$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa File: 503a28c0-4f23-38d6-94cd-f22d4c077e71.roa (raw, json) Hash identifier: ofBxlFnRHd+2iJ5CAdBaQZTM9Y/+iXtlBg5OCBcyVo0= Subject key identifier: 46:AF:CB:19:3A:4D:89:D0:D9:58:71:C0:09:31:4E:C0:64:B9:F3:29 Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F4328584A23C003C340764B6C76A98280 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 30242 IP address blocks: 2620:84:c000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:03:c3:40:76:4b:6c:76:a9:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=df86480c-c029-4737-9b3b-02cf33d5a3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:5e:1e:06:f9:f9:28:8e:f9:ec:f4:e6:1b: fd:bf:d5:ee:06:b3:36:44:fb:92:4e:e5:d4:77:da: b4:2b:0d:79:b9:19:73:5a:4c:6b:f7:f8:b1:bd:9d: 47:f1:b1:a1:c0:23:99:7f:22:3c:b9:a3:15:e6:1d: 47:f4:77:8b:5a:50:0c:3d:d4:de:8c:9b:f7:9c:14: 3b:06:63:41:19:8b:d6:ca:31:28:09:1c:ac:a4:c8: b4:26:ee:8c:90:c6:4c:cb:3d:ed:83:7b:d2:c3:57: 9d:2b:61:da:f2:22:11:c3:3d:c9:60:c5:01:57:d6: 87:b7:68:06:3c:68:41:7f:df:46:0a:10:f8:4b:9e: 19:ee:85:16:9b:79:66:ad:e6:cf:d2:08:a5:01:49: 45:b5:73:97:b7:cc:1b:4b:ce:b7:a1:20:7a:9f:fc: 95:15:18:8c:e2:48:66:5d:d8:1d:e5:e7:0a:01:88: d5:00:f9:fc:27:e2:9d:08:fd:a5:c8:f4:99:4a:37: e4:79:e9:f7:82:c3:82:f4:eb:75:8d:b0:22:3c:11: ab:57:0b:6c:fc:d4:8c:7f:f9:44:43:88:37:ce:3c: ae:c4:08:01:98:ea:e7:c3:dd:60:ce:02:5c:6e:f1: c8:c5:af:db:15:d3:96:0d:98:7e:8b:96:da:ab:d5: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AF:CB:19:3A:4D:89:D0:D9:58:71:C0:09:31:4E:C0:64:B9:F3:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv6: 2620:84:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:20:6f:a6:ed:71:ae:fe:2b:62:a2:db:0b:6d:7a:4c:e1:67: 12:5d:29:99:b0:76:65:88:11:e2:3d:17:24:1b:21:8b:3c:46: ad:9d:94:79:32:70:a1:88:68:fc:6e:e3:b8:ab:38:4b:29:cc: 33:ef:6d:73:f4:60:7e:65:9f:be:b9:c3:d0:37:e8:ea:5c:5a: fd:12:84:cc:80:e8:8b:0c:e2:35:61:d3:4c:8b:ff:b9:d8:82: 47:69:ce:3f:4c:c2:d6:55:24:24:20:fa:50:be:c6:82:b9:fb: 53:bd:6d:17:e4:1d:e4:cf:c4:37:b7:9f:bd:19:61:35:fa:8b: 1a:7d:c3:2e:69:44:51:ef:76:8b:c3:df:7a:82:88:0c:cb:50: f8:56:3b:7d:73:e4:de:6e:33:78:86:04:60:98:83:6b:04:42: 79:e6:58:f6:98:9e:d6:72:5d:5f:af:9f:85:e6:b9:f0:ae:48: 6b:d5:b0:17:f4:98:e4:00:4b:da:87:ec:db:10:63:68:22:cd: 90:de:32:9d:c0:4e:d7:65:bd:72:b2:fb:3e:5e:c4:1a:68:e4: d1:6f:9a:a8:f6:e6:e4:c0:65:30:30:0d:60:7c:2a:66:b1:ca: f3:0f:76:bb:96:64:ce:55:73:ce:d5:c2:ee:16:00:ab:ef:b7: 46:19:83:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEojwAPDQHZLbHapgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZGY4NjQ4MGMtYzAyOS00NzM3LTliM2ItMDJjZjMzZDVhM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo59eHgb5+SiO+ez05hv9v9XuBrM2RPuSTuXU d9q0Kw15uRlzWkxr9/ixvZ1H8bGhwCOZfyI8uaMV5h1H9HeLWlAMPdTejJv3nBQ7 BmNBGYvWyjEoCRyspMi0Ju6MkMZMyz3tg3vSw1edK2Ha8iIRwz3JYMUBV9aHt2gG PGhBf99GChD4S54Z7oUWm3lmrebP0gilAUlFtXOXt8wbS863oSB6n/yVFRiM4khm Xdgd5ecKAYjVAPn8J+KdCP2lyPSZSjfkeen3gsOC9Ot1jbAiPBGrVwts/NSMf/lE Q4g3zjyuxAgBmOrnw91gzgJcbvHIxa/bFdOWDZh+i5baq9W8ewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEavyxk6TYnQ2VhxwAkxTsBkufMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvNTAzYTI4YzAtNGYyMy0z OGQ2LTk0Y2QtZjIyZDRjMDc3ZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAhMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANQgb6btca7+K2Ki2wttekzhZxJdKZmwdmWIEeI9FyQbIYs8Rq2d lHkycKGIaPxu47irOEspzDPvbXP0YH5ln765w9A36OpcWv0ShMyA6IsM4jVh00yL /7nYgkdpzj9MwtZVJCQg+lC+xoK5+1O9bRfkHeTPxDe3n70ZYTX6ixp9wy5pRFHv dovD33qCiAzLUPhWO31z5N5uM3iGBGCYg2sEQnnmWPaYntZyXV+vn4XmufCuSGvV sBf0mOQAS9qH7NsQY2gizZDeMp3ATtdlvXKy+z5exBpo5NFvmqj25uTAZTAwDWB8 KmaxyvMPdruWZM5Vc87Vwu4WAKvvt0YZg+o= -----END CERTIFICATE-----Generated at Wed Jun 18 17:37:50 2025 by rpki-client