$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa File: e2967edf-17a9-32bb-8570-be2bca3444ee.roa (raw, json) Hash identifier: LMXcd6zUbLI0uC81mZ7vpM2e7/OihweZfRp5UhsXN+Y= Subject key identifier: 78:ED:14:0D:C7:08:2D:25:BF:75:E4:5F:CF:BD:0C:28:48:F5:A1:A2 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584A2EEAC0682F4E9DCA7DDF6600 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 394353 IP address blocks: 2001:500:205:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:c0:68:2f:4e:9d:ca:7d:df:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=fb07c0d6-1498-4aba-bd35-93b5a762ee3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:75:0d:be:b1:2f:d7:ea:28:3c:ea:9b:47:b7: b1:c9:f3:a7:2a:f9:57:66:0b:6c:80:b2:4d:c1:eb: 03:63:4b:ec:3e:c8:ad:0b:3f:25:16:d2:e8:f5:d3: 18:3d:60:89:7c:b9:7a:4b:9f:33:74:8b:89:a4:4e: 9e:4d:5a:2f:ce:53:1d:60:7f:9f:e9:36:56:c1:4b: 85:29:52:74:5f:50:7f:86:7f:d1:9a:1f:7c:ac:86: d7:61:cc:b0:a6:ab:0c:67:7a:87:39:9c:7b:89:14: b9:51:35:65:17:7f:b3:1a:a9:d4:26:c0:c0:34:43: 16:d6:6c:09:a4:63:1d:6b:d4:c4:93:8b:f1:dc:05: ee:ae:c4:3e:6c:42:ac:d0:64:95:21:7a:78:9d:54: 66:58:87:e2:fb:60:f6:5c:74:3a:dd:ee:05:c4:d3: 80:1b:02:b0:ed:0b:03:98:c0:50:68:44:6f:b4:c7: 63:1c:56:28:08:f1:43:8b:69:ed:82:ca:ad:80:9b: 40:be:de:ba:9f:53:fc:a3:1d:10:5d:68:cf:04:6f: 6c:15:66:94:c3:be:f9:50:0b:b1:b9:54:af:29:ac: f2:8e:09:ba:64:c1:81:44:97:49:74:e9:8c:c0:22: 7c:b6:df:1a:8a:47:8c:bd:2f:45:22:84:5c:bb:2a: c9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:ED:14:0D:C7:08:2D:25:BF:75:E4:5F:CF:BD:0C:28:48:F5:A1:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:205:8000::/49 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:69:23:e9:92:65:bc:ec:4d:70:51:f5:21:21:62:9e:e0:a6: 1c:fd:4a:06:20:9c:ca:62:cf:75:a5:ed:9c:59:23:0c:b8:bc: a9:87:9f:25:41:c2:97:50:f9:70:55:a8:3e:7a:67:1a:0d:19: 28:ac:f5:fb:41:8d:15:d0:dd:64:f0:da:db:02:5a:13:2f:0c: 78:46:f2:a0:13:dc:8e:b6:53:92:6b:ad:df:38:0d:f4:f8:e1: b3:b5:5f:0c:22:92:58:59:bc:ef:25:b6:90:a8:2d:30:7c:97: d7:0c:03:d3:c8:b7:b9:dd:9f:e1:e9:39:f8:98:39:e3:d9:16: 79:dc:cc:84:3d:5a:9c:af:bd:07:71:f6:1a:ef:4e:79:16:4e: d8:04:48:d6:52:05:02:17:5c:b5:a6:c5:95:c1:f0:a9:9a:22: b1:07:a1:10:4b:d4:ba:ad:7d:dd:91:84:96:8d:14:1e:14:a9: 50:d5:a1:03:18:c3:1e:a4:46:21:ec:b9:d1:eb:3d:ce:6d:ec: a1:26:cd:f3:2b:19:7f:0e:f7:5f:0f:49:8a:e0:f3:76:b4:fb: 8a:c4:55:95:b2:e8:d8:4e:8f:95:ff:9e:b9:41:bc:e4:9d:b5: f3:44:66:d3:09:07:77:6d:9a:2b:d8:5b:6e:47:5f:c8:2b:d9: 89:b9:35:91 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEou6sBoL06dyn3fZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk ZmIwN2MwZDYtMTQ5OC00YWJhLWJkMzUtOTNiNWE3NjJlZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnUNvrEv1+ooPOqbR7exyfOnKvlXZgtsgLJN wesDY0vsPsitCz8lFtLo9dMYPWCJfLl6S58zdIuJpE6eTVovzlMdYH+f6TZWwUuF KVJ0X1B/hn/Rmh98rIbXYcywpqsMZ3qHOZx7iRS5UTVlF3+zGqnUJsDANEMW1mwJ pGMda9TEk4vx3AXursQ+bEKs0GSVIXp4nVRmWIfi+2D2XHQ63e4FxNOAGwKw7QsD mMBQaERvtMdjHFYoCPFDi2ntgsqtgJtAvt66n1P8ox0QXWjPBG9sFWaUw775UAux uVSvKazyjgm6ZMGBRJdJdOmMwCJ8tt8aikeMvS9FIoRcuyrJ+QIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFHjtFA3HCC0lv3XkX8+9DChI9aGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvZTI5NjdlZGYtMTdhOS0z MmJiLTg1NzAtYmUyYmNhMzQ0NGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgHIAEFAAIF gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQA9aSPpkmW87E1wUfUhIWKe4KYc/UoGIJzKYs91pe2cWSMMuLyp h58lQcKXUPlwVag+emcaDRkorPX7QY0V0N1k8NrbAloTLwx4RvKgE9yOtlOSa63f OA30+OGztV8MIpJYWbzvJbaQqC0wfJfXDAPTyLe53Z/h6Tn4mDnj2RZ53MyEPVqc r70HcfYa7055Fk7YBEjWUgUCF1y1psWVwfCpmiKxB6EQS9S6rX3dkYSWjRQeFKlQ 1aEDGMMepEYh7LnR6z3ObeyhJs3zKxl/DvdfD0mK4PN2tPuKxFWVsujYTo+V/565 QbzknbXzRGbTCQd3bZor2FtuR1/IK9mJuTWR -----END CERTIFICATE-----Generated at Sun Jun 15 17:19:09 2025 by rpki-client