$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fd108f4e-54b5-3439-b50b-7a0c0f8a0460.roa File: fd108f4e-54b5-3439-b50b-7a0c0f8a0460.roa (raw, json) Hash identifier: CxPQSXxWjUgKfIeGU/llwFZMXKIYbUMnh01AJ6mx1V8= Subject key identifier: 6B:19:BC:A7:41:A1:07:B3:0B:44:B7:09:FB:27:3F:21:EE:33:F1:77 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584993F9DDCF8257DB6858FB85C0 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fd108f4e-54b5-3439-b50b-7a0c0f8a0460.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 4213 IP address blocks: 2605:bb00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:dd:cf:82:57:db:68:58:fb:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=614735f0-a049-4c69-8195-acd0ddc877d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:79:c9:17:0e:25:8c:52:9f:25:40:f2:e8:02: 57:c2:3c:94:82:b1:ca:d7:d9:3e:8a:b5:0c:88:b6: 47:04:a9:16:a5:d7:92:07:36:f4:22:bf:5d:4d:b4: 80:bb:cd:e8:00:99:8d:69:ba:a7:35:53:78:37:9b: cd:01:8b:29:49:1b:61:f8:da:21:8c:7e:65:3e:8c: 75:39:eb:be:f6:c0:d7:d5:d2:66:dd:bc:cf:3b:b9: 66:14:63:5f:d3:ce:ea:a4:5d:8c:7d:b6:66:43:61: 32:c7:37:f5:39:b2:9b:1e:30:90:b7:aa:f8:49:df: 80:32:5b:ea:a4:f5:47:c3:13:dc:ed:da:9a:a1:f2: f3:ad:95:42:e5:be:d6:31:56:52:b5:e1:95:4b:2b: 81:a8:8c:cb:ef:bb:ab:9d:34:23:2d:76:bb:c0:88: 71:13:a3:f7:4c:f3:05:bc:51:79:d4:ed:08:f8:bc: 3c:c0:dc:98:f6:ff:a6:57:70:d3:a4:68:1f:e8:32: 5a:24:cc:b5:9a:ed:84:3c:c4:d4:28:0e:9c:d8:22: 8c:d9:0c:b2:7d:cf:9e:22:18:22:12:9d:9e:01:8f: db:22:b4:e3:b0:d1:7b:12:0a:a0:54:26:ee:6c:70: 5c:03:0c:50:08:5d:ad:fe:0d:30:ec:3b:60:43:b8: e2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:19:BC:A7:41:A1:07:B3:0B:44:B7:09:FB:27:3F:21:EE:33:F1:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fd108f4e-54b5-3439-b50b-7a0c0f8a0460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv6: 2605:bb00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:87:c1:39:34:7d:20:0f:f8:ad:7e:e8:1f:dc:7d:1c:ea:54: 4e:a1:c6:df:f1:37:b1:cc:b7:91:fe:24:cf:10:7b:2f:14:47: e4:1c:e1:a4:08:45:87:3d:f7:74:6a:fe:9f:6c:7c:2f:34:a9: 48:10:be:15:1d:25:19:93:30:33:6f:c4:84:0c:39:3d:6f:7c: 01:91:d7:39:e7:33:7c:ec:91:04:33:e9:1b:4c:e7:b2:d3:0d: 12:80:53:83:19:d1:0d:5d:d5:ad:ea:bb:44:f2:d5:14:35:ce: 58:a3:9c:5a:27:73:03:f7:fc:4d:94:75:ed:be:29:61:c5:f0: e6:c3:ed:63:a8:3e:65:e5:c6:14:5b:43:dd:a9:87:76:89:cb: 4f:d3:22:86:07:01:5f:6c:c1:20:19:6d:52:21:76:d8:25:4b: 47:87:bd:62:b1:dc:9a:99:be:7e:44:63:59:8b:2f:2b:c2:03: 63:95:3c:29:84:55:d2:1e:b6:7c:b3:dd:0a:bb:f0:47:7c:ae: 9f:dd:ec:61:ed:00:8f:cf:b3:df:5b:17:9a:8e:ec:af:5b:24: 08:89:9e:9a:07:61:99:b9:64:55:1b:65:8a:fb:e9:db:1b:5c: 73:6d:d0:da:35:23:9e:9b:4c:1e:73:0d:f8:32:fd:3f:29:b8: 69:45:84:9f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+d3PglfbaFj7hcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NjE0NzM1ZjAtYTA0OS00YzY5LTgxOTUtYWNkMGRkYzg3N2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33nJFw4ljFKfJUDy6AJXwjyUgrHK19k+irUM iLZHBKkWpdeSBzb0Ir9dTbSAu83oAJmNabqnNVN4N5vNAYspSRth+NohjH5lPox1 Oeu+9sDX1dJm3bzPO7lmFGNf087qpF2MfbZmQ2Eyxzf1ObKbHjCQt6r4Sd+AMlvq pPVHwxPc7dqaofLzrZVC5b7WMVZSteGVSyuBqIzL77urnTQjLXa7wIhxE6P3TPMF vFF51O0I+Lw8wNyY9v+mV3DTpGgf6DJaJMy1mu2EPMTUKA6c2CKM2Qyyfc+eIhgi Ep2eAY/bIrTjsNF7EgqgVCbubHBcAwxQCF2t/g0w7DtgQ7jiTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGsZvKdBoQezC0S3CfsnPyHuM/F3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZmQxMDhmNGUtNTRiNS0z NDM5LWI1MGItN2EwYzBmOGEwNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgW7ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUh8E5NH0gD/itfugf3H0c6lROocbf8TexzLeR/iTPEHsvFEfkHOGk CEWHPfd0av6fbHwvNKlIEL4VHSUZkzAzb8SEDDk9b3wBkdc55zN87JEEM+kbTOey 0w0SgFODGdENXdWt6rtE8tUUNc5Yo5xaJ3MD9/xNlHXtvilhxfDmw+1jqD5l5cYU W0PdqYd2ictP0yKGBwFfbMEgGW1SIXbYJUtHh71isdyamb5+RGNZiy8rwgNjlTwp hFXSHrZ8s90Ku/BHfK6f3exh7QCPz7PfWxeajuyvWyQIiZ6aB2GZuWRVG2WK++nb G1xzbdDaNSOem0wecw34Mv0/KbhpRYSf -----END CERTIFICATE-----Generated at Sun Jun 15 15:17:37 2025 by rpki-client