$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/d996b7fe-6633-3640-ab98-181795bed551.roa File: d996b7fe-6633-3640-ab98-181795bed551.roa (raw, json) Hash identifier: juYBFCGrVc/InXX7nsjhX/eHIdaKnHYGZS1vqzDGCBo= Subject key identifier: 65:F3:1E:90:8B:2D:6E:34:0D:45:5C:46:3A:4B:B8:22:B9:BA:8A:6E Certificate issuer: /CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Certificate serial: 010D0C9F43285849FE0FFA4677513AF35E6124F0 Authority key identifier: 07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/d996b7fe-6633-3640-ab98-181795bed551.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 398065 IP address blocks: 2620:79:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:fa:46:77:51:3a:f3:5e:61:24:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=438e663f-8ac0-4b76-b5ee-48cdef0c6826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:69:9b:60:c1:71:db:e4:13:45:b8:d7:89: 4e:bf:b6:bd:80:9e:01:cc:23:9e:17:2d:e7:c0:72: 81:b0:c5:98:31:b8:6a:02:91:fa:07:cf:ab:15:d3: 76:7c:27:f8:3f:2d:31:d7:a3:6d:c9:a1:6b:2b:b0: 72:ef:0c:13:0d:aa:9e:00:a3:9a:f8:60:4f:f3:2c: 37:5d:d9:d6:92:50:52:6c:98:7e:16:a5:bd:b1:d0: d2:7c:bf:56:4c:ab:6b:d9:29:38:50:75:cc:47:c5: 43:c0:74:74:3d:cd:28:46:df:a2:e8:dc:d9:a1:3a: bd:91:68:f3:3d:66:f7:ca:7c:2c:61:cc:df:1f:fc: a1:b2:62:8b:38:97:5a:06:e6:b9:d3:86:0c:4e:ba: ed:98:05:51:64:fd:30:10:f5:55:c2:81:ea:f9:13: a9:94:eb:6d:87:1a:b0:9f:4c:06:a2:29:73:5f:3b: 6f:e5:ca:99:b6:31:97:ef:a3:c7:4a:31:09:1c:84: 11:af:6a:11:f5:0d:77:0b:98:f9:e5:4b:54:82:46: fe:37:ae:2b:e3:66:4e:84:dd:11:36:bb:3b:f7:c3: 3b:d3:d6:e2:a3:44:a1:69:9f:55:3a:3a:fc:4d:c5: f1:da:0e:5d:3a:ee:cc:65:a3:7c:3a:a1:d9:28:f5: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F3:1E:90:8B:2D:6E:34:0D:45:5C:46:3A:4B:B8:22:B9:BA:8A:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/d996b7fe-6633-3640-ab98-181795bed551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl X509v3 Authority Key Identifier: keyid:07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer sbgp-ipAddrBlock: critical IPv6: 2620:79:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d5:45:95:e7:08:80:85:cb:90:59:df:5b:90:2b:d3:e5:38: 09:49:f4:53:3b:00:c6:e4:70:1e:30:32:73:e6:5f:cc:04:57: 53:24:21:1d:61:29:3d:8e:79:27:d3:a3:d1:76:ea:15:51:ea: 7c:91:d0:8b:f0:83:ed:20:0b:91:0a:21:9d:81:01:ea:ac:af: 34:1d:bf:8e:21:65:fd:8a:ce:39:7e:40:3e:51:3b:d2:57:6e: ba:b1:50:75:d0:b0:e7:02:48:70:ea:e5:c8:05:eb:75:b8:37: 77:21:24:dd:3b:18:6b:ce:40:41:1c:63:09:70:89:fa:19:81: 11:a2:b2:a5:08:ad:8a:85:8e:7e:37:85:d5:02:12:ba:b3:05: 1c:b5:4a:a6:a0:b3:0f:26:a2:eb:d1:34:15:63:94:e6:5d:42: 94:4a:48:81:e5:b5:a3:e6:6c:f2:d5:51:8d:e8:75:1f:f3:7a: d5:11:32:c4:7a:b6:df:f3:60:43:b2:20:3c:ce:7f:5b:b5:e7: b3:16:c9:cf:47:9f:57:a2:c8:69:cf:88:c9:67:1d:9b:7c:ec: 7c:c0:64:28:de:2a:30:46:7f:d1:ba:d5:bc:ac:c5:56:95:a0: 42:90:97:7a:46:13:e6:e3:94:f2:9d:a7:a2:01:1b:a0:6c:9d: 93:b9:43:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn+D/pGd1E6815hJPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY1MjE3NTktYjg4MC00YTdkLWJlOGItM2NlNzBlNGFi YTgzMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NDM4ZTY2M2YtOGFjMC00Yjc2LWI1ZWUtNDhjZGVmMGM2ODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8dpm2DBcdvkE0W414lOv7a9gJ4BzCOeFy3n wHKBsMWYMbhqApH6B8+rFdN2fCf4Py0x16NtyaFrK7By7wwTDaqeAKOa+GBP8yw3 XdnWklBSbJh+FqW9sdDSfL9WTKtr2Sk4UHXMR8VDwHR0Pc0oRt+i6NzZoTq9kWjz PWb3ynwsYczfH/yhsmKLOJdaBua504YMTrrtmAVRZP0wEPVVwoHq+ROplOtthxqw n0wGoilzXztv5cqZtjGX76PHSjEJHIQRr2oR9Q13C5j55UtUgkb+N64r42ZOhN0R Nrs798M709bio0ShaZ9VOjr8TcXx2g5dOu7MZaN8OqHZKPVL+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGXzHpCLLW40DUVcRjpLuCK5uopuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUy MTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3MGU0YWJhODMvZDk5NmI3ZmUtNjYzMy0z NjQwLWFiOTgtMTgxNzk1YmVkNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGY1MjE3NTktYjg4MC00YTdkLWJl OGItM2NlNzBlNGFiYTgzLzBmNTIxNzU5LWI4ODAtNGE3ZC1iZThiLTNjZTcwZTRh YmE4My5jcmwwHwYDVR0jBBgwFoAUB8KLUXEBd4+x1cBmbyFq1ySw5VQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUyMTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3 MGU0YWJhODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAeeAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHVRZXnCICFy5BZ31uQK9PlOAlJ9FM7AMbkcB4wMnPmX8wEV1Mk IR1hKT2OeSfTo9F26hVR6nyR0Ivwg+0gC5EKIZ2BAeqsrzQdv44hZf2Kzjl+QD5R O9JXbrqxUHXQsOcCSHDq5cgF63W4N3chJN07GGvOQEEcYwlwifoZgRGisqUIrYqF jn43hdUCErqzBRy1Sqagsw8mouvRNBVjlOZdQpRKSIHltaPmbPLVUY3odR/zetUR MsR6tt/zYEOyIDzOf1u157MWyc9Hn1eiyGnPiMlnHZt87HzAZCjeKjBGf9G61bys xVaVoEKQl3pGE+bjlPKdp6IBG6BsnZO5QyM= -----END CERTIFICATE-----Generated at Wed Jun 18 04:43:28 2025 by rpki-client