$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a87344a9-56e9-34d4-9011-cf03bc9980c1.roa File: a87344a9-56e9-34d4-9011-cf03bc9980c1.roa (raw, json) Hash identifier: F3a5qkW017NtM4dgeRLYasCuSr3YdcIKC+IsgRnFZuU= Subject key identifier: D9:62:B4:FE:21:BD:9F:EB:78:34:DF:BC:88:79:69:2F:E1:8B:9D:D1 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584A23C017C4F904C435EE6E0788 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a87344a9-56e9-34d4-9011-cf03bc9980c1.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 2153 IP address blocks: 2607:f380:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:17:c4:f9:04:c4:35:ee:6e:07:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=048945dc-92a7-4fa0-820e-5689417dd761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:94:3f:5b:02:32:93:3d:66:83:02:ef:7d: fa:1d:07:96:7b:1f:fd:bf:bb:94:a7:34:6f:38:58: ea:c4:2e:f5:3b:4f:5a:1b:1b:a8:c8:ad:7b:81:38: 0e:85:a6:17:41:a5:54:67:c6:68:a8:a7:9b:de:04: f4:dc:e7:e7:56:ef:47:f7:a2:2a:20:4b:99:7a:3e: 81:f3:89:83:60:7b:9d:f5:24:a1:8b:04:bc:00:a5: a8:1d:20:cd:16:9c:82:fd:81:85:3c:d4:40:ea:a1: 90:35:7a:1a:12:66:30:17:89:67:bb:54:71:b4:36: f3:59:cc:16:c6:e7:dd:d5:65:5f:d9:3d:bf:9e:95: 19:03:41:61:28:71:32:ad:f2:b3:75:fe:dc:87:7d: 66:94:98:14:43:8a:27:41:30:03:0d:64:55:9d:44: ff:94:bc:ae:e2:f7:df:7d:37:e0:b0:94:64:d6:35: 41:64:f2:06:f9:e6:7d:28:e0:74:29:b4:4d:40:59: ec:d7:15:96:19:04:ed:0d:7c:78:14:d6:04:3b:07: 11:9a:e9:8a:89:5b:1f:7a:9b:60:1c:42:7b:8e:12: 82:50:52:53:63:af:6c:e7:01:bf:36:48:27:4b:5d: bb:d5:f2:ff:79:24:1b:ac:29:e0:a1:52:95:8f:8f: 3a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:62:B4:FE:21:BD:9F:EB:78:34:DF:BC:88:79:69:2F:E1:8B:9D:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a87344a9-56e9-34d4-9011-cf03bc9980c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv6: 2607:f380:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:48:07:52:b9:77:fc:0a:e5:c4:52:8a:8c:4d:d7:e9:4b:17: b7:6d:8f:86:6e:bd:bd:33:bc:7b:53:eb:9d:92:d5:ee:7b:42: b1:c8:6c:55:40:4e:46:a7:69:5a:ec:26:1a:53:65:d2:0d:bf: 17:63:bd:43:88:ce:50:35:36:4e:07:2b:14:b8:8e:68:9f:66: e7:c0:80:d6:da:da:e3:c6:fc:72:f7:06:87:2b:5f:7f:40:b6: e0:4e:ca:48:d8:62:20:0c:7b:67:75:2d:59:93:34:7f:e2:ef: b5:2c:67:13:57:40:a8:7b:2c:c7:42:aa:49:29:26:35:11:d2: 62:66:93:4c:d1:6f:f0:78:fa:a8:a3:45:ea:d9:da:36:2f:cd: c9:33:e4:57:2b:ff:2b:81:b3:89:46:38:97:23:d3:39:95:9f: 70:14:78:55:1d:7f:ae:f4:25:ad:00:b2:1f:a2:db:55:5a:ba: 59:22:0c:5c:78:9e:b4:0f:c4:41:69:82:bb:c9:c0:d8:fe:95: 5e:a3:04:3f:3f:67:9c:e5:dd:aa:2c:a6:14:22:75:92:c6:53: f9:ce:c6:01:17:34:d8:c4:b3:d7:f2:6f:30:7a:19:9e:ee:cf: d6:8b:13:0a:01:ce:7a:8e:5d:8e:65:29:d1:f5:91:ec:cd:c2: 7e:c4:20:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEojwBfE+QTENe5uB4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk MDQ4OTQ1ZGMtOTJhNy00ZmEwLTgyMGUtNTY4OTQxN2RkNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA106UP1sCMpM9ZoMC7336HQeWex/9v7uUpzRv OFjqxC71O09aGxuoyK17gTgOhaYXQaVUZ8ZoqKeb3gT03OfnVu9H96IqIEuZej6B 84mDYHud9SShiwS8AKWoHSDNFpyC/YGFPNRA6qGQNXoaEmYwF4lnu1RxtDbzWcwW xufd1WVf2T2/npUZA0FhKHEyrfKzdf7ch31mlJgUQ4onQTADDWRVnUT/lLyu4vff fTfgsJRk1jVBZPIG+eZ9KOB0KbRNQFns1xWWGQTtDXx4FNYEOwcRmumKiVsfeptg HEJ7jhKCUFJTY69s5wG/NkgnS1271fL/eSQbrCngoVKVj486MQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNlitP4hvZ/reDTfvIh5aS/hi53RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYTg3MzQ0YTktNTZlOS0z NGQ0LTkwMTEtY2YwM2JjOTk4MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfzgAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJhIB1K5d/wK5cRSioxN1+lLF7dtj4Zuvb0zvHtT652S1e57QrHI bFVATkanaVrsJhpTZdINvxdjvUOIzlA1Nk4HKxS4jmifZufAgNba2uPG/HL3Bocr X39AtuBOykjYYiAMe2d1LVmTNH/i77UsZxNXQKh7LMdCqkkpJjUR0mJmk0zRb/B4 +qijRerZ2jYvzckz5Fcr/yuBs4lGOJcj0zmVn3AUeFUdf670Ja0Ash+i21Vaulki DFx4nrQPxEFpgrvJwNj+lV6jBD8/Z5zl3aosphQidZLGU/nOxgEXNNjEs9fybzB6 GZ7uz9aLEwoBznqOXY5lKdH1kezNwn7EIIo= -----END CERTIFICATE-----Generated at Sun Jun 15 15:44:15 2025 by rpki-client