$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa File: f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa (raw, json) Hash identifier: CFrrmTMLCfgTFq97f3soBrkueAjkH/mprgiZLDeq6Qg= Subject key identifier: CC:97:67:B8:91:00:CA:05:C4:BF:4A:A1:81:F8:44:0C:64:2D:55:51 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F43285849FCAA759B2E5951DB80AA8180 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 395927 IP address blocks: 2604:f040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:75:9b:2e:59:51:db:80:aa:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=a8b323fc-49d6-4bc5-9971-170b04649117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1f:a6:44:07:c2:0b:a2:d0:6f:30:1f:68:ac: 61:0e:0b:4c:eb:b6:d9:70:ee:6f:0f:93:67:c6:52: 5c:ef:cc:6a:87:8b:1f:46:e0:25:6b:34:eb:84:89: ca:98:cd:41:ab:5b:e0:31:44:04:73:63:cc:7e:4a: a9:3a:35:ba:e4:0a:c6:36:f0:33:50:2e:d8:57:ec: 46:14:88:7a:24:e3:07:53:49:48:69:9d:23:3d:58: 2e:cd:c1:11:a9:e5:6c:6d:97:16:52:85:e4:e7:91: 55:af:42:18:77:47:a7:d6:01:62:9b:2d:71:f1:cc: b9:71:32:b4:00:ef:7a:08:bb:1e:72:c7:6a:ed:16: 0d:d8:f2:64:1c:b6:e0:9f:df:cc:e4:0c:73:0b:00: 4b:e6:37:ee:e0:1b:2a:1b:f5:71:44:75:9a:1f:91: 13:45:f3:ec:96:2d:1d:8f:5f:00:08:4c:06:a6:04: 8d:cd:2e:4c:f9:8e:fb:bb:c9:a4:b0:7d:f9:9b:58: 2d:46:30:7e:6c:2f:85:13:94:17:3c:a0:fd:98:90: e8:d1:c6:47:61:6e:27:2f:4e:af:01:d8:90:bc:35: 35:c1:51:e8:fe:2c:eb:21:25:92:ec:1a:b9:3c:26: 08:d4:d4:bf:2b:27:0c:ca:53:08:49:7e:16:ba:33: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:97:67:B8:91:00:CA:05:C4:BF:4A:A1:81:F8:44:0C:64:2D:55:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv6: 2604:f040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:2d:3f:14:80:d3:43:fd:20:12:0a:08:00:f5:7d:02:6e:62: 36:af:0d:52:d7:0f:16:98:f4:b9:d9:3d:54:52:b6:74:b4:08: 6e:63:ea:3b:72:08:52:8d:cd:61:c6:4f:1e:c3:10:40:de:49: 7b:49:7b:b1:1b:01:9d:51:87:86:af:25:cb:16:f2:25:a6:f9: 0d:5c:20:87:c1:89:0f:35:54:8b:80:1d:f3:bd:ea:67:e9:d8: 76:3f:5c:71:38:b7:ce:fd:93:7b:ac:99:5a:8d:6f:ca:66:7f: 81:eb:7f:15:f6:c5:57:bf:94:ca:e1:10:67:1d:df:f8:e4:26: 58:18:e3:1c:45:eb:2e:69:2e:b7:e6:44:15:2f:38:01:f8:ef: 7b:31:59:2c:fa:4b:99:61:b0:50:2f:0d:c8:97:aa:12:68:c4: f1:bd:36:67:d4:be:1e:bc:0e:0b:e6:41:04:0d:e0:53:59:73: 84:8f:bf:e8:ee:dd:4e:87:e9:83:a4:89:dc:59:a6:8b:11:0b: 28:b0:29:90:da:9f:8b:ba:8e:4b:31:8e:18:9f:6e:fa:b6:b6: 41:7b:26:d4:a2:cc:70:4e:7e:82:99:49:42:d7:ff:f3:17:b3: 49:12:06:da:e2:66:45:7f:5c:7b:bd:eb:57:37:01:0e:71:15: 14:4b:54:c2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn8qnWbLllR24CqgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk YThiMzIzZmMtNDlkNi00YmM1LTk5NzEtMTcwYjA0NjQ5MTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR+mRAfCC6LQbzAfaKxhDgtM67bZcO5vD5Nn xlJc78xqh4sfRuAlazTrhInKmM1Bq1vgMUQEc2PMfkqpOjW65ArGNvAzUC7YV+xG FIh6JOMHU0lIaZ0jPVguzcERqeVsbZcWUoXk55FVr0IYd0en1gFimy1x8cy5cTK0 AO96CLsecsdq7RYN2PJkHLbgn9/M5AxzCwBL5jfu4BsqG/VxRHWaH5ETRfPsli0d j18ACEwGpgSNzS5M+Y77u8mksH35m1gtRjB+bC+FE5QXPKD9mJDo0cZHYW4nL06v AdiQvDU1wVHo/izrISWS7Bq5PCYI1NS/KycMylMISX4WujNLMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMyXZ7iRAMoFxL9KoYH4RAxkLVVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvZjZmZDc4NTMtNzAwMy0z Mjg2LWI4N2UtOGZmNjI1ZjJiYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTwQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAALT8UgNND/SASCggA9X0CbmI2rw1S1w8WmPS52T1UUrZ0tAhuY+o7 cghSjc1hxk8ewxBA3kl7SXuxGwGdUYeGryXLFvIlpvkNXCCHwYkPNVSLgB3zvepn 6dh2P1xxOLfO/ZN7rJlajW/KZn+B638V9sVXv5TK4RBnHd/45CZYGOMcResuaS63 5kQVLzgB+O97MVks+kuZYbBQLw3Il6oSaMTxvTZn1L4evA4L5kEEDeBTWXOEj7/o 7t1Oh+mDpIncWaaLEQsosCmQ2p+Luo5LMY4Yn276trZBeybUosxwTn6CmUlC1//z F7NJEgba4mZFf1x7vetXNwEOcRUUS1TC -----END CERTIFICATE-----Generated at Mon Jun 16 13:06:24 2025 by rpki-client