$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa File: fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa (raw, json) Hash identifier: QRbzB4BsgdWuMbpNVhkb6busI3hLwrECicCZW/ZBQPc= Subject key identifier: 33:AB:9C:6D:85:E4:61:06:5A:47:F4:D3:E6:B5:E2:DA:77:61:F8:86 Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Certificate serial: 010D0C9F43285849F17FB0ECF2043599F09EB190 Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 0 IP address blocks: 2607:3000::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:b0:ec:f2:04:35:99:f0:9e:b1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=19892967-c4fc-43cd-8dd3-0a7e35404552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:dc:42:da:02:4c:4a:13:bd:d9:49:65:53: 01:5a:3a:5f:ae:1f:9e:d7:62:68:3e:8e:1f:0b:47: 16:5f:29:40:ea:4e:0f:a5:dd:4d:8f:96:b3:60:8f: db:3a:91:19:9b:83:eb:e3:d9:07:29:f3:ce:60:2b: 44:49:ad:70:ee:b8:c5:fc:56:03:2b:2d:52:5d:0c: 0d:9f:7f:3a:f8:af:0b:03:54:01:b6:79:1c:f7:d6: 10:95:62:dc:e5:08:34:13:1e:72:07:bf:7f:81:f8: 0d:78:cb:87:89:6c:d3:fb:a9:b5:57:8e:64:08:a2: 7f:0b:e8:98:87:45:2f:8f:af:49:cd:36:3f:b6:60: 7e:86:7f:d7:a2:e2:c9:db:4f:c7:17:61:cd:25:ff: 61:f9:7b:65:a5:82:f6:86:30:7f:49:22:45:f0:5a: 43:75:69:1a:1a:0d:1f:44:99:43:ca:91:42:c1:ca: ae:f3:8c:3f:12:d9:da:67:03:0c:30:e5:f4:3c:84: ca:84:fc:3e:0a:9e:0c:70:59:3c:c2:3a:bc:16:77: 94:a5:08:f6:9c:0c:09:9a:45:74:74:ec:fc:a5:6f: 8d:56:a0:6f:8d:4e:f3:2b:b9:9d:10:fb:af:e7:2d: 38:6c:09:78:a5:c3:e1:f4:54:10:b4:3f:d1:ad:86: da:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AB:9C:6D:85:E4:61:06:5A:47:F4:D3:E6:B5:E2:DA:77:61:F8:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl X509v3 Authority Key Identifier: keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer sbgp-ipAddrBlock: critical IPv6: 2607:3000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c4:e4:24:dd:7f:04:6b:a9:55:72:62:b3:08:43:7b:c4:0a: b7:69:48:83:2e:30:8a:16:04:a2:25:98:9f:22:49:42:d1:30: 16:76:39:e3:02:86:a5:c1:4b:80:b9:dc:eb:e2:f4:0c:c4:16: 20:5e:df:57:9e:6a:7e:d4:ce:2f:4c:45:99:a7:47:2a:8b:9c: 06:7c:91:4b:72:13:80:2d:29:a2:52:22:98:f5:5c:d2:24:9e: c1:bc:94:0e:1c:04:98:16:f3:ad:d6:13:b7:2c:48:7e:a5:32: e2:4b:55:36:0d:5e:ca:8b:64:59:72:3a:cf:04:44:fe:f9:37: a2:86:50:af:b6:47:53:48:2d:4a:27:8e:5f:46:c2:9c:2f:14: fa:df:47:0a:94:b9:54:f7:ff:4c:e3:d3:11:c5:14:dd:12:82: 80:11:5e:72:b0:ac:09:90:c6:25:5d:a9:a1:5a:70:77:86:42: b8:7f:4f:28:df:fa:b0:db:57:df:7e:30:4f:da:13:63:60:ea: 72:04:1f:29:96:dd:82:16:18:93:ae:fb:fa:27:53:08:fd:bd: 47:bb:09:2b:ea:00:89:95:db:54:63:72:2c:c6:73:bf:17:ad: 21:1e:15:43:b8:58:4e:fb:92:50:e4:19:9e:d9:ae:58:42:7b: b6:80:f8:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnxf7Ds8gQ1mfCesZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3 ODI5MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MTk4OTI5NjctYzRmYy00M2NkLThkZDMtMGE3ZTM1NDA0NTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPbcQtoCTEoTvdlJZVMBWjpfrh+e12JoPo4f C0cWXylA6k4Ppd1Nj5azYI/bOpEZm4Pr49kHKfPOYCtESa1w7rjF/FYDKy1SXQwN n386+K8LA1QBtnkc99YQlWLc5Qg0Ex5yB79/gfgNeMuHiWzT+6m1V45kCKJ/C+iY h0Uvj69JzTY/tmB+hn/XouLJ20/HF2HNJf9h+XtlpYL2hjB/SSJF8FpDdWkaGg0f RJlDypFCwcqu84w/EtnaZwMMMOX0PITKhPw+Cp4McFk8wjq8FneUpQj2nAwJmkV0 dOz8pW+NVqBvjU7zK7mdEPuv5y04bAl4pcPh9FQQtD/RrYbaKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDOrnG2F5GEGWkf00+a14tp3YfiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3 Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvZmE0ZWQ0NjQtMjliMy0z NDUyLWJkZDktNjg0NGZiNGRiOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1 N2EyZjc4MjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcwADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6xOQk3X8Ea6lVcmKzCEN7xAq3aUiDLjCKFgSiJZifIklC0TAWdjnj AoalwUuAudzr4vQMxBYgXt9Xnmp+1M4vTEWZp0cqi5wGfJFLchOALSmiUiKY9VzS JJ7BvJQOHASYFvOt1hO3LEh+pTLiS1U2DV7Ki2RZcjrPBET++TeihlCvtkdTSC1K J45fRsKcLxT630cKlLlU9/9M49MRxRTdEoKAEV5ysKwJkMYlXamhWnB3hkK4f08o 3/qw21fffjBP2hNjYOpyBB8plt2CFhiTrvv6J1MI/b1Huwkr6gCJldtUY3IsxnO/ F60hHhVDuFhO+5JQ5Bme2a5YQnu2gPhM -----END CERTIFICATE-----Generated at Sun Jun 15 13:02:02 2025 by rpki-client