$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa File: 3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa (raw, json) Hash identifier: kNaUuYyOHcS2SfDvO6PnrsJRL/t9UiFOD0xfXmjInsU= Subject key identifier: DE:B4:E9:56:D1:8D:DA:EC:19:04:AA:7D:15:19:13:69:99:52:7A:9C Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584A2D8582522E6B94D5C04C2DC0 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 40382 IP address blocks: 2606:e540::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:82:52:2e:6b:94:d5:c0:4c:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=a3835287-2605-4b26-bebc-0303a443c364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6a:e1:66:bd:eb:8c:6c:4c:3f:a2:55:e8:d6: 49:8f:97:b7:21:a8:ff:d5:04:ef:9c:71:36:ad:01: dc:7e:b1:24:62:2e:e5:fa:b0:81:4c:f7:6d:0f:16: 20:b9:25:64:d1:e0:35:62:3f:3c:6c:57:b3:50:65: c9:b6:05:a7:7d:30:55:69:e3:40:eb:cb:7d:ae:41: 5b:cd:bd:73:05:15:36:de:af:ec:de:61:6b:cf:ce: b7:99:2c:84:72:5a:32:f1:a7:d2:cf:ff:fa:f1:d8: cc:da:68:eb:ad:89:41:43:11:bb:c7:b8:84:e9:47: 05:89:1a:da:0a:ec:b5:d5:73:0a:4b:a5:3a:ff:69: 32:3d:59:71:aa:ab:4e:58:e5:db:f7:de:8b:b9:ba: 29:62:37:3c:c7:ae:5e:b4:2f:d4:19:5d:d5:d7:5b: e0:1a:42:13:54:f6:b3:6b:c2:72:33:be:76:ab:05: 20:40:16:db:b6:0c:72:ea:7f:ca:6f:ae:76:4e:91: 0f:87:aa:e7:1e:db:41:1e:07:d5:84:ce:23:00:58: 92:4f:76:ae:e5:1f:b2:83:77:df:72:2b:a1:1f:cb: be:6a:34:62:6a:b5:84:d5:51:92:06:ad:af:18:3b: 67:12:04:13:8d:14:a5:ad:e1:89:c3:d8:ca:32:d4: 23:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B4:E9:56:D1:8D:DA:EC:19:04:AA:7D:15:19:13:69:99:52:7A:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:de:db:66:0b:e1:16:ff:f1:88:5a:81:32:73:0b:4d:aa:cd: 64:bd:83:b0:ec:b1:11:2f:cd:16:8a:4a:7c:23:06:7e:2e:de: fc:f7:6f:d7:38:ca:f0:73:d2:e1:fc:fc:11:4d:ee:68:04:57: 2c:24:6c:1d:4f:b1:db:74:09:18:8e:c9:9a:d7:30:fd:ac:01: af:5c:59:db:d0:c1:b5:92:5e:94:2d:95:c1:07:74:55:00:cf: dc:98:34:53:ef:5b:d5:82:a4:49:9f:69:6b:e1:11:1f:00:6a: ac:72:5f:48:2c:96:5a:46:eb:a5:7d:57:0d:c1:cf:c8:7a:d2: bc:a1:b9:ba:e6:13:78:89:12:31:4c:96:f0:de:d0:d6:68:1a: 7b:0b:bf:bb:51:1d:f7:fc:2f:af:51:50:43:d2:99:76:c9:d0: 1c:9a:3d:4e:0c:e6:15:37:2f:16:7f:2d:c1:3f:26:a6:c2:1d: 40:fd:f2:1d:e2:bc:b3:ca:1e:fb:e6:a5:5d:f4:e7:89:ca:47: 08:d2:4a:73:52:c6:ec:ed:80:f9:07:60:21:a3:3a:41:5f:45: eb:23:44:a4:9e:b1:59:a9:e3:10:c0:99:48:ed:14:d8:5c:e0: 31:97:ce:eb:76:c9:2f:a9:7d:2d:a3:46:f4:d1:f7:6c:e6:5a: bb:df:2e:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEothYJSLmuU1cBMLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk YTM4MzUyODctMjYwNS00YjI2LWJlYmMtMDMwM2E0NDNjMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGrhZr3rjGxMP6JV6NZJj5e3Iaj/1QTvnHE2 rQHcfrEkYi7l+rCBTPdtDxYguSVk0eA1Yj88bFezUGXJtgWnfTBVaeNA68t9rkFb zb1zBRU23q/s3mFrz863mSyEcloy8afSz//68djM2mjrrYlBQxG7x7iE6UcFiRra Cuy11XMKS6U6/2kyPVlxqqtOWOXb996LubopYjc8x65etC/UGV3V11vgGkITVPaz a8JyM752qwUgQBbbtgxy6n/Kb652TpEPh6rnHttBHgfVhM4jAFiST3au5R+yg3ff ciuhH8u+ajRiarWE1VGSBq2vGDtnEgQTjRSlreGJw9jKMtQjwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN606VbRjdrsGQSqfRUZE2mZUnqcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvM2E0MWM2NmMtN2UyOS0z OGZiLTlmMjQtOGRmMmY1ZmQ5NTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgblQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBO3ttmC+EW//GIWoEycwtNqs1kvYOw7LERL80Wikp8IwZ+Lt7892/X OMrwc9Lh/PwRTe5oBFcsJGwdT7HbdAkYjsma1zD9rAGvXFnb0MG1kl6ULZXBB3RV AM/cmDRT71vVgqRJn2lr4REfAGqscl9ILJZaRuulfVcNwc/IetK8obm65hN4iRIx TJbw3tDWaBp7C7+7UR33/C+vUVBD0pl2ydAcmj1ODOYVNy8Wfy3BPyamwh1A/fId 4ryzyh775qVd9OeJykcI0kpzUsbs7YD5B2AhozpBX0XrI0SknrFZqeMQwJlI7RTY XOAxl87rdskvqX0to0b00fds5lq73y5u -----END CERTIFICATE-----Generated at Mon Jun 16 21:00:23 2025 by rpki-client