$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa File: ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa (raw, json) Hash identifier: Pa2DhHoQ3EnRHImJiRKixSZrQMGBMl/FB1o4ulMfhk0= Subject key identifier: D6:15:E0:5E:00:3D:CF:44:8A:38:14:5E:AC:E8:0F:F8:E5:84:53:A1 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584A1B5FF8AB087BB29B07EF1500 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 62856 IP address blocks: 2620:130:f000::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f8:ab:08:7b:b2:9b:07:ef:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=2439711d-081d-4958-8865-9c79bec42e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:51:67:f7:3d:fe:84:b6:2c:b3:b6:a0:be:14: dc:4f:a6:43:5d:94:73:5c:0f:ac:26:58:6b:f1:5b: fa:f4:e9:b5:4e:87:d5:66:bb:44:c8:1b:67:60:c0: 55:20:80:d2:18:8b:00:85:da:58:fc:b3:2a:b3:66: 26:8a:85:82:36:15:00:65:a3:06:20:cb:c6:c0:fb: 06:38:52:28:99:6f:32:e3:9c:9e:4b:74:65:b0:0e: dc:ed:26:1e:db:58:06:dc:92:c9:26:7f:7d:fe:ac: bb:25:b6:52:08:71:c6:0d:ac:fb:81:fa:2e:4d:ed: 4f:64:cf:aa:7d:1b:06:20:b4:38:ed:58:ec:7f:8e: 51:a2:a6:19:71:d6:54:73:ca:55:21:43:89:fe:33: e4:76:02:ab:a8:61:36:90:58:90:02:37:3d:72:cf: be:9e:0d:6f:21:45:bd:38:49:fc:77:0d:98:fa:57: f5:bc:71:f1:62:74:33:f9:cd:31:49:25:9e:a4:df: c4:06:7d:b6:2e:49:38:a0:2d:a8:85:cd:79:f3:d9: e9:ff:c0:84:00:ad:b1:c0:d9:e7:76:98:cb:ff:16: ff:7b:67:6a:06:e2:e1:9c:e3:71:e2:0d:a9:4b:23: d7:94:05:9c:5e:c3:c1:0e:82:3f:9d:99:eb:70:a5: d6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:15:E0:5E:00:3D:CF:44:8A:38:14:5E:AC:E8:0F:F8:E5:84:53:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv6: 2620:130:f000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c7:fd:15:f3:36:bb:5b:d4:ed:69:04:35:79:df:eb:24:15: a1:9d:81:6b:da:73:6d:b4:f0:85:5e:77:b5:57:61:05:fa:47: cf:98:a5:3a:08:dd:5f:2f:c2:cc:21:19:c1:42:33:4d:35:87: 87:e4:d0:50:01:98:86:37:5f:ae:be:db:7d:63:4b:9c:04:4d: dc:57:ac:5c:10:21:0c:d4:c9:05:6e:1d:3b:ae:2c:c6:25:fd: da:bf:05:06:cf:7f:ba:c8:a1:9b:8f:15:86:66:d7:bf:a7:d8: 62:5d:a2:21:8f:e9:cf:0c:c6:3f:7f:28:60:8d:e5:b3:6f:f4: 80:ea:ec:a5:15:e7:35:12:8f:81:3c:b6:29:65:e1:77:07:05: 26:8d:07:29:39:9d:34:75:2e:7c:a2:fe:92:ef:19:04:72:e8: fc:2b:31:49:d7:c0:5e:32:c6:53:08:c9:4e:fb:78:34:e1:c8: 28:9e:10:37:bf:45:75:99:cc:e3:f9:77:e4:37:90:b9:cb:c5: 7a:86:aa:65:f8:30:fd:a7:f5:87:98:80:67:0b:ff:92:dd:24: ab:5c:db:50:e4:8d:79:2c:2b:9c:59:4e:bd:e3:4b:54:58:d8: e4:0e:a0:2c:8d:26:42:20:d8:9f:7d:83:bd:bc:ec:4a:3d:29: 13:b3:63:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEobX/irCHuymwfvFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk MjQzOTcxMWQtMDgxZC00OTU4LTg4NjUtOWM3OWJlYzQyZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlFn9z3+hLYss7agvhTcT6ZDXZRzXA+sJlhr 8Vv69Om1TofVZrtEyBtnYMBVIIDSGIsAhdpY/LMqs2YmioWCNhUAZaMGIMvGwPsG OFIomW8y45yeS3RlsA7c7SYe21gG3JLJJn99/qy7JbZSCHHGDaz7gfouTe1PZM+q fRsGILQ47Vjsf45RoqYZcdZUc8pVIUOJ/jPkdgKrqGE2kFiQAjc9cs++ng1vIUW9 OEn8dw2Y+lf1vHHxYnQz+c0xSSWepN/EBn22Lkk4oC2ohc1589np/8CEAK2xwNnn dpjL/xb/e2dqBuLhnONx4g2pSyPXlAWcXsPBDoI/nZnrcKXWVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNYV4F4APc9EijgUXqzoD/jlhFOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvYWQ4YjQwZTUtZjNmNC0z MmI2LWI2ZDktZWFmNDViMTM3MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABMPAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAELH/RXzNrtb1O1pBDV53+skFaGdgWvac2208IVed7VXYQX6R8+Y pToI3V8vwswhGcFCM001h4fk0FABmIY3X66+231jS5wETdxXrFwQIQzUyQVuHTuu LMYl/dq/BQbPf7rIoZuPFYZm17+n2GJdoiGP6c8Mxj9/KGCN5bNv9IDq7KUV5zUS j4E8till4XcHBSaNByk5nTR1Lnyi/pLvGQRy6PwrMUnXwF4yxlMIyU77eDThyCie EDe/RXWZzOP5d+Q3kLnLxXqGqmX4MP2n9YeYgGcL/5LdJKtc21DkjXksK5xZTr3j S1RY2OQOoCyNJkIg2J99g7287Eo9KROzY5g= -----END CERTIFICATE-----Generated at Mon Jun 16 15:42:42 2025 by rpki-client