$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/253211cd-2b24-395a-8f15-6259b12163c1.roa File: 253211cd-2b24-395a-8f15-6259b12163c1.roa (raw, json) Hash identifier: 5npK9OhOEF2tDQDjDk8vF0FpwJwYMvkR7UUbBJmiR10= Subject key identifier: 86:CC:38:0C:95:45:9E:4B:A2:AD:4B:43:90:C4:15:E3:42:69:A9:4C Certificate issuer: /CN=7e90c2d3-d2e4-443e-b44e-d530fc7f3315 Certificate serial: 010D0C9F43285849E91B12086D13CCCB19C1C880 Authority key identifier: 4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/253211cd-2b24-395a-8f15-6259b12163c1.roa Signing time: Tue 20 May 2025 00:51:43 +0000 ROA not before: Tue 20 May 2025 00:51:43 +0000 ROA not after: Mon 18 Aug 2025 00:51:43 +0000 asID: 395153 IP address blocks: 2602:f6f6:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1b:12:08:6d:13:cc:cb:19:c1:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e90c2d3-d2e4-443e-b44e-d530fc7f3315 Validity Not Before: May 20 00:51:43 2025 GMT Not After : Aug 18 00:51:43 2025 GMT Subject: CN=4e183f5b-62b2-4096-a57e-d8f062967913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:65:4e:46:b1:a2:a3:50:0f:02:6e:8a:a8:4b: 2f:dd:89:99:8a:ea:19:13:c3:f2:95:cc:8c:91:c4: c6:e7:25:96:24:c3:51:18:fa:29:a1:0c:3b:36:59: 34:d2:9e:39:dc:b6:84:af:f8:bc:18:49:a8:d4:1b: f4:1a:d0:ed:4e:12:0b:77:ef:08:91:f0:77:fb:15: 0f:dc:55:5e:af:be:75:69:f1:1c:ce:49:96:10:29: f0:27:fd:50:19:64:5e:82:b1:86:f7:b3:3c:cf:e9: 60:c5:7b:83:2a:e0:4b:2e:b4:66:29:1d:55:45:32: 0e:0c:01:83:83:94:24:85:03:fc:b0:93:d6:b6:03: 56:a5:e3:77:8d:be:14:53:e5:8e:8a:77:a0:e9:82: 1f:c7:a8:3a:df:5f:c9:fa:60:9d:40:78:6f:43:34: 0a:43:be:c2:ad:d0:f2:d0:6a:52:ad:cc:4f:74:5c: 77:3c:84:4c:ef:24:4c:ae:3e:6b:b3:a2:f2:a8:c4: 79:3c:e1:9b:31:c0:8f:0b:de:65:88:f1:f5:2e:1e: 2a:2e:4d:3f:d0:61:c5:60:51:bd:5e:5f:97:8d:0d: 83:ea:f3:72:95:d9:b6:c4:88:e3:a6:61:0d:52:a2: c3:7f:d4:b9:f1:43:18:d5:f6:ed:89:b0:cc:83:a4: 13:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CC:38:0C:95:45:9E:4B:A2:AD:4B:43:90:C4:15:E3:42:69:A9:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/253211cd-2b24-395a-8f15-6259b12163c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.crl X509v3 Authority Key Identifier: keyid:4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6f6:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:59:59:52:a7:8f:69:11:7b:e8:b8:16:9f:0e:57:d1:e9:b0: 4e:18:4b:b2:9a:12:09:62:63:2b:e4:72:d7:ed:d3:e4:07:0d: 92:9d:3a:3e:c7:03:6e:bc:11:ba:20:bf:85:4b:97:84:34:31: bb:af:0f:9d:d2:a4:59:a3:9f:00:e2:3d:9b:58:85:7d:0d:52: 08:26:cc:38:dc:91:59:d9:92:2a:37:6d:9c:ab:7e:aa:11:7a: 04:d2:70:e6:9c:b6:a6:11:e2:3e:c4:73:9d:e2:d2:de:dc:bf: d0:44:8b:ee:dd:5e:4e:0e:11:06:13:20:5f:cb:26:da:d1:e3: ad:27:07:d2:70:03:b5:75:d3:7b:9b:26:d2:58:66:7d:93:aa: 31:d9:c1:a8:f2:80:d0:45:8a:3f:11:37:26:ee:c8:d9:d2:ee: cc:25:ea:ab:43:53:a6:89:30:e1:e0:b4:96:dc:bf:60:73:86: 02:5e:2b:a1:26:08:d7:5e:1d:af:03:f3:48:52:5b:de:ae:9c: 66:ff:f2:29:0f:d8:57:d2:23:03:55:7e:83:2f:12:ff:53:15: 77:5c:13:89:81:23:71:e3:cb:86:e5:5b:41:1e:14:cf:07:5a: 5e:a9:44:e6:68:07:33:49:45:e9:b6:d3:f3:d5:6b:d1:05:6e: 5a:34:fb:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnpGxIIbRPMyxnByIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5MGMyZDMtZDJlNC00NDNlLWI0NGUtZDUzMGZjN2Yz MzE1MB4XDTI1MDUyMDAwNTE0M1oXDTI1MDgxODAwNTE0M1owLzEtMCsGA1UEAxMk NGUxODNmNWItNjJiMi00MDk2LWE1N2UtZDhmMDYyOTY3OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GVORrGio1APAm6KqEsv3YmZiuoZE8PylcyM kcTG5yWWJMNRGPopoQw7Nlk00p453LaEr/i8GEmo1Bv0GtDtThILd+8IkfB3+xUP 3FVer751afEczkmWECnwJ/1QGWRegrGG97M8z+lgxXuDKuBLLrRmKR1VRTIODAGD g5QkhQP8sJPWtgNWpeN3jb4UU+WOineg6YIfx6g631/J+mCdQHhvQzQKQ77CrdDy 0GpSrcxPdFx3PIRM7yRMrj5rs6LyqMR5POGbMcCPC95liPH1Lh4qLk0/0GHFYFG9 Xl+XjQ2D6vNyldm2xIjjpmENUqLDf9S58UMY1fbtibDMg6QT7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIbMOAyVRZ5Loq1LQ5DEFeNCaalMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZTkw YzJkMy1kMmU0LTQ0M2UtYjQ0ZS1kNTMwZmM3ZjMzMTUvMjUzMjExY2QtMmIyNC0z OTVhLThmMTUtNjI1OWIxMjE2M2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2U5MGMyZDMtZDJlNC00NDNlLWI0 NGUtZDUzMGZjN2YzMzE1LzdlOTBjMmQzLWQyZTQtNDQzZS1iNDRlLWQ1MzBmYzdm MzMxNS5jcmwwHwYDVR0jBBgwFoAUS0UBiQjBjieMPcnhaA+Aq/Dka6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZTkwYzJkMy1kMmU0LTQ0M2UtYjQ0ZS1kNTMw ZmM3ZjMzMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL29gAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJZWVKnj2kRe+i4Fp8OV9HpsE4YS7KaEgliYyvkctft0+QHDZKd Oj7HA268Ebogv4VLl4Q0MbuvD53SpFmjnwDiPZtYhX0NUggmzDjckVnZkio3bZyr fqoRegTScOactqYR4j7Ec53i0t7cv9BEi+7dXk4OEQYTIF/LJtrR460nB9JwA7V1 03ubJtJYZn2TqjHZwajygNBFij8RNybuyNnS7swl6qtDU6aJMOHgtJbcv2BzhgJe K6EmCNdeHa8D80hSW96unGb/8ikP2FfSIwNVfoMvEv9TFXdcE4mBI3Hjy4blW0Ee FM8HWl6pROZoBzNJRem20/PVa9EFblo0+7g= -----END CERTIFICATE-----Generated at Mon Jun 16 21:11:47 2025 by rpki-client