$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/33c23409-f641-3c4d-8222-54698a7c377e.roa File: 33c23409-f641-3c4d-8222-54698a7c377e.roa (raw, json) Hash identifier: lyK2yAYXaNX6vKn96tZvfxAtbBRQveS2VdcATUJyZrU= Subject key identifier: 51:73:6E:AF:2E:55:36:B4:D4:90:D3:B7:FE:64:A2:19:18:CA:6D:02 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584A6C55DDC928BF2E4A64AA0378 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/33c23409-f641-3c4d-8222-54698a7c377e.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 32771 IP address blocks: 2620:111:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:dd:c9:28:bf:2e:4a:64:aa:03:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=f6fd0b43-893f-47bd-a07e-fcf951fbd179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:33:f0:2b:90:c1:b7:4d:cc:56:00:a1:4f:b1: 16:0a:91:ec:66:53:61:f3:cf:95:55:59:bb:76:61: 64:8e:2e:7a:17:95:03:5e:c0:ab:1c:c3:59:1d:ce: 0a:47:7b:e3:c8:a4:b4:69:c5:97:2a:a4:a6:e8:6d: c6:e2:f0:1a:5e:87:a3:de:83:b1:97:f2:a7:bb:0b: bc:fb:57:c0:46:0e:2b:42:6a:97:99:61:80:8b:c7: d6:28:e2:4f:16:72:04:06:d6:ce:4d:c5:cb:e9:90: 59:ad:8b:8f:df:92:16:0b:76:02:b8:83:24:71:78: 0d:05:f8:73:a2:19:31:15:d2:29:4f:95:21:cf:04: df:8f:ad:f5:20:f4:34:db:98:3e:eb:ea:13:cb:64: ce:30:6f:ba:67:01:d9:ef:ce:ba:60:9f:34:8d:cd: 65:c3:be:4d:77:aa:3b:b1:b7:95:89:71:c8:8d:a7: 5d:ab:a8:c2:b9:c9:17:e4:d3:3d:e5:12:19:d5:a7: f8:5b:02:81:3b:3a:6f:bb:ba:02:a3:5a:cd:8f:b1: 09:a2:89:b4:45:e1:03:5d:9c:9b:93:bc:f7:45:b8: 34:b0:30:71:c3:94:bb:ea:2e:44:88:1d:1e:09:a3: af:25:99:b1:6c:27:bc:df:15:77:a1:54:28:f1:c5: eb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:73:6E:AF:2E:55:36:B4:D4:90:D3:B7:FE:64:A2:19:18:CA:6D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/33c23409-f641-3c4d-8222-54698a7c377e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b3:01:1f:62:eb:91:7c:10:5a:0e:f6:51:56:1e:7a:f1:14: ec:ee:0f:12:33:92:f3:62:3f:ef:dd:a4:03:0d:b5:89:46:64: b0:68:18:88:15:d3:11:bc:ca:64:89:d0:24:0f:50:e5:b0:cb: 3c:9b:ac:88:ef:6c:ab:12:cf:1b:7d:e1:ac:36:71:4c:82:6d: 1f:41:23:76:fd:be:56:31:f1:d1:47:a4:fc:be:9d:b8:d5:30: b0:30:1b:e0:62:b0:a0:0b:75:24:26:96:66:1d:0e:00:04:73: 7c:95:26:67:34:b1:ef:c5:6b:40:eb:64:eb:b5:b0:bc:82:85: 53:3d:16:69:3e:6a:40:61:43:f7:72:48:1a:ea:8b:c9:72:cc: 32:98:45:d1:d3:c9:ea:cb:d7:24:f6:c3:5b:91:44:47:37:0a: 4d:80:68:a2:38:e2:4b:84:14:e4:f9:9b:20:b8:d3:52:d5:99: 4d:5e:16:df:26:22:0d:65:7b:b9:4f:fc:2b:9a:49:a1:e0:6e: 0a:89:8a:4d:3c:89:82:43:d5:25:5e:b4:0f:aa:a8:d8:ef:d3: a2:f7:e8:f2:05:27:73:32:55:86:14:b8:b4:ca:f8:e9:45:22: b5:8e:22:3e:49:4d:34:91:f6:47:a1:dc:da:23:f6:2e:ac:4b: 80:f2:bd:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpsVd3JKL8uSmSqA3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjZmZDBiNDMtODkzZi00N2JkLWEwN2UtZmNmOTUxZmJkMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DPwK5DBt03MVgChT7EWCpHsZlNh88+VVVm7 dmFkji56F5UDXsCrHMNZHc4KR3vjyKS0acWXKqSm6G3G4vAaXoej3oOxl/Knuwu8 +1fARg4rQmqXmWGAi8fWKOJPFnIEBtbOTcXL6ZBZrYuP35IWC3YCuIMkcXgNBfhz ohkxFdIpT5UhzwTfj631IPQ025g+6+oTy2TOMG+6ZwHZ7866YJ80jc1lw75Nd6o7 sbeViXHIjaddq6jCuckX5NM95RIZ1af4WwKBOzpvu7oCo1rNj7EJoom0ReEDXZyb k7z3Rbg0sDBxw5S76i5EiB0eCaOvJZmxbCe83xV3oVQo8cXrEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFFzbq8uVTa01JDTt/5kohkYym0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvMzNjMjM0MDktZjY0MS0z YzRkLTgyMjItNTQ2OThhN2MzNzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF6zAR9i65F8EFoO9lFWHnrxFOzuDxIzkvNiP+/dpAMNtYlGZLBo GIgV0xG8ymSJ0CQPUOWwyzybrIjvbKsSzxt94aw2cUyCbR9BI3b9vlYx8dFHpPy+ nbjVMLAwG+BisKALdSQmlmYdDgAEc3yVJmc0se/Fa0DrZOu1sLyChVM9Fmk+akBh Q/dySBrqi8lyzDKYRdHTyerL1yT2w1uRREc3Ck2AaKI44kuEFOT5myC401LVmU1e Ft8mIg1le7lP/CuaSaHgbgqJik08iYJD1SVetA+qqNjv06L36PIFJ3MyVYYUuLTK +OlFIrWOIj5JTTSR9keh3Noj9i6sS4Dyvew= -----END CERTIFICATE-----Generated at Wed Jul 9 16:25:26 2025 by rpki-client