$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3d7da0e6-6daf-37e2-bb89-97c403f5e023.roa File: 3d7da0e6-6daf-37e2-bb89-97c403f5e023.roa (raw, json) Hash identifier: 5W8r8YjDXBKwe96Bt0NEgYS5aoDHujfu/0evWw3vpn0= Subject key identifier: BC:AA:24:73:CE:AC:34:10:EB:82:91:7F:D5:23:00:C2:C5:9C:DC:68 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A1F90367C1719172268507C00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3d7da0e6-6daf-37e2-bb89-97c403f5e023.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 54113 IP address blocks: 2607:8940:4130::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:36:7c:17:19:17:22:68:50:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=a4b62f1a-7920-4872-8c88-fad0a6096753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:64:3b:18:ce:29:e3:2f:81:72:e3:00:c4:52: b1:fc:2e:b1:fb:ab:0e:48:cf:d2:35:31:9a:2d:28: 93:44:17:d3:f2:0f:c4:c9:fb:3a:cf:21:33:be:4e: bb:79:f0:77:9a:df:da:b7:c5:cb:07:54:8c:17:39: f9:60:ca:1e:6a:10:9f:85:f3:9f:c7:8a:a0:7f:71: 67:57:0f:77:f7:8a:42:f5:21:41:bc:44:e2:78:83: 4d:54:7c:55:5b:94:57:f2:ce:04:56:11:ea:b3:4c: 48:9f:f2:56:44:8f:b7:1a:7d:3c:aa:69:32:69:9a: 9d:06:3f:bf:40:94:0e:1c:9b:d1:52:a9:ca:02:8b: 24:45:8f:66:32:77:a7:d4:a6:90:1c:e1:d3:8b:f0: 86:59:01:d1:95:1f:ae:04:a9:ef:d3:2b:9b:88:37: df:7c:33:77:ba:bf:4c:9c:71:42:72:40:9d:19:41: a7:8c:38:51:64:b3:77:de:c1:3b:1f:30:a9:02:16: fc:6b:cd:b9:28:2f:50:35:67:ff:bb:78:8b:03:31: 2f:99:99:a6:f7:ca:86:e2:db:f5:9b:c4:a0:d6:4e: bc:2a:d2:41:ee:c3:a7:4e:2c:c2:75:16:55:f6:22: 2e:dc:ea:aa:bf:f0:5d:24:43:a1:95:7f:4d:06:89: 7d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AA:24:73:CE:AC:34:10:EB:82:91:7F:D5:23:00:C2:C5:9C:DC:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3d7da0e6-6daf-37e2-bb89-97c403f5e023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4130::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:98:66:72:de:25:40:d6:a8:8e:8e:ea:a9:12:73:0c:84:bb: ec:dc:e3:34:e2:71:6b:68:a7:7e:64:dd:2d:dc:b4:0c:9a:a6: 95:c5:de:50:42:7b:5f:06:c5:b0:80:e8:cb:9c:6c:73:4f:c8: 67:46:4f:5b:bb:5d:4d:cf:78:91:e4:d1:aa:32:f0:02:14:fd: a5:c3:05:1b:19:6b:60:e1:28:cd:f3:8f:71:8b:d6:79:df:df: f9:b1:5a:7a:f1:14:5c:cc:51:3b:43:91:f6:ea:1e:61:4d:5e: f8:94:48:aa:72:a2:b2:20:0e:ee:be:ec:c8:48:37:37:12:0f: 47:4f:42:d9:44:33:b0:17:b8:c8:9f:e8:4a:3f:53:b3:66:21: 99:33:63:84:5f:ec:0d:8a:3c:58:60:8b:29:28:d5:63:26:97: 32:af:6b:fb:52:47:f0:a7:a1:9d:61:f3:1c:0b:27:6e:7f:86: cb:1f:b5:86:4a:60:14:a4:b2:4d:fc:a9:0a:98:d2:65:0d:b3: 70:70:64:be:8a:51:6e:f1:c2:47:1d:06:0d:a2:b1:ad:e2:c2: d0:48:c9:9b:c4:3a:09:6b:9b:b2:ac:ee:67:fa:4b:c3:8c:e7: 5b:23:d5:d7:96:4e:d4:db:77:fe:d1:66:97:cd:c9:6e:7e:91: 57:10:34:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEofkDZ8FxkXImhQfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk YTRiNjJmMWEtNzkyMC00ODcyLThjODgtZmFkMGE2MDk2NzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWQ7GM4p4y+BcuMAxFKx/C6x+6sOSM/SNTGa LSiTRBfT8g/Eyfs6zyEzvk67efB3mt/at8XLB1SMFzn5YMoeahCfhfOfx4qgf3Fn Vw9394pC9SFBvETieINNVHxVW5RX8s4EVhHqs0xIn/JWRI+3Gn08qmkyaZqdBj+/ QJQOHJvRUqnKAoskRY9mMnen1KaQHOHTi/CGWQHRlR+uBKnv0yubiDfffDN3ur9M nHFCckCdGUGnjDhRZLN33sE7HzCpAhb8a825KC9QNWf/u3iLAzEvmZmm98qG4tv1 m8Sg1k68KtJB7sOnTizCdRZV9iIu3Oqqv/BdJEOhlX9NBol9KwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLyqJHPOrDQQ64KRf9UjAMLFnNxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2Q3ZGEwZTYtNmRhZi0z N2UyLWJiODktOTdjNDAzZjVlMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEEw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAASYZnLeJUDWqI6O6qkScwyEu+zc4zTicWtop35k3S3ctAyappXF 3lBCe18GxbCA6MucbHNPyGdGT1u7XU3PeJHk0aoy8AIU/aXDBRsZa2DhKM3zj3GL 1nnf3/mxWnrxFFzMUTtDkfbqHmFNXviUSKpyorIgDu6+7MhINzcSD0dPQtlEM7AX uMif6Eo/U7NmIZkzY4Rf7A2KPFhgiyko1WMmlzKva/tSR/CnoZ1h8xwLJ25/hssf tYZKYBSksk38qQqY0mUNs3BwZL6KUW7xwkcdBg2isa3iwtBIyZvEOglrm7Ks7mf6 S8OM51sj1deWTtTbd/7RZpfNyW5+kVcQNDU= -----END CERTIFICATE-----Generated at Mon Jun 16 05:29:06 2025 by rpki-client