$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa File: 558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa (raw, json) Hash identifier: oIjDC7+7IXL83tMjCHWzPfcRPkzAsBSu7kXP7w6SgBg= Subject key identifier: A7:00:96:47:30:CB:65:AE:90:50:26:84:55:FE:B9:39:D6:CA:FE:94 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F43285849ED4FD4A2E6E7512F5D8EA700 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 54113 IP address blocks: 2602:816:5001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:d4:a2:e6:e7:51:2f:5d:8e:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=99f6b8e6-5b03-40ef-a7fd-88f451ea23b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:18:55:bd:0a:39:b4:29:d7:63:16:77:10:02: e1:fc:9a:b9:f4:56:78:e2:97:92:eb:c8:2c:b4:49: b0:97:89:93:c7:30:52:1e:47:5a:21:2f:bd:60:c1: 9c:8a:69:5d:d7:b2:2c:c5:12:d7:eb:8e:50:4c:04: 4d:fb:de:13:14:ad:a1:88:92:90:10:70:bd:8d:2f: 2e:f5:43:9d:7e:66:69:62:30:06:fa:46:69:a6:39: 9b:1e:f6:48:e9:ef:97:0d:89:12:b6:75:04:3d:39: 91:70:9b:eb:9c:db:4d:15:b9:f1:69:f2:db:e0:86: 56:49:3a:51:a2:d3:58:76:f3:80:42:2a:ec:0c:e2: da:9b:1a:6f:3b:40:04:fc:96:36:1a:6a:89:30:78: 0a:2a:00:88:a0:60:72:f0:fc:69:59:49:3f:be:db: e7:d2:be:66:b3:73:ca:d0:1a:a4:42:f8:04:cb:02: 91:93:21:fb:2e:59:b4:da:37:26:bc:ef:a0:de:1e: c9:72:cc:d5:81:e7:a7:55:63:11:d6:5a:b2:7c:18: 26:fc:9a:97:70:36:ab:c5:fe:6d:8f:49:3e:66:7b: 97:06:29:2b:b1:2a:ff:1a:67:ea:3d:27:60:a2:ac: cd:6d:45:ce:61:9f:de:d1:40:cf:21:cf:ba:15:22: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:00:96:47:30:CB:65:AE:90:50:26:84:55:FE:B9:39:D6:CA:FE:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:5001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:92:db:34:ec:d2:da:82:88:00:12:71:ae:39:56:a3:d8:ac: 85:8e:ac:54:02:70:e6:bd:5c:22:bf:c0:7d:b1:4b:b9:77:32: 41:5f:a4:07:87:89:af:bc:42:1d:2e:4c:4e:cb:a2:1d:3f:e4: a4:be:a6:23:43:dc:d3:cc:8c:55:3f:b7:1f:c8:3a:16:4d:aa: 78:4b:e5:0e:12:52:dd:9f:69:ed:6b:3a:bd:91:18:c4:63:7d: 8d:c7:72:91:55:35:24:e7:2c:ec:a7:c9:0d:fb:9a:92:f0:00: 82:85:a2:f0:9b:db:70:31:16:59:b8:4f:25:79:22:32:f8:97: 19:26:09:61:05:3f:37:e5:57:af:80:1b:3c:9b:4b:e1:11:55: 14:f9:ae:82:bf:d0:9f:b8:b1:a8:1a:bf:4a:09:5e:04:34:aa: 08:b4:f6:0d:42:d3:0f:43:3c:da:26:d1:60:a3:e4:c3:02:b2: 92:55:85:96:c4:7f:f5:c1:d5:4f:d0:a5:9f:e7:38:dd:a3:e5: 55:26:73:0e:9f:eb:a0:ba:d3:1f:58:d6:f2:14:b9:ac:a1:b5: 09:95:d1:95:2d:09:7f:54:60:2a:dd:8b:4d:ca:ad:f6:93:72: 6d:8a:ca:1d:56:ef:a2:bd:4e:b6:96:fc:c2:a5:d9:1c:9f:ad: a3:c9:bc:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEntT9Si5udRL12OpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk OTlmNmI4ZTYtNWIwMy00MGVmLWE3ZmQtODhmNDUxZWEyM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRhVvQo5tCnXYxZ3EALh/Jq59FZ44peS68gs tEmwl4mTxzBSHkdaIS+9YMGcimld17IsxRLX645QTARN+94TFK2hiJKQEHC9jS8u 9UOdfmZpYjAG+kZppjmbHvZI6e+XDYkStnUEPTmRcJvrnNtNFbnxafLb4IZWSTpR otNYdvOAQirsDOLamxpvO0AE/JY2GmqJMHgKKgCIoGBy8PxpWUk/vtvn0r5ms3PK 0BqkQvgEywKRkyH7Llm02jcmvO+g3h7JcszVgeenVWMR1lqyfBgm/JqXcDarxf5t j0k+ZnuXBikrsSr/GmfqPSdgoqzNbUXOYZ/e0UDPIc+6FSJbyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKcAlkcwy2WukFAmhFX+uTnWyv6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNTU4YTJlNjItZWMzMi0z ZWVkLWFjMzUtYjU0YjhmMGZjMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFlAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD+S2zTs0tqCiAASca45VqPYrIWOrFQCcOa9XCK/wH2xS7l3MkFf pAeHia+8Qh0uTE7Loh0/5KS+piND3NPMjFU/tx/IOhZNqnhL5Q4SUt2fae1rOr2R GMRjfY3HcpFVNSTnLOynyQ37mpLwAIKFovCb23AxFlm4TyV5IjL4lxkmCWEFPzfl V6+AGzybS+ERVRT5roK/0J+4sagav0oJXgQ0qgi09g1C0w9DPNom0WCj5MMCspJV hZbEf/XB1U/QpZ/nON2j5VUmcw6f66C60x9Y1vIUuayhtQmV0ZUtCX9UYCrdi03K rfaTcm2Kyh1W76K9TraW/MKl2RyfraPJvDg= -----END CERTIFICATE-----Generated at Tue Jul 1 07:12:49 2025 by rpki-client