$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/17a21e7e-f1cc-3f44-b593-2534da2ee3d1.roa File: 17a21e7e-f1cc-3f44-b593-2534da2ee3d1.roa (raw, json) Hash identifier: L1E1i9mcjoy5/I18mto1AIsRs/6pL+l0m8L7bvItzCc= Subject key identifier: 07:28:C0:7F:B3:33:09:E7:A4:57:11:D3:D5:E4:35:07:6B:A5:16:D4 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584A0ECFF538C756CD2391D43FE0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/17a21e7e-f1cc-3f44-b593-2534da2ee3d1.roa Signing time: Mon 02 Jun 2025 13:01:03 +0000 ROA not before: Mon 02 Jun 2025 13:01:03 +0000 ROA not after: Sun 31 Aug 2025 13:01:03 +0000 asID: 54994 IP address blocks: 2607:3f40:ff29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0e:cf:f5:38:c7:56:cd:23:91:d4:3f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jun 2 13:01:03 2025 GMT Not After : Aug 31 13:01:03 2025 GMT Subject: CN=af090e41-d5a2-49c9-91c7-c305be22818f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:aa:cd:d5:8d:18:67:1a:bf:dd:bd:70:e2:5c: 9e:ed:58:e8:32:49:9b:2d:41:bd:84:d8:a2:e3:39: 17:4c:58:77:b7:47:01:b8:7e:7f:78:10:8a:22:23: 43:b9:ad:fb:42:59:3c:c2:22:98:11:d3:22:19:31: 93:40:16:19:53:f9:e3:6b:f7:75:fc:90:32:17:a6: 22:5c:39:cb:e3:39:61:e3:d6:9c:fb:43:a0:c6:a4: ae:19:af:b0:e8:80:3f:b3:14:b4:90:53:b8:d3:f5: 6a:5b:fc:ee:7f:ff:1f:27:84:73:43:e0:96:ee:0c: 4c:73:77:4a:54:ed:1b:c3:df:bd:00:59:32:68:62: 5c:7b:1e:f1:94:16:27:62:b3:ea:2a:12:f5:c3:0f: cd:96:af:a5:1f:38:04:49:77:ea:e4:24:31:d5:e5: 64:2e:f3:bd:d7:f8:19:cc:ef:d0:aa:f4:2e:40:fa: fb:93:7c:8c:f5:18:54:91:13:68:2b:79:c6:39:f5: 60:da:33:3c:c3:4a:9f:c9:84:65:7d:5b:b1:8d:ae: 37:3f:17:59:38:14:cd:d0:4d:1b:58:1f:fb:c1:fa: c5:20:d0:e4:51:aa:d5:13:a1:14:0d:97:f2:cc:34: 78:31:7b:c5:3b:e6:52:9f:2d:94:65:70:c8:b5:19: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:28:C0:7F:B3:33:09:E7:A4:57:11:D3:D5:E4:35:07:6B:A5:16:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/17a21e7e-f1cc-3f44-b593-2534da2ee3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0d:08:9c:cd:38:11:00:41:a3:e2:a4:a7:3d:46:7a:d1:5b: 9c:b5:b7:d4:bf:3e:3a:d9:7d:3e:2f:71:5a:c1:48:9b:04:99: 58:ee:f2:f1:66:e4:67:cb:a5:12:ad:81:f8:fd:09:44:ca:ff: f0:ee:3a:56:f9:ec:e7:e0:06:45:0e:9c:de:7c:fd:9c:ef:7d: 88:71:a5:fa:a9:b1:40:f0:11:62:bd:2f:86:39:ac:98:29:e3: 9d:ef:fa:0c:11:08:1a:ab:12:41:b2:cd:ff:64:8f:41:9e:83: 5e:2f:0b:17:39:5e:d6:0b:53:29:14:71:2c:c0:09:a2:fa:94: dc:03:c8:18:0f:48:26:93:76:4f:f5:18:af:fb:99:e0:a1:f3: 0e:cc:55:61:43:87:cc:47:6a:f7:a7:9e:8c:e8:b2:e1:3e:49: 90:92:df:50:46:5d:f9:a5:2c:1d:7e:f0:d7:b5:21:e0:46:5a: 06:7b:2d:a8:c9:a2:e3:88:0c:9e:55:f8:12:f9:f5:34:65:7f: 47:dd:0b:32:73:a9:a2:73:51:22:93:91:77:9c:f3:bb:48:e1: a2:ce:b1:b3:2e:52:97:ad:da:8d:11:92:8d:52:d9:91:3f:97: cb:20:91:ab:cf:c0:62:e2:6e:85:1f:a5:ec:b0:53:3c:95:27: b0:34:48:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoOz/U4x1bNI5HUP+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDYwMjEzMDEwM1oXDTI1MDgzMTEzMDEwM1owLzEtMCsGA1UEAxMk YWYwOTBlNDEtZDVhMi00OWM5LTkxYzctYzMwNWJlMjI4MThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKrN1Y0YZxq/3b1w4lye7VjoMkmbLUG9hNii 4zkXTFh3t0cBuH5/eBCKIiNDua37Qlk8wiKYEdMiGTGTQBYZU/nja/d1/JAyF6Yi XDnL4zlh49ac+0OgxqSuGa+w6IA/sxS0kFO40/VqW/zuf/8fJ4RzQ+CW7gxMc3dK VO0bw9+9AFkyaGJcex7xlBYnYrPqKhL1ww/Nlq+lHzgESXfq5CQx1eVkLvO91/gZ zO/QqvQuQPr7k3yM9RhUkRNoK3nGOfVg2jM8w0qfyYRlfVuxja43PxdZOBTN0E0b WB/7wfrFINDkUarVE6EUDZfyzDR4MXvFO+ZSny2UZXDItRk5LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAcowH+zMwnnpFcR09XkNQdrpRbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMTdhMjFlN2UtZjFjYy0z ZjQ0LWI1OTMtMjUzNGRhMmVlM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8p MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwNCJzNOBEAQaPipKc9RnrRW5y1t9S/PjrZfT4vcVrBSJsEmVju 8vFm5GfLpRKtgfj9CUTK//DuOlb57OfgBkUOnN58/ZzvfYhxpfqpsUDwEWK9L4Y5 rJgp453v+gwRCBqrEkGyzf9kj0Geg14vCxc5XtYLUykUcSzACaL6lNwDyBgPSCaT dk/1GK/7meCh8w7MVWFDh8xHavennozosuE+SZCS31BGXfmlLB1+8Ne1IeBGWgZ7 LajJouOIDJ5V+BL59TRlf0fdCzJzqaJzUSKTkXec87tI4aLOsbMuUpet2o0Rko1S 2ZE/l8sgkavPwGLiboUfpeywUzyVJ7A0SDk= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:06 2025 by rpki-client