$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/defce0df-de38-3cba-952e-d0c411ab29b5.roa File: defce0df-de38-3cba-952e-d0c411ab29b5.roa (raw, json) Hash identifier: odFP/8N0CLhvEN00BFEkal3NPPeEmmv8pHubnx1N4sk= Subject key identifier: 1A:6D:05:AC:04:33:7B:F7:99:49:68:83:53:DC:39:7A:3E:8F:DD:CC Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A5FC5E54779DE16E61EB6E280 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/defce0df-de38-3cba-952e-d0c411ab29b5.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 16417 IP address blocks: 2620:101:2010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e5:47:79:de:16:e6:1e:b6:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=6ed2e70e-090c-432e-a25e-1b2c834b1d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:9c:53:57:eb:ae:17:87:fa:77:bd:60:c6: f6:3d:47:9e:05:8d:45:05:13:d7:50:67:16:6e:13: 61:3a:e1:30:bc:2a:b1:f6:a3:b0:d8:09:16:93:e7: ac:59:ca:37:56:35:e6:f4:a1:a2:42:16:2d:70:d5: 0b:ea:d2:0e:25:cd:a1:65:8a:da:82:0f:8c:b7:e4: 67:91:da:0d:6b:7f:e0:fd:5f:d0:ab:b9:cb:1a:7f: 94:7c:2f:40:31:c2:4c:56:9e:c6:6a:83:e1:d0:03: bb:fc:a5:c4:8c:9c:8b:b5:08:c5:4a:63:8f:a0:7a: 61:b2:37:65:88:31:6a:9c:28:d8:28:f5:e0:10:6c: 8d:5d:f8:81:9a:a9:8c:79:68:40:b4:35:e3:25:10: d3:3b:0b:37:64:b1:26:aa:f1:6a:86:bf:ed:82:d6: ee:e0:c1:69:3a:18:b2:02:fc:b8:69:0d:10:86:4f: c7:90:6f:50:4a:af:c4:eb:d8:fd:32:e8:2f:00:2f: 25:2a:b3:9e:35:2c:e9:84:5e:70:2e:67:88:e1:4a: 1b:5f:38:c0:f5:b1:40:fd:c6:f0:3b:6b:6c:24:39: 84:b8:47:43:14:62:09:44:ed:fb:0e:81:3b:57:fc: ee:58:fd:6a:09:6d:0b:0b:c1:d3:ea:d3:b1:13:a2: 61:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6D:05:AC:04:33:7B:F7:99:49:68:83:53:DC:39:7A:3E:8F:DD:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/defce0df-de38-3cba-952e-d0c411ab29b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:2010::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:61:25:d2:66:c3:0d:d7:0e:ea:de:1b:97:2c:ff:f5:e0:5a: 67:4b:eb:4b:e0:a7:9b:b7:11:64:ab:58:55:cb:f5:a2:75:aa: ef:f8:c5:99:aa:01:ec:b4:4e:0f:d9:d9:ac:99:23:2b:bb:e3: a8:0e:f5:51:4c:10:02:76:0b:0a:59:d0:6f:f6:e7:2d:fc:95: 2c:f1:5d:79:97:fc:25:87:a7:6a:ea:18:5d:c6:f6:1a:97:fb: 2d:dd:48:2b:1f:e2:f7:9c:9f:ed:40:e8:20:e6:82:73:07:d1: 36:7c:c4:cf:ba:4f:85:11:2d:18:b8:98:64:5e:cf:1f:90:f2: 1a:49:5e:2a:7a:6b:00:29:8c:92:d6:07:29:ff:bf:4d:57:b6: b6:01:af:eb:ab:de:e6:18:8e:9a:33:8a:82:4f:bb:d0:4a:dc: d2:09:b3:c3:80:ac:96:49:ce:5e:98:4d:e8:b6:04:d3:4d:00: 4e:85:b5:da:8e:29:b5:5e:91:3d:92:fb:92:d8:6a:0b:5f:8a: b9:6e:76:a7:70:cc:7f:b6:b3:c8:10:be:da:99:60:ec:35:f0: 94:0d:ed:41:eb:5a:0f:68:e5:a4:a3:99:61:81:6d:91:c7:1d: 68:2d:8e:5e:a9:f5:b7:14:c3:92:59:87:51:76:4b:ee:ed:cf: 8e:9b:8b:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxeVHed4W5h624oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk NmVkMmU3MGUtMDkwYy00MzJlLWEyNWUtMWIyYzgzNGIxZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+KcU1frrheH+ne9YMb2PUeeBY1FBRPXUGcW bhNhOuEwvCqx9qOw2AkWk+esWco3VjXm9KGiQhYtcNUL6tIOJc2hZYragg+Mt+Rn kdoNa3/g/V/Qq7nLGn+UfC9AMcJMVp7GaoPh0AO7/KXEjJyLtQjFSmOPoHphsjdl iDFqnCjYKPXgEGyNXfiBmqmMeWhAtDXjJRDTOws3ZLEmqvFqhr/tgtbu4MFpOhiy Avy4aQ0Qhk/HkG9QSq/E69j9MugvAC8lKrOeNSzphF5wLmeI4UobXzjA9bFA/cbw O2tsJDmEuEdDFGIJRO37DoE7V/zuWP1qCW0LC8HT6tOxE6JhsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBptBawEM3v3mUlog1PcOXo+j93MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZGVmY2UwZGYtZGUzOC0z Y2JhLTk1MmUtZDBjNDExYWIyOWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEphJdJmww3XDureG5cs//XgWmdL60vgp5u3EWSrWFXL9aJ1qu/4 xZmqAey0Tg/Z2ayZIyu746gO9VFMEAJ2CwpZ0G/25y38lSzxXXmX/CWHp2rqGF3G 9hqX+y3dSCsf4vecn+1A6CDmgnMH0TZ8xM+6T4URLRi4mGRezx+Q8hpJXip6awAp jJLWByn/v01XtrYBr+ur3uYYjpozioJPu9BK3NIJs8OArJZJzl6YTei2BNNNAE6F tdqOKbVekT2S+5LYagtfirludqdwzH+2s8gQvtqZYOw18JQN7UHrWg9o5aSjmWGB bZHHHWgtjl6p9bcUw5JZh1F2S+7tz46bi8I= -----END CERTIFICATE-----Generated at Thu Jul 10 08:38:35 2025 by rpki-client