$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa File: 2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa (raw, json) Hash identifier: 676/0bRrVAKmhTke+uOss3ciNKSC4APJiNp+Z83vvac= Subject key identifier: 24:05:41:FB:78:AC:4B:3B:69:23:F5:0A:63:CD:48:1F:3C:E8:25:59 Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F4328584A66C06A22B27029163CB39D80 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 57439 IP address blocks: 2605:f440:53::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:6a:22:b2:70:29:16:3c:b3:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=8ccaeb0a-e434-4053-b7da-1d7cc3098d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1b:ac:44:da:56:72:02:cd:61:da:29:36:4f: ca:bd:1d:3f:b8:89:b9:1a:ef:81:0e:32:b3:74:b3: 20:5a:8f:7d:b0:e6:d9:df:df:1e:4b:2f:9b:1b:0d: 21:7c:c3:5f:77:b2:d4:9f:b0:e2:53:22:f1:47:48: b6:85:18:5a:d7:93:47:b4:10:00:3a:86:f7:de:6b: ef:cf:d5:1c:fa:8f:ba:a3:67:4b:9f:fe:67:e1:bf: 72:7d:1e:c9:6e:db:9d:4b:ec:66:ad:b2:c3:cf:fb: 46:90:f2:99:87:e4:3b:ff:ba:6a:8e:97:cc:68:c7: 4f:b4:9b:95:1b:37:61:07:7b:3d:df:7a:fb:7c:1b: 48:ed:bf:21:e1:ac:21:ed:5c:c1:b4:a8:a1:70:93: 5c:b5:61:f2:27:b5:73:37:e5:64:e8:1d:f1:a2:65: 8d:9e:86:e6:ca:e8:ad:5e:03:04:2a:e2:69:cc:8c: 8a:88:ab:ea:58:ac:5a:c9:f6:dc:a4:c7:bb:f9:6c: 48:df:8b:03:09:e1:1a:5e:6e:70:44:ea:b5:8c:26: f8:0c:41:a3:8f:22:01:78:a4:d8:bf:1c:4a:ab:7b: 51:34:2d:1f:c6:98:c2:68:e2:20:c1:22:43:b9:7b: 99:63:35:b2:79:77:bb:68:14:b5:90:e1:48:b7:03: 73:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:05:41:FB:78:AC:4B:3B:69:23:F5:0A:63:CD:48:1F:3C:E8:25:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv6: 2605:f440:53::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:20:63:6c:fb:8f:0d:2f:90:84:e2:31:2f:46:7f:93:68:b6: 10:93:32:14:01:49:61:e3:a7:01:84:55:e8:76:84:5e:a2:6a: f3:42:d8:95:67:c5:4b:6c:8b:98:44:81:18:ca:46:da:aa:fc: 6d:ff:43:23:c5:25:81:88:9e:09:5c:93:e9:8b:0e:e1:1b:12: 2f:40:18:f6:1c:cd:97:39:60:8c:ec:d7:54:49:27:c8:d7:76: 99:47:77:94:22:48:10:d1:c1:01:ce:61:27:9a:5a:49:46:0e: 67:29:6f:87:da:43:d1:9f:ae:0a:b8:a8:03:74:78:ea:ff:02: cf:eb:21:73:dc:12:74:d9:db:a2:4c:22:be:a2:45:e3:fe:27: 3b:ee:a1:b6:f5:4a:a1:52:b8:cd:9e:43:c3:be:54:8b:b9:1f: 2e:87:e6:0c:79:06:01:98:07:b3:49:41:00:10:2f:e0:04:9b: 22:a8:39:0a:d0:9b:bf:90:98:13:22:c0:dc:05:7a:13:0d:4c: a5:28:d1:5d:8b:6c:e4:df:5a:9c:b7:f4:59:15:c9:16:4a:1e: e8:7d:ba:de:d5:dd:af:72:19:d1:43:3e:b6:86:6a:57:fc:9a: ce:d0:2a:97:99:50:b6:53:51:90:91:93:53:15:c7:37:2f:ab: ff:20:f4:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpmwGoisnApFjyznYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk OGNjYWViMGEtZTQzNC00MDUzLWI3ZGEtMWQ3Y2MzMDk4ZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBusRNpWcgLNYdopNk/KvR0/uIm5Gu+BDjKz dLMgWo99sObZ398eSy+bGw0hfMNfd7LUn7DiUyLxR0i2hRha15NHtBAAOob33mvv z9Uc+o+6o2dLn/5n4b9yfR7JbtudS+xmrbLDz/tGkPKZh+Q7/7pqjpfMaMdPtJuV GzdhB3s933r7fBtI7b8h4awh7VzBtKihcJNctWHyJ7VzN+Vk6B3xomWNnobmyuit XgMEKuJpzIyKiKvqWKxayfbcpMe7+WxI34sDCeEaXm5wROq1jCb4DEGjjyIBeKTY vxxKq3tRNC0fxpjCaOIgwSJDuXuZYzWyeXe7aBS1kOFItwNzjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQFQft4rEs7aSP1CmPNSB886CVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvMmEzYjM1ZDctMWRmOC0z YTQ2LThlMDYtOTM1Y2UyZWUxZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX0QABT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ4gY2z7jw0vkITiMS9Gf5NothCTMhQBSWHjpwGEVeh2hF6iavNC 2JVnxUtsi5hEgRjKRtqq/G3/QyPFJYGInglck+mLDuEbEi9AGPYczZc5YIzs11RJ J8jXdplHd5QiSBDRwQHOYSeaWklGDmcpb4faQ9Gfrgq4qAN0eOr/As/rIXPcEnTZ 26JMIr6iReP+Jzvuobb1SqFSuM2eQ8O+VIu5Hy6H5gx5BgGYB7NJQQAQL+AEmyKo OQrQm7+QmBMiwNwFehMNTKUo0V2LbOTfWpy39FkVyRZKHuh9ut7V3a9yGdFDPraG alf8ms7QKpeZULZTUZCRk1MVxzcvq/8g9FA= -----END CERTIFICATE-----Generated at Tue Jul 8 12:04:42 2025 by rpki-client