$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa File: bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa (raw, json) Hash identifier: 6bx+kzpQOwAYOfhw5kmssrw3I3dDKj4wc6NIo7hASCE= Subject key identifier: 82:DB:B3:96:D8:33:5D:0C:AD:14:B5:7B:1C:CD:1F:81:81:05:1E:20 Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Certificate serial: 010D0C9F4328584A189548E0BFFFBD76336B7ED0 Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 0 IP address blocks: 2001:504:1b::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:48:e0:bf:ff:bd:76:33:6b:7e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=a4fc542a-0c8f-4c40-ba4a-e1dc9e05bc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fe:7e:9e:f7:a2:1c:d9:51:fa:e9:5a:86:8e: 9b:fa:04:d5:bd:dc:bf:07:0a:0d:99:63:d3:80:28: b8:2f:46:cc:6f:44:53:d9:29:46:02:73:17:06:b0: 5a:6a:59:11:6e:ec:3e:29:bf:a8:6d:1c:cb:e8:35: 92:4c:d4:ad:74:19:eb:e4:a7:27:cf:08:5c:67:18: c6:c0:2c:e7:53:65:87:5e:ec:e4:48:3b:01:9c:7c: 8b:8c:2f:11:03:a7:7f:92:04:29:d5:c6:db:5b:46: 19:12:a0:3f:91:6c:9c:dd:61:1d:15:da:41:fa:9b: 06:27:b2:21:43:b5:7a:22:93:93:dc:1e:e6:a3:86: 9f:38:a4:a1:9c:18:40:fc:e7:11:3d:d0:99:bd:ad: f0:a1:8e:fc:77:4f:0d:00:d0:ca:d8:3a:e1:47:54: e0:7a:15:37:df:88:21:da:43:c3:7c:7c:98:a0:b3: 6a:77:3f:d5:84:2a:49:bb:5d:77:53:22:99:b7:f9: e6:fe:aa:b7:4f:60:d2:29:b1:0e:31:32:d7:5e:b5: 22:31:dd:99:7b:7e:0e:3a:78:32:c1:05:29:21:51: 1a:04:ce:11:a4:3e:0b:c8:ff:81:2d:fe:60:17:a8: 47:8b:1e:28:0e:4e:fb:6b:35:f2:e2:e2:dd:01:b2: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DB:B3:96:D8:33:5D:0C:AD:14:B5:7B:1C:CD:1F:81:81:05:1E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl X509v3 Authority Key Identifier: keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:2e:f5:f8:f5:a6:1e:c6:7e:b4:c8:04:9f:34:9c:03:18:47: 5d:17:4a:c1:3e:3d:c3:8b:df:98:67:20:29:c3:25:54:01:81: 77:ed:76:40:ca:91:a3:2b:e8:6f:2d:89:17:a6:87:58:d7:30: 20:bc:ec:3d:c4:ac:70:93:66:e4:ca:2b:b8:51:76:13:ef:15: d7:dc:7a:e0:b2:fa:ed:89:44:ed:bb:7c:54:27:91:4a:2a:63: 5b:15:94:d5:28:fd:55:55:dd:f7:c4:64:59:23:ea:0f:86:ca: f7:e5:c8:75:7d:c7:ba:ee:cd:0a:a3:cb:83:da:47:9a:3d:93: 67:90:54:12:c7:9b:36:79:f8:e7:e5:36:dc:bf:f0:1c:7c:aa: b4:db:30:4e:28:5c:15:45:3a:34:50:fc:73:e1:99:28:4b:52: f5:01:f7:a0:16:2f:18:e0:64:6d:29:62:8b:c8:0a:75:33:12: 1e:11:17:c2:20:4a:5f:e0:5a:2f:49:1b:66:c5:15:4b:8d:e6: de:60:d6:5a:8d:26:d3:ec:8f:33:1c:a0:0d:40:a1:4d:d7:42: e3:9d:18:66:b7:f8:68:cc:88:12:3d:e0:df:f6:20:c0:f3:b2: de:07:28:fa:76:93:11:1a:00:0f:44:c8:53:42:7f:e7:a1:cc: 30:3a:00:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoYlUjgv/+9djNrftAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4 YzhmMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk YTRmYzU0MmEtMGM4Zi00YzQwLWJhNGEtZTFkYzllMDViYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/5+nveiHNlR+ulaho6b+gTVvdy/BwoNmWPT gCi4L0bMb0RT2SlGAnMXBrBaalkRbuw+Kb+obRzL6DWSTNStdBnr5KcnzwhcZxjG wCznU2WHXuzkSDsBnHyLjC8RA6d/kgQp1cbbW0YZEqA/kWyc3WEdFdpB+psGJ7Ih Q7V6IpOT3B7mo4afOKShnBhA/OcRPdCZva3woY78d08NANDK2DrhR1TgehU334gh 2kPDfHyYoLNqdz/VhCpJu113UyKZt/nm/qq3T2DSKbEOMTLXXrUiMd2Ze34OOngy wQUpIVEaBM4RpD4LyP+BLf5gF6hHix4oDk77azXy4uLdAbJ0YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFILbs5bYM10MrRS1exzNH4GBBR4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYx MWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvYmQyNGZmODctYzE3OC0z ZjBkLWExZTctNzg4Y2Y5MGE4YzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE2MTFlZjEtMTk1ZS00OTU4LWE2 YWMtZjRhMWQyY2Q4YzhmLzJhNjExZWYxLTE5NWUtNDk1OC1hNmFjLWY0YTFkMmNk OGM4Zi5jcmwwHwYDVR0jBBgwFoAU58NNkhO9kN6+mFO2dWGXhlsnRk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGEx ZDJjZDhjOGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIEu9fj1ph7GfrTIBJ80nAMYR10XSsE+PcOL35hnICnDJVQBgXft dkDKkaMr6G8tiRemh1jXMCC87D3ErHCTZuTKK7hRdhPvFdfceuCy+u2JRO27fFQn kUoqY1sVlNUo/VVV3ffEZFkj6g+GyvflyHV9x7ruzQqjy4PaR5o9k2eQVBLHmzZ5 +OflNty/8Bx8qrTbME4oXBVFOjRQ/HPhmShLUvUB96AWLxjgZG0pYovICnUzEh4R F8IgSl/gWi9JG2bFFUuN5t5g1lqNJtPsjzMcoA1AoU3XQuOdGGa3+GjMiBI94N/2 IMDzst4HKPp2kxEaAA9EyFNCf+ehzDA6ALQ= -----END CERTIFICATE-----Generated at Mon Jun 16 04:29:17 2025 by rpki-client