$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cb396975-c95e-3a31-ba3b-e1d1a955c922.roa File: cb396975-c95e-3a31-ba3b-e1d1a955c922.roa (raw, json) Hash identifier: Y0YChYaf+tsl4gllu3kVy6/XLnUcmshxjfNLnNtphAs= Subject key identifier: 60:9F:07:0C:9D:88:55:15:8B:5D:A8:5F:B8:73:2D:56:B6:BB:13:18 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F43285849DF5A70BE01417AD14AF6BE80 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cb396975-c95e-3a31-ba3b-e1d1a955c922.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 14618 IP address blocks: 2607:a640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:70:be:01:41:7a:d1:4a:f6:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=b335b6be-b357-4315-9a1f-72c139106876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b1:72:a2:b0:a6:c0:cd:17:91:77:fd:bb:ec: e3:ad:68:98:cf:54:8e:90:33:63:5c:b7:b7:61:f7: 94:72:ed:38:17:c8:d3:de:3d:5e:26:e2:66:31:a3: 80:7f:49:09:95:93:a9:65:d3:70:4b:32:b2:ee:3e: 3b:cc:21:56:85:70:a9:32:47:4d:02:ef:90:df:47: 18:6f:8e:e8:f7:a9:99:54:41:ca:f8:54:ec:39:e6: ec:d5:c2:83:65:96:35:ec:b5:a9:fa:08:fb:82:e2: 66:8e:4a:eb:c2:80:60:85:0e:7e:38:7c:0d:55:67: b6:5a:15:64:b3:0e:e4:68:ab:67:3d:51:0e:df:c4: 4b:6a:60:69:b5:9a:a8:d8:df:45:28:fc:2d:5b:31: 70:a8:7e:1b:90:45:01:5d:e5:f5:6a:d4:a7:c3:e7: 76:c7:35:65:90:dc:db:29:8c:85:f0:32:f2:00:7b: bb:49:f5:36:f7:31:38:91:78:4c:33:40:b0:e2:f8: 3f:55:ad:6b:8c:c0:68:06:3a:9b:31:bd:fd:ca:c0: 02:3a:98:75:f7:52:dc:5f:2a:ad:0b:ad:8a:6d:a6: 47:42:b1:90:bb:94:4a:53:e8:8a:33:07:a5:f3:00: 49:67:4c:20:1d:a1:3a:05:63:fa:17:8b:3c:07:fc: aa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9F:07:0C:9D:88:55:15:8B:5D:A8:5F:B8:73:2D:56:B6:BB:13:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cb396975-c95e-3a31-ba3b-e1d1a955c922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:a640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:fe:e1:74:c5:e4:d3:1d:b9:82:47:6d:f9:d9:8e:e6:21:e0: 5a:71:bd:bf:75:7e:74:47:c7:d1:d6:71:44:94:a6:a1:f8:1e: c5:c8:b5:63:0c:29:f4:6e:ce:f7:5d:15:4a:e3:02:20:16:05: 2a:43:a3:15:ad:87:61:c9:65:24:1f:f0:63:52:4e:f3:93:13: 28:71:b7:33:93:88:e7:3a:9a:16:46:94:42:86:f5:5f:cf:12: 54:56:4c:47:2b:28:e6:c0:f2:4c:ad:2d:16:64:72:41:01:0b: ba:78:c9:bf:15:1a:e0:40:a5:36:45:67:98:d0:5c:72:56:37: 91:8f:3f:6d:3c:3a:73:93:67:f4:97:fa:05:fc:07:2c:8d:3d: 4a:56:70:5e:bc:77:74:39:dd:59:a6:ae:35:b3:79:63:85:fe: 25:f5:3e:89:9f:e5:64:e5:f9:32:af:87:16:5a:9a:a0:20:18: df:0e:07:17:24:26:38:d5:43:61:a2:8b:1c:76:ba:f2:f0:c2: 28:13:f8:bb:7c:e7:ce:1f:c9:2f:aa:45:ce:18:2a:80:d7:e3: cc:78:57:e1:2c:76:22:48:c7:73:b8:0a:ca:ee:11:bc:f8:c1: 21:c1:f5:64:75:9e:22:b0:cd:73:8f:48:05:ac:8f:cd:bc:72: df:a3:7d:74 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnfWnC+AUF60Ur2voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk YjMzNWI2YmUtYjM1Ny00MzE1LTlhMWYtNzJjMTM5MTA2ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bFyorCmwM0XkXf9u+zjrWiYz1SOkDNjXLe3 YfeUcu04F8jT3j1eJuJmMaOAf0kJlZOpZdNwSzKy7j47zCFWhXCpMkdNAu+Q30cY b47o96mZVEHK+FTsOebs1cKDZZY17LWp+gj7guJmjkrrwoBghQ5+OHwNVWe2WhVk sw7kaKtnPVEO38RLamBptZqo2N9FKPwtWzFwqH4bkEUBXeX1atSnw+d2xzVlkNzb KYyF8DLyAHu7SfU29zE4kXhMM0Cw4vg/Va1rjMBoBjqbMb39ysACOph191LcXyqt C62KbaZHQrGQu5RKU+iKMwel8wBJZ0wgHaE6BWP6F4s8B/yqLwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGCfBwydiFUVi12oX7hzLVa2uxMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvY2IzOTY5NzUtYzk1ZS0z YTMxLWJhM2ItZTFkMWE5NTVjOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgemQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCV/uF0xeTTHbmCR2352Y7mIeBacb2/dX50R8fR1nFElKah+B7FyLVj DCn0bs73XRVK4wIgFgUqQ6MVrYdhyWUkH/BjUk7zkxMocbczk4jnOpoWRpRChvVf zxJUVkxHKyjmwPJMrS0WZHJBAQu6eMm/FRrgQKU2RWeY0FxyVjeRjz9tPDpzk2f0 l/oF/AcsjT1KVnBevHd0Od1Zpq41s3ljhf4l9T6Jn+Vk5fkyr4cWWpqgIBjfDgcX JCY41UNhooscdrry8MIoE/i7fOfOH8kvqkXOGCqA1+PMeFfhLHYiSMdzuArK7hG8 +MEhwfVkdZ4isM1zj0gFrI/NvHLfo310 -----END CERTIFICATE-----Generated at Sun Jun 15 22:02:34 2025 by rpki-client