$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4d39df18-f0e5-327f-b935-68dad4d2f794.roa File: 4d39df18-f0e5-327f-b935-68dad4d2f794.roa (raw, json) Hash identifier: /XW1z53BCm4AbwvKZJiDbLb2MC76aTyo9MKDS62DDnM= Subject key identifier: 86:C3:CC:99:B1:37:DD:42:63:9D:BA:0A:C0:71:4E:9A:20:4F:C5:6D Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285849D594F063E3A096B5774A1F80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4d39df18-f0e5-327f-b935-68dad4d2f794.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 7203 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f0:63:e3:a0:96:b5:77:4a:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=702aa032-a15a-4c77-81fc-1a912ca2f3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:f8:16:cd:aa:00:c5:8c:86:a8:c7:b9:25: 22:cf:fc:26:79:e4:69:f2:46:69:d6:f8:3a:8e:da: fb:39:23:36:d0:bb:09:b7:62:24:73:c9:3a:65:1e: 3b:9a:5a:9b:20:c5:61:24:9b:25:66:1a:6a:6e:15: 0d:4e:b7:19:a0:71:d4:1a:ac:ed:ea:82:e6:e3:55: 76:2a:f7:0f:27:ab:f6:a7:68:79:9f:28:0c:01:ec: 93:97:f3:b8:d4:e7:37:24:5d:44:fb:3b:7a:a3:cb: a8:f1:c3:5f:b7:e2:82:3c:84:0e:75:e8:8d:35:46: c3:f8:2f:d7:39:f9:4e:a0:65:1a:37:d9:ed:43:3a: c5:65:d7:48:e8:85:d7:08:60:e2:c8:7f:af:6f:93: 39:4d:6e:52:82:62:de:85:a2:d7:e2:d8:93:b1:42: ba:32:08:9d:cf:71:87:93:2b:ee:34:0c:21:a9:4b: d1:17:40:78:fc:4c:33:15:af:5d:98:ab:77:27:39: 80:30:39:54:d0:70:39:2e:68:61:5d:34:7e:02:f4: 04:2f:13:82:55:29:62:01:49:aa:db:24:ed:d9:36: 2b:c6:90:55:82:1e:44:ee:40:42:65:cb:72:a8:3b: 94:e3:50:1c:96:68:1a:89:c1:0b:4f:22:de:71:5b: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C3:CC:99:B1:37:DD:42:63:9D:BA:0A:C0:71:4E:9A:20:4F:C5:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4d39df18-f0e5-327f-b935-68dad4d2f794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:73:91:4e:77:48:a0:7b:2f:95:22:15:cb:01:08:ea:8e:dd: 5b:48:e4:e6:0d:32:16:97:ca:df:0a:78:b4:12:29:55:5d:c3: 20:db:6b:4e:78:51:9b:55:b9:e7:9e:3f:ad:09:a7:de:4e:90: 89:2d:e7:ab:43:f2:94:b4:25:89:a8:1e:e2:47:06:5a:3d:58: 3b:e5:91:67:73:f2:c7:63:d3:14:fb:3b:c4:6f:0e:67:ac:08: cb:c6:0b:52:4c:78:00:c9:d1:d7:20:f4:ac:1c:f5:fa:cd:c0: 59:a0:f8:6c:7a:ae:8a:a8:65:a3:89:e3:e2:7e:75:65:8f:03: 85:84:6c:4a:c7:35:d5:19:c6:6a:7f:0b:bb:bf:22:08:9b:4d: 51:9c:7d:b9:1d:48:13:0c:91:ff:c6:76:ed:90:19:7a:19:28: 02:a4:10:a2:a3:1c:83:47:59:bd:4a:25:91:9d:b7:69:29:97: e5:05:44:a9:64:93:1d:44:3c:dc:2b:d9:5b:2c:7c:36:61:17: ff:27:ec:8a:1f:ec:da:cc:35:6f:e4:b1:1a:01:c6:36:68:b6: 72:d4:6c:06:a8:40:ee:72:d7:91:17:41:69:ba:72:32:15:7d: 13:a7:93:50:55:05:a3:80:a8:13:c6:30:30:98:e6:a2:56:93: 48:f2:1b:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnVlPBj46CWtXdKH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NzAyYWEwMzItYTE1YS00Yzc3LTgxZmMtMWE5MTJjYTJmM2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKX4Fs2qAMWMhqjHuSUiz/wmeeRp8kZp1vg6 jtr7OSM20LsJt2Ikc8k6ZR47mlqbIMVhJJslZhpqbhUNTrcZoHHUGqzt6oLm41V2 KvcPJ6v2p2h5nygMAeyTl/O41Oc3JF1E+zt6o8uo8cNft+KCPIQOdeiNNUbD+C/X OflOoGUaN9ntQzrFZddI6IXXCGDiyH+vb5M5TW5SgmLehaLX4tiTsUK6Mgidz3GH kyvuNAwhqUvRF0B4/EwzFa9dmKt3JzmAMDlU0HA5LmhhXTR+AvQELxOCVSliAUmq 2yTt2TYrxpBVgh5E7kBCZctyqDuU41AclmgaicELTyLecVsp6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIbDzJmxN91CY526CsBxTpogT8VtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNGQzOWRmMTgtZjBlNS0z MjdmLWI5MzUtNjhkYWQ0ZDJmNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHlzkU53SKB7L5UiFcsBCOqO3VtI5OYNMhaXyt8KeLQSKVVdwyDb a054UZtVueeeP60Jp95OkIkt56tD8pS0JYmoHuJHBlo9WDvlkWdz8sdj0xT7O8Rv DmesCMvGC1JMeADJ0dcg9Kwc9frNwFmg+Gx6roqoZaOJ4+J+dWWPA4WEbErHNdUZ xmp/C7u/IgibTVGcfbkdSBMMkf/Gdu2QGXoZKAKkEKKjHINHWb1KJZGdt2kpl+UF RKlkkx1EPNwr2VssfDZhF/8n7Iof7NrMNW/ksRoBxjZotnLUbAaoQO5y15EXQWm6 cjIVfROnk1BVBaOAqBPGMDCY5qJWk0jyG0k= -----END CERTIFICATE-----Generated at Sun Jun 15 12:18:03 2025 by rpki-client