$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa File: cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa (raw, json) Hash identifier: gRBcjPXvvHIYEjdivlXD6HuoJWvVCaTf8EpDR/1+TrY= Subject key identifier: 85:92:92:5F:FF:67:6F:F8:05:81:BD:38:79:FB:4F:EE:4F:33:77:B2 Certificate issuer: /CN=b927dc15-9316-467a-b50d-d6b361478436 Certificate serial: 010D0C9F4328584A0C0578F7A87BA6087D3F8580 Authority key identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 2901 IP address blocks: 2605:800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:78:f7:a8:7b:a6:08:7d:3f:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b927dc15-9316-467a-b50d-d6b361478436 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=ab46e297-f55a-41a4-8a4a-224aa05ea035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:92:20:75:ff:4b:27:72:3d:78:fe:9b:71: 0f:78:28:e0:ca:a1:8e:09:f0:0b:8c:28:08:4d:aa: 80:1a:0f:6e:5e:2c:47:77:44:e6:6b:e8:37:67:f0: a9:9b:2e:fb:89:98:c6:68:fe:e2:65:2f:bf:51:61: 3a:81:23:51:fc:85:14:16:53:8b:ab:61:2e:f8:44: 72:8f:8e:78:34:70:3b:4f:b9:f8:0e:46:f0:0e:97: 6f:0b:52:dc:cc:85:0b:ce:11:1c:93:be:11:f0:39: 1f:24:8d:2c:8c:d8:3b:a2:f1:6f:b2:67:1f:3b:b4: 10:a5:90:68:32:df:c5:6c:b9:6d:15:b8:fd:69:e4: 32:f4:4b:07:4c:fa:fc:7c:d9:c5:7e:0b:ca:09:d9: 85:a7:ec:e3:21:98:e2:7b:2a:c6:76:c9:01:62:1e: 50:94:1f:ec:a6:69:64:5a:83:50:56:8b:a1:05:94: 2b:e9:bb:11:46:cc:21:60:33:d1:bb:f9:5e:cc:5e: fa:7e:2d:4d:55:23:b9:d4:68:30:a8:1c:f5:e2:63: 83:7f:d6:1b:75:03:4a:3c:c1:43:c1:80:44:10:bc: 08:25:d1:41:17:e5:94:f2:8d:18:b8:88:6f:e3:c6: 69:4f:07:87:b1:7e:c9:18:41:46:18:6a:40:97:81: 66:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:92:92:5F:FF:67:6F:F8:05:81:BD:38:79:FB:4F:EE:4F:33:77:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl X509v3 Authority Key Identifier: keyid:9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer sbgp-ipAddrBlock: critical IPv6: 2605:800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:24:d0:07:44:6b:38:3f:2c:d1:56:98:fe:c0:e1:d5:16:9a: 93:d7:50:d7:35:f6:80:08:9a:e9:df:de:50:4b:e0:c7:d6:5d: 78:9c:db:0c:cd:2c:06:64:23:38:52:fe:cd:37:b2:5f:b4:a6: 2e:7b:98:b5:74:a1:56:ef:57:c0:07:29:0c:b5:2a:e5:ad:09: 47:d0:68:2e:0d:b1:53:82:d2:ec:14:03:e0:c1:5f:94:85:d6: d7:b5:4a:d6:ea:80:2f:20:05:53:04:1a:17:c5:0f:c6:17:78: 89:b1:02:55:7c:7b:a5:d5:21:82:e1:95:10:73:c2:5c:b9:68: a8:cc:97:c9:30:ab:96:a7:a4:06:02:c3:25:9d:9d:8c:95:79: b9:f2:14:70:61:db:6a:0d:48:39:1a:61:b0:2e:41:06:42:63: 5d:73:8b:b7:41:e8:0e:bb:80:21:ea:d7:0b:75:48:6d:12:d3: b1:d2:3d:2f:18:5e:f4:8e:cb:73:ca:dd:60:7b:b9:9c:fe:2b: dd:c3:28:cd:7a:ea:d6:aa:73:d6:b7:2a:76:ef:0a:ce:9f:65: ab:64:4a:7d:bf:a0:7f:e5:53:0e:c7:93:f9:f0:b0:df:5c:1a: 6b:8f:02:a2:c3:05:2d:7c:09:50:0d:c4:88:14:47:23:76:69: 42:46:5a:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoMBXj3qHumCH0/hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkyN2RjMTUtOTMxNi00NjdhLWI1MGQtZDZiMzYxNDc4 NDM2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YWI0NmUyOTctZjU1YS00MWE0LThhNGEtMjI0YWEwNWVhMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIeSIHX/SydyPXj+m3EPeCjgyqGOCfALjCgI TaqAGg9uXixHd0Tma+g3Z/Cpmy77iZjGaP7iZS+/UWE6gSNR/IUUFlOLq2Eu+ERy j454NHA7T7n4DkbwDpdvC1LczIULzhEck74R8DkfJI0sjNg7ovFvsmcfO7QQpZBo Mt/FbLltFbj9aeQy9EsHTPr8fNnFfgvKCdmFp+zjIZjieyrGdskBYh5QlB/spmlk WoNQVouhBZQr6bsRRswhYDPRu/lezF76fi1NVSO51GgwqBz14mODf9YbdQNKPMFD wYBEELwIJdFBF+WU8o0YuIhv48ZpTweHsX7JGEFGGGpAl4FmlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIWSkl//Z2/4BYG9OHn7T+5PM3eyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOTI3 ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIzNjE0Nzg0MzYvY2ZlYjlkZjgtY2Y4NS0z YzgwLThmODMtMGMzYzI2Zjk0NTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjkyN2RjMTUtOTMxNi00NjdhLWI1 MGQtZDZiMzYxNDc4NDM2L2I5MjdkYzE1LTkzMTYtNDY3YS1iNTBkLWQ2YjM2MTQ3 ODQzNi5jcmwwHwYDVR0jBBgwFoAUmluCqADf1iMqRZ56S1UX9Bjlg+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOTI3ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIz NjE0Nzg0MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUIADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBoJNAHRGs4PyzRVpj+wOHVFpqT11DXNfaACJrp395QS+DH1l14nNsM zSwGZCM4Uv7NN7JftKYue5i1dKFW71fABykMtSrlrQlH0GguDbFTgtLsFAPgwV+U hdbXtUrW6oAvIAVTBBoXxQ/GF3iJsQJVfHul1SGC4ZUQc8JcuWiozJfJMKuWp6QG AsMlnZ2MlXm58hRwYdtqDUg5GmGwLkEGQmNdc4u3QegOu4Ah6tcLdUhtEtOx0j0v GF70jstzyt1ge7mc/ivdwyjNeurWqnPWtyp27wrOn2WrZEp9v6B/5VMOx5P58LDf XBprjwKiwwUtfAlQDcSIFEcjdmlCRlo5 -----END CERTIFICATE-----Generated at Tue Jun 17 09:55:48 2025 by rpki-client