$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa File: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (raw, json) Hash identifier: 9j3cTvQKuIsynXEeSxomGkpkXqkU9sEA5dRA+oRAF8Y= Subject key identifier: 35:4F:A6:84:34:22:23:DD:CE:5C:42:81:99:0A:A9:6C:0E:AC:58:60 Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F4328584A0C0555B5B47E199514A0B300 Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 32140 IP address blocks: 2602:806:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:55:b5:b4:7e:19:95:14:a0:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=9ecbcfae-1c31-4bee-8410-8570124dd5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3f:bb:de:b9:de:e3:dd:ac:d3:3b:78:94:7c: f5:19:9b:f1:6c:58:68:89:36:34:54:10:fa:a6:1b: e2:b2:48:79:d0:68:57:1c:df:3b:90:88:b6:e2:5b: 2e:f2:85:e3:02:12:3d:1b:13:84:36:de:bf:e6:5f: b5:b1:1a:d7:b6:fc:b1:0d:07:8c:f8:08:5a:e2:cd: 6f:45:52:04:79:c2:82:23:ff:4b:a6:ca:8d:20:8a: 5d:9a:f4:34:1b:30:ac:4c:ee:a4:d1:06:4d:bb:3f: db:be:9f:6b:81:15:be:e9:88:8b:6c:cc:c7:37:29: b0:33:c8:10:ee:4b:2b:43:d6:e5:eb:0e:58:b9:2c: fe:1a:5a:4d:5c:cd:6f:ad:80:b6:66:31:b4:82:c0: 3d:d8:60:a0:80:40:7f:fc:1a:4e:ea:40:7f:c3:dd: c5:a9:4d:ed:8c:2e:fc:69:e3:42:ab:3d:07:84:84: c5:ca:87:04:89:35:91:e1:6d:7b:8b:25:a5:0a:97: 1b:77:95:45:bd:70:6f:bf:b1:f8:e2:02:d3:39:a0: 2e:c0:6c:7a:b6:88:06:c7:8f:47:20:8b:05:fc:22: 49:eb:f0:49:9d:3f:0a:35:46:7b:6e:fb:cb:46:52: 5b:32:5e:89:bb:e0:d8:12:79:c0:70:7c:78:3e:45: b1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4F:A6:84:34:22:23:DD:CE:5C:42:81:99:0A:A9:6C:0E:AC:58:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv6: 2602:806:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9e:89:b0:8f:47:12:93:22:ee:fc:c8:46:9c:32:aa:c4:97: dd:34:8b:71:64:e2:42:5b:e8:79:12:fc:cd:3e:3e:5a:b6:81: 51:24:50:9d:a7:91:3f:4e:28:49:25:11:7c:e7:3a:d7:d4:dd: c2:bb:2d:0a:0c:cb:3e:17:84:c9:d9:6a:f4:18:86:9d:c5:9f: 98:e5:9a:ae:f8:84:6a:53:f5:a7:d1:53:bd:2a:53:b6:ed:77: 49:3a:49:2b:03:9f:36:a5:3a:55:d0:55:1d:b0:93:fb:b6:1b: db:5f:d5:c6:2f:28:53:a3:77:1f:4c:a0:6f:5d:c9:cf:58:68: 20:31:63:d8:ea:30:5e:01:7b:05:35:92:65:53:b8:67:c3:b7: a2:b5:6d:1a:07:5c:32:e7:43:bd:0d:35:e4:06:be:54:84:d1: a0:13:e8:32:f3:2d:f0:f5:48:8d:fd:76:57:ad:7f:a6:df:21: 40:d2:de:2d:4d:72:e1:55:7c:3f:17:c4:d1:ae:76:0e:fb:e0: 3c:d2:19:22:6e:4b:35:40:f6:c0:a3:98:16:48:9e:d3:64:4a: bd:1c:ea:87:78:e7:f6:9a:1e:52:b8:da:dd:8e:38:96:cc:81: d4:fc:a6:5b:d9:f4:89:03:68:60:91:15:98:79:db:a9:64:7f: e3:0b:b0:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoMBVW1tH4ZlRSgswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OWVjYmNmYWUtMWMzMS00YmVlLTg0MTAtODU3MDEyNGRkNWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz+73rne492s0zt4lHz1GZvxbFhoiTY0VBD6 phviskh50GhXHN87kIi24lsu8oXjAhI9GxOENt6/5l+1sRrXtvyxDQeM+Aha4s1v RVIEecKCI/9LpsqNIIpdmvQ0GzCsTO6k0QZNuz/bvp9rgRW+6YiLbMzHNymwM8gQ 7ksrQ9bl6w5YuSz+GlpNXM1vrYC2ZjG0gsA92GCggEB//BpO6kB/w93FqU3tjC78 aeNCqz0HhITFyocEiTWR4W17iyWlCpcbd5VFvXBvv7H44gLTOaAuwGx6togGx49H IIsF/CJJ6/BJnT8KNUZ7bvvLRlJbMl6Ju+DYEnnAcHx4PkWx6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDVPpoQ0IiPdzlxCgZkKqWwOrFhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvZjI1OGZlZjgtMGQxYy0z N2YxLWE5NDMtZGIyZTZiMjM2ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIBvAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIaeibCPRxKTIu78yEacMqrEl900i3Fk4kJb6HkS/M0+Plq2gVEk UJ2nkT9OKEklEXznOtfU3cK7LQoMyz4XhMnZavQYhp3Fn5jlmq74hGpT9afRU70q U7btd0k6SSsDnzalOlXQVR2wk/u2G9tf1cYvKFOjdx9MoG9dyc9YaCAxY9jqMF4B ewU1kmVTuGfDt6K1bRoHXDLnQ70NNeQGvlSE0aAT6DLzLfD1SI39dletf6bfIUDS 3i1NcuFVfD8XxNGudg774DzSGSJuSzVA9sCjmBZIntNkSr0c6od45/aaHlK42t2O OJbMgdT8plvZ9IkDaGCRFZh526lkf+MLsLM= -----END CERTIFICATE-----Generated at Sun Jun 15 15:20:40 2025 by rpki-client