$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa File: 9fa98f84-5902-38d4-b16f-becadb732860.roa (raw, json) Hash identifier: k8JiwICQMvLG5R+hsJkBIVRHDvx/lRH14303FhFVIY8= Subject key identifier: D0:C5:17:D0:6D:35:D5:5E:52:D5:F3:7B:CB:B6:74:40:FF:CE:A7:49 Certificate issuer: /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Certificate serial: 010D0C9F4328584A2ABAEB8A28517D358CCE1300 Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 14866 IP address blocks: 2604:4280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:eb:8a:28:51:7d:35:8c:ce:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=f8ddaedc-a9ba-4477-a076-eca376439d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d6:8d:ac:fb:4f:40:e7:9e:f2:20:59:9e:fc: cd:5d:ea:fc:a5:c4:ee:c9:56:5f:1c:3d:de:78:ba: 84:4b:74:e4:39:13:af:ab:49:55:20:7d:4b:70:c5: 8f:1c:b3:ed:e1:0d:2b:5f:16:e5:13:47:56:8d:0b: 95:84:d3:2d:0b:4c:12:35:b2:8a:1b:76:77:8c:bc: ba:e1:d1:4e:3f:ea:ad:35:9c:25:9b:c6:16:ca:ca: bf:15:ec:4a:31:aa:34:81:f4:0c:b3:c0:3f:09:2f: d7:58:ce:75:0a:ba:a1:c8:c2:1b:99:43:13:24:a0: 0a:23:a3:1d:50:4e:9d:f0:68:cf:f2:d0:17:7c:26: fd:af:7b:f6:bd:db:5c:35:72:ab:c1:0d:48:dd:47: 9f:54:c3:e1:6a:d5:85:0a:cc:a4:6a:6d:97:63:c3: 89:2b:09:0c:b2:40:e5:d1:9a:c3:91:d9:9d:9e:10: b7:da:17:62:27:93:53:19:56:32:63:f2:38:2d:b0: 0c:80:60:d9:e4:36:17:74:9a:c5:c8:b9:88:80:0b: 97:24:cd:c8:1a:75:f4:d3:87:16:3d:16:21:93:fb: 41:1f:b0:fd:80:b3:8e:7d:06:40:9e:3d:b7:22:d6: 36:f6:19:cb:ce:f9:98:4d:ff:de:4e:79:71:2f:09: 77:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C5:17:D0:6D:35:D5:5E:52:D5:F3:7B:CB:B6:74:40:FF:CE:A7:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl X509v3 Authority Key Identifier: keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer sbgp-ipAddrBlock: critical IPv6: 2604:4280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:b2:8a:70:2a:59:59:e6:5e:9e:dd:20:12:b0:e4:09:6f:8a: d9:fb:cf:a8:34:60:7b:1b:b5:de:38:97:f4:fc:90:73:65:69: 98:eb:78:26:78:8a:56:20:72:24:18:ae:b7:ad:1d:0b:af:99: 24:1c:79:91:04:d1:b2:de:97:0d:d4:5e:aa:2e:35:3c:21:06: b5:9a:db:27:9b:4b:5f:bc:68:cf:3e:12:c5:77:11:32:e1:dc: 4d:d8:da:67:97:20:d2:5f:02:cb:30:bf:97:a2:ee:5c:f2:f3: 83:6b:ff:cb:5f:7a:49:bd:ab:08:ee:61:02:ae:e4:4e:71:04: 89:bc:7e:f0:cf:84:ec:8f:e1:cb:98:d4:4c:08:1f:30:0f:24: f1:94:a0:6b:e5:9f:49:48:78:b7:22:5a:9c:ad:da:6d:5f:3e: 63:ad:8e:f8:6f:18:8d:89:fb:dd:86:d3:d3:1e:4b:85:d7:e3: 94:8f:d1:3f:27:53:17:95:a1:9d:08:1a:ef:00:58:5f:8e:18: 51:05:16:a0:71:39:ad:01:60:c1:be:f2:ef:5f:0a:67:3d:28: b9:9e:1d:a7:0a:c4:c6:13:93:f9:b2:ad:bc:33:02:c0:90:5c: 76:0a:21:93:25:35:21:8a:9d:65:61:91:05:34:c7:df:e0:a4: 3f:0b:52:76 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoquuuKKFF9NYzOEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdhMzJjZGYtYWY0YS00N2Q1LTg2ZGMtZTljZGNmNjhj MjU5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjhkZGFlZGMtYTliYS00NDc3LWEwNzYtZWNhMzc2NDM5ZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtaNrPtPQOee8iBZnvzNXer8pcTuyVZfHD3e eLqES3TkOROvq0lVIH1LcMWPHLPt4Q0rXxblE0dWjQuVhNMtC0wSNbKKG3Z3jLy6 4dFOP+qtNZwlm8YWysq/FexKMao0gfQMs8A/CS/XWM51CrqhyMIbmUMTJKAKI6Md UE6d8GjP8tAXfCb9r3v2vdtcNXKrwQ1I3UefVMPhatWFCsykam2XY8OJKwkMskDl 0ZrDkdmdnhC32hdiJ5NTGVYyY/I4LbAMgGDZ5DYXdJrFyLmIgAuXJM3IGnX004cW PRYhk/tBH7D9gLOOfQZAnj23ItY29hnLzvmYTf/eTnlxLwl38QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNDFF9BtNdVeUtXze8u2dED/zqdJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mN2Ez MmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNkY2Y2OGMyNTkvOWZhOThmODQtNTkwMi0z OGQ0LWIxNmYtYmVjYWRiNzMyODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjdhMzJjZGYtYWY0YS00N2Q1LTg2 ZGMtZTljZGNmNjhjMjU5L2Y3YTMyY2RmLWFmNGEtNDdkNS04NmRjLWU5Y2RjZjY4 YzI1OS5jcmwwHwYDVR0jBBgwFoAUns2WOXoXY3LPoEdHHjUTuHN2FuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mN2EzMmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNk Y2Y2OGMyNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRCgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC2sopwKllZ5l6e3SASsOQJb4rZ+8+oNGB7G7XeOJf0/JBzZWmY63gm eIpWIHIkGK63rR0Lr5kkHHmRBNGy3pcN1F6qLjU8IQa1mtsnm0tfvGjPPhLFdxEy 4dxN2NpnlyDSXwLLML+Xou5c8vODa//LX3pJvasI7mECruROcQSJvH7wz4Tsj+HL mNRMCB8wDyTxlKBr5Z9JSHi3IlqcrdptXz5jrY74bxiNifvdhtPTHkuF1+OUj9E/ J1MXlaGdCBrvAFhfjhhRBRagcTmtAWDBvvLvXwpnPSi5nh2nCsTGE5P5sq28MwLA kFx2CiGTJTUhip1lYZEFNMff4KQ/C1J2 -----END CERTIFICATE-----Generated at Mon Jun 16 12:30:03 2025 by rpki-client