$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa File: da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa (raw, json) Hash identifier: sP0E/VIQ0+dRQKr8389tCym9LLRHjZnEX2leT0X3Gk0= Subject key identifier: 29:DA:EA:43:A4:B5:E8:CB:E5:A0:91:C0:3B:18:E5:47:92:B3:25:F7 Certificate issuer: /CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Certificate serial: 010D0C9F4328584A10353BB43C8BBF75A27DBF00 Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 14263 IP address blocks: 2607:f578::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:3b:b4:3c:8b:bf:75:a2:7d:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=d65f452a-1cf4-4630-ac1f-ed26aeb3a993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4f:cf:5e:4a:5e:57:f2:2a:1b:0d:90:11:69: e7:8d:95:7a:d0:de:88:26:c9:68:64:8e:91:d2:09: 91:db:88:1a:1c:16:90:67:6e:1b:e9:dd:2f:56:7c: fc:74:8a:24:f7:06:63:6b:26:03:cc:76:b3:f9:63: 70:bd:e4:87:5f:4c:74:50:17:c1:13:e6:01:1b:29: f5:27:31:c8:9b:33:6d:0e:13:c5:83:ec:01:4e:08: a1:2c:05:ab:54:d1:16:c7:ab:27:84:40:44:e8:31: da:53:19:aa:9d:03:de:09:09:41:d0:e4:06:e6:7d: 0e:d9:69:bb:7b:98:b7:18:63:0f:e3:0d:3d:59:7c: fb:cd:aa:9a:ce:cd:29:f7:f6:f2:83:3b:2b:e4:7d: 63:6c:5e:ae:fb:6f:2c:f3:9a:5d:d2:bf:7c:93:87: 01:65:f6:5b:e1:19:2f:20:a8:5c:06:f1:5b:71:8d: 05:29:b1:e5:71:c4:cc:3b:29:59:30:9f:61:02:e8: 5e:db:81:af:31:20:fe:b6:f5:48:47:e0:68:cc:6e: 9b:fe:77:d4:c2:70:f6:98:33:2e:93:bd:0d:06:c8: 04:aa:9f:17:c2:6f:42:57:bc:fd:fe:21:40:78:b7: be:35:60:9f:6e:de:4d:a0:94:02:f3:71:7f:5f:4f: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DA:EA:43:A4:B5:E8:CB:E5:A0:91:C0:3B:18:E5:47:92:B3:25:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl X509v3 Authority Key Identifier: keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer sbgp-ipAddrBlock: critical IPv6: 2607:f578::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b0:1d:03:bc:3e:a2:cf:2c:aa:cc:1a:0f:72:79:1f:c0:88: a8:27:8d:17:f9:e1:06:32:26:b0:c4:77:a6:87:cb:29:ba:65: 34:38:25:84:65:41:6a:6b:ea:78:4e:a5:a2:2b:86:19:6b:51: ff:81:ea:ee:d6:97:95:ac:5a:d9:8b:6a:16:37:4c:ee:8f:cf: 56:c2:ef:14:3c:e3:22:6a:58:78:64:53:f8:41:a9:5a:d2:af: 11:5e:01:e9:4d:4a:35:dd:ff:f0:60:6d:8a:33:c5:c2:50:c9: 22:65:42:71:d4:f3:9e:87:78:84:26:36:99:16:49:13:42:0e: 12:e4:2e:45:ad:97:00:85:45:bb:fe:3a:cd:80:ce:d5:16:db: f9:6d:09:51:63:15:6d:94:39:64:32:b0:4b:7f:d9:0f:ef:94: 98:5e:25:13:06:b0:ae:9b:c4:0c:b2:d4:e2:4d:3e:1c:50:75: 44:ee:ca:d9:5b:1d:d9:c6:00:e1:aa:88:ff:53:f0:0d:0d:6e: 6f:c2:35:2e:98:93:2f:91:25:36:84:f4:1e:5d:d0:a9:98:0d: 9a:25:e2:b6:81:ad:6d:86:c8:f2:d6:ba:f3:69:83:ee:ea:82: 0b:ad:05:ba:35:63:ce:54:bc:2e:5a:cc:ab:79:d5:cb:13:d4: d6:e3:82:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoQNTu0PIu/daJ9vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc5MzdiNzYtMTQwMS00YTE5LTg2ZWYtMjM1MWZkMDE5 OGE2MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ZDY1ZjQ1MmEtMWNmNC00NjMwLWFjMWYtZWQyNmFlYjNhOTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU/PXkpeV/IqGw2QEWnnjZV60N6IJsloZI6R 0gmR24gaHBaQZ24b6d0vVnz8dIok9wZjayYDzHaz+WNwveSHX0x0UBfBE+YBGyn1 JzHImzNtDhPFg+wBTgihLAWrVNEWx6snhEBE6DHaUxmqnQPeCQlB0OQG5n0O2Wm7 e5i3GGMP4w09WXz7zaqazs0p9/bygzsr5H1jbF6u+28s85pd0r98k4cBZfZb4Rkv IKhcBvFbcY0FKbHlccTMOylZMJ9hAuhe24GvMSD+tvVIR+BozG6b/nfUwnD2mDMu k70NBsgEqp8Xwm9CV7z9/iFAeLe+NWCfbt5NoJQC83F/X0+auQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCna6kOktejL5aCRwDsY5UeSsyX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkz N2I3Ni0xNDAxLTRhMTktODZlZi0yMzUxZmQwMTk4YTYvZGEyZTk1NDAtZjEwNi0z ZmVmLWE1MTgtM2EyYWE5YjFmZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDc5MzdiNzYtMTQwMS00YTE5LTg2 ZWYtMjM1MWZkMDE5OGE2L2Q3OTM3Yjc2LTE0MDEtNGExOS04NmVmLTIzNTFmZDAx OThhNi5jcmwwHwYDVR0jBBgwFoAUzCmYA5nGRcTgpU9GWUkMpY/nz8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkzN2I3Ni0xNDAxLTRhMTktODZlZi0yMzUx ZmQwMTk4YTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1eDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARsB0DvD6izyyqzBoPcnkfwIioJ40X+eEGMiawxHemh8spumU0OCWE ZUFqa+p4TqWiK4YZa1H/geru1peVrFrZi2oWN0zuj89Wwu8UPOMialh4ZFP4Qala 0q8RXgHpTUo13f/wYG2KM8XCUMkiZUJx1POeh3iEJjaZFkkTQg4S5C5FrZcAhUW7 /jrNgM7VFtv5bQlRYxVtlDlkMrBLf9kP75SYXiUTBrCum8QMstTiTT4cUHVE7srZ Wx3ZxgDhqoj/U/ANDW5vwjUumJMvkSU2hPQeXdCpmA2aJeK2ga1thsjy1rrzaYPu 6oILrQW6NWPOVLwuWsyredXLE9TW44JK -----END CERTIFICATE-----Generated at Mon Jun 9 02:11:30 2025 by rpki-client