$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa File: 706a9542-5b90-3186-b2aa-86e2e6a16930.roa (raw, json) Hash identifier: ADV0IN4fUDo8RYkmqSJDdw5iKIpxCbYS+ACujJqs5/w= Subject key identifier: 58:ED:66:CB:2A:EA:A4:CF:1C:5F:84:93:8A:E0:B0:D6:BE:22:A1:44 Certificate issuer: /CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a Certificate serial: 010D0C9F4328584A1B5FF8C13902CC722811ADC0 Authority key identifier: 3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 198949 IP address blocks: 2606:2b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f8:c1:39:02:cc:72:28:11:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=c50223d7-3cac-4ef5-b1f4-7e1e178f216c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:52:87:f5:99:bd:ec:0f:1a:dc:7b:ad:76:83: b1:89:2b:5c:ce:26:f3:c8:a3:c2:0e:4c:d7:4b:8e: 6d:ec:7f:69:36:26:84:1d:35:b6:0f:42:6e:88:bb: b1:cb:1d:21:45:34:9e:ae:e8:0c:aa:21:28:29:bb: 07:24:a0:54:8f:52:b6:30:45:91:a9:3e:49:97:17: 2b:9e:c1:f9:a9:7d:9c:e2:2b:c8:80:c0:7c:14:6b: 1d:1d:88:d4:5b:8b:00:ff:b0:88:cb:b1:03:52:1c: 2f:de:ae:89:31:5a:42:2f:cf:22:38:e5:1c:a6:f1: 7f:2e:d4:2d:66:f1:d2:61:d1:c4:36:54:9d:6f:45: 89:a5:20:70:f6:f4:09:ac:9a:e4:47:d3:c7:de:10: d0:aa:36:70:8c:d8:1b:ae:96:f7:2a:10:3c:2e:0e: 9b:36:7d:9b:98:01:65:5e:b4:4d:ff:3a:60:20:4f: e7:33:23:c2:3a:ad:e8:2a:b5:63:99:50:c6:16:e1: b1:50:a7:f8:7b:32:77:ee:e9:71:37:88:f3:d7:6b: c9:71:3a:cb:f7:c1:87:ac:c5:5c:ae:59:35:e3:d0: 2c:c3:be:98:21:bd:08:4e:79:3b:41:dd:34:28:57: e4:e3:ee:25:0f:a9:18:db:62:d0:cf:5b:8f:41:3d: e9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:ED:66:CB:2A:EA:A4:CF:1C:5F:84:93:8A:E0:B0:D6:BE:22:A1:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl X509v3 Authority Key Identifier: keyid:3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer sbgp-ipAddrBlock: critical IPv6: 2606:2b00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:a3:69:48:d7:8b:ee:99:d2:12:9d:08:e8:24:52:74:0d:4b: 77:4f:9c:c7:39:07:61:26:5a:ef:99:ba:4a:95:31:43:cc:7d: be:17:5e:98:26:72:0a:f6:b2:c0:da:db:e5:bd:7c:74:c4:d3: cd:72:fd:9e:ac:e8:6c:a3:d6:5f:ab:ee:87:b5:db:ca:f1:66: 30:d1:b1:4e:fc:b5:aa:d3:38:b0:7b:c6:2b:42:b8:95:c8:af: 2e:23:e7:76:c3:d3:e1:3d:f9:3f:19:fd:66:89:cd:ca:e7:a6: 65:83:e0:cf:3f:7b:27:68:7f:d1:35:c5:c5:1f:34:48:00:aa: 4e:3e:1a:a9:ab:3c:3d:3c:91:e2:dc:4b:7b:e6:1a:f7:ee:4b: ed:50:1d:6b:00:8b:87:7c:4f:57:c7:30:ce:ea:40:51:5d:92: 17:6e:6e:33:53:09:1b:71:87:ee:d0:73:39:ec:da:eb:1c:5e: bc:8a:67:3c:32:e8:e2:9b:4f:62:11:f6:b9:89:5a:33:0b:64: 95:93:51:79:3d:5b:6c:fb:84:37:4d:cb:65:6f:5c:9c:b9:41: d9:ce:a7:0c:07:4b:7d:14:3b:4c:af:25:a3:98:12:cd:f7:99: f8:ae:7f:ae:91:4b:a6:1b:34:d5:6c:9f:d1:ac:a0:83:85:7a: c0:63:14:56 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEobX/jBOQLMcigRrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE0MjhkOTktYWQyMy00ZDU4LWI1ZjQtMTdkYTRhNTBk NTlhMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk YzUwMjIzZDctM2NhYy00ZWY1LWIxZjQtN2UxZTE3OGYyMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1KH9Zm97A8a3HutdoOxiStczibzyKPCDkzX S45t7H9pNiaEHTW2D0JuiLuxyx0hRTSerugMqiEoKbsHJKBUj1K2MEWRqT5Jlxcr nsH5qX2c4ivIgMB8FGsdHYjUW4sA/7CIy7EDUhwv3q6JMVpCL88iOOUcpvF/LtQt ZvHSYdHENlSdb0WJpSBw9vQJrJrkR9PH3hDQqjZwjNgbrpb3KhA8Lg6bNn2bmAFl XrRN/zpgIE/nMyPCOq3oKrVjmVDGFuGxUKf4ezJ37ulxN4jz12vJcTrL98GHrMVc rlk149Asw76YIb0ITnk7Qd00KFfk4+4lD6kY22LQz1uPQT3ptQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFjtZssq6qTPHF+Ek4rgsNa+IqFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMTQy OGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2RhNGE1MGQ1OWEvNzA2YTk1NDItNWI5MC0z MTg2LWIyYWEtODZlMmU2YTE2OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzE0MjhkOTktYWQyMy00ZDU4LWI1 ZjQtMTdkYTRhNTBkNTlhL2MxNDI4ZDk5LWFkMjMtNGQ1OC1iNWY0LTE3ZGE0YTUw ZDU5YS5jcmwwHwYDVR0jBBgwFoAUPSeukFqBAFFVHkS35T2ti7Vtfo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMTQyOGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2Rh NGE1MGQ1OWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYrADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCxo2lI14vumdISnQjoJFJ0DUt3T5zHOQdhJlrvmbpKlTFDzH2+F16Y JnIK9rLA2tvlvXx0xNPNcv2erOhso9Zfq+6HtdvK8WYw0bFO/LWq0ziwe8YrQriV yK8uI+d2w9PhPfk/Gf1mic3K56Zlg+DPP3snaH/RNcXFHzRIAKpOPhqpqzw9PJHi 3Et75hr37kvtUB1rAIuHfE9XxzDO6kBRXZIXbm4zUwkbcYfu0HM57NrrHF68imc8 Mujim09iEfa5iVozC2SVk1F5PVts+4Q3Tctlb1ycuUHZzqcMB0t9FDtMryWjmBLN 95n4rn+ukUumGzTVbJ/RrKCDhXrAYxRW -----END CERTIFICATE-----Generated at Mon Jun 16 14:43:11 2025 by rpki-client