$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa File: 2523a460-454b-387d-8a94-5c40f8f7d030.roa (raw, json) Hash identifier: 6UGDYFVWvakKVNTOrzInzE+Juvw0VxCgb8wz/gB4Vhg= Subject key identifier: 87:75:DA:92:66:54:A0:0F:EC:3E:A5:FF:C4:3E:47:07:27:C7:AE:7D Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584A225AC9745F53B93DB6596600 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 29834 IP address blocks: 2620:1f7:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:c9:74:5f:53:b9:3d:b6:59:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=79e3ab73-5d41-4363-a45b-8863e4c3d92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f1:a9:1b:ea:02:54:9c:1c:ab:49:9b:e4:40: 14:78:6a:62:5e:2f:0c:8e:13:3b:df:8b:68:9b:35: d9:51:9f:6c:ce:e6:d6:10:ba:7e:d1:11:0f:9a:41: 78:af:cf:e7:fb:2a:a3:a8:27:e3:65:8a:09:0f:57: 53:41:d7:e7:92:d8:a6:77:f1:dc:5d:7d:4c:c8:67: df:97:eb:02:cb:7f:5b:07:11:cc:70:be:c2:cf:6a: 49:2d:50:f7:82:5d:44:52:b2:c7:89:32:25:e6:c3: 61:bb:09:83:35:31:33:9a:cf:39:98:b9:75:58:02: 9b:40:ae:5e:ed:16:a9:da:0e:7c:af:a9:fe:59:05: be:5d:e9:4d:47:dd:e5:80:66:3b:11:32:43:67:d7: 38:37:d1:8f:60:cc:69:3c:ae:91:e1:b3:55:a5:d9: 66:8c:2e:21:02:8f:88:34:cc:fa:9e:ff:dc:dd:1d: b3:dc:64:1a:68:b5:8e:71:1e:69:32:d1:ea:50:cc: ce:df:21:ef:72:d5:68:f8:57:34:aa:c7:27:7e:9c: 76:6f:9e:61:74:32:c8:99:b3:43:41:04:c8:e2:9f: 59:18:12:78:65:75:95:e6:29:89:f8:de:5f:62:ed: c4:3f:bb:bd:21:74:cd:31:5c:3c:52:bd:f1:90:81: a7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:75:DA:92:66:54:A0:0F:EC:3E:A5:FF:C4:3E:47:07:27:C7:AE:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv6: 2620:1f7:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8a:49:0b:c4:2e:07:b8:d7:49:1b:03:95:0f:c0:da:88:61: 71:d2:75:eb:22:93:9d:bf:55:11:da:e7:f1:a3:7a:d1:45:d8: 1f:aa:89:aa:71:ba:64:3e:2f:ef:f6:9d:f5:ed:e0:aa:e2:68: 84:1d:c8:fc:1e:92:25:de:24:d8:24:59:42:f9:85:b9:e1:6e: 9f:5d:23:c3:e2:fe:fe:71:95:73:80:f1:c4:88:2c:0d:27:2b: e7:b9:f9:f2:80:19:1f:57:5f:36:4b:03:34:dd:b8:0e:0c:93: 8f:09:b2:09:d8:0a:d7:f0:a7:5d:27:c0:d8:48:5f:75:0b:c5: 84:1f:03:bf:eb:e7:e9:78:34:e8:8f:2d:79:ef:2c:a4:60:dd: 16:a6:71:83:83:42:41:5c:81:9b:c3:d0:a4:a8:41:cf:1a:17: da:88:99:6c:4a:33:89:aa:7f:af:8e:d1:b8:c7:1a:48:b4:fb: f2:d4:a9:69:2c:c2:dd:29:2b:76:58:2b:94:71:f7:53:38:28: 89:14:d3:c9:7f:77:6a:7f:79:15:57:42:f7:0e:4b:5a:43:29: cc:79:fe:cc:6b:2e:6d:25:e6:4f:e6:b2:73:62:a1:4e:59:00: 34:b5:bf:d2:86:db:08:19:a9:b7:d6:a4:72:fa:f8:ff:f7:17: 48:b8:7c:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoiWsl0X1O5PbZZZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk NzllM2FiNzMtNWQ0MS00MzYzLWE0NWItODg2M2U0YzNkOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivGpG+oCVJwcq0mb5EAUeGpiXi8MjhM734to mzXZUZ9szubWELp+0REPmkF4r8/n+yqjqCfjZYoJD1dTQdfnktimd/HcXX1MyGff l+sCy39bBxHMcL7Cz2pJLVD3gl1EUrLHiTIl5sNhuwmDNTEzms85mLl1WAKbQK5e 7Rap2g58r6n+WQW+XelNR93lgGY7ETJDZ9c4N9GPYMxpPK6R4bNVpdlmjC4hAo+I NMz6nv/c3R2z3GQaaLWOcR5pMtHqUMzO3yHvctVo+Fc0qscnfpx2b55hdDLImbND QQTI4p9ZGBJ4ZXWV5imJ+N5fYu3EP7u9IXTNMVw8Ur3xkIGnDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFId12pJmVKAP7D6l/8Q+Rwcnx659MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvMjUyM2E0NjAtNDU0Yi0z ODdkLThhOTQtNWM0MGY4ZjdkMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACSKSQvELge410kbA5UPwNqIYXHSdesik52/VRHa5/GjetFF2B+q iapxumQ+L+/2nfXt4KriaIQdyPwekiXeJNgkWUL5hbnhbp9dI8Pi/v5xlXOA8cSI LA0nK+e5+fKAGR9XXzZLAzTduA4Mk48JsgnYCtfwp10nwNhIX3ULxYQfA7/r5+l4 NOiPLXnvLKRg3RamcYODQkFcgZvD0KSoQc8aF9qImWxKM4mqf6+O0bjHGki0+/LU qWkswt0pK3ZYK5Rx91M4KIkU08l/d2p/eRVXQvcOS1pDKcx5/sxrLm0l5k/msnNi oU5ZADS1v9KG2wgZqbfWpHL6+P/3F0i4fA8= -----END CERTIFICATE-----Generated at Sun Jun 15 20:42:59 2025 by rpki-client