$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa File: 5aff0123-c654-3a1d-bbad-1e7208a52d23.roa (raw, json) Hash identifier: qpJn0XXXsXAuqun/NXE6GbSyQf7L4T7m5JFEvSvRaCM= Subject key identifier: 3D:A3:7D:9F:6D:19:76:EF:04:72:5A:63:62:C9:73:2E:BD:3F:8E:7C Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012 Certificate serial: 010D0C9F4328584A51D06EA8C567972591273A80 Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 32723 IP address blocks: 2607:2040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:6e:a8:c5:67:97:25:91:27:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=566fad43-d023-4cbb-b917-b0d6bc7a0e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6c:8a:00:cb:f9:b9:c7:a4:bc:29:56:18:77: e4:4c:13:0f:5e:e8:48:d1:67:b3:a7:0a:70:12:14: f4:3d:0e:d9:d6:73:19:26:68:fc:6e:b3:4c:77:74: 25:ab:b4:fe:5b:d7:02:b8:71:49:1b:82:01:49:aa: 25:2d:c9:0c:d8:d3:df:19:d1:a5:0a:bf:04:4b:43: 82:fc:c1:f9:52:1b:2a:ef:36:ad:2c:7f:96:fe:ba: a2:92:2c:62:dd:20:b5:32:b7:f0:8e:f1:29:b1:d8: 98:df:d6:09:e8:58:90:56:29:45:e7:9a:c3:46:1d: ec:f9:2f:88:af:1f:8f:ce:d9:26:f8:ee:28:46:bd: b0:9f:1d:3d:1b:3e:7f:ad:a3:a6:bc:39:de:ee:06: 70:65:c3:2b:a6:41:b5:8b:7c:3f:c1:40:9b:2b:5d: b6:da:d5:25:86:b7:aa:a9:26:69:7a:94:e3:ea:f5: 74:d3:6a:77:5e:01:6e:2b:1c:9d:2e:c6:ad:a7:d0: cf:a0:d1:ee:4a:e8:ee:de:0f:1c:d9:dd:c1:ba:39: 8d:b7:6b:af:bb:90:79:11:b7:8d:33:c8:e5:a8:df: e7:de:37:31:1e:fd:48:9e:41:cd:b2:50:13:0a:8a: cc:d6:a5:81:5a:34:f4:1a:e4:f9:a6:50:bd:72:6c: fe:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A3:7D:9F:6D:19:76:EF:04:72:5A:63:62:C9:73:2E:BD:3F:8E:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl X509v3 Authority Key Identifier: keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer sbgp-ipAddrBlock: critical IPv6: 2607:2040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:49:86:2f:ba:3b:cc:f8:55:38:f0:22:8d:89:bd:e7:85:9b: 3f:24:de:cd:2b:aa:75:d7:8e:74:c2:cb:bf:2c:08:6a:72:b3: 9e:6d:cb:c7:24:48:85:bc:21:7f:3f:ab:2d:f4:93:e6:46:94: 31:89:27:86:24:a5:0c:4e:ae:53:d0:83:42:88:e2:35:77:97: 74:5a:d4:51:b4:7b:89:16:5f:39:8c:28:82:dd:8d:5b:57:d2: f4:75:72:9f:40:f8:44:7a:56:11:d0:c7:03:35:7b:49:8c:b3: e4:6e:0b:c8:b4:c8:92:c1:4c:4c:48:e6:2c:58:7d:e1:5d:05: 9f:b7:b3:cc:41:36:22:08:19:5e:23:55:85:cd:2f:5e:e8:d8: 75:82:f0:8a:08:0d:45:62:d9:9f:ef:13:1e:4f:9d:51:4d:0b: f2:a8:77:13:f8:c3:e2:f8:a4:fc:88:d4:c7:25:4f:0b:05:06: 7c:2b:b7:5a:40:b9:b3:dd:03:ba:40:3d:9c:8c:b7:fd:4f:2a: 93:51:ee:13:6d:78:7d:04:12:f7:29:b1:8c:5e:f2:f7:ab:0e: 2b:e9:21:ef:41:37:ad:80:28:f2:ca:19:a0:ff:8e:d9:07:0f: d6:0c:61:88:ec:86:52:e0:86:d6:2a:61:7f:82:cd:65:ac:ad: d1:78:c8:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpR0G6oxWeXJZEnOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw MDEyMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk NTY2ZmFkNDMtZDAyMy00Y2JiLWI5MTctYjBkNmJjN2EwZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGyKAMv5ucekvClWGHfkTBMPXuhI0Wezpwpw EhT0PQ7Z1nMZJmj8brNMd3Qlq7T+W9cCuHFJG4IBSaolLckM2NPfGdGlCr8ES0OC /MH5Uhsq7zatLH+W/rqikixi3SC1MrfwjvEpsdiY39YJ6FiQVilF55rDRh3s+S+I rx+Pztkm+O4oRr2wnx09Gz5/raOmvDne7gZwZcMrpkG1i3w/wUCbK1222tUlhreq qSZpepTj6vV002p3XgFuKxydLsatp9DPoNHuSuju3g8c2d3BujmNt2uvu5B5EbeN M8jlqN/n3jcxHv1InkHNslATCorM1qWBWjT0GuT5plC9cmz+vQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD2jfZ9tGXbvBHJaY2LJcy69P458MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1 MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvNWFmZjAxMjMtYzY1NC0z YTFkLWJiYWQtMWU3MjA4YTUyZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx NzI5YTAwMTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcgQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC6SYYvujvM+FU48CKNib3nhZs/JN7NK6p11450wsu/LAhqcrOebcvH JEiFvCF/P6st9JPmRpQxiSeGJKUMTq5T0INCiOI1d5d0WtRRtHuJFl85jCiC3Y1b V9L0dXKfQPhEelYR0McDNXtJjLPkbgvItMiSwUxMSOYsWH3hXQWft7PMQTYiCBle I1WFzS9e6Nh1gvCKCA1FYtmf7xMeT51RTQvyqHcT+MPi+KT8iNTHJU8LBQZ8K7da QLmz3QO6QD2cjLf9TyqTUe4TbXh9BBL3KbGMXvL3qw4r6SHvQTetgCjyyhmg/47Z Bw/WDGGI7IZS4IbWKmF/gs1lrK3ReMhK -----END CERTIFICATE-----Generated at Tue Jul 1 10:15:12 2025 by rpki-client