$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa File: fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa (raw, json) Hash identifier: styw6tMGZSYDL5PXgm5uVj/4bKKPQuwjsXesaewV6Hw= Subject key identifier: 92:D1:49:D9:C6:1B:04:6D:70:79:81:5C:D5:38:DF:E4:A4:E0:72:9C Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584A1B5FFE034212F78057D0F520 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 62856 IP address blocks: 2620:130:f001::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:fe:03:42:12:f7:80:57:d0:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=484a98bf-2ece-499e-83fe-6b125ae68409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b6:81:68:0f:f9:c7:bc:e6:e6:7d:37:c9:2f: b3:17:8d:f6:75:57:1d:26:ba:25:39:3f:24:b0:fe: ef:47:e0:e1:e3:30:9e:91:f9:4c:18:64:93:3d:0c: bb:37:4a:fb:c5:22:9b:c3:71:3f:7a:6f:4f:22:60: 85:b7:9a:80:d1:f9:ec:77:2f:7f:bc:53:ec:92:a3: 17:b6:76:80:5b:b9:2d:7f:ca:4c:45:08:6b:d0:41: bd:40:b2:a6:69:b6:ed:2f:66:5c:d1:09:34:ef:e2: d3:f0:d5:a7:0d:2b:89:1a:80:c5:10:8b:25:d8:1b: 5f:0e:8b:81:e7:c6:1f:bf:32:89:6e:d3:a0:04:f6: f7:a3:73:f1:74:68:89:1a:3f:18:c4:12:c3:96:8f: 7b:e0:45:04:a7:c7:75:18:63:cd:d2:bc:40:40:f2: b2:02:37:a1:75:f3:b9:6a:f9:ea:76:5c:9d:50:74: 1e:2b:c6:e4:8f:7a:f4:83:a4:49:2e:ce:eb:9e:2a: d7:e5:4c:73:d0:f9:20:33:9b:ab:f2:08:41:74:79: eb:9a:79:2d:8f:d2:a6:0b:a0:12:f6:ee:aa:74:04: 27:22:64:68:01:a7:e1:bb:5d:ee:7e:e1:91:a0:f8: 79:3a:7b:9c:55:e1:83:28:54:e4:12:d1:b1:a4:c2: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D1:49:D9:C6:1B:04:6D:70:79:81:5C:D5:38:DF:E4:A4:E0:72:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv6: 2620:130:f001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:5b:04:51:3e:14:9f:f1:3a:fc:d0:fd:c5:29:cb:f0:a8:fa: 11:95:89:3b:f8:f9:63:5a:6b:3d:37:e4:47:64:e6:07:5e:ae: e3:21:95:d3:bd:aa:e0:b6:45:34:00:8f:95:14:e8:09:ea:99: 33:70:5b:91:b8:09:b2:19:d5:ac:6a:15:00:dc:85:4f:d1:ba: 3d:84:5f:e1:b9:46:ee:6c:cd:05:be:49:dc:38:06:c4:38:b2: 92:a2:16:e9:4d:d1:a9:33:4d:b4:10:2c:be:7f:6f:34:78:69: 7d:e7:27:79:24:ba:57:04:0b:ec:e4:a7:56:6d:3b:62:ba:c1: 80:db:aa:1e:16:f1:da:2a:fb:4c:65:86:04:90:37:2b:02:5c: 60:93:b4:67:1c:77:d3:ad:5e:59:08:0c:6f:32:a9:5d:3d:b6: 9d:1e:83:0a:e5:0b:da:3e:20:0c:ed:73:c1:80:66:d1:19:25: bb:12:9b:78:69:04:ea:ef:00:05:61:92:f3:74:91:d1:1d:d7: 08:85:8d:e4:b3:84:84:ff:7e:b1:79:31:c1:88:e5:a5:51:9e: 11:f8:eb:6a:0e:ed:a9:a9:3d:57:ac:35:fa:5d:56:cc:3d:3c: 14:25:da:2d:72:aa:bb:ff:2e:29:5e:26:b8:d8:9c:55:56:70: 45:5c:9d:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEobX/4DQhL3gFfQ9SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NDg0YTk4YmYtMmVjZS00OTllLTgzZmUtNmIxMjVhZTY4NDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2baBaA/5x7zm5n03yS+zF432dVcdJrolOT8k sP7vR+Dh4zCekflMGGSTPQy7N0r7xSKbw3E/em9PImCFt5qA0fnsdy9/vFPskqMX tnaAW7ktf8pMRQhr0EG9QLKmabbtL2Zc0Qk07+LT8NWnDSuJGoDFEIsl2BtfDouB 58YfvzKJbtOgBPb3o3PxdGiJGj8YxBLDlo974EUEp8d1GGPN0rxAQPKyAjehdfO5 avnqdlydUHQeK8bkj3r0g6RJLs7rnirX5Uxz0PkgM5ur8ghBdHnrmnktj9KmC6AS 9u6qdAQnImRoAafhu13ufuGRoPh5OnucVeGDKFTkEtGxpMJCjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJLRSdnGGwRtcHmBXNU43+Sk4HKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvZmI0ZmE2YWQtNmE1OS0z NWZjLWFlOWYtMTFlMTg4NzE5Y2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABMPAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB9bBFE+FJ/xOvzQ/cUpy/Co+hGViTv4+WNaaz035Edk5gderuMh ldO9quC2RTQAj5UU6AnqmTNwW5G4CbIZ1axqFQDchU/Ruj2EX+G5Ru5szQW+Sdw4 BsQ4spKiFulN0akzTbQQLL5/bzR4aX3nJ3kkulcEC+zkp1ZtO2K6wYDbqh4W8doq +0xlhgSQNysCXGCTtGccd9OtXlkIDG8yqV09tp0egwrlC9o+IAztc8GAZtEZJbsS m3hpBOrvAAVhkvN0kdEd1wiFjeSzhIT/frF5McGI5aVRnhH462oO7ampPVesNfpd Vsw9PBQl2i1yqrv/LileJrjYnFVWcEVcnTw= -----END CERTIFICATE-----Generated at Mon Jun 16 02:10:22 2025 by rpki-client