$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/7bdb5835-fec4-3d28-9fb0-cc5611fd1211.roa File: 7bdb5835-fec4-3d28-9fb0-cc5611fd1211.roa (raw, json) Hash identifier: p5oRC+F/SXO00PBX8EZOAwjhQoKKV6IDQyyVf4ZsKDI= Subject key identifier: D3:02:32:4B:0E:29:81:94:9C:A1:36:D2:71:21:F4:1C:72:1B:B8:1A Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7 Certificate serial: 010D0C9F4328584A0C05711F313DE15D37200B00 Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/7bdb5835-fec4-3d28-9fb0-cc5611fd1211.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 7922 IP address blocks: 2620:a0:2003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:71:1f:31:3d:e1:5d:37:20:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=e79660a0-1dc1-4258-b243-4d73b7044a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:32:d1:b0:10:bf:da:97:40:cd:c8:11:8f: 03:0f:43:57:8b:2a:72:dd:12:93:4c:56:df:9f:9f: 9d:56:7b:3f:ab:c4:22:84:db:25:a2:df:b7:f2:70: ac:d5:16:0f:2d:31:f3:21:8a:b2:07:1e:74:50:04: 04:28:ee:b9:0f:41:6d:6d:e8:ab:7b:d3:63:2a:79: 52:c2:03:c0:ba:cc:0c:c9:63:97:46:c8:3f:b6:d6: be:ab:ef:f7:25:64:a0:ae:9a:a4:81:76:27:da:5c: e6:02:eb:af:b4:78:fd:2f:e2:2e:95:8a:1a:1d:65: 06:0f:c1:70:1c:3a:75:f1:eb:48:5d:04:1f:4a:2b: 4d:3a:81:08:ec:0d:28:1d:0c:35:c9:d6:28:1e:6b: 3c:3b:48:dd:11:a8:b7:c4:c2:2c:a8:01:4e:3f:84: 42:f4:98:c2:21:83:28:3e:81:89:1d:26:bd:99:78: 96:79:ec:68:39:61:9c:e2:36:06:48:e0:45:9b:3c: 5d:be:b7:56:ce:c6:13:1b:d9:59:7a:d9:c7:60:4d: e9:33:1c:1c:32:ee:c2:00:67:23:53:de:44:fb:a5: a8:d4:ce:25:64:58:e2:4d:33:e8:c2:ca:40:be:f7: 6a:5d:87:72:6b:2c:47:4f:9a:43:ff:5f:b9:c8:74: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:02:32:4B:0E:29:81:94:9C:A1:36:D2:71:21:F4:1C:72:1B:B8:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/7bdb5835-fec4-3d28-9fb0-cc5611fd1211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl X509v3 Authority Key Identifier: keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer sbgp-ipAddrBlock: critical IPv6: 2620:a0:2003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ca:a7:06:c7:d8:21:b1:a0:26:90:32:4e:20:cf:68:ac:fb: 0f:79:2f:f3:de:d8:8e:2f:3e:80:6e:34:9e:9f:74:89:c3:2f: 88:bb:ad:f5:a1:59:ad:8e:00:f3:aa:9b:ed:54:91:1e:c5:30: 01:c0:ab:3b:b6:16:63:cc:75:76:01:55:6c:e9:3d:a2:6e:8d: fd:76:0d:11:3c:83:25:95:9c:14:bd:33:c6:97:43:bc:09:2d: fc:9d:09:2b:55:9e:4f:7e:17:2e:a8:de:74:f2:bc:41:7e:4b: f1:95:9d:29:8a:1f:4a:91:5c:3e:91:b1:b2:72:f1:2c:d7:c4: 80:ab:75:25:a2:e5:08:b5:dd:9c:6e:87:54:b7:58:9d:71:7c: 60:a9:6c:5b:e6:66:b1:48:e8:2f:98:69:2b:8a:7f:63:a0:d4: d7:89:27:80:62:97:3c:b1:6b:7b:f8:32:a7:92:4f:c6:d8:66: 4e:fd:85:01:a7:d9:fd:27:d8:d1:af:3a:62:4c:fe:14:07:e9: 82:af:bc:6a:e0:ee:c8:83:3f:4b:1a:5d:9b:72:ff:d8:87:a4: 92:c3:a2:4a:2e:74:a3:b2:d4:da:d5:3a:9d:cf:6b:0b:bd:2b: e7:6f:f5:63:77:a1:f9:2b:9f:6c:4f:e8:ae:6f:ab:b7:73:a0: cc:0e:db:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoMBXEfMT3hXTcgCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5 OWM3MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZTc5NjYwYTAtMWRjMS00MjU4LWIyNDMtNGQ3M2I3MDQ0YTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN8y0bAQv9qXQM3IEY8DD0NXiypy3RKTTFbf n5+dVns/q8QihNslot+38nCs1RYPLTHzIYqyBx50UAQEKO65D0Ftbeire9NjKnlS wgPAuswMyWOXRsg/tta+q+/3JWSgrpqkgXYn2lzmAuuvtHj9L+IulYoaHWUGD8Fw HDp18etIXQQfSitNOoEI7A0oHQw1ydYoHms8O0jdEai3xMIsqAFOP4RC9JjCIYMo PoGJHSa9mXiWeexoOWGc4jYGSOBFmzxdvrdWzsYTG9lZetnHYE3pMxwcMu7CAGcj U95E+6Wo1M4lZFjiTTPowspAvvdqXYdyayxHT5pD/1+5yHQawwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNMCMksOKYGUnKE20nEh9BxyG7gaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0 ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvN2JkYjU4MzUtZmVjNC0z ZDI4LTlmYjAtY2M1NjExZmQxMjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1 NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm MzY0Yzk5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAoCAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHLKpwbH2CGxoCaQMk4gz2is+w95L/Pe2I4vPoBuNJ6fdInDL4i7 rfWhWa2OAPOqm+1UkR7FMAHAqzu2FmPMdXYBVWzpPaJujf12DRE8gyWVnBS9M8aX Q7wJLfydCStVnk9+Fy6o3nTyvEF+S/GVnSmKH0qRXD6RsbJy8SzXxICrdSWi5Qi1 3Zxuh1S3WJ1xfGCpbFvmZrFI6C+YaSuKf2Og1NeJJ4Bilzyxa3v4MqeST8bYZk79 hQGn2f0n2NGvOmJM/hQH6YKvvGrg7siDP0saXZty/9iHpJLDokoudKOy1NrVOp3P awu9K+dv9WN3ofkrn2xP6K5vq7dzoMwO2/Y= -----END CERTIFICATE-----Generated at Sun Jun 15 17:16:34 2025 by rpki-client