$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/309f777a-2676-330c-b1ac-45f416a2de90.roa File: 309f777a-2676-330c-b1ac-45f416a2de90.roa (raw, json) Hash identifier: +b45LU13qqhO2CUgmd/I+Ll+Tgo6KOmLjBkdHpAbcv4= Subject key identifier: B0:60:06:94:7B:57:14:0C:DD:E4:E9:44:06:5E:1C:6A:6D:45:10:F3 Certificate issuer: /CN=06795d2e-ca43-4b22-8995-31898670bf14 Certificate serial: 010D0C9F43285849F7151AEDAE04B73C2BA3C500 Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/309f777a-2676-330c-b1ac-45f416a2de90.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 396982 IP address blocks: 2605:ce40:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:1a:ed:ae:04:b7:3c:2b:a3:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=54a8a5c9-3a2c-434f-bef3-db82ca376de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c9:73:83:91:b9:7a:c8:f4:fe:b1:3c:2c:3f: 07:99:7d:88:70:ec:a5:3d:fd:8c:ad:7e:59:9b:5e: 21:d2:c6:dd:93:fc:1e:47:e1:5a:c7:26:a6:db:fa: f4:e8:8b:1e:91:04:53:ba:f3:da:7e:b3:88:c1:6f: 88:0d:61:9b:83:b0:42:82:9b:c8:fe:e3:d2:39:2f: 35:26:14:07:f6:0c:a7:b2:44:fe:b5:3f:4c:0a:79: 15:67:2a:63:87:e1:38:0b:4f:f5:c1:84:46:96:33: 85:d8:64:20:80:df:33:8d:d0:24:27:61:5c:02:00: 1d:d8:41:5e:1d:53:e8:3c:0a:ba:25:49:2c:82:0a: 48:1c:09:25:b5:0b:58:94:5e:9a:04:be:d1:de:7e: 48:79:15:8d:95:5f:ca:cc:51:1f:e2:7b:2f:bd:3d: 1e:55:5d:e4:14:a1:75:77:32:44:1c:93:c0:91:d2: ab:89:f0:3b:53:21:33:bb:e3:51:78:00:17:2b:c2: ff:b6:1f:1d:35:93:50:68:3b:72:d8:9a:9e:4c:c9: fe:76:28:98:d3:af:df:80:ba:0e:5d:95:6c:76:d5: 72:5e:77:82:31:f3:46:0c:01:b5:cb:60:d7:62:aa: 89:ac:5c:12:90:88:38:86:fc:76:a6:5f:11:44:39: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:60:06:94:7B:57:14:0C:DD:E4:E9:44:06:5E:1C:6A:6D:45:10:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/309f777a-2676-330c-b1ac-45f416a2de90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl X509v3 Authority Key Identifier: keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer sbgp-ipAddrBlock: critical IPv6: 2605:ce40:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0a:b5:ec:39:d4:d1:56:36:05:0f:f4:f7:f8:13:09:66:3b: f9:41:5d:ba:2f:4d:fc:c3:71:38:0f:8f:74:3b:7e:9a:a3:a4: 09:9d:57:79:05:58:f3:96:a5:b2:f3:3e:15:01:23:7a:6d:91: 20:73:fc:d5:0b:76:47:92:06:3a:88:6c:30:39:72:71:f6:0b: 7a:d7:bb:62:43:3c:30:37:2e:13:3b:93:90:fa:ba:72:26:a6: 7b:8b:c4:9a:2b:2d:32:31:24:3a:e6:40:37:6e:8b:50:cd:1e: 5f:14:1c:c5:7d:a6:66:54:ef:b3:5b:db:f2:3b:ee:e0:f9:2d: 28:9b:4f:50:06:73:f0:38:02:83:8b:a3:f4:d8:5d:c8:ff:ce: 74:93:6c:12:20:f7:13:31:e5:c4:04:74:f6:41:bd:83:2a:67: b0:8d:4d:1d:b8:cb:aa:c7:e5:53:5a:82:9f:e7:23:7b:28:e8: 5c:0c:6f:1f:ab:05:8f:83:1e:27:e7:31:dd:e9:b6:39:f3:34: 57:05:89:8d:25:2e:45:fe:11:51:4d:e7:8a:b5:b5:2b:88:81: f1:9b:ab:03:c6:e4:b7:85:e0:41:02:8d:17:8b:5c:87:53:cc: 17:b4:68:ef:92:1b:6c:62:ee:38:ec:3b:a1:55:94:8f:41:fa: f3:b3:f1:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn3FRrtrgS3PCujxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBi ZjE0MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NTRhOGE1YzktM2EyYy00MzRmLWJlZjMtZGI4MmNhMzc2ZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMlzg5G5esj0/rE8LD8HmX2IcOylPf2MrX5Z m14h0sbdk/weR+Faxyam2/r06IsekQRTuvPafrOIwW+IDWGbg7BCgpvI/uPSOS81 JhQH9gynskT+tT9MCnkVZypjh+E4C0/1wYRGljOF2GQggN8zjdAkJ2FcAgAd2EFe HVPoPAq6JUksggpIHAkltQtYlF6aBL7R3n5IeRWNlV/KzFEf4nsvvT0eVV3kFKF1 dzJEHJPAkdKrifA7UyEzu+NReAAXK8L/th8dNZNQaDty2JqeTMn+diiY06/fgLoO XZVsdtVyXneCMfNGDAG1y2DXYqqJrFwSkIg4hvx2pl8RRDkE0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLBgBpR7VxQM3eTpRAZeHGptRRDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5 NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvMzA5Zjc3N2EtMjY3Ni0z MzBjLWIxYWMtNDVmNDE2YTJkZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDY3OTVkMmUtY2E0My00YjIyLTg5 OTUtMzE4OTg2NzBiZjE0LzA2Nzk1ZDJlLWNhNDMtNGIyMi04OTk1LTMxODk4Njcw YmYxNC5jcmwwHwYDVR0jBBgwFoAUyI/zyCB542XU7+tGAEBbLEdi/iMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5 ODY3MGJmMTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXOQAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGUKtew51NFWNgUP9Pf4EwlmO/lBXbovTfzDcTgPj3Q7fpqjpAmd V3kFWPOWpbLzPhUBI3ptkSBz/NULdkeSBjqIbDA5cnH2C3rXu2JDPDA3LhM7k5D6 unImpnuLxJorLTIxJDrmQDdui1DNHl8UHMV9pmZU77Nb2/I77uD5LSibT1AGc/A4 AoOLo/TYXcj/znSTbBIg9xMx5cQEdPZBvYMqZ7CNTR24y6rH5VNagp/nI3so6FwM bx+rBY+DHifnMd3ptjnzNFcFiY0lLkX+EVFN54q1tSuIgfGbqwPG5LeF4EECjReL XIdTzBe0aO+SG2xi7jjsO6FVlI9B+vOz8eI= -----END CERTIFICATE-----Generated at Sat Jun 7 12:34:13 2025 by rpki-client