$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa File: a50faf7e-80ed-3540-8863-2e3533723c21.roa (raw, json) Hash identifier: C+ELp3HMrQch/o0428FL2aWw0g9XoTpAu7zN4yEDAi0= Subject key identifier: FA:45:DF:22:38:3C:76:54:CA:8E:95:A5:33:16:D7:FA:24:E0:02:24 Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F4328584A7A4B407062E7DB71CCC85160 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 3356 IP address blocks: 2602:814:b000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:40:70:62:e7:db:71:cc:c8:51:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=305e686b-b289-47eb-99f5-53ba1058c7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:34:71:ad:15:0f:9d:4c:6c:de:4b:c1:a1:37: 1d:40:67:b4:df:06:14:93:73:55:f3:d8:0c:0a:f1: e0:55:e8:c1:33:e9:f8:cf:45:70:7d:13:75:9a:68: 07:ca:03:a5:9d:28:af:5c:11:84:ff:b5:67:26:ca: 3d:aa:42:9b:94:92:90:34:05:10:d7:5e:3c:a1:e6: 0b:99:83:3f:e6:ea:93:fc:5e:1f:46:77:75:4c:32: db:bf:9c:fe:99:29:ff:9c:9e:ad:7f:3f:a5:be:3b: 20:55:39:16:40:d6:14:6a:08:06:66:26:b8:c6:dd: 1b:bb:74:86:15:e2:41:5a:c4:56:28:83:20:b6:a8: 7a:64:b7:70:e5:88:37:6b:67:ec:2d:9d:5e:a4:4f: 9e:e8:11:e7:a6:a5:2d:1d:9c:69:ef:1f:56:2d:b5: 09:6e:2e:0b:e6:28:3c:ea:cb:85:48:d1:27:ba:66: f0:b8:9e:b9:db:bf:03:9b:60:22:1f:d2:8b:85:0e: d5:0c:f0:f2:8c:a2:bb:da:fa:22:dc:55:c2:5e:ba: e6:42:66:96:e9:73:25:86:02:e9:c4:72:ba:ab:1d: 78:98:d2:5c:82:8b:90:94:b7:b9:23:17:46:30:00: cd:d4:89:90:2c:d2:c6:20:fe:ee:29:09:42:4e:11: 6f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:45:DF:22:38:3C:76:54:CA:8E:95:A5:33:16:D7:FA:24:E0:02:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv6: 2602:814:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:bb:31:65:9e:d5:f2:27:d6:71:ba:d6:92:fd:72:93:2c:0b: 1d:c7:5e:91:e5:8f:ea:98:a9:76:a1:bc:8d:8e:cf:20:58:8e: 00:00:e7:a0:b9:f1:16:da:86:6a:ba:1d:ff:0e:15:7a:47:1d: 66:c8:5e:d1:f8:06:d7:77:5f:f5:4b:1d:95:96:c7:9c:a6:72: 0d:30:5e:5c:55:8e:ee:7f:c2:a8:7b:f2:6f:8b:5a:d6:4c:d0: 99:cc:d2:d2:47:f8:62:9b:c9:be:86:8f:a5:0f:4c:ce:61:70: 17:16:84:95:fa:67:c0:eb:ac:83:f7:05:7d:08:17:94:8a:a4: 8d:a9:a0:54:a1:e0:cf:b1:7e:b6:e8:f8:dc:8b:d7:b2:7e:f7: 4d:6b:b9:fc:9f:c4:06:3c:f1:d7:77:c7:75:ce:7c:85:2b:a6: a2:e7:df:db:e1:e0:4b:8f:cc:82:a8:e7:a0:a8:6c:61:56:12: dc:25:37:f4:c6:f8:e6:e4:08:c0:39:8e:cf:85:d4:97:b9:19: a8:73:59:a1:86:56:e5:7f:6e:88:1a:4e:2e:f6:6a:c1:eb:38: 02:b5:9c:d5:02:41:8b:78:c3:15:f6:1a:0d:e4:4f:82:ac:f7: c9:89:84:31:9b:7b:8e:21:8d:32:60:a6:80:9a:26:4f:e0:4f: db:42:a6:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp6S0BwYufbcczIUWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MzA1ZTY4NmItYjI4OS00N2ViLTk5ZjUtNTNiYTEwNThjN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zRxrRUPnUxs3kvBoTcdQGe03wYUk3NV89gM CvHgVejBM+n4z0VwfRN1mmgHygOlnSivXBGE/7VnJso9qkKblJKQNAUQ1148oeYL mYM/5uqT/F4fRnd1TDLbv5z+mSn/nJ6tfz+lvjsgVTkWQNYUaggGZia4xt0bu3SG FeJBWsRWKIMgtqh6ZLdw5Yg3a2fsLZ1epE+e6BHnpqUtHZxp7x9WLbUJbi4L5ig8 6suFSNEnumbwuJ65278Dm2AiH9KLhQ7VDPDyjKK72voi3FXCXrrmQmaW6XMlhgLp xHK6qx14mNJcgouQlLe5IxdGMADN1ImQLNLGIP7uKQlCThFvZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPpF3yI4PHZUyo6VpTMW1/ok4AIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvYTUwZmFmN2UtODBlZC0z NTQwLTg4NjMtMmUzNTMzNzIzYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFLAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF27MWWe1fIn1nG61pL9cpMsCx3HXpHlj+qYqXahvI2OzyBYjgAA 56C58Rbahmq6Hf8OFXpHHWbIXtH4Btd3X/VLHZWWx5ymcg0wXlxVju5/wqh78m+L WtZM0JnM0tJH+GKbyb6Gj6UPTM5hcBcWhJX6Z8DrrIP3BX0IF5SKpI2poFSh4M+x frbo+NyL17J+901rufyfxAY88dd3x3XOfIUrpqLn39vh4EuPzIKo56CobGFWEtwl N/TG+ObkCMA5js+F1Je5GahzWaGGVuV/bogaTi72asHrOAK1nNUCQYt4wxX2Gg3k T4Ks98mJhDGbe44hjTJgpoCaJk/gT9tCphM= -----END CERTIFICATE-----Generated at Wed Aug 6 09:30:38 2025 by rpki-client