$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa File: 064bb556-40a8-3b7a-9c55-3217f244b17d.roa (raw, json) Hash identifier: BUJXdQCqLcQb90j9Wv+hSHhKMhfOkOdTl5/8AoAyGh8= Subject key identifier: 40:03:23:B9:1D:A9:B9:4C:DC:61:26:4C:3F:5A:E5:46:BD:5D:3D:16 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285849D594EFA7CB083FF5D6E46600 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 205544 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:ef:a7:cb:08:3f:f5:d6:e4:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=bb9ae80f-0b11-4050-952f-9ec2b5a4e4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:f6:6a:d3:2b:72:b5:56:de:44:47:96:83: 0e:27:82:71:1f:a3:1f:a9:34:cc:26:94:62:e3:6d: da:43:6d:35:13:92:51:01:dd:46:26:1f:70:df:11: 52:18:05:00:a6:cc:d4:09:4a:d3:be:12:11:f5:48: 45:57:64:70:66:7e:20:a4:65:7c:0f:21:cc:4b:6f: f1:ab:bc:89:17:7c:65:c2:be:de:af:d7:f5:09:7c: 66:39:c6:93:b6:4c:f2:82:05:3a:4e:f6:41:49:c7: 53:bc:ec:b5:af:04:36:5f:31:8a:5e:c0:66:ea:aa: 9c:75:64:41:fb:23:22:c8:17:29:55:55:21:76:db: a8:44:26:9b:68:c5:e0:18:1d:73:3f:1f:e6:be:38: 8c:51:a4:13:e5:e6:2e:e8:8a:0e:7e:bf:b2:d4:c8: ca:27:c0:ee:03:0d:8f:bc:43:d0:b0:b2:64:dc:da: cc:2e:5b:13:d0:28:15:75:07:29:97:73:30:a9:b1: 19:7b:d2:47:4b:8b:98:7d:6b:73:f2:44:81:72:1a: e8:a7:37:d4:4b:d0:f7:d2:15:c0:02:d8:5b:7e:8f: 13:92:2e:65:3e:b3:71:53:03:05:1d:b7:da:a4:77: ea:64:17:e4:22:f4:17:28:5b:d7:69:76:13:ba:e1: 83:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:03:23:B9:1D:A9:B9:4C:DC:61:26:4C:3F:5A:E5:46:BD:5D:3D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:46:60:22:e4:e6:74:ed:5f:8a:1b:07:a2:b2:86:23:9a:14: 98:10:3d:ec:ee:a0:f4:47:7a:12:40:3d:77:fd:18:6a:7a:0f: d9:54:07:28:57:bf:54:22:d1:1f:1a:c8:c1:89:69:03:da:37: f1:88:51:0a:2d:ca:b7:f9:32:c2:6e:78:78:76:ed:ec:be:e8: d1:15:8c:b9:ed:b5:85:a5:9e:a4:76:76:cc:1f:b4:c2:20:11: b1:93:01:41:11:df:b5:b3:9a:94:09:53:c9:00:3b:9b:84:7e: 16:9c:1e:74:9b:f8:bf:40:f8:33:2d:35:5d:62:f6:4c:bc:44: 63:21:5e:35:6a:b2:2a:54:c7:7a:3d:ad:fc:59:65:04:76:4e: b3:84:07:df:42:df:29:f8:e4:b1:ae:06:1c:2c:9d:72:a6:65: b8:fc:f2:cb:c7:2c:56:c1:33:8b:59:00:01:35:5e:99:2e:37: 4d:ff:45:2b:f4:1c:7b:a6:57:1c:59:e5:da:81:e2:13:36:1a: 56:0b:bf:20:79:39:a4:3e:a8:f0:89:70:d4:42:68:cc:33:ef: 31:2c:a3:4a:18:7e:fc:0d:4f:56:90:fa:9a:3e:fa:32:5a:f4: 3d:82:9f:c1:3f:87:b7:88:b0:cd:43:6b:a4:c7:68:16:7b:b6: 62:5a:45:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnVlO+nywg/9dbkZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YmI5YWU4MGYtMGIxMS00MDUwLTk1MmYtOWVjMmI1YTRlNGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv32atMrcrVW3kRHloMOJ4JxH6MfqTTMJpRi 423aQ201E5JRAd1GJh9w3xFSGAUApszUCUrTvhIR9UhFV2RwZn4gpGV8DyHMS2/x q7yJF3xlwr7er9f1CXxmOcaTtkzyggU6TvZBScdTvOy1rwQ2XzGKXsBm6qqcdWRB +yMiyBcpVVUhdtuoRCabaMXgGB1zPx/mvjiMUaQT5eYu6IoOfr+y1MjKJ8DuAw2P vEPQsLJk3NrMLlsT0CgVdQcpl3MwqbEZe9JHS4uYfWtz8kSBchropzfUS9D30hXA Athbfo8Tki5lPrNxUwMFHbfapHfqZBfkIvQXKFvXaXYTuuGDFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEADI7kdqblM3GEmTD9a5Ua9XT0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDY0YmI1NTYtNDBhOC0z YjdhLTljNTUtMzIxN2YyNDRiMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJdGYCLk5nTtX4obB6KyhiOaFJgQPezuoPRHehJAPXf9GGp6D9lU ByhXv1Qi0R8ayMGJaQPaN/GIUQotyrf5MsJueHh27ey+6NEVjLnttYWlnqR2dswf tMIgEbGTAUER37WzmpQJU8kAO5uEfhacHnSb+L9A+DMtNV1i9ky8RGMhXjVqsipU x3o9rfxZZQR2TrOEB99C3yn45LGuBhwsnXKmZbj88svHLFbBM4tZAAE1XpkuN03/ RSv0HHumVxxZ5dqB4hM2GlYLvyB5OaQ+qPCJcNRCaMwz7zEso0oYfvwNT1aQ+po+ +jJa9D2Cn8E/h7eIsM1Da6THaBZ7tmJaRTw= -----END CERTIFICATE-----Generated at Sun Jun 15 12:02:37 2025 by rpki-client