$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa File: c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa (raw, json) Hash identifier: p9tTNq9NH3qaE4up1YHMibEdjRC2oNUUKNlOCJnLA/k= Subject key identifier: A5:77:A0:7E:0E:BE:83:C2:A8:08:50:10:FB:FC:FB:23:EB:1D:DE:5D Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Certificate serial: 010D0C9F43285849FE0FF9E092A4F7A120B074C0 Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 981 IP address blocks: 2605:ac40:40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:f9:e0:92:a4:f7:a1:20:b0:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=dad30657-d5ae-406e-a8af-3979905e3b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d3:db:4c:9c:87:a3:c9:7b:5f:6d:48:d9:f8: a9:0f:c8:55:8e:e7:3d:ee:05:ef:6a:3b:ad:a6:ef: 02:69:d5:b7:03:05:3c:87:ef:1c:13:bb:7e:1b:31: be:8d:ed:66:5d:62:ce:a8:32:61:b6:35:a6:12:6b: 78:ed:d6:ac:20:23:d6:f7:06:d5:7b:59:b3:93:50: 51:3c:d3:5a:b6:66:5f:2f:a2:69:22:7d:02:b7:bd: 37:71:33:bd:90:78:fe:d0:92:7a:7f:e2:aa:00:a4: 1a:b1:04:6c:ac:ed:41:f8:da:f6:46:08:48:f8:27: 05:f0:fe:e3:e6:e3:27:4e:64:d5:3a:c7:52:9c:75: 38:e5:8f:1d:e9:dc:84:80:7d:46:3b:75:3c:ca:cb: 59:8d:cb:5c:b4:8b:0f:27:f8:3e:43:4a:84:c6:25: 8a:41:79:59:09:3a:6a:17:5a:b6:92:5b:34:cc:bd: 1b:4b:be:76:eb:0c:f1:4a:6e:46:9d:e6:67:91:25: e0:09:d1:1d:ab:a6:e8:4e:16:f6:61:fb:fb:c8:fd: fe:6e:ee:63:e1:e8:bb:ad:2b:64:a6:20:4b:4a:3d: 12:e4:83:38:4d:92:ca:61:fe:d1:95:ec:f1:f0:7a: 8b:64:b9:b7:e7:8f:8a:bf:7d:6a:4e:23:31:8b:76: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:77:A0:7E:0E:BE:83:C2:A8:08:50:10:FB:FC:FB:23:EB:1D:DE:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl X509v3 Authority Key Identifier: keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer sbgp-ipAddrBlock: critical IPv6: 2605:ac40:40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:8e:52:41:73:a4:de:83:fe:c8:6f:6f:cd:4d:08:97:21:68: a6:1c:86:e0:cd:67:9f:11:6e:74:b8:72:b7:17:28:db:91:9e: 70:6b:b0:92:01:9f:4b:9d:42:86:e5:ba:47:a0:a8:9a:36:cf: 2c:32:28:0b:74:bb:46:28:15:91:33:9d:da:88:f1:16:6a:ad: c1:db:9f:b3:99:86:ba:c2:96:4c:fb:8d:20:97:0a:74:34:1c: 41:32:80:42:d9:ec:fa:0b:59:2d:a1:8e:02:ac:45:67:42:63: d7:f1:68:72:96:8c:6d:f4:c1:86:e1:50:92:e5:5d:c0:8d:5f: 5f:0f:28:14:0d:dd:ed:57:6f:2e:47:d1:35:4f:de:e0:1d:36: 27:63:48:1f:09:65:3e:cb:4d:93:fc:38:70:01:1d:60:fc:54: 60:d7:2f:d8:8f:37:6c:eb:ce:e9:75:b3:89:5b:07:b8:39:ea: 01:0a:ec:a1:64:4f:a0:86:82:f9:3a:91:0b:09:46:a0:16:73: 69:f3:4d:a2:4d:8e:2d:36:84:16:bb:8a:7a:66:e9:78:7c:e3: 48:4a:13:0e:2f:a8:d6:92:f7:9c:76:f7:b2:23:f0:5b:26:98: 30:2b:cf:0d:60:bb:32:87:77:d8:98:0f:15:77:96:50:a7:68: 35:16:24:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn+D/ngkqT3oSCwdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm YTMxMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZGFkMzA2NTctZDVhZS00MDZlLWE4YWYtMzk3OTkwNWUzYjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodPbTJyHo8l7X21I2fipD8hVjuc97gXvajut pu8CadW3AwU8h+8cE7t+GzG+je1mXWLOqDJhtjWmEmt47dasICPW9wbVe1mzk1BR PNNatmZfL6JpIn0Ct703cTO9kHj+0JJ6f+KqAKQasQRsrO1B+Nr2RghI+CcF8P7j 5uMnTmTVOsdSnHU45Y8d6dyEgH1GO3U8ystZjctctIsPJ/g+Q0qExiWKQXlZCTpq F1q2kls0zL0bS7526wzxSm5GneZnkSXgCdEdq6boThb2Yfv7yP3+bu5j4ei7rStk piBLSj0S5IM4TZLKYf7Rlezx8HqLZLm354+Kv31qTiMxi3bqfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKV3oH4OvoPCqAhQEPv8+yPrHd5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvYzZiOTlhNzgtMjlhNi0z NjJiLTgxN2YtNTdkZDUzYjJlM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4 ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3 NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE6OUkFzpN6D/shvb81NCJchaKYchuDNZ58RbnS4crcXKNuRnnBr sJIBn0udQoblukegqJo2zywyKAt0u0YoFZEzndqI8RZqrcHbn7OZhrrClkz7jSCX CnQ0HEEygELZ7PoLWS2hjgKsRWdCY9fxaHKWjG30wYbhUJLlXcCNX18PKBQN3e1X by5H0TVP3uAdNidjSB8JZT7LTZP8OHABHWD8VGDXL9iPN2zrzul1s4lbB7g56gEK 7KFkT6CGgvk6kQsJRqAWc2nzTaJNji02hBa7inpm6Xh840hKEw4vqNaS95x297Ij 8FsmmDArzw1guzKHd9iYDxV3llCnaDUWJMA= -----END CERTIFICATE-----Generated at Sun Jun 15 11:56:44 2025 by rpki-client