$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa File: 4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa (raw, json) Hash identifier: hRTPUi293nFVVVNQouzY25t7TzoCDXs+x/FVepal2S0= Subject key identifier: E3:1B:1C:AD:6E:52:D6:3D:E3:BD:A7:DE:B1:20:35:62:9B:CD:99:06 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584A5FC5EA20575FC77B77400E80 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 399612 IP address blocks: 2604:7e00:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:ea:20:57:5f:c7:7b:77:40:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=4d013414-7b6b-49ee-8111-fad27e36829c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:30:a0:36:aa:9d:df:80:3b:7c:21:dd:b9:1f: 01:86:a7:8d:9d:a7:04:90:86:52:79:49:bd:25:b5: 79:26:ae:7a:68:e1:f8:d1:70:4e:9d:96:61:a9:3c: 3b:fd:39:30:9c:c7:0f:15:8a:67:75:26:08:32:68: fa:e9:46:59:d3:46:12:a9:34:c6:88:93:ae:7c:61: ee:68:08:ef:a8:88:c3:e8:43:95:46:50:eb:02:a0: c0:5a:87:da:d9:fd:ea:e3:40:76:99:cc:be:18:18: 6d:87:1d:2e:16:7c:61:1b:9d:71:95:7e:cc:cc:b6: 36:36:0e:59:9e:ad:e0:77:d9:90:78:b0:1b:57:3e: e7:ca:9b:11:fe:77:8f:3e:d9:1e:ca:3d:ec:62:86: 4c:15:84:77:ba:69:0c:a2:e5:71:b8:74:36:ce:da: b4:dd:74:9e:c5:9d:28:3b:8e:ca:e0:d4:9f:6d:56: c6:3e:60:78:fd:62:a3:63:cd:62:29:50:21:60:93: d0:a6:4b:3b:30:32:d2:1b:f9:c8:d7:e9:43:29:3c: d5:03:37:7b:36:6f:e9:12:c9:0e:b2:09:3c:c6:50: 27:40:a0:62:bc:77:4c:65:88:53:82:0e:af:49:a1: 33:59:e8:2c:25:a2:b8:93:cd:66:e3:3f:a4:e2:93: 5d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1B:1C:AD:6E:52:D6:3D:E3:BD:A7:DE:B1:20:35:62:9B:CD:99:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv6: 2604:7e00:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:84:6b:1c:66:e9:91:d2:e5:00:90:f5:91:19:ad:c8:00:6b: 85:31:da:ee:e0:d1:53:32:4d:7e:46:03:a5:02:cb:49:15:3e: 6c:92:6d:2d:61:a6:67:44:fc:2d:68:61:c2:06:ef:96:9a:46: 39:96:49:72:77:4e:e0:11:33:da:9a:27:71:e8:ea:1d:89:8a: 34:96:1b:ac:15:37:32:63:1c:25:6b:36:77:79:0e:2d:f2:ce: e1:e9:e9:29:a2:e1:b2:90:92:1b:8c:0e:12:0f:42:ef:21:88: c8:2e:d5:8e:4f:b9:54:14:76:f0:42:37:6e:17:20:f5:ac:05: 8c:c8:49:82:4e:5d:76:d9:12:71:48:5f:30:11:6e:94:ae:53: 7c:94:59:31:e0:d6:de:97:7a:24:dc:9f:b2:ee:28:6a:0e:3c: 93:38:f0:14:2c:cc:c0:eb:c4:07:96:89:e2:f7:8b:dc:b7:bc: 98:19:9d:20:d6:c5:6f:93:7c:94:2b:dd:c5:be:18:11:72:fc: 74:99:c5:7c:18:ed:9d:74:71:46:a5:67:48:6e:1c:54:22:53: a5:aa:a5:80:4d:a3:5d:5f:d2:3f:94:4e:dd:5f:3d:93:6c:cf: 68:04:53:45:b5:02:fa:2c:2b:2c:0c:ba:19:7a:7c:0c:6c:9f: de:d3:20:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxeogV1/He3dADoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk NGQwMTM0MTQtN2I2Yi00OWVlLTgxMTEtZmFkMjdlMzY4MjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDCgNqqd34A7fCHduR8BhqeNnacEkIZSeUm9 JbV5Jq56aOH40XBOnZZhqTw7/TkwnMcPFYpndSYIMmj66UZZ00YSqTTGiJOufGHu aAjvqIjD6EOVRlDrAqDAWofa2f3q40B2mcy+GBhthx0uFnxhG51xlX7MzLY2Ng5Z nq3gd9mQeLAbVz7nypsR/nePPtkeyj3sYoZMFYR3umkMouVxuHQ2ztq03XSexZ0o O47K4NSfbVbGPmB4/WKjY81iKVAhYJPQpks7MDLSG/nI1+lDKTzVAzd7Nm/pEskO sgk8xlAnQKBivHdMZYhTgg6vSaEzWegsJaK4k81m4z+k4pNdGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOMbHK1uUtY9472n3rEgNWKbzZkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvNGZmM2FiZTktMjQ4Zi0z MjkxLWEzNWEtMmQ1NWE3OWFlMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgR+AAAx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEeEaxxm6ZHS5QCQ9ZEZrcgAa4Ux2u7g0VMyTX5GA6UCy0kVPmyS bS1hpmdE/C1oYcIG75aaRjmWSXJ3TuARM9qaJ3Ho6h2JijSWG6wVNzJjHCVrNnd5 Di3yzuHp6Smi4bKQkhuMDhIPQu8hiMgu1Y5PuVQUdvBCN24XIPWsBYzISYJOXXbZ EnFIXzARbpSuU3yUWTHg1t6XeiTcn7LuKGoOPJM48BQszMDrxAeWieL3i9y3vJgZ nSDWxW+TfJQr3cW+GBFy/HSZxXwY7Z10cUalZ0huHFQiU6WqpYBNo11f0j+UTt1f PZNsz2gEU0W1AvosKywMuhl6fAxsn97TIAE= -----END CERTIFICATE-----Generated at Wed Jul 9 17:55:30 2025 by rpki-client