$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/7ef25e37-4a09-3253-a970-a0546e63a3fe.roa File: 7ef25e37-4a09-3253-a970-a0546e63a3fe.roa (raw, json) Hash identifier: /USRDSxN3/2v/WdVryUW18F4KHKrtzbyChxMZRMs5Es= Subject key identifier: 01:E9:96:1E:70:9C:E7:6A:59:92:E3:E7:4E:C8:12:EF:19:AA:BB:AD Certificate issuer: /CN=ab0439ab-3236-4080-a238-62d21f65e1ad Certificate serial: 010D0C9F4328584A0C0552899DE746EAFE5FA1C0 Authority key identifier: 17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/7ef25e37-4a09-3253-a970-a0546e63a3fe.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 198622 IP address blocks: 2602:80e:c000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:52:89:9d:e7:46:ea:fe:5f:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0439ab-3236-4080-a238-62d21f65e1ad Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=e30c30fc-e009-4cbf-9df9-6c18bbe6b212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ef:f7:95:88:6f:ff:71:fb:07:18:c8:20:c7: e7:0d:b1:e0:7a:73:25:34:1b:c2:c9:f4:64:e5:31: 32:f9:ab:72:64:4f:d3:c6:9e:46:4d:c8:00:f9:0f: 3a:56:a1:57:3d:77:c7:0b:56:c6:ee:f2:0a:1b:8a: d0:60:1a:e6:87:7b:92:57:24:d3:71:fa:a3:30:7a: 03:1e:f4:c2:67:e5:ad:8c:d2:48:13:16:79:ef:93: 02:7c:6a:61:15:e1:af:af:3a:10:01:8f:01:8f:66: 5e:0f:d2:9e:7e:0f:fb:34:5b:fb:24:c0:ed:43:b0: 85:33:a6:f4:55:3a:b7:a6:76:ac:58:5c:f7:64:17: 20:5b:e3:73:05:83:cf:3b:14:c7:dc:95:17:0d:49: d3:23:76:98:23:60:fc:cd:07:41:21:f9:7e:0e:a3: a9:1f:14:6e:d0:b3:e4:9f:1f:58:a9:10:f7:67:ff: f0:24:84:bb:15:1a:78:d1:32:e8:8c:29:8a:86:b7: 75:2c:40:e2:ec:af:dc:8c:47:85:ee:5f:3f:23:42: 67:fc:1c:2f:6e:1b:13:e3:d5:9f:6a:fa:b5:60:43: d7:60:3a:12:e5:8c:02:dc:2e:0f:e2:87:9e:3e:cf: 30:5c:67:42:21:a9:71:ae:6c:37:60:2c:12:ce:f9: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E9:96:1E:70:9C:E7:6A:59:92:E3:E7:4E:C8:12:EF:19:AA:BB:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/7ef25e37-4a09-3253-a970-a0546e63a3fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.crl X509v3 Authority Key Identifier: keyid:17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer sbgp-ipAddrBlock: critical IPv6: 2602:80e:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:31:3c:b2:9a:5a:43:a3:8f:45:51:b6:8b:1e:d7:b9:2a:7d: 4d:a4:0a:e5:e0:5c:96:95:b4:bc:89:62:e6:29:5b:00:2f:42: af:f5:5f:7d:4f:14:32:ac:91:1f:64:5b:2d:7e:4d:8c:d9:a6: 3f:31:34:15:89:07:bb:b3:99:5e:8b:c5:00:13:c6:a0:65:55: 15:33:82:3b:de:f9:ab:f9:a3:72:85:a5:b4:18:d5:67:9c:63: 60:36:2c:64:da:c5:3d:cd:73:f0:27:81:60:2d:2b:bf:1d:9e: 3b:f9:1e:d5:db:51:a1:41:53:92:02:ee:74:4b:74:fe:41:96: 58:5d:6c:3f:6c:13:96:91:1e:55:b9:a6:7f:b0:c8:35:99:f8: c4:44:d1:c2:33:e1:3c:67:ae:2a:70:47:b0:65:11:8b:bf:93: 55:9a:ed:57:29:d7:47:04:45:e3:ea:d2:cb:4a:d5:6f:e9:f4: 09:02:18:4a:12:48:40:15:e8:ab:74:f9:16:37:76:99:83:6a: ef:a3:01:21:24:66:5e:25:3b:d5:b3:1d:0f:d9:28:f1:a4:41: 33:69:dd:7f:60:9e:a1:75:ba:32:36:61:49:0e:6f:76:9e:9e: e5:23:dd:2d:40:e8:f1:89:94:f0:e4:ed:c7:e1:13:f1:c7:16: b1:f0:80:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoMBVKJnedG6v5focAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIwNDM5YWItMzIzNi00MDgwLWEyMzgtNjJkMjFmNjVl MWFkMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZTMwYzMwZmMtZTAwOS00Y2JmLTlkZjktNmMxOGJiZTZiMjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe/3lYhv/3H7BxjIIMfnDbHgenMlNBvCyfRk 5TEy+atyZE/Txp5GTcgA+Q86VqFXPXfHC1bG7vIKG4rQYBrmh3uSVyTTcfqjMHoD HvTCZ+WtjNJIExZ575MCfGphFeGvrzoQAY8Bj2ZeD9Kefg/7NFv7JMDtQ7CFM6b0 VTq3pnasWFz3ZBcgW+NzBYPPOxTH3JUXDUnTI3aYI2D8zQdBIfl+DqOpHxRu0LPk nx9YqRD3Z//wJIS7FRp40TLojCmKhrd1LEDi7K/cjEeF7l8/I0Jn/BwvbhsT49Wf avq1YEPXYDoS5YwC3C4P4oeePs8wXGdCIalxrmw3YCwSzvnKxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAHplh5wnOdqWZLj507IEu8ZqrutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjA0 MzlhYi0zMjM2LTQwODAtYTIzOC02MmQyMWY2NWUxYWQvN2VmMjVlMzctNGEwOS0z MjUzLWE5NzAtYTA1NDZlNjNhM2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIwNDM5YWItMzIzNi00MDgwLWEy MzgtNjJkMjFmNjVlMWFkL2FiMDQzOWFiLTMyMzYtNDA4MC1hMjM4LTYyZDIxZjY1 ZTFhZC5jcmwwHwYDVR0jBBgwFoAUF0Cy9uReLQ26ZzruEeAYaMPwXa8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjA0MzlhYi0zMjM2LTQwODAtYTIzOC02MmQy MWY2NWUxYWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIDsAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHIxPLKaWkOjj0VRtose17kqfU2kCuXgXJaVtLyJYuYpWwAvQq/1 X31PFDKskR9kWy1+TYzZpj8xNBWJB7uzmV6LxQATxqBlVRUzgjve+av5o3KFpbQY 1WecY2A2LGTaxT3Nc/AngWAtK78dnjv5HtXbUaFBU5IC7nRLdP5BllhdbD9sE5aR HlW5pn+wyDWZ+MRE0cIz4TxnripwR7BlEYu/k1Wa7Vcp10cERePq0stK1W/p9AkC GEoSSEAV6Kt0+RY3dpmDau+jASEkZl4lO9WzHQ/ZKPGkQTNp3X9gnqF1ujI2YUkO b3aenuUj3S1A6PGJlPDk7cfhE/HHFrHwgOo= -----END CERTIFICATE-----Generated at Sun Jun 8 06:03:56 2025 by rpki-client