$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa File: defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa (raw, json) Hash identifier: 3zqgwMHRTKA/40hlkT3vlylYSHuETKo3gXdVUeNZ73M= Subject key identifier: B2:98:C9:56:58:88:71:62:76:BB:59:DA:B7:2A:E6:26:87:10:CD:D1 Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584A093A94B39A928904CA918080 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 62874 IP address blocks: 2602:ffb7:594::/48 maxlen: 48 2602:ffb7:5a0::/46 maxlen: 46 2602:ffb7:d00::/40 maxlen: 40 2602:ffb7:f00::/40 maxlen: 40 2602:ffd9::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:94:b3:9a:92:89:04:ca:91:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=bdb5b55a-3d75-4643-af6d-501e87911b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:17:04:2c:0e:02:39:ad:b1:d2:92:a4:6a: c0:04:0b:26:74:82:46:bb:a1:01:c5:9d:87:91:dc: bb:46:aa:9f:ea:bc:df:6c:4a:af:60:a4:aa:84:4c: 3d:b9:a4:42:cc:9b:4c:51:38:d2:2c:31:75:7f:5d: 66:f0:3b:70:d9:91:b7:52:38:93:01:ec:92:a6:13: ae:77:19:1b:0c:e0:0b:35:00:73:ae:c1:bd:11:07: 49:55:49:81:a5:50:2b:21:02:9d:a5:d0:d2:50:19: 3d:a4:80:18:4c:0a:47:cd:fd:00:7f:49:c5:37:ee: c8:82:63:03:d2:b2:91:1c:48:23:32:2f:a3:d2:52: 39:6d:d5:55:39:58:a5:37:9b:31:c9:ca:e2:e1:24: a4:4c:a1:48:79:ab:d1:cb:5c:c0:a7:6f:a7:6a:b1: a6:9e:4a:5e:7b:7f:80:19:fd:c1:71:dd:c8:57:fd: df:77:cc:9e:58:77:5f:eb:ab:7b:06:e5:1b:f1:13: 04:1a:e9:2d:a5:24:77:fe:f5:d8:91:95:2f:92:70: a8:65:9d:07:07:3e:4f:72:35:f2:f7:cd:ea:2f:fd: 81:ca:e3:e3:48:82:12:98:ec:99:06:71:9e:6b:78: 04:4a:32:34:04:89:d1:03:3b:db:55:e9:db:0b:26: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:98:C9:56:58:88:71:62:76:BB:59:DA:B7:2A:E6:26:87:10:CD:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv6: 2602:ffb7:594::/48 2602:ffb7:5a0::/46 2602:ffb7:d00::/40 2602:ffb7:f00::/40 2602:ffd9::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b4:79:80:c4:1f:2b:be:6b:86:00:9a:b0:a5:a2:e9:96:11: d3:93:69:03:82:85:1b:b5:75:80:47:57:86:38:09:66:b0:9d: 7c:b1:69:55:f9:a3:e7:76:78:37:40:98:4a:61:f7:cc:21:d9: 2d:45:b3:c5:19:3d:f5:00:a1:96:24:1e:5c:26:34:8c:78:da: 25:8f:d2:6d:ad:0f:5e:93:35:cd:97:65:ef:92:3e:bf:70:1b: 8c:66:cb:71:98:59:89:b6:dd:da:52:c0:48:00:74:d0:12:e2: bb:f3:f6:03:35:a5:09:46:8c:43:38:7b:6a:34:75:80:f3:84: c7:fe:9c:8c:24:6e:9a:cd:77:9d:a3:22:1d:1e:18:a3:fd:af: 7c:bd:a6:cb:f1:cc:12:a4:d7:76:0a:59:3d:e3:2c:21:f4:6d: f4:46:20:fa:97:80:72:12:93:db:b8:f1:02:1f:6d:75:94:d9: aa:15:9b:69:af:32:5e:90:40:e6:12:77:5f:a4:e3:c5:74:be: c8:c2:5d:23:b9:9d:54:9f:5a:c5:03:10:ca:49:82:22:be:05: 56:10:d7:d3:30:b8:7d:b2:19:45:c9:2b:61:63:30:5c:3f:2e: e3:c6:09:7b:13:6f:5b:03:a1:f2:a6:be:61:7c:42:45:d1:5f: cc:29:46:84 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEoJOpSzmpKJBMqRgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk YmRiNWI1NWEtM2Q3NS00NjQzLWFmNmQtNTAxZTg3OTExYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcMXBCwOAjmtsdKSpGrABAsmdIJGu6EBxZ2H kdy7Rqqf6rzfbEqvYKSqhEw9uaRCzJtMUTjSLDF1f11m8Dtw2ZG3UjiTAeySphOu dxkbDOALNQBzrsG9EQdJVUmBpVArIQKdpdDSUBk9pIAYTApHzf0Af0nFN+7IgmMD 0rKRHEgjMi+j0lI5bdVVOVilN5sxycri4SSkTKFIeavRy1zAp2+narGmnkpee3+A Gf3Bcd3IV/3fd8yeWHdf66t7BuUb8RMEGuktpSR3/vXYkZUvknCoZZ0HBz5PcjXy 983qL/2ByuPjSIISmOyZBnGea3gESjI0BInRAzvbVenbCyY7NQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFLKYyVZYiHFidrtZ2rcq5iaHEM3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvZGVmYTRiNDEtNGNiYy0z MTI4LTgzYzYtYWM3MjQ5MGQ5ZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwcAJgL/twWU AwcCJgL/twWgAwYAJgL/tw0DBgAmAv+3DwMGBCYC/9kAMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABm0eYDE Hyu+a4YAmrCloumWEdOTaQOChRu1dYBHV4Y4CWawnXyxaVX5o+d2eDdAmEph98wh 2S1Fs8UZPfUAoZYkHlwmNIx42iWP0m2tD16TNc2XZe+SPr9wG4xmy3GYWYm23dpS wEgAdNAS4rvz9gM1pQlGjEM4e2o0dYDzhMf+nIwkbprNd52jIh0eGKP9r3y9psvx zBKk13YKWT3jLCH0bfRGIPqXgHISk9u48QIfbXWU2aoVm2mvMl6QQOYSd1+k48V0 vsjCXSO5nVSfWsUDEMpJgiK+BVYQ19MwuH2yGUXJK2FjMFw/LuPGCXsTb1sDofKm vmF8QkXRX8wpRoQ= -----END CERTIFICATE-----Generated at Mon Jun 16 12:21:10 2025 by rpki-client