$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa File: 3c58dacd-b17a-3904-a883-f1d2e402127c.roa (raw, json) Hash identifier: jJIoiOGm244QT2PoEF2YftUNDhIT2GgONjisSpKvies= Subject key identifier: 2C:E4:07:23:83:DC:A1:01:5F:38:9A:80:A2:33:DE:7E:B5:0E:9F:F0 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A146563B1D8F000AB1F951340 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 395831 IP address blocks: 2606:7bc0:1081::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:63:b1:d8:f0:00:ab:1f:95:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=ba8ffce3-cef9-4dab-87d1-47a354ee7cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:03:9f:d3:ab:e6:5f:74:a5:36:e4:8e:aa:88: bf:16:2d:22:59:d8:b3:1a:5c:1e:57:b1:37:7f:41: 9e:58:4c:3d:3a:ee:00:fb:9f:d4:13:f6:b5:57:3e: 0b:76:57:76:89:e9:4e:a1:02:f4:40:06:0c:a1:d3: d0:42:c6:c9:c4:51:75:68:1d:91:59:98:1c:b6:a4: 16:8c:39:78:b3:5c:f2:37:ef:7f:ca:d8:17:e1:57: ad:7c:a7:34:62:9d:8f:44:af:36:90:66:b8:02:9a: 64:fe:58:54:47:d0:83:32:6c:f2:e0:a7:55:c1:e5: 46:31:6d:7d:e4:5c:7e:ee:21:47:d6:3b:3e:20:85: f4:ff:88:0a:d6:69:d8:4f:11:61:71:cc:fa:ef:e5: 27:28:a8:9e:2e:59:e3:8b:01:fe:a9:97:57:07:5f: 4a:66:85:09:0c:f1:77:54:60:4e:58:41:70:16:14: 4d:8e:9d:4b:96:4d:d3:a9:56:d4:77:8d:6e:14:ba: 1b:db:d7:45:3d:29:9e:05:f7:55:2f:9b:8a:fb:8d: 8c:d1:0c:ca:0a:c9:3d:d4:11:9d:42:6b:7a:24:bb: f9:59:ff:ab:0a:b2:5f:c4:d8:a2:27:65:14:43:a5: b2:97:05:73:f1:f6:44:f2:90:53:35:28:26:3e:55: 7d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E4:07:23:83:DC:A1:01:5F:38:9A:80:A2:33:DE:7E:B5:0E:9F:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1081::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:aa:54:5c:83:54:82:ac:a8:81:92:f0:10:7d:95:cf:e8:5f: b2:77:42:63:57:e3:c0:31:3d:32:c6:80:cd:e1:c5:38:33:d9: 8a:67:a8:4b:8f:6e:7c:4a:19:35:a5:cf:b2:54:c2:e1:10:23: dd:86:fd:ba:28:4e:5f:57:ae:e7:6d:ec:08:b4:01:50:f3:64: 64:a5:bb:01:fe:26:e1:2e:2a:32:8e:e2:02:52:04:c4:f5:d3: eb:81:d4:1e:42:fa:f2:ce:9e:50:9d:39:6d:7c:30:c4:40:0d: b1:b3:d7:da:d7:16:8d:64:e5:76:9f:38:d0:6f:a1:6a:1f:f4: fd:f2:a2:49:8f:b2:79:03:f7:4a:46:0b:59:67:d6:92:b8:73: 25:22:dd:c3:1c:98:3d:58:c0:7b:b1:a9:71:8c:bf:ef:7d:0b: 0b:88:93:46:24:1b:c0:6b:59:61:64:26:aa:60:7f:e6:01:8b: f3:4e:4b:86:95:8f:99:87:5a:c4:43:08:e5:37:9d:e5:8a:99: e3:3a:c0:24:45:80:c5:93:fc:dd:ee:a3:24:dc:8a:df:2d:5f: 74:f9:e7:be:4a:cf:c9:26:62:9c:66:8c:44:d7:6e:7e:be:69: 96:73:50:38:77:3f:da:48:2b:6c:e6:87:74:84:32:93:8f:3b: 13:a6:2d:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZWOx2PAAqx+VE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YmE4ZmZjZTMtY2VmOS00ZGFiLTg3ZDEtNDdhMzU0ZWU3Y2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QOf06vmX3SlNuSOqoi/Fi0iWdizGlweV7E3 f0GeWEw9Ou4A+5/UE/a1Vz4Ldld2ielOoQL0QAYModPQQsbJxFF1aB2RWZgctqQW jDl4s1zyN+9/ytgX4VetfKc0Yp2PRK82kGa4Appk/lhUR9CDMmzy4KdVweVGMW19 5Fx+7iFH1js+IIX0/4gK1mnYTxFhccz67+UnKKieLlnjiwH+qZdXB19KZoUJDPF3 VGBOWEFwFhRNjp1Llk3TqVbUd41uFLob29dFPSmeBfdVL5uK+42M0QzKCsk91BGd Qmt6JLv5Wf+rCrJfxNiiJ2UUQ6WylwVz8fZE8pBTNSgmPlV9xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCzkByOD3KEBXziagKIz3n61Dp/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvM2M1OGRhY2QtYjE3YS0z OTA0LWE4ODMtZjFkMmU0MDIxMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBCB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHqqVFyDVIKsqIGS8BB9lc/oX7J3QmNX48AxPTLGgM3hxTgz2Ypn qEuPbnxKGTWlz7JUwuEQI92G/booTl9Xrudt7Ai0AVDzZGSluwH+JuEuKjKO4gJS BMT10+uB1B5C+vLOnlCdOW18MMRADbGz19rXFo1k5XafONBvoWof9P3yokmPsnkD 90pGC1ln1pK4cyUi3cMcmD1YwHuxqXGMv+99CwuIk0YkG8BrWWFkJqpgf+YBi/NO S4aVj5mHWsRDCOU3neWKmeM6wCRFgMWT/N3uoyTcit8tX3T5575Kz8kmYpxmjETX bn6+aZZzUDh3P9pIK2zmh3SEMpOPOxOmLbM= -----END CERTIFICATE-----Generated at Sun Jun 15 16:45:17 2025 by rpki-client