$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/22f1cb91-8ecf-3596-adde-62641e5c004e.roa File: 22f1cb91-8ecf-3596-adde-62641e5c004e.roa (raw, json) Hash identifier: 54tCM9oX2CUkPRdreZC9I6uG0HB8Pzv/eiHDj/OGhts= Subject key identifier: 65:9D:E5:F8:6B:4D:36:E9:82:1E:F4:D4:AA:0F:15:1F:70:B5:07:8D Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F4328584A03A54D97AF97BF6BDDBDC580 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/22f1cb91-8ecf-3596-adde-62641e5c004e.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 395403 IP address blocks: 2620:4d:4090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4d:97:af:97:bf:6b:dd:bd:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=9195e6e0-bdad-4bec-8bfe-f5ced31cd8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7d:08:d6:a4:f4:1f:6d:fc:b9:eb:e7:c9:92: bc:e1:57:0d:5a:e8:65:c7:68:40:54:8b:8d:de:37: c5:2a:17:07:ab:22:07:60:24:aa:8b:da:c3:24:29: 42:16:5d:70:4b:b2:e2:a6:ed:cb:ad:43:ea:ff:f9: 8e:a2:2c:b0:a5:86:69:78:25:c1:c9:72:dc:29:ae: 6a:ad:f5:ec:bb:99:7f:e7:d8:8c:0e:97:96:b0:44: 9d:43:dd:07:38:ca:a3:78:07:32:0e:16:ca:13:24: b0:dc:09:13:e5:a4:65:79:d9:82:5d:e1:3b:e9:28: 2e:da:bb:97:4a:b2:07:c2:84:62:d8:41:2b:c9:64: dc:2f:52:a4:c6:c9:2d:23:57:82:ea:0c:a2:f1:fe: ca:91:a7:4c:97:90:7e:03:5f:ae:7d:94:df:70:df: 92:02:95:17:77:2f:14:74:e8:0d:d5:27:45:09:8c: fd:df:91:00:d9:57:7e:2b:c7:5a:43:03:ae:13:a3: 30:1d:69:b1:f2:ca:8f:5c:54:73:94:ad:35:7b:13: c7:68:a8:ce:c2:0c:0e:ee:24:27:29:56:e2:9d:63: 8b:3c:b1:97:92:e4:bc:44:35:85:fc:d7:09:e3:97: b7:72:92:fa:fa:5a:ee:c6:04:aa:f0:20:4a:94:f3: 62:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9D:E5:F8:6B:4D:36:E9:82:1E:F4:D4:AA:0F:15:1F:70:B5:07:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/22f1cb91-8ecf-3596-adde-62641e5c004e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:4090::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b7:77:c0:d5:4b:06:5d:e8:91:22:37:21:34:ab:40:a5:ed: f9:8e:ed:89:c7:ae:09:35:31:d9:ea:a8:29:6e:4f:57:be:83: f8:ee:79:93:42:55:9b:99:1d:6e:01:b9:1f:1e:f4:3f:5c:b5: cc:e3:d8:80:43:e1:c0:8e:b9:9e:7a:c3:05:d7:ff:af:42:46: 23:9d:6f:ca:97:59:46:02:40:cc:f6:04:5c:32:df:ad:69:d8: ca:2d:ad:b9:11:73:78:1e:80:50:a4:b6:31:40:5b:ef:d7:62: b2:de:53:00:fc:8a:20:23:bd:02:ea:bb:81:fe:45:9f:dc:8a: c2:e6:d2:2b:84:91:da:09:33:c3:a1:1e:e4:4a:5f:4e:61:b6: ca:dd:2f:2c:2f:66:d2:3d:15:f4:11:b3:7f:f7:06:eb:aa:68: a1:dc:7a:7e:13:9f:08:48:b9:97:e1:4a:3c:81:5b:b6:db:28: 9c:c7:43:7c:0b:cd:79:01:86:d9:40:eb:85:e7:e7:05:0d:35: f0:4c:bd:99:ef:4d:8b:a4:08:ff:65:98:63:45:0b:c6:90:7f: f7:bb:10:46:b8:23:05:23:55:ce:3d:37:e7:6e:19:80:3a:9c: ba:39:ce:48:0a:af:2a:95:54:20:38:8a:75:02:3b:32:44:d5: c6:40:23:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoDpU2Xr5e/a929xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk OTE5NWU2ZTAtYmRhZC00YmVjLThiZmUtZjVjZWQzMWNkOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin0I1qT0H238uevnyZK84VcNWuhlx2hAVIuN 3jfFKhcHqyIHYCSqi9rDJClCFl1wS7Lipu3LrUPq//mOoiywpYZpeCXByXLcKa5q rfXsu5l/59iMDpeWsESdQ90HOMqjeAcyDhbKEySw3AkT5aRledmCXeE76Sgu2ruX SrIHwoRi2EEryWTcL1KkxsktI1eC6gyi8f7KkadMl5B+A1+ufZTfcN+SApUXdy8U dOgN1SdFCYz935EA2Vd+K8daQwOuE6MwHWmx8sqPXFRzlK01exPHaKjOwgwO7iQn KVbinWOLPLGXkuS8RDWF/NcJ45e3cpL6+lruxgSq8CBKlPNi2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGWd5fhrTTbpgh701KoPFR9wtQeNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvMjJmMWNiOTEtOGVjZi0z NTk2LWFkZGUtNjI2NDFlNWMwMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATUCQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJe3d8DVSwZd6JEiNyE0q0Cl7fmO7YnHrgk1MdnqqCluT1e+g/ju eZNCVZuZHW4BuR8e9D9ctczj2IBD4cCOuZ56wwXX/69CRiOdb8qXWUYCQMz2BFwy 361p2MotrbkRc3gegFCktjFAW+/XYrLeUwD8iiAjvQLqu4H+RZ/cisLm0iuEkdoJ M8OhHuRKX05htsrdLywvZtI9FfQRs3/3BuuqaKHcen4TnwhIuZfhSjyBW7bbKJzH Q3wLzXkBhtlA64Xn5wUNNfBMvZnvTYukCP9lmGNFC8aQf/e7EEa4IwUjVc49N+du GYA6nLo5zkgKryqVVCA4inUCOzJE1cZAIwA= -----END CERTIFICATE-----Generated at Sun Jun 8 13:50:07 2025 by rpki-client