$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e2d9b155-cb69-3fb9-889e-efdaa475f920.roa File: e2d9b155-cb69-3fb9-889e-efdaa475f920.roa (raw, json) Hash identifier: 1p0yRxJcu4W+YV2M+4s1gvxGK9N4WSH6rSTBmC6zcxE= Subject key identifier: F0:33:BC:0A:78:98:E8:35:AF:01:4F:EC:89:98:75:1D:69:44:92:72 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A1F904387F5B8B81D6129FC88 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e2d9b155-cb69-3fb9-889e-efdaa475f920.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 54113 IP address blocks: 2607:8940:48c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:43:87:f5:b8:b8:1d:61:29:fc:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=57970002-daaa-4640-bb42-f324edac8a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:38:1c:f1:b3:3a:fb:b3:37:94:76:c1:b9:49: 20:41:43:ca:83:2d:fc:93:3a:4d:be:11:d7:d3:59: cc:df:2e:95:32:d0:59:36:7f:73:39:bc:8e:8c:e5: fc:43:b3:e7:04:1c:dd:93:31:0b:0f:8e:c8:c5:db: 23:64:ec:19:fe:34:b4:94:55:3c:48:bb:88:79:09: 02:82:9f:98:57:02:2a:72:16:81:88:da:1a:a4:95: 72:84:15:21:42:6f:ac:af:af:2c:10:4c:f3:c6:50: a7:19:6f:5c:bb:2c:2a:33:c6:e6:8c:17:67:99:f0: da:49:d3:6b:cd:a1:5a:8b:94:74:da:5b:ba:31:23: e4:b9:03:9b:82:0a:78:ca:00:07:48:9c:cd:57:d7: 57:f5:92:4e:6f:1c:22:8f:ae:a6:9e:0f:97:d8:74: 67:04:e1:25:72:74:b4:62:37:da:90:8b:25:3a:a8: 20:81:40:6e:ce:ed:71:6a:53:e6:3e:eb:1c:f5:cd: 13:a6:94:e5:e1:df:45:ed:3f:04:91:47:bc:93:9b: 69:95:af:1a:29:df:84:9b:15:94:85:d1:b6:cc:2a: fa:5d:cc:e6:49:b7:cc:39:33:21:d4:15:47:96:4d: 03:e2:43:9b:84:ea:f4:f3:e9:b9:6d:7b:f9:d6:c6: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:33:BC:0A:78:98:E8:35:AF:01:4F:EC:89:98:75:1D:69:44:92:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e2d9b155-cb69-3fb9-889e-efdaa475f920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:48c0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8f:76:3a:a1:bc:6e:87:24:dc:84:40:51:21:fd:5d:5f:09: 67:4c:cc:0e:8e:fe:d1:7f:22:c0:dc:19:d6:30:75:a7:c7:0a: 9d:39:56:29:a1:49:d2:6a:b3:a9:57:2e:c7:b6:ab:ac:9d:f3: 0f:b7:20:fb:ee:06:ac:26:af:84:02:1f:36:97:3c:34:7e:b8: b6:cc:36:9b:eb:89:fc:87:8e:09:00:b7:dc:43:02:62:fc:33: d2:ce:20:1a:1c:8c:09:4f:2d:b5:db:ba:8e:64:bd:75:e2:86: 07:65:b5:ee:83:fd:1b:0a:ce:03:9f:a0:3b:28:ac:72:39:40: 84:09:36:60:94:69:32:10:63:e4:1d:5e:d3:29:85:19:d8:3c: 92:9d:44:6e:0c:83:bc:87:45:ac:0e:aa:7d:33:d9:b1:93:3f: 10:59:e1:8f:d7:a2:13:db:e1:98:f8:84:d6:8c:5f:a8:3d:4f: 67:9b:32:66:14:02:31:e5:a5:ed:bc:ff:a1:33:a3:99:47:33: 2f:0c:92:7f:84:91:78:de:56:da:10:60:20:77:fe:c9:72:a0: 17:2e:56:e6:47:88:5b:11:eb:8b:01:12:11:49:78:92:dd:df: 48:68:17:5d:6e:75:eb:b6:1b:c0:4d:0e:f9:4c:41:cd:8c:d9: 70:b6:2a:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEofkEOH9bi4HWEp/IgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk NTc5NzAwMDItZGFhYS00NjQwLWJiNDItZjMyNGVkYWM4YTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jgc8bM6+7M3lHbBuUkgQUPKgy38kzpNvhHX 01nM3y6VMtBZNn9zObyOjOX8Q7PnBBzdkzELD47IxdsjZOwZ/jS0lFU8SLuIeQkC gp+YVwIqchaBiNoapJVyhBUhQm+sr68sEEzzxlCnGW9cuywqM8bmjBdnmfDaSdNr zaFai5R02lu6MSPkuQObggp4ygAHSJzNV9dX9ZJObxwij66mng+X2HRnBOElcnS0 YjfakIslOqgggUBuzu1xalPmPusc9c0TppTl4d9F7T8EkUe8k5tpla8aKd+EmxWU hdG2zCr6XczmSbfMOTMh1BVHlk0D4kObhOr08+m5bXv51sYzqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPAzvAp4mOg1rwFP7ImYdR1pRJJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTJkOWIxNTUtY2I2OS0z ZmI5LTg4OWUtZWZkYWE0NzVmOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEjA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADCPdjqhvG6HJNyEQFEh/V1fCWdMzA6O/tF/IsDcGdYwdafHCp05 VimhSdJqs6lXLse2q6yd8w+3IPvuBqwmr4QCHzaXPDR+uLbMNpvrifyHjgkAt9xD AmL8M9LOIBocjAlPLbXbuo5kvXXihgdlte6D/RsKzgOfoDsorHI5QIQJNmCUaTIQ Y+QdXtMphRnYPJKdRG4Mg7yHRawOqn0z2bGTPxBZ4Y/XohPb4Zj4hNaMX6g9T2eb MmYUAjHlpe28/6Ezo5lHMy8Mkn+EkXjeVtoQYCB3/slyoBcuVuZHiFsR64sBEhFJ eJLd30hoF11udeu2G8BNDvlMQc2M2XC2KiA= -----END CERTIFICATE-----Generated at Mon Jun 16 05:28:04 2025 by rpki-client