$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/43c5549b-dc14-309e-bf49-854015bbb2ec.roa File: 43c5549b-dc14-309e-bf49-854015bbb2ec.roa (raw, json) Hash identifier: FI7kNJeqnGjSDcms39dksr7qd9btArMOKEo/U4YM02E= Subject key identifier: 9E:D4:1A:84:0F:4F:C3:EA:59:95:91:27:CB:83:B4:AC:4B:97:32:86 Certificate issuer: /CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a Certificate serial: 010D0C9F4328584A612B169805DC22A7DD764960 Authority key identifier: E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/43c5549b-dc14-309e-bf49-854015bbb2ec.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 40864 IP address blocks: 2604:840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:16:98:05:dc:22:a7:dd:76:49:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=2b8f5266-e848-4044-a951-c0a9ad94ea34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:98:e2:20:44:60:b8:b9:ce:48:e6:43:14: 25:5c:00:69:7a:95:26:7f:a4:f9:57:24:1c:da:05: b5:3b:74:3e:55:2b:b8:76:b8:82:c9:42:64:f2:b7: 22:0b:72:7e:0e:5d:be:d2:e9:a8:a5:78:16:ed:29: c7:16:ef:9f:20:b2:56:b8:9b:06:ec:fd:02:82:ce: 4d:75:55:76:24:a7:0f:c1:45:8a:8d:ce:c4:ef:b1: 59:80:34:8f:46:97:8b:1d:f4:b8:11:85:75:00:6d: d6:a3:b9:b1:19:fb:6a:09:89:fe:f7:df:63:82:b9: 81:43:9e:23:26:b8:e1:f6:23:79:25:15:ed:ba:8c: 85:d8:f7:f1:5d:c6:5d:aa:13:5c:c8:07:ca:21:27: f3:95:5a:b6:13:e5:af:1c:ba:a0:b6:df:1c:0a:9d: 78:08:1b:69:d2:49:7e:a9:c2:e8:9a:33:ef:49:9a: c1:6f:df:0d:01:03:57:e3:01:bf:f7:0f:23:9a:1e: 11:4a:bd:57:ed:7b:17:07:a1:66:40:f3:a1:34:77: f9:2b:7a:78:01:82:63:2e:67:09:d8:17:bc:6a:a9: db:87:79:25:2b:1f:8c:53:0f:8d:89:31:cd:9f:95: b0:31:b6:84:60:df:33:e7:99:c8:1d:9c:d9:00:42: b0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D4:1A:84:0F:4F:C3:EA:59:95:91:27:CB:83:B4:AC:4B:97:32:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/43c5549b-dc14-309e-bf49-854015bbb2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl X509v3 Authority Key Identifier: keyid:E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer sbgp-ipAddrBlock: critical IPv6: 2604:840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:26:98:ad:b7:d0:63:f8:07:10:43:9f:e8:f3:68:6a:19:ca: 72:34:57:04:b6:ef:3b:20:52:e4:81:2e:a5:b8:4b:80:2e:ca: 17:1d:96:7d:35:ab:69:fd:ef:2a:39:01:4b:95:cd:ea:a0:a6: d0:b7:15:ad:f0:bf:91:26:05:3c:15:93:da:ad:77:66:fa:3c: 6e:f4:91:08:9f:26:f8:56:c0:07:f2:14:3d:bb:e9:2f:03:f7: 5a:73:68:31:c2:bc:d7:be:33:b2:65:42:9b:6b:83:f0:78:70: 53:44:dd:e8:ca:3e:6a:8f:5e:60:ee:60:36:1f:93:ef:d9:80: a3:5f:e5:0e:66:20:86:81:b5:80:62:38:86:9e:b4:89:64:04: cb:a0:34:0e:4f:93:9a:cd:42:92:30:22:4b:64:a8:67:fd:c2: b0:eb:d2:e5:8f:8e:e2:e0:76:0c:0e:e1:80:ef:36:35:f3:7c: cc:7d:d0:65:1e:fc:92:e3:46:b4:a2:1c:8d:62:28:83:66:f0: d6:d5:ec:1a:53:04:63:35:25:dc:23:8e:6a:50:ac:5a:67:f7: a4:b5:cb:a6:0d:91:93:e8:4a:ef:85:f1:da:90:c4:36:34:1f: be:f4:f0:86:fc:b6:b4:29:6b:f0:85:75:04:ed:8f:93:3c:1c: 05:db:d0:52 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEphKxaYBdwip912SWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhY2MxNTUtNmFkOS00M2Y1LWFkMmMtMmQ4ZGRiMGNh NzhhMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk MmI4ZjUyNjYtZTg0OC00MDQ0LWE5NTEtYzBhOWFkOTRlYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiCY4iBEYLi5zkjmQxQlXABpepUmf6T5VyQc 2gW1O3Q+VSu4driCyUJk8rciC3J+Dl2+0umopXgW7SnHFu+fILJWuJsG7P0Cgs5N dVV2JKcPwUWKjc7E77FZgDSPRpeLHfS4EYV1AG3Wo7mxGftqCYn+999jgrmBQ54j Jrjh9iN5JRXtuoyF2PfxXcZdqhNcyAfKISfzlVq2E+WvHLqgtt8cCp14CBtp0kl+ qcLomjPvSZrBb98NAQNX4wG/9w8jmh4RSr1X7XsXB6FmQPOhNHf5K3p4AYJjLmcJ 2Be8aqnbh3klKx+MUw+NiTHNn5WwMbaEYN8z55nIHZzZAEKw4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ7UGoQPT8PqWZWRJ8uDtKxLlzKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ZmFj YzE1NS02YWQ5LTQzZjUtYWQyYy0yZDhkZGIwY2E3OGEvNDNjNTU0OWItZGMxNC0z MDllLWJmNDktODU0MDE1YmJiMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWZhY2MxNTUtNmFkOS00M2Y1LWFk MmMtMmQ4ZGRiMGNhNzhhLzlmYWNjMTU1LTZhZDktNDNmNS1hZDJjLTJkOGRkYjBj YTc4YS5jcmwwHwYDVR0jBBgwFoAU4cHTekycnFuIqlkcSXBgm0dIahIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ZmFjYzE1NS02YWQ5LTQzZjUtYWQyYy0yZDhk ZGIwY2E3OGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQIQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsJpitt9Bj+AcQQ5/o82hqGcpyNFcEtu87IFLkgS6luEuALsoXHZZ9 Natp/e8qOQFLlc3qoKbQtxWt8L+RJgU8FZParXdm+jxu9JEInyb4VsAH8hQ9u+kv A/dac2gxwrzXvjOyZUKba4PweHBTRN3oyj5qj15g7mA2H5Pv2YCjX+UOZiCGgbWA YjiGnrSJZATLoDQOT5OazUKSMCJLZKhn/cKw69Llj47i4HYMDuGA7zY183zMfdBl HvyS40a0ohyNYiiDZvDW1ewaUwRjNSXcI45qUKxaZ/ektcumDZGT6ErvhfHakMQ2 NB++9PCG/La0KWvwhXUE7Y+TPBwF29BS -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:59 2025 by rpki-client