$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/6bb3dd8d-6885-3f66-9f81-d1df405388c1.roa File: 6bb3dd8d-6885-3f66-9f81-d1df405388c1.roa (raw, json) Hash identifier: pA7rzGo7d8crcRuZUdJ4kiK6KbFG4hpHpWT0yzI0I+w= Subject key identifier: 36:32:CE:53:9A:8D:D1:A5:2C:48:4D:35:72:35:46:4D:F5:64:C8:ED Certificate issuer: /CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Certificate serial: 010D0C9F43285849F9DFBE4091FF19F3CF2E7300 Authority key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/6bb3dd8d-6885-3f66-9f81-d1df405388c1.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 14618 IP address blocks: 2620:85:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:be:40:91:ff:19:f3:cf:2e:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=555abac7-c623-4213-b75d-1d87511245b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a6:79:2d:61:72:ec:5d:0b:42:af:bd:a1:f1: eb:42:ee:76:3b:8b:20:d5:4f:ba:c1:6d:48:64:6e: 38:f2:05:5c:e2:ed:f4:89:a7:e5:14:bb:51:26:5f: 47:99:c2:b4:e5:eb:5e:8b:de:10:98:68:bf:27:af: b7:ca:b2:79:dd:20:fb:fb:04:53:e3:de:c6:3f:42: 76:cf:2f:9a:cc:c1:85:5a:e8:68:45:2c:d2:b0:fa: 27:f7:5c:32:21:0b:cf:cc:5e:dd:6d:98:13:aa:2b: da:ee:29:77:37:91:55:14:23:84:36:e3:e6:48:d6: f9:6c:58:9c:5f:c8:bb:17:18:5b:00:62:51:1c:c7: 5e:66:fd:b1:ff:35:f9:e6:15:6a:0f:c1:e4:85:f7: d8:b5:68:c3:39:ae:0b:45:12:b7:23:a2:f6:80:22: bf:2b:de:e3:6b:55:c0:14:c1:5e:d0:b2:f0:15:82: 07:03:07:6f:87:14:7d:7d:80:78:0d:71:6d:26:89: 96:0e:f0:5d:af:3b:88:3c:c7:13:92:a7:32:af:3e: c4:74:8b:26:e1:14:a0:04:de:70:7c:c2:b8:0f:4d: 2b:30:43:75:b2:9d:a4:e7:fa:cc:d8:bd:20:18:f2: 37:62:a4:cf:f7:b9:d5:25:6e:b2:1b:e8:3e:ff:1e: 53:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:32:CE:53:9A:8D:D1:A5:2C:48:4D:35:72:35:46:4D:F5:64:C8:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/6bb3dd8d-6885-3f66-9f81-d1df405388c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl X509v3 Authority Key Identifier: keyid:58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer sbgp-ipAddrBlock: critical IPv6: 2620:85:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b3:8b:b8:47:70:50:b2:f4:e4:99:4a:9f:f6:2b:bf:3f:d8: 14:69:80:5c:b6:c2:09:99:01:4a:5b:9c:1f:2b:54:57:c9:91: 15:6e:96:4d:45:6a:fa:aa:b2:f9:62:08:c9:68:a0:6a:47:c3: 9d:17:76:29:ae:5f:e4:57:84:71:50:26:09:b9:dc:f8:8a:31: 6a:44:f8:26:f9:99:c6:ca:c8:c7:63:9b:ba:c9:bf:66:a3:ba: d1:e4:2e:8b:b0:49:1b:47:a4:0f:dd:22:41:58:66:4e:47:b5: 78:90:27:d4:c2:d5:fe:ea:91:58:ec:41:7b:ff:bb:e8:b6:c1: d6:38:5c:76:60:bb:8c:ba:27:31:75:d0:c0:2a:05:70:3e:54: 6f:80:1f:da:c2:c4:78:d4:d2:f9:87:3e:97:7b:bc:bf:c7:70: 39:92:50:64:d7:ef:cb:c6:f4:30:e2:6f:72:5c:a3:74:bc:30: 36:9b:30:c1:30:be:1e:29:c5:6a:74:83:86:79:8a:77:fb:ac: 76:46:38:9c:c7:0c:37:0e:3a:9b:2f:d4:2b:50:6d:e7:e0:4d: 11:73:24:7f:d8:3f:dc:9f:0a:b2:b2:37:6f:f7:3d:2d:b3:5b: 22:b1:94:64:1d:7a:34:c6:77:46:83:1b:02:cd:77:af:c8:79: 7e:48:9d:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn5375Akf8Z888ucwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VhMjFhN2ItNTk2Yy00NWY4LTg5OWUtNjg3OTgxNWYy NmIxMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk NTU1YWJhYzctYzYyMy00MjEzLWI3NWQtMWQ4NzUxMTI0NWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKZ5LWFy7F0LQq+9ofHrQu52O4sg1U+6wW1I ZG448gVc4u30iaflFLtRJl9HmcK05etei94QmGi/J6+3yrJ53SD7+wRT497GP0J2 zy+azMGFWuhoRSzSsPon91wyIQvPzF7dbZgTqiva7il3N5FVFCOENuPmSNb5bFic X8i7FxhbAGJRHMdeZv2x/zX55hVqD8HkhffYtWjDOa4LRRK3I6L2gCK/K97ja1XA FMFe0LLwFYIHAwdvhxR9fYB4DXFtJomWDvBdrzuIPMcTkqcyrz7EdIsm4RSgBN5w fMK4D00rMEN1sp2k5/rM2L0gGPI3YqTP97nVJW6yG+g+/x5TQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDYyzlOajdGlLEhNNXI1Rk31ZMjtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEy MWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1ZjI2YjEvNmJiM2RkOGQtNjg4NS0z ZjY2LTlmODEtZDFkZjQwNTM4OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2VhMjFhN2ItNTk2Yy00NWY4LTg5 OWUtNjg3OTgxNWYyNmIxLzdlYTIxYTdiLTU5NmMtNDVmOC04OTllLTY4Nzk4MTVm MjZiMS5jcmwwHwYDVR0jBBgwFoAUWNXVMusQAMS/ihkzzuqjhi139KkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5 ODE1ZjI2YjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAhaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGSzi7hHcFCy9OSZSp/2K78/2BRpgFy2wgmZAUpbnB8rVFfJkRVu lk1FavqqsvliCMlooGpHw50XdimuX+RXhHFQJgm53PiKMWpE+Cb5mcbKyMdjm7rJ v2ajutHkLouwSRtHpA/dIkFYZk5HtXiQJ9TC1f7qkVjsQXv/u+i2wdY4XHZgu4y6 JzF10MAqBXA+VG+AH9rCxHjU0vmHPpd7vL/HcDmSUGTX78vG9DDib3Jco3S8MDab MMEwvh4pxWp0g4Z5inf7rHZGOJzHDDcOOpsv1CtQbefgTRFzJH/YP9yfCrKyN2/3 PS2zWyKxlGQdejTGd0aDGwLNd6/IeX5InSs= -----END CERTIFICATE-----Generated at Sun Jun 15 13:11:16 2025 by rpki-client