$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa File: d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa (raw, json) Hash identifier: eij0NAsAwOYy45UAAXUd18pDm8gsuN8OJhAMHXiccww= Subject key identifier: FA:FD:06:6B:8B:D3:28:98:87:E1:1C:0F:BA:75:06:D3:E7:98:E1:78 Certificate issuer: /CN=e8264592-bcc3-48f1-a782-8ba48fc506fa Certificate serial: 010D0C9F4328584A4F05C87D462E710361EBD700 Authority key identifier: 88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 397952 IP address blocks: 2605:3dc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:c8:7d:46:2e:71:03:61:eb:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8264592-bcc3-48f1-a782-8ba48fc506fa Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=a0e87092-5e21-40de-9b0e-d1d63baab6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fd:9b:a6:61:a0:65:dd:81:44:45:77:cc:5a: db:df:68:1f:34:c5:e4:e0:e1:75:c4:0b:ff:20:41: 93:e9:bb:2a:76:4e:00:94:46:40:73:8f:5e:b5:1c: c9:19:8e:9d:9f:86:65:f9:21:81:2a:f8:53:fb:1d: ff:4e:a6:3f:3c:10:a6:54:cf:ca:de:8e:5e:cf:5c: 43:aa:99:dd:13:53:b3:e7:cb:c0:d0:9e:8a:27:74: 02:12:d3:b5:f3:cb:b9:f7:1e:fe:76:ec:c2:66:38: af:51:4d:48:4e:e7:c3:f7:ab:45:9e:0e:e3:58:6b: 59:6e:b0:d0:7f:9d:43:80:fd:52:19:64:44:99:af: d5:bd:fa:ff:8b:9e:fd:09:ce:b4:2d:3f:d4:24:c1: bc:77:61:ac:08:56:d3:66:12:f9:72:81:98:e6:ad: 7d:56:28:97:66:1c:92:37:33:c9:2d:78:36:39:db: eb:7e:1c:9c:b3:e4:1a:36:db:61:51:27:ab:1a:38: d7:5c:94:8c:80:64:a6:04:0d:28:16:c3:12:05:a1: dd:4d:eb:79:f5:ef:b6:74:b6:40:64:c1:1c:94:72: 9d:2e:84:ab:0d:5e:2e:99:96:ed:0a:87:7b:cc:6e: 34:fa:17:df:4a:05:22:01:e3:31:c4:2e:c8:3a:59: ef:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FD:06:6B:8B:D3:28:98:87:E1:1C:0F:BA:75:06:D3:E7:98:E1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl X509v3 Authority Key Identifier: keyid:88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer sbgp-ipAddrBlock: critical IPv6: 2605:3dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:1f:43:25:df:39:2e:a4:be:94:53:14:a0:d2:99:17:50:51: 4d:00:ed:97:ea:ab:42:03:8a:97:36:9e:38:60:c3:19:b3:6c: cc:54:2d:1c:4f:2c:74:59:61:81:f4:53:a4:a9:33:1a:2a:6a: f9:25:ce:25:cd:0b:6a:7c:3f:43:51:87:10:cc:fa:f1:db:7e: 6d:30:5e:86:8b:7d:c7:b6:b9:97:2f:a4:44:91:90:07:b8:9d: f6:cd:0b:9b:0d:1b:c6:e6:99:fc:ff:f5:d0:95:0e:fc:42:b4: 5c:6b:3b:d8:f9:70:92:80:01:82:d2:46:fa:87:03:d9:d1:57: 72:05:41:58:c8:2c:54:aa:d1:a9:e1:f3:59:70:94:35:96:e3: d4:6d:d7:57:8e:9b:9b:24:c2:48:0f:e9:02:26:67:a2:46:26: d7:d0:e6:7e:0a:5e:58:00:b7:72:53:98:43:80:42:c2:53:08: 6b:41:20:69:41:ba:59:17:7c:5e:a1:cb:f5:5c:44:1a:53:a0: 61:a0:bb:9c:12:33:1a:aa:9c:16:72:e3:ee:e9:0d:de:b5:f1: a5:3e:56:11:01:62:75:1a:60:04:0d:a5:4a:93:63:86:11:a8: fc:2f:6d:3d:c9:31:d0:9b:2c:cf:ff:5a:94:06:eb:02:a6:50: f3:51:72:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpPBch9Ri5xA2Hr1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyNjQ1OTItYmNjMy00OGYxLWE3ODItOGJhNDhmYzUw NmZhMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk YTBlODcwOTItNWUyMS00MGRlLTliMGUtZDFkNjNiYWFiNmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP2bpmGgZd2BREV3zFrb32gfNMXk4OF1xAv/ IEGT6bsqdk4AlEZAc49etRzJGY6dn4Zl+SGBKvhT+x3/TqY/PBCmVM/K3o5ez1xD qpndE1Oz58vA0J6KJ3QCEtO188u59x7+duzCZjivUU1ITufD96tFng7jWGtZbrDQ f51DgP1SGWREma/Vvfr/i579Cc60LT/UJMG8d2GsCFbTZhL5coGY5q19ViiXZhyS NzPJLXg2Odvrfhycs+QaNtthUSerGjjXXJSMgGSmBA0oFsMSBaHdTet59e+2dLZA ZMEclHKdLoSrDV4umZbtCod7zG40+hffSgUiAeMxxC7IOlnviwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPr9BmuL0yiYh+EcD7p1BtPnmOF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lODI2 NDU5Mi1iY2MzLTQ4ZjEtYTc4Mi04YmE0OGZjNTA2ZmEvZDljZTZiYmQtODFhOS0z OGIwLWI2ZDItZWQzYjYwMTdhNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTgyNjQ1OTItYmNjMy00OGYxLWE3 ODItOGJhNDhmYzUwNmZhL2U4MjY0NTkyLWJjYzMtNDhmMS1hNzgyLThiYTQ4ZmM1 MDZmYS5jcmwwHwYDVR0jBBgwFoAUiHdMTp8/9MLgRDap8Qq21ISdpwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lODI2NDU5Mi1iY2MzLTQ4ZjEtYTc4Mi04YmE0 OGZjNTA2ZmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgU9wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAAH0Ml3zkupL6UUxSg0pkXUFFNAO2X6qtCA4qXNp44YMMZs2zMVC0c Tyx0WWGB9FOkqTMaKmr5Jc4lzQtqfD9DUYcQzPrx235tMF6Gi33HtrmXL6REkZAH uJ32zQubDRvG5pn8//XQlQ78QrRcazvY+XCSgAGC0kb6hwPZ0VdyBUFYyCxUqtGp 4fNZcJQ1luPUbddXjpubJMJID+kCJmeiRibX0OZ+Cl5YALdyU5hDgELCUwhrQSBp QbpZF3xeocv1XEQaU6BhoLucEjMaqpwWcuPu6Q3etfGlPlYRAWJ1GmAEDaVKk2OG Eaj8L209yTHQmyzP/1qUBusCplDzUXKG -----END CERTIFICATE-----Generated at Sat Jul 5 11:17:06 2025 by rpki-client