$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/4b8dc84a-2b50-3661-a858-cd3c92400224.roa File: 4b8dc84a-2b50-3661-a858-cd3c92400224.roa (raw, json) Hash identifier: XASYnOp0jOrlDLxVR4GH3uXMZbXLzs1WvC5u9x4NJ5A= Subject key identifier: 65:4C:21:6E:7E:E4:5E:82:01:B0:FC:C3:44:9F:2C:24:13:B3:CC:B1 Certificate issuer: /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Certificate serial: 010D0C9F4328584A0C0556018FEE97482AB5A520 Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/4b8dc84a-2b50-3661-a858-cd3c92400224.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 26223 IP address blocks: 2605:c900::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:56:01:8f:ee:97:48:2a:b5:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=8f2e41d4-b38b-4235-b347-2cf4f3124d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:85:6e:dd:99:97:a5:87:3b:62:26:84:34:33: f6:7b:60:b3:af:d6:5a:b2:6a:14:dc:12:07:d6:e1: 70:20:f7:c6:e7:d9:47:2a:1c:e7:d6:dc:dd:3e:85: 7b:8e:77:a1:84:7f:a2:ed:a1:57:27:c2:9f:52:61: 5a:e5:f7:3b:3c:9f:cb:43:35:02:76:e4:13:1b:1e: fd:24:57:49:6a:a3:ae:1d:43:07:59:1b:8c:56:39: 7b:61:0a:d4:29:f0:6a:c0:74:24:e7:ee:da:91:90: 5d:df:3b:8d:ae:a5:85:86:b4:b0:87:49:10:68:4e: b6:c2:0b:91:00:20:8e:6a:23:3e:41:72:3c:06:3b: 38:f0:62:c8:2b:e2:db:34:e7:71:13:c3:d2:1a:cc: 1a:8d:30:13:34:c5:45:c5:59:cb:f4:2e:b5:4c:b0: e5:b9:63:dc:0e:fe:4a:5c:9d:48:31:02:4d:ba:4a: a1:11:5a:9b:63:6f:7e:ec:48:56:d5:38:95:1c:a7: 20:9b:b1:0c:99:81:b1:e7:5d:1f:10:7c:9b:a9:3d: fb:f8:7b:de:bc:6b:28:f0:35:0d:e8:f9:73:aa:56: c0:02:4c:75:d9:33:b9:4e:cb:19:61:da:44:b7:2a: 24:e3:b4:1d:ca:e7:c9:f1:c0:f5:68:0d:11:2b:59: 27:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4C:21:6E:7E:E4:5E:82:01:B0:FC:C3:44:9F:2C:24:13:B3:CC:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/4b8dc84a-2b50-3661-a858-cd3c92400224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl X509v3 Authority Key Identifier: keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer sbgp-ipAddrBlock: critical IPv6: 2605:c900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:56:d6:7e:78:79:e4:20:12:15:da:34:73:be:63:34:c3:01: bd:ca:21:3f:c6:ec:5c:9e:26:51:80:3b:fa:44:4e:6d:ad:c8: 65:e3:4c:ec:99:1f:38:66:da:54:ac:94:64:4b:83:d6:10:f6: 3a:d0:24:8e:24:c9:1e:ed:b1:75:f3:a2:97:89:56:eb:d0:5e: 23:8c:c2:20:59:0c:9e:cf:16:6d:a4:1f:2a:94:da:24:91:8b: 70:75:d1:bf:c8:e9:5e:9b:48:fb:16:e0:8c:b4:90:b7:ae:fc: d7:39:ea:c7:7c:a2:5a:a6:49:9d:42:4f:50:fb:01:b9:b6:85: 97:67:01:c6:c1:16:60:89:be:66:51:6f:87:7e:25:e3:f8:f4: 50:49:4a:42:47:a1:8a:7b:71:28:75:59:d9:1c:64:b8:12:95: a9:e5:a0:10:d3:7a:20:1f:4e:69:dc:bc:02:da:28:3e:78:36: 05:43:94:61:37:8c:d7:0d:a5:51:d1:09:2a:3a:16:a8:0e:5e: cd:da:e6:7a:2b:f7:67:4d:dc:d7:a4:d2:6c:db:aa:60:6d:ee: 61:97:29:ca:4b:30:92:c8:89:47:0a:02:f4:e9:6d:14:56:81: 56:eb:61:cc:5e:d1:fb:bb:f3:d6:03:1f:60:dd:1e:f0:1b:71: 5b:6f:9d:bd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoMBVYBj+6XSCq1pSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJm ODJlMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OGYyZTQxZDQtYjM4Yi00MjM1LWIzNDctMmNmNGYzMTI0ZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oVu3ZmXpYc7YiaENDP2e2Czr9ZasmoU3BIH 1uFwIPfG59lHKhzn1tzdPoV7jnehhH+i7aFXJ8KfUmFa5fc7PJ/LQzUCduQTGx79 JFdJaqOuHUMHWRuMVjl7YQrUKfBqwHQk5+7akZBd3zuNrqWFhrSwh0kQaE62wguR ACCOaiM+QXI8Bjs48GLIK+LbNOdxE8PSGswajTATNMVFxVnL9C61TLDluWPcDv5K XJ1IMQJNukqhEVqbY29+7EhW1TiVHKcgm7EMmYGx510fEHybqT37+HvevGso8DUN 6PlzqlbAAkx12TO5TssZYdpEtyok47QdyufJ8cD1aA0RK1knCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGVMIW5+5F6CAbD8w0SfLCQTs8yxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZi YzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvNGI4ZGM4NGEtMmI1MC0z NjYxLWE4NTgtY2QzYzkyNDAwMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y2YmMwNmEtMGE0Mi00NzU4LTg2 MjktOGM5MGVjZjJmODJlLzdmNmJjMDZhLTBhNDItNDc1OC04NjI5LThjOTBlY2Yy ZjgyZS5jcmwwHwYDVR0jBBgwFoAUIo7n+g4AQMW6PyBnd/o8Bb1vWs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04Yzkw ZWNmMmY4MmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXJADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6VtZ+eHnkIBIV2jRzvmM0wwG9yiE/xuxcniZRgDv6RE5trchl40zs mR84ZtpUrJRkS4PWEPY60CSOJMke7bF186KXiVbr0F4jjMIgWQyezxZtpB8qlNok kYtwddG/yOlem0j7FuCMtJC3rvzXOerHfKJapkmdQk9Q+wG5toWXZwHGwRZgib5m UW+HfiXj+PRQSUpCR6GKe3EodVnZHGS4EpWp5aAQ03ogH05p3LwC2ig+eDYFQ5Rh N4zXDaVR0QkqOhaoDl7N2uZ6K/dnTdzXpNJs26pgbe5hlynKSzCSyIlHCgL06W0U VoFW62HMXtH7u/PWAx9g3R7wG3Fbb529 -----END CERTIFICATE-----Generated at Sat Jul 12 05:53:55 2025 by rpki-client