$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/802bcc8d-efff-3b6c-85a0-dc930b0b9e7a.roa File: 802bcc8d-efff-3b6c-85a0-dc930b0b9e7a.roa (raw, json) Hash identifier: IunPZI8gzJG5vVCEkcaMWmQQTpTn4mYVbLssSENFnig= Subject key identifier: 2C:D0:F7:5B:30:61:26:C2:62:64:E7:9E:46:75:14:F4:78:85:B6:C1 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849FCAA7ED0428B95C3A127AC80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/802bcc8d-efff-3b6c-85a0-dc930b0b9e7a.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 20940 IP address blocks: 2001:418:c01:2::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7e:d0:42:8b:95:c3:a1:27:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=dfb6c81d-62dc-481c-824f-c387a034ebab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:44:3d:78:e4:6a:1e:7d:16:c5:59:cb:39: 49:79:c7:7f:ca:0f:a9:61:f7:42:29:ff:db:24:e5: 0b:e3:a1:2b:54:87:ae:01:21:e4:54:d7:7a:94:74: 53:65:7e:e4:63:3d:66:a1:ce:3b:91:2e:7c:b3:04: c5:e4:9f:cc:b1:3a:49:0d:ea:12:75:ee:5f:45:7d: e4:59:b7:26:b6:66:8c:c1:1f:d7:d9:40:68:0d:26: 36:c1:ac:a7:4d:ab:03:eb:54:99:a1:2f:3a:7e:31: 1d:9e:89:a7:58:96:d9:7b:59:0a:12:e7:df:c4:64: f8:bb:32:d9:a7:c1:54:30:df:c8:46:e5:dc:66:64: 60:62:49:fc:63:1c:e9:3b:b6:ee:26:f6:e8:05:ff: 3f:da:b8:5f:07:14:61:02:9a:bd:ac:ea:dd:28:64: 32:74:a7:08:3c:34:c9:ed:51:e6:a4:e5:99:79:c1: 99:c1:90:ce:40:6f:05:a0:36:9e:c1:d6:0a:30:5b: 50:ed:23:47:f1:f3:ea:9f:22:9e:cb:f2:6f:21:9f: 31:6e:ec:9c:91:8c:0a:88:cf:67:2e:c5:67:7d:fb: b1:2f:72:cc:bc:79:65:d7:75:e4:3e:54:86:22:20: a4:ee:33:4d:fa:1d:c6:ce:38:f5:eb:65:d3:c2:06: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D0:F7:5B:30:61:26:C2:62:64:E7:9E:46:75:14:F4:78:85:B6:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/802bcc8d-efff-3b6c-85a0-dc930b0b9e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:c01:2::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:cc:1f:d8:df:e1:ed:98:9c:18:6d:8b:d0:05:8e:90:20:5c: de:20:df:07:3d:58:2c:f9:e1:ba:89:4e:3b:09:50:0a:ab:23: e8:7c:b1:e1:4e:33:be:9d:9b:4f:fe:fe:8d:5b:73:17:72:fe: cb:25:c2:38:3d:2d:2e:78:57:c6:1a:f4:67:7c:09:54:aa:31: b7:13:30:a1:fe:59:45:73:2d:d1:d4:74:49:c5:5f:aa:b9:78: 4c:98:3e:46:1b:61:aa:0a:d5:7a:5e:61:db:c8:c6:24:39:20: 58:8a:4c:af:03:75:5a:bb:5d:98:dd:ec:9b:6f:19:fc:0e:4e: fe:ac:eb:81:ba:b3:f9:b9:b8:8d:c0:b6:12:84:22:bb:10:0f: 34:41:b5:99:d3:a1:d7:81:1b:f1:74:cc:14:65:53:54:c1:bd: ba:8f:e0:2e:81:7f:65:2e:7c:ce:a6:68:f7:da:28:2c:1f:ac: bf:eb:75:c5:1e:1b:59:c3:06:5e:01:16:1e:f8:2e:cc:d3:97: a9:fa:07:f2:f0:f4:e3:2a:61:16:25:64:84:66:fd:6e:d8:e4: f0:3f:05:50:09:c1:3f:d5:87:d6:24:6c:44:0a:1a:c5:da:b2: 30:3d:e4:81:f9:52:8d:b4:0b:e2:4d:53:dd:7f:78:72:bd:0d: 3f:f5:2c:72 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEn8qn7QQouVw6EnrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZGZiNmM4MWQtNjJkYy00ODFjLTgyNGYtYzM4N2EwMzRlYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWJEPXjkah59FsVZyzlJecd/yg+pYfdCKf/b JOUL46ErVIeuASHkVNd6lHRTZX7kYz1moc47kS58swTF5J/MsTpJDeoSde5fRX3k WbcmtmaMwR/X2UBoDSY2waynTasD61SZoS86fjEdnomnWJbZe1kKEuffxGT4uzLZ p8FUMN/IRuXcZmRgYkn8YxzpO7buJvboBf8/2rhfBxRhApq9rOrdKGQydKcIPDTJ 7VHmpOWZecGZwZDOQG8FoDaewdYKMFtQ7SNH8fPqnyKey/JvIZ8xbuyckYwKiM9n LsVnffuxL3LMvHll13XkPlSGIiCk7jNN+h3Gzjj162XTwgZ5aQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFCzQ91swYSbCYmTnnkZ1FPR4hbbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODAyYmNjOGQtZWZmZi0z YjZjLTg1YTAtZGM5MzBiMGI5ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGAwB AAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAVcwf2N/h7ZicGG2L0AWOkCBc3iDfBz1YLPnhuolOOwlQCqsj 6Hyx4U4zvp2bT/7+jVtzF3L+yyXCOD0tLnhXxhr0Z3wJVKoxtxMwof5ZRXMt0dR0 ScVfqrl4TJg+RhthqgrVel5h28jGJDkgWIpMrwN1WrtdmN3sm28Z/A5O/qzrgbqz +bm4jcC2EoQiuxAPNEG1mdOh14Eb8XTMFGVTVMG9uo/gLoF/ZS58zqZo99ooLB+s v+t1xR4bWcMGXgEWHvguzNOXqfoH8vD04yphFiVkhGb9btjk8D8FUAnBP9WH1iRs RAoaxdqyMD3kgflSjbQL4k1T3X94cr0NP/Uscg== -----END CERTIFICATE-----Generated at Mon Jun 16 04:40:12 2025 by rpki-client