$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ea7bc95c-bc4b-3f59-beae-7f4bd60a8c06.roa File: ea7bc95c-bc4b-3f59-beae-7f4bd60a8c06.roa (raw, json) Hash identifier: gNdWL/246JaFEb+SNNDfCOgfbARnTKldt8A2v/D3w40= Subject key identifier: 62:93:73:5A:39:F9:1A:03:E5:8C:7A:BF:C7:60:5C:8C:C5:67:3B:44 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A0C056EAFC310F6D9DAEB9B00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ea7bc95c-bc4b-3f59-beae-7f4bd60a8c06.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 2914 IP address blocks: 2001:418:3ff:5::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6e:af:c3:10:f6:d9:da:eb:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=4928fc1b-e581-4956-9db7-5425e11f9a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:17:89:d5:6a:09:c3:9b:7f:06:e3:28:02: b0:70:47:21:76:77:6c:0f:c9:36:2e:5d:26:a9:b4: 9e:e7:1a:39:3e:67:7f:f5:a1:f6:da:c1:f9:9e:48: ec:7f:15:94:35:10:5a:17:90:23:8c:9f:43:01:10: 27:3e:f8:05:c3:aa:00:fc:5b:7c:a4:c4:b4:58:b2: 86:83:8a:c7:b4:29:54:b9:0a:48:8c:7a:d5:29:3a: ab:61:80:40:07:d7:82:38:25:14:0c:02:a4:c3:b1: 94:4c:a4:b8:2e:4a:e2:50:fc:60:be:f0:9b:ed:b9: cd:5a:55:e3:41:9c:61:a4:1d:c2:6a:5e:5d:2f:04: 52:08:ef:22:b5:91:da:60:6e:ae:ef:b6:0c:1b:f2: 4d:6c:c1:f6:3c:e0:61:15:9e:97:f0:ed:75:ba:a3: bb:3c:b4:e8:f0:51:bf:9c:b8:e2:2f:46:37:d4:6e: 72:a2:c3:e3:f4:ea:bd:fd:2e:3b:7c:38:04:e8:e3: e6:82:fc:ca:cf:3f:2b:4c:3c:f6:00:a8:30:e2:b8: 12:a3:08:52:04:8e:da:99:93:a6:8d:45:5a:88:30: a0:08:99:76:4e:ce:65:41:8b:9e:d5:c3:c2:77:6b: 1d:83:bf:17:18:32:c3:fe:5f:74:eb:58:b4:b6:45: 2f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:93:73:5A:39:F9:1A:03:E5:8C:7A:BF:C7:60:5C:8C:C5:67:3B:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ea7bc95c-bc4b-3f59-beae-7f4bd60a8c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:3ff:5::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:54:6c:23:63:a0:45:81:8e:ce:cd:5a:3f:58:74:3d:7d:a9: 53:7e:a9:2c:7f:21:18:ba:2d:6b:5f:8c:95:a3:0c:39:96:98: 00:68:1c:dd:a7:50:54:3a:b9:42:28:98:17:b9:6a:e8:5f:35: d2:91:15:0e:77:6c:f9:8a:ee:e5:1a:63:05:7a:de:a0:b2:b3: d5:2f:50:5d:0a:07:fb:99:da:ad:d1:74:e2:be:5c:da:7e:3b: e2:d6:11:43:80:67:7c:d2:ed:30:89:66:67:17:58:08:06:cd: f4:c0:04:a3:9c:c8:75:6e:7b:e3:ba:1c:f2:3a:4b:fd:b2:b8: 65:5b:49:d7:4b:72:8c:91:ea:d0:09:2e:d8:36:29:a5:04:68: 79:da:41:47:ea:c1:e9:d1:25:bd:f4:58:5a:e7:00:06:bd:9d: ac:70:45:69:e5:c2:25:ee:f5:4f:bf:23:e3:e7:fc:66:91:2b: 31:d8:c8:ab:6a:4e:48:8a:0f:c5:83:ca:f2:ab:1b:a6:d5:bc: 6b:b3:78:6d:93:76:57:f2:ca:74:1d:0c:89:4c:84:50:d4:00: 48:12:ec:d8:33:a8:fe:69:db:d1:64:af:7e:b1:79:b6:d2:24: 8b:9e:41:0e:1d:1f:f4:59:2f:0a:4e:5e:6c:10:0f:1c:f0:b7: 58:62:2d:3f -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEoMBW6vwxD22drrmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NDkyOGZjMWItZTU4MS00OTU2LTlkYjctNTQyNWUxMWY5YTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4EXidVqCcObfwbjKAKwcEchdndsD8k2Ll0m qbSe5xo5Pmd/9aH22sH5nkjsfxWUNRBaF5AjjJ9DARAnPvgFw6oA/Ft8pMS0WLKG g4rHtClUuQpIjHrVKTqrYYBAB9eCOCUUDAKkw7GUTKS4LkriUPxgvvCb7bnNWlXj QZxhpB3Cal5dLwRSCO8itZHaYG6u77YMG/JNbMH2POBhFZ6X8O11uqO7PLTo8FG/ nLjiL0Y31G5yosPj9Oq9/S47fDgE6OPmgvzKzz8rTDz2AKgw4rgSowhSBI7amZOm jUVaiDCgCJl2Ts5lQYue1cPCd2sdg78XGDLD/l9061i0tkUvQQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFGKTc1o5+RoD5Yx6v8dgXIzFZztEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZWE3YmM5NWMtYmM0Yi0z ZjU5LWJlYWUtN2Y0YmQ2MGE4YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGAP/ AAUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAglRsI2OgRYGOzs1aP1h0PX2pU36pLH8hGLota1+MlaMMOZaY AGgc3adQVDq5QiiYF7lq6F810pEVDnds+Yru5RpjBXreoLKz1S9QXQoH+5nardF0 4r5c2n474tYRQ4BnfNLtMIlmZxdYCAbN9MAEo5zIdW5747oc8jpL/bK4ZVtJ10ty jJHq0Aku2DYppQRoedpBR+rB6dElvfRYWucABr2drHBFaeXCJe71T78j4+f8ZpEr MdjIq2pOSIoPxYPK8qsbptW8a7N4bZN2V/LKdB0MiUyEUNQASBLs2DOo/mnb0WSv frF5ttIki55BDh0f9FkvCk5ebBAPHPC3WGItPw== -----END CERTIFICATE-----Generated at Sun Jun 15 18:41:32 2025 by rpki-client