$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/48f1ac8d-8045-3e33-88f3-9f090e91cb46.roa File: 48f1ac8d-8045-3e33-88f3-9f090e91cb46.roa (raw, json) Hash identifier: aa8Gfu0YBojpqErGUPDryNADqLVINDW0O1MqH/xMxHM= Subject key identifier: 7B:35:E2:97:C6:28:86:38:D1:A2:D1:12:A0:A9:99:92:DC:6F:BE:E3 Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F43285849D42FB199ED0148C112BA3B80 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/48f1ac8d-8045-3e33-88f3-9f090e91cb46.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 2607:340::/29 maxlen: 29 2607:348::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b1:99:ed:01:48:c1:12:ba:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=f01de8cc-1f44-484d-b6fd-c3f431d8c03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:94:73:43:2f:f9:f0:a8:a3:65:61:4f:e3:42: fb:e3:54:92:9b:95:e3:42:3d:ff:88:53:a0:ef:3c: b7:fa:0d:c8:9d:95:4e:3b:58:a7:b7:85:94:ac:7a: fc:63:53:44:30:c3:ce:c8:87:d4:b1:14:e2:85:a5: ee:99:d1:cf:7a:e5:5c:cd:23:a7:dd:3c:ac:33:40: db:d4:7d:7a:99:af:c9:77:19:83:0b:ae:76:7b:d4: 28:41:22:f6:b2:0d:cd:6b:3e:ac:ab:ab:4a:9b:b6: df:18:c9:c1:b8:54:3e:8f:62:18:8c:93:ce:cc:0e: cf:22:ae:f7:e4:c2:2e:a7:a1:8f:c1:f3:62:b8:67: 95:5b:6a:80:ab:83:5e:aa:72:89:76:6c:af:a5:1f: 02:fd:fe:24:83:7a:91:5a:6d:6f:a4:e3:53:bd:63: 8a:83:71:cb:66:14:d3:02:3e:df:8c:53:82:64:ab: e5:88:84:1c:b4:fb:65:bd:a3:d0:01:d8:52:f0:6f: bf:cc:e3:f3:1d:e3:a8:7a:13:be:50:08:d0:63:cb: 2b:e1:5d:95:3c:dc:3b:74:f7:32:43:b2:18:07:a8: af:17:c5:66:fe:44:84:b4:e5:98:58:ad:eb:3f:c1: f7:30:95:24:e6:e3:24:8c:38:b0:2f:bd:47:f0:68: 14:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:35:E2:97:C6:28:86:38:D1:A2:D1:12:A0:A9:99:92:DC:6F:BE:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/48f1ac8d-8045-3e33-88f3-9f090e91cb46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv6: 2607:340::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:16:61:b4:97:ac:a9:69:cc:36:97:25:15:1b:6b:e7:ce:ff: 73:7e:07:e8:b9:54:f7:0b:5a:bc:c2:0c:63:96:3d:84:47:f2: e7:bb:49:35:97:82:f6:3e:a1:d6:e9:5b:bd:09:cd:0f:06:9b: 64:7f:81:5e:49:52:00:9a:f4:f5:d8:23:50:03:08:1d:31:ff: 0e:21:d2:3f:84:a9:fc:19:ec:43:9d:5a:b7:04:e7:e4:3e:ce: 8f:b2:21:9a:ec:95:b9:81:7b:ba:ed:35:d8:c8:4a:69:45:95: b8:e5:1f:b3:f1:7c:3e:54:0e:67:62:40:3d:a3:46:85:d4:88: db:35:e9:78:69:60:31:10:20:d1:e9:0f:f8:f4:57:b0:a9:da: b6:1e:45:7f:63:e6:26:1c:4f:a3:bf:f2:f9:77:47:86:69:23: 12:82:70:c1:48:11:a6:5e:8d:7a:d3:fa:af:c4:2d:b7:1e:23: 5b:d3:26:62:5e:eb:f3:9e:b8:d2:d5:6f:eb:51:d9:73:f9:cc: 04:66:ca:ce:08:bf:46:e2:7a:b7:3c:70:06:ab:da:14:a2:9e: 5f:c7:38:5f:ac:19:25:dc:0d:ad:82:db:82:bd:cb:1a:e4:a9: 7e:a5:b6:5e:44:60:f2:5a:d5:7b:e0:d7:d3:27:fb:15:e5:b7: 5d:5f:98:88 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnUL7GZ7QFIwRK6O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjAxZGU4Y2MtMWY0NC00ODRkLWI2ZmQtYzNmNDMxZDhjMDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5RzQy/58KijZWFP40L741SSm5XjQj3/iFOg 7zy3+g3InZVOO1int4WUrHr8Y1NEMMPOyIfUsRTihaXumdHPeuVczSOn3TysM0Db 1H16ma/JdxmDC652e9QoQSL2sg3Naz6sq6tKm7bfGMnBuFQ+j2IYjJPOzA7PIq73 5MIup6GPwfNiuGeVW2qAq4NeqnKJdmyvpR8C/f4kg3qRWm1vpONTvWOKg3HLZhTT Aj7fjFOCZKvliIQctPtlvaPQAdhS8G+/zOPzHeOoehO+UAjQY8sr4V2VPNw7dPcy Q7IYB6ivF8Vm/kSEtOWYWK3rP8H3MJUk5uMkjDiwL71H8GgULQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHs14pfGKIY40aLREqCpmZLcb77jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvNDhmMWFjOGQtODA0NS0z ZTMzLTg4ZjMtOWYwOTBlOTFjYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgcDQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0FmG0l6ypacw2lyUVG2vnzv9zfgfouVT3C1q8wgxjlj2ER/Lnu0k1 l4L2PqHW6Vu9Cc0PBptkf4FeSVIAmvT12CNQAwgdMf8OIdI/hKn8GexDnVq3BOfk Ps6PsiGa7JW5gXu67TXYyEppRZW45R+z8Xw+VA5nYkA9o0aF1IjbNel4aWAxECDR 6Q/49Fewqdq2HkV/Y+YmHE+jv/L5d0eGaSMSgnDBSBGmXo160/qvxC23HiNb0yZi XuvznrjS1W/rUdlz+cwEZsrOCL9G4nq3PHAGq9oUop5fxzhfrBkl3A2tgtuCvcsa 5Kl+pbZeRGDyWtV74NfTJ/sV5bddX5iI -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:29 2025 by rpki-client