$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa File: cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa (raw, json) Hash identifier: 5glg0RSnhC8nBUsyZ6AlYJ791URbr4wCVzSb2VmJ7vI= Subject key identifier: 04:2D:A9:46:7B:F6:44:79:90:B0:46:91:75:E1:AD:27:57:1B:11:C2 Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F43285849F9DFDA92152037DEB45CC300 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 23158 IP address blocks: 2606:d580::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:da:92:15:20:37:de:b4:5c:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=cc59b061-d8ea-4bc2-a52a-48f0ac65a858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:b7:88:51:9e:82:fe:13:26:33:12:6b:36: 1b:f3:1d:55:14:6b:0f:b2:02:46:ea:8c:13:0a:61: ad:02:3d:f0:1b:99:df:74:f2:b7:36:ea:5b:b8:a8: 87:0e:42:86:e4:b9:57:8a:a3:d1:fb:19:c1:0e:2b: b3:9f:20:47:c0:78:d4:f4:2d:45:f1:56:63:d8:f8: b7:bc:5d:03:b3:14:6e:25:b5:ec:0b:20:51:68:95: df:ab:03:eb:e1:6e:35:ce:e9:46:23:73:42:c0:f5: 07:fe:42:1c:ab:47:86:57:6a:61:77:4d:d1:50:a8: c1:4d:c5:5d:3a:2d:06:7f:06:22:01:d5:17:9d:2b: 94:f9:ba:0a:f6:35:f5:ba:c3:85:3b:43:f2:19:d9: b8:e0:c2:40:a5:9c:6e:ec:05:3e:26:b1:46:2f:e3: a1:89:22:2d:e5:5d:af:ab:4f:87:0e:0b:82:e3:56: e8:09:da:63:47:3a:20:72:5b:9b:56:a4:4d:2b:03: 73:ad:44:7b:f9:f8:08:4e:f3:38:06:e7:23:01:97: cb:54:eb:8b:cd:33:90:db:52:cb:c9:d3:66:31:cf: db:6a:b9:5b:dd:69:00:ec:f5:2e:a1:e2:19:5b:3e: a2:3c:8a:c2:1f:2c:51:17:60:e2:2c:c3:ba:f9:60: f6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2D:A9:46:7B:F6:44:79:90:B0:46:91:75:E1:AD:27:57:1B:11:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv6: 2606:d580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a6:34:1f:78:fa:43:e8:a6:3c:ee:cb:71:02:65:d5:65:1d: f4:12:67:ec:c7:8f:1b:3c:5f:80:6e:12:c2:6d:9a:a1:6b:de: 93:bc:e6:7b:74:13:2e:85:9c:b7:55:68:19:9a:a7:d2:95:7c: 5b:12:b9:00:29:55:e5:00:b0:e7:e1:00:89:aa:cf:ed:af:e9: 8f:e6:e8:26:31:9f:22:90:d2:e3:25:6f:65:3f:73:aa:12:11: cf:67:ee:d2:3a:1e:d2:7e:cf:69:e9:4f:de:14:2d:c4:d6:fa: c5:d2:2b:80:12:60:f9:79:0b:1e:77:2c:dc:b8:5c:2f:a6:99: 60:5e:f9:ae:a3:33:cb:b5:fd:29:96:b9:6d:d6:4c:54:b3:bc: 58:ed:b4:20:8b:65:b1:7e:4c:f9:3d:ad:14:ba:ab:27:1b:af: 49:55:66:c4:6b:1e:38:59:de:e3:ab:64:55:d0:e7:b8:e0:2b: 6f:a9:7a:98:ea:b9:eb:65:5f:96:20:a7:3f:20:35:b5:18:74: 40:be:e8:52:f3:69:65:ba:f9:e5:1b:4f:47:4d:73:a4:04:04: 6f:11:01:41:67:84:be:3a:66:40:a2:d8:71:c2:ec:72:4b:c0: 8e:e9:6b:36:2f:75:3c:9f:62:59:f5:b2:eb:62:7a:35:de:e6: 17:9a:88:f0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn539qSFSA33rRcwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk Y2M1OWIwNjEtZDhlYS00YmMyLWE1MmEtNDhmMGFjNjVhODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoha3iFGegv4TJjMSazYb8x1VFGsPsgJG6owT CmGtAj3wG5nfdPK3NupbuKiHDkKG5LlXiqPR+xnBDiuznyBHwHjU9C1F8VZj2Pi3 vF0DsxRuJbXsCyBRaJXfqwPr4W41zulGI3NCwPUH/kIcq0eGV2phd03RUKjBTcVd Oi0GfwYiAdUXnSuU+boK9jX1usOFO0PyGdm44MJApZxu7AU+JrFGL+OhiSIt5V2v q0+HDguC41boCdpjRzogclubVqRNKwNzrUR7+fgITvM4BucjAZfLVOuLzTOQ21LL ydNmMc/barlb3WkA7PUuoeIZWz6iPIrCHyxRF2DiLMO6+WD2LQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAQtqUZ79kR5kLBGkXXhrSdXGxHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvY2MwYTVmMTQtMGY0Zi0z YThiLWFkNjAtYzZlNjQ0NDZiN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbVgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJpjQfePpD6KY87stxAmXVZR30Emfsx48bPF+AbhLCbZqha96TvOZ7 dBMuhZy3VWgZmqfSlXxbErkAKVXlALDn4QCJqs/tr+mP5ugmMZ8ikNLjJW9lP3Oq EhHPZ+7SOh7Sfs9p6U/eFC3E1vrF0iuAEmD5eQsedyzcuFwvpplgXvmuozPLtf0p lrlt1kxUs7xY7bQgi2Wxfkz5Pa0UuqsnG69JVWbEax44Wd7jq2RV0Oe44CtvqXqY 6rnrZV+WIKc/IDW1GHRAvuhS82lluvnlG09HTXOkBARvEQFBZ4S+OmZAothxwuxy S8CO6Ws2L3U8n2JZ9bLrYno13uYXmojw -----END CERTIFICATE-----Generated at Sun Jun 15 14:29:14 2025 by rpki-client