJgvbSI/0HG04hsdR JSrcqK/M8gN4G7x8qQwSOD3jRfKSu6CxR50EXVldWghYQIgSdO3XyEny7n9CEn4k 16YPRYgYYrZyIYcqEp6gmKE5MPs6EzZF8HbEts3WCc5HH+xNhu7XnT2HmAjavClI PxbpQitGWwXA11hr5WiYMHjR6Ca1d7P2 -----END CERTIFICATE-----Generated at Wed Jun 4 22:47:51 2025 by rpki-client