$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa File: c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa (raw, json) Hash identifier: cwNtM8nipQcPGvN0ZDLiMipKC4jZxJA77FpgRSeAEm8= Subject key identifier: E3:07:DE:36:39:41:E7:CB:69:D8:55:9E:01:D4:20:AA:DA:E6:8A:DD Certificate issuer: /CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Certificate serial: 010D0C9F4328584A1B5FEEFFC3152A4662950020 Authority key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 25968 IP address blocks: 2620:7b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:ee:ff:c3:15:2a:46:62:95:00:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=01a9227a-7d1a-4a61-9ea6-fba0470c4b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bd:75:80:b1:f8:3f:59:03:18:10:ab:8b:64: 25:10:fd:16:83:f5:aa:f1:18:47:de:1a:44:c1:79: 18:50:59:ad:b1:dd:de:e1:d2:ec:a9:39:61:1d:a6: 7f:73:4c:51:42:bd:96:42:99:74:b3:bc:55:ef:5e: 8d:2b:fb:f3:67:cc:bf:15:d5:ae:6e:39:10:cc:4e: 51:b8:6e:6f:74:4b:d5:e8:52:1c:54:83:73:fa:6d: 9b:3c:97:63:b8:e7:30:4d:53:f2:d0:79:ad:14:70: d9:57:62:6c:ba:b9:78:9d:8f:57:ce:ee:a2:6a:02: 87:da:cf:09:c6:6f:5e:2b:31:fd:80:52:e8:cb:ba: c7:7c:22:f9:53:e3:ee:3d:4c:7b:a1:bf:bf:21:9e: 9d:9c:d9:b3:3f:66:8b:1a:2e:58:38:36:f8:76:7a: 26:33:b9:3f:d4:c2:52:f6:79:b6:6e:b5:d6:3c:b5: 3f:d9:06:07:c1:fe:02:73:c2:b7:59:2f:f1:9e:30: 7a:e5:ff:af:60:94:a6:e6:69:23:d9:4a:b7:c1:ea: 64:39:fe:60:ad:33:c5:38:95:d8:7f:58:35:b4:b2: 51:33:5f:e6:7e:36:40:2f:66:82:5b:4c:97:ff:7f: f3:3b:3f:be:27:cb:21:80:0a:12:86:13:08:37:7f: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:07:DE:36:39:41:E7:CB:69:D8:55:9E:01:D4:20:AA:DA:E6:8A:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl X509v3 Authority Key Identifier: keyid:11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer sbgp-ipAddrBlock: critical IPv6: 2620:7b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:32:d8:19:12:32:51:4c:12:7a:09:01:97:a2:55:35:b3:3a: 47:c5:8d:b4:98:50:a5:b6:31:b8:56:09:2a:4f:d9:d4:34:57: 2b:a4:c6:6a:c0:aa:3a:92:2a:eb:ae:50:d2:c6:c8:d6:18:4c: 36:83:c5:39:8d:f2:1f:89:d7:0e:4a:22:2f:88:8e:ef:6c:58: ea:fa:94:70:97:6f:f0:4c:b2:b1:74:d5:17:7a:8d:5a:65:2e: c4:ab:56:55:87:2d:0e:9f:e8:b1:86:7c:5f:7a:d9:e9:6d:e7: 79:72:22:de:0b:97:e2:e4:49:a3:7f:f2:eb:e0:d3:c1:0b:41: 22:c2:3b:45:b8:9c:40:6c:c4:2c:b7:7f:a9:40:c0:9f:2c:f7: 5b:17:6c:32:99:2f:eb:19:5e:ca:c6:4f:18:2d:90:51:65:e8: c9:42:33:ce:8d:50:ec:7e:7f:1f:87:15:a6:ee:07:4b:63:91: ae:f9:64:de:e8:55:de:ed:87:42:39:03:2e:0f:d9:99:b5:d5: b5:2a:95:2d:0c:8c:c3:50:1f:dd:85:da:9f:02:c5:23:73:08: ff:a0:5b:93:95:3d:24:2f:be:31:1e:be:00:82:33:26:33:aa: 69:1a:1b:de:4f:c9:47:c5:9d:6e:73:bf:28:56:1b:d7:f8:61: 35:c2:6f:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEobX+7/wxUqRmKVACAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3OGU3MDgtZDEyOC00NzkwLWE4ZTMtMWUwZjRhMWE2 ZjRhMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk MDFhOTIyN2EtN2QxYS00YTYxLTllYTYtZmJhMDQ3MGM0YjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr11gLH4P1kDGBCri2QlEP0Wg/Wq8RhH3hpE wXkYUFmtsd3e4dLsqTlhHaZ/c0xRQr2WQpl0s7xV716NK/vzZ8y/FdWubjkQzE5R uG5vdEvV6FIcVINz+m2bPJdjuOcwTVPy0HmtFHDZV2Jsurl4nY9Xzu6iagKH2s8J xm9eKzH9gFLoy7rHfCL5U+PuPUx7ob+/IZ6dnNmzP2aLGi5YODb4dnomM7k/1MJS 9nm2brXWPLU/2QYHwf4Cc8K3WS/xnjB65f+vYJSm5mkj2Uq3wepkOf5grTPFOJXY f1g1tLJRM1/mfjZAL2aCW0yX/3/zOz++J8shgAoShhMIN3/EZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOMH3jY5QefLadhVngHUIKra5ordMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4 ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGExYTZmNGEvYzMyMmJjYjItMWVkOC0z MTMyLTk5OWEtYjIxOWU5ZjZmOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3OGU3MDgtZDEyOC00NzkwLWE4 ZTMtMWUwZjRhMWE2ZjRhLzMyNzhlNzA4LWQxMjgtNDc5MC1hOGUzLTFlMGY0YTFh NmY0YS5jcmwwHwYDVR0jBBgwFoAUEYTyMx27JSn1MTpouY8Z/wIK71YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBm NGExYTZmNGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAewAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHcy2BkSMlFMEnoJAZeiVTWzOkfFjbSYUKW2MbhWCSpP2dQ0Vyuk xmrAqjqSKuuuUNLGyNYYTDaDxTmN8h+J1w5KIi+Iju9sWOr6lHCXb/BMsrF01Rd6 jVplLsSrVlWHLQ6f6LGGfF962elt53lyIt4Ll+LkSaN/8uvg08ELQSLCO0W4nEBs xCy3f6lAwJ8s91sXbDKZL+sZXsrGTxgtkFFl6MlCM86NUOx+fx+HFabuB0tjka75 ZN7oVd7th0I5Ay4P2Zm11bUqlS0MjMNQH92F2p8CxSNzCP+gW5OVPSQvvjEevgCC MyYzqmkaG95PyUfFnW5zvyhWG9f4YTXCb1E= -----END CERTIFICATE-----Generated at Sun Jun 15 23:17:38 2025 by rpki-client