$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa File: 0a8bf32e-5cd1-3122-963a-91125458622e.roa (raw, json) Hash identifier: k8xud+Tt2u15LJOEbIcz6dXFx5BCQiNY+yRSxEouKg0= Subject key identifier: 01:2F:EC:BA:01:39:DB:82:AD:4B:1D:27:1A:0D:FC:6B:FF:36:50:75 Certificate issuer: /CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Certificate serial: 010D0C9F43285849F7151DFA480D38861156D900 Authority key identifier: 44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 394086 IP address blocks: 2607:d640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:1d:fa:48:0d:38:86:11:56:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=dab2d1e8-ee6d-430c-a961-dc24289baa5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6f:8f:93:12:53:b9:fe:fb:2f:3e:29:e9:26: 9b:b9:8d:ec:c1:61:8a:6b:c3:2f:1e:12:df:14:9d: 39:e1:7f:b9:d9:b0:04:51:b8:8a:da:2e:39:4d:99: e1:0e:b3:c0:c1:c7:5c:d7:c9:b6:38:a8:5e:04:47: ad:33:7f:dc:aa:bb:47:05:b4:d8:14:46:f0:bd:97: bd:6e:e7:de:fb:d2:a9:56:30:10:bc:0a:a7:c5:8a: bf:31:f4:d0:16:59:0b:3c:34:33:86:fb:92:db:28: 57:73:d6:2d:33:cc:cb:1e:ee:9b:82:09:f8:07:01: da:3e:dd:8c:c6:02:44:cc:f4:83:c9:93:42:65:1b: bb:70:13:52:6d:bb:a4:e1:cd:01:db:f1:e6:e1:a0: 3e:c4:0d:2a:e5:ff:2a:3f:08:4b:72:9f:99:e5:d3: 8d:2b:c9:0d:ff:0b:6e:cd:e0:b3:86:e3:dc:c8:00: 2c:ca:1f:c5:66:1c:60:8e:b8:64:e9:b8:72:c6:6b: ae:cb:ff:aa:a5:4a:33:5b:79:cb:27:26:f8:5b:1f: 1b:6f:8f:bb:6e:42:d0:52:d1:8f:9b:30:33:d6:17: fe:e5:13:81:c0:f5:d6:56:52:08:27:e7:9c:f8:1b: 46:a7:47:04:19:37:f8:13:40:c9:24:27:5d:37:b7: 4f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2F:EC:BA:01:39:DB:82:AD:4B:1D:27:1A:0D:FC:6B:FF:36:50:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl X509v3 Authority Key Identifier: keyid:44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer sbgp-ipAddrBlock: critical IPv6: 2607:d640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:24:bb:97:79:67:ab:4e:70:b2:ac:85:b1:53:2b:b7:9e:84: 87:7a:d6:1c:8f:17:60:28:e5:e0:ff:5a:bf:e0:59:7c:0e:5f: 0c:19:dd:72:c3:9c:6c:28:66:aa:84:16:52:c4:3a:4d:f7:b6: cd:a3:f6:97:49:f1:0a:b8:92:73:82:dd:cf:04:0e:6e:e9:15: 98:59:7e:e7:bf:69:d1:18:e0:3d:4f:1a:75:3a:32:e9:5b:5e: 0f:78:88:46:d1:38:c9:2d:db:d4:a4:52:02:25:3f:dd:60:96: be:a1:b4:06:a9:3d:90:0d:2e:f9:23:8e:b6:9b:dd:34:3a:42: c6:a5:1f:14:4f:c2:69:76:ef:fa:ff:91:78:6e:f5:2c:2e:49: a2:69:ad:0f:96:c5:5a:f0:91:3e:af:b7:58:85:fa:6f:06:8b: 88:3f:6b:2c:0e:f2:50:ff:59:7a:4f:91:90:92:91:5c:d7:b8: f7:48:37:35:11:33:b3:71:7d:a1:4f:c8:92:bf:8b:53:cf:7e: bf:07:4a:64:6a:1c:72:24:a6:79:9d:3c:ae:98:f9:81:2a:c6: de:0c:e9:f9:25:d4:4f:ae:28:83:56:11:c0:30:44:fb:4c:57: 41:93:88:be:09:60:09:fa:f7:37:a3:2b:ea:01:ed:a5:ee:d5: 9b:16:05:14 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn3FR36SA04hhFW2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RjNjZjNWUtMjNhYi00NGNkLTg3OGEtNGU3NmNiMGQ3 YjRmMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZGFiMmQxZTgtZWU2ZC00MzBjLWE5NjEtZGMyNDI4OWJhYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2+PkxJTuf77Lz4p6SabuY3swWGKa8MvHhLf FJ054X+52bAEUbiK2i45TZnhDrPAwcdc18m2OKheBEetM3/cqrtHBbTYFEbwvZe9 bufe+9KpVjAQvAqnxYq/MfTQFlkLPDQzhvuS2yhXc9YtM8zLHu6bggn4BwHaPt2M xgJEzPSDyZNCZRu7cBNSbbuk4c0B2/Hm4aA+xA0q5f8qPwhLcp+Z5dONK8kN/wtu zeCzhuPcyAAsyh/FZhxgjrhk6bhyxmuuy/+qpUozW3nLJyb4Wx8bb4+7bkLQUtGP mzAz1hf+5ROBwPXWVlIIJ+ec+BtGp0cEGTf4E0DJJCddN7dPFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAEv7LoBOduCrUsdJxoN/Gv/NlB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2 NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2Y2IwZDdiNGYvMGE4YmYzMmUtNWNkMS0z MTIyLTk2M2EtOTExMjU0NTg2MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2RjNjZjNWUtMjNhYi00NGNkLTg3 OGEtNGU3NmNiMGQ3YjRmLzNkYzY2YzVlLTIzYWItNDRjZC04NzhhLTRlNzZjYjBk N2I0Zi5jcmwwHwYDVR0jBBgwFoAURNgIvmWyPVTQLOpQVlAJu9jVfWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2 Y2IwZDdiNGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfWQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBNJLuXeWerTnCyrIWxUyu3noSHetYcjxdgKOXg/1q/4Fl8Dl8MGd1y w5xsKGaqhBZSxDpN97bNo/aXSfEKuJJzgt3PBA5u6RWYWX7nv2nRGOA9Txp1OjLp W14PeIhG0TjJLdvUpFICJT/dYJa+obQGqT2QDS75I462m900OkLGpR8UT8Jpdu/6 /5F4bvUsLkmiaa0PlsVa8JE+r7dYhfpvBouIP2ssDvJQ/1l6T5GQkpFc17j3SDc1 ETOzcX2hT8iSv4tTz36/B0pkahxyJKZ5nTyumPmBKsbeDOn5JdRPriiDVhHAMET7 TFdBk4i+CWAJ+vc3oyvqAe2l7tWbFgUU -----END CERTIFICATE-----Generated at Mon Jun 16 16:09:30 2025 by rpki-client