$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa File: 27872a34-19cb-38ff-9f2b-60c884e32b1a.roa (raw, json) Hash identifier: xxFfHuSh3e5l8MIrVn45EBwE802z+QiN+tv1oFperEc= Subject key identifier: D2:1B:81:57:AA:5D:2B:7F:B6:A5:E6:34:CC:16:98:85:86:B4:6F:98 Certificate issuer: /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82 Certificate serial: 010D0C9F43285849F87A898F59A2188086A5D000 Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 400544 IP address blocks: 2607:76c0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:89:8f:59:a2:18:80:86:a5:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=7c5a0b70-82f4-4f38-a651-32830aaf0aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:04:a6:87:d0:65:99:51:8a:ac:e0:ad:28:8e: e6:74:ef:11:03:66:15:44:0d:7e:d8:fe:95:2c:9b: b3:fe:e3:ff:09:c0:00:62:63:10:5f:45:67:bb:c0: 27:ac:59:92:c4:bb:93:85:d5:bc:19:a0:ec:3d:c1: 08:39:9e:f9:7f:55:1e:a2:ac:88:e3:0f:fc:21:ea: 6b:56:41:a6:17:9b:ba:75:ac:af:b2:74:e5:14:1e: c4:eb:b5:5e:a6:fe:ac:a2:4c:54:d9:23:b6:be:cb: 0a:94:db:8f:88:55:65:fd:ad:ba:96:d5:55:66:27: 3e:8b:e4:47:32:bf:ad:ee:f0:8b:f4:3a:7f:8f:88: ea:5c:81:46:ec:be:4a:b9:58:44:55:03:70:b8:62: 83:20:26:7f:a3:1a:b8:b7:ce:63:8a:de:7f:52:00: 7d:f3:59:53:29:99:ed:d2:15:90:53:c4:90:2d:a4: 85:ff:39:27:6c:25:9d:82:de:1c:18:a9:52:c3:2a: ac:6a:5d:5b:a8:6c:ed:0d:fe:cf:c0:20:5d:1c:c4: 30:67:af:8d:40:7b:33:27:90:cf:67:f6:6c:ea:f2: 4a:e6:e8:b0:ab:ba:03:4c:22:42:65:1c:87:87:0b: 49:19:ef:6b:a6:ef:a1:7c:5a:c2:5e:50:21:24:53: 77:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1B:81:57:AA:5D:2B:7F:B6:A5:E6:34:CC:16:98:85:86:B4:6F:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl X509v3 Authority Key Identifier: keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer sbgp-ipAddrBlock: critical IPv6: 2607:76c0:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:82:e6:b2:3a:8e:6d:94:e4:5c:75:bd:c2:73:40:d5:19:8d: 9b:85:2d:30:a4:25:7e:00:a6:46:f9:c0:a3:1e:2c:92:b0:82: 45:8c:60:a4:b9:8d:b7:9e:a5:9f:41:2e:ad:4f:29:25:28:dc: 7a:67:a4:06:c1:24:b2:e5:89:7f:9d:df:21:1a:45:d4:6a:e8: 79:83:7f:b3:c4:4c:45:ff:cb:3b:99:24:56:b9:7a:e5:bf:92: 4c:d0:e4:9a:4a:ff:ab:c5:2c:66:11:92:48:08:eb:2a:51:75: f3:a9:65:19:fc:bf:bf:df:34:f1:0c:ae:65:b6:04:c4:9e:ad: 73:5b:20:ff:0e:14:55:8c:b9:63:5a:e3:a9:1f:10:40:49:5c: 58:11:e9:15:09:ed:97:36:25:c7:36:60:32:f8:e4:3d:17:03: 2a:81:40:9b:fd:f1:b1:46:8e:50:5e:ed:94:0c:3b:5e:17:da: 5b:12:93:72:e1:56:ff:d5:0f:03:1b:03:bf:2c:2d:c2:b6:6e: c2:2a:f0:40:63:5d:a1:1b:64:e6:78:e0:70:8c:6c:01:de:b2: 21:d7:be:34:98:12:3b:bb:b0:b2:26:35:c9:29:f0:a3:1f:5d: 3b:6c:5c:af:bf:2d:e1:51:a4:1b:17:75:60:cd:15:de:94:13: dd:d4:f4:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn4eomPWaIYgIal0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjgxYmFjZDgtZjdkOS00N2Q3LWFhMjQtNTM5MTA0OWY5 YzgyMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk N2M1YTBiNzAtODJmNC00ZjM4LWE2NTEtMzI4MzBhYWYwYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgSmh9BlmVGKrOCtKI7mdO8RA2YVRA1+2P6V LJuz/uP/CcAAYmMQX0Vnu8AnrFmSxLuThdW8GaDsPcEIOZ75f1UeoqyI4w/8Iepr VkGmF5u6dayvsnTlFB7E67Vepv6sokxU2SO2vssKlNuPiFVl/a26ltVVZic+i+RH Mr+t7vCL9Dp/j4jqXIFG7L5KuVhEVQNwuGKDICZ/oxq4t85jit5/UgB981lTKZnt 0hWQU8SQLaSF/zknbCWdgt4cGKlSwyqsal1bqGztDf7PwCBdHMQwZ6+NQHszJ5DP Z/Zs6vJK5uiwq7oDTCJCZRyHhwtJGe9rpu+hfFrCXlAhJFN3WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNIbgVeqXSt/tqXmNMwWmIWGtG+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFi YWNkOC1mN2Q5LTQ3ZDctYWEyNC01MzkxMDQ5ZjljODIvMjc4NzJhMzQtMTljYi0z OGZmLTlmMmItNjBjODg0ZTMyYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjgxYmFjZDgtZjdkOS00N2Q3LWFh MjQtNTM5MTA0OWY5YzgyL2Y4MWJhY2Q4LWY3ZDktNDdkNy1hYTI0LTUzOTEwNDlm OWM4Mi5jcmwwHwYDVR0jBBgwFoAU7P3I67I287uW2sRk65LZqan3Ez0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFiYWNkOC1mN2Q5LTQ3ZDctYWEyNC01Mzkx MDQ5ZjljODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgd2wAAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADSC5rI6jm2U5Fx1vcJzQNUZjZuFLTCkJX4Apkb5wKMeLJKwgkWM YKS5jbeepZ9BLq1PKSUo3HpnpAbBJLLliX+d3yEaRdRq6HmDf7PETEX/yzuZJFa5 euW/kkzQ5JpK/6vFLGYRkkgI6ypRdfOpZRn8v7/fNPEMrmW2BMSerXNbIP8OFFWM uWNa46kfEEBJXFgR6RUJ7Zc2Jcc2YDL45D0XAyqBQJv98bFGjlBe7ZQMO14X2lsS k3LhVv/VDwMbA78sLcK2bsIq8EBjXaEbZOZ44HCMbAHesiHXvjSYEju7sLImNckp 8KMfXTtsXK+/LeFRpBsXdWDNFd6UE93U9GU= -----END CERTIFICATE-----Generated at Mon Jun 16 04:09:50 2025 by rpki-client