$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa File: 600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa (raw, json) Hash identifier: agXr7zQbBk0GaDWrzF6crY8GWHKumUzBmsNE5ByxY/U= Subject key identifier: FC:32:2A:66:FE:99:64:C3:18:6A:07:25:D3:08:16:B4:52:4E:AD:88 Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F4328584A857601FF00B07A378C2028C0 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 26258 IP address blocks: 2620:123:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:01:ff:00:b0:7a:37:8c:20:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=628bff9b-4dd0-42ae-8782-2b36e4170c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4b:a2:26:2f:4b:ba:3e:19:01:e3:8f:47:e7: 6f:d3:76:83:54:46:74:09:e7:99:32:9d:b1:90:29: 84:e7:16:75:b4:7c:e9:47:b2:0f:1b:26:2c:de:ee: 23:d0:c0:c1:e2:94:1f:d1:1a:bb:37:a0:b7:d2:02: 3d:62:9d:73:2f:aa:a4:fd:8e:af:d3:e8:f8:1c:11: 83:3c:b4:99:b1:f8:ba:36:f3:ce:f0:6a:66:42:c1: 0b:1c:66:1a:54:63:21:3b:5a:04:e9:c5:3d:78:38: 0e:41:d5:41:98:bb:88:11:67:2a:17:09:ee:ea:c1: 26:75:e7:61:ca:32:87:19:b7:71:52:11:17:24:58: 37:11:40:04:4f:17:d3:e6:8e:66:ca:0b:e7:bb:a5: e8:12:62:b1:10:ed:4b:50:fc:45:1b:76:1c:92:00: b6:a8:7e:9c:17:e6:91:5f:a1:16:06:cd:c3:72:bf: cc:3e:36:a6:00:b6:86:f0:d5:c0:ce:9c:74:d7:0e: 1c:ce:57:4b:0a:32:a4:f7:2e:89:b1:12:42:63:a7: af:6d:bb:4c:c9:24:fd:8d:a4:60:fc:f6:6e:4c:c8: 2b:70:98:38:fe:d6:39:e6:d0:ae:e8:12:15:3d:a1: 55:dd:ca:b4:81:f7:bb:76:9a:87:bf:5a:05:11:3f: d5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:32:2A:66:FE:99:64:C3:18:6A:07:25:D3:08:16:B4:52:4E:AD:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:c000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1e:34:f3:06:b3:da:56:e8:ec:e5:9f:af:91:0c:a8:f3:0b: 9d:88:21:d2:40:f5:8d:f8:82:4b:b4:50:53:80:8e:85:b4:27: 28:99:23:30:b2:35:08:ec:91:dc:5c:64:d4:a2:39:14:29:c1: 0d:01:89:81:7e:ca:8c:f7:85:2a:1e:bb:ca:cd:10:10:ed:ac: 2b:b3:61:a5:22:b9:b0:48:81:ac:b6:8f:36:08:ad:53:42:14: e9:8a:64:6e:78:92:d7:64:94:d1:82:44:d3:a5:89:0d:ba:db: 9a:c7:51:7a:c3:c4:78:77:bb:d3:b0:cd:71:38:83:0d:41:12: ed:1a:0a:a5:23:3e:ed:c7:a9:92:fe:92:34:d8:2a:07:80:c3: c8:16:e5:65:fe:dc:a9:69:8f:61:9e:e4:b0:a8:90:4a:5c:55: 2d:f2:13:c0:5a:c1:8f:32:47:0d:2b:53:32:31:07:82:da:c6: 2b:86:74:31:a8:66:ca:85:fa:e2:e4:53:b2:8d:08:09:72:72: 12:bf:19:d1:ce:28:d9:bc:7a:39:da:39:5c:dd:1e:c9:47:18: 45:18:5b:dc:2f:9f:e3:89:b5:58:5a:d2:7d:c9:bc:74:79:d8: fd:63:a8:8c:bf:ce:a7:48:c7:21:06:06:9c:b7:21:ec:38:4c: f9:32:aa:e6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqFdgH/ALB6N4wgKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk NjI4YmZmOWItNGRkMC00MmFlLTg3ODItMmIzNmU0MTcwYzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUuiJi9Luj4ZAeOPR+dv03aDVEZ0CeeZMp2x kCmE5xZ1tHzpR7IPGyYs3u4j0MDB4pQf0Rq7N6C30gI9Yp1zL6qk/Y6v0+j4HBGD PLSZsfi6NvPO8GpmQsELHGYaVGMhO1oE6cU9eDgOQdVBmLuIEWcqFwnu6sEmdedh yjKHGbdxUhEXJFg3EUAETxfT5o5mygvnu6XoEmKxEO1LUPxFG3YckgC2qH6cF+aR X6EWBs3Dcr/MPjamALaG8NXAzpx01w4czldLCjKk9y6JsRJCY6evbbtMyST9jaRg /PZuTMgrcJg4/tY55tCu6BIVPaFV3cq0gfe7dpqHv1oFET/VmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPwyKmb+mWTDGGoHJdMIFrRSTq2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvNjAwMTU4ZTMtM2E5ZC0z MzRjLWIzYjgtMmU0Yjk0OTViMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABI8Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlh408waz2lbo7OWfr5EMqPMLnYgh0kD1jfiCS7RQU4COhbQnKJkj MLI1COyR3Fxk1KI5FCnBDQGJgX7KjPeFKh67ys0QEO2sK7NhpSK5sEiBrLaPNgit U0IU6YpkbniS12SU0YJE06WJDbrbmsdResPEeHe707DNcTiDDUES7RoKpSM+7cep kv6SNNgqB4DDyBblZf7cqWmPYZ7ksKiQSlxVLfITwFrBjzJHDStTMjEHgtrGK4Z0 MahmyoX64uRTso0ICXJyEr8Z0c4o2bx6Odo5XN0eyUcYRRhb3C+f44m1WFrSfcm8 dHnY/WOojL/Op0jHIQYGnLch7DhM+TKq5g== -----END CERTIFICATE-----Generated at Thu Aug 7 04:02:28 2025 by rpki-client