$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff5f4971-868f-3436-b104-9d9a543d1661.roa File: ff5f4971-868f-3436-b104-9d9a543d1661.roa (raw, json) Hash identifier: Wl0B39sI+h4stcPRhp10jOqo9HXq0zs7V68L5XSkHYk= Subject key identifier: 71:35:5F:04:45:3F:E1:35:38:CB:D5:31:B3:31:52:71:95:E8:FB:2C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A1F90344737A7F1ACDE3CBFC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff5f4971-868f-3436-b104-9d9a543d1661.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 54113 IP address blocks: 2607:8940:44a0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:34:47:37:a7:f1:ac:de:3c:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=80a18454-829f-40de-8ad2-b9b8071dc5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:38:95:6c:29:fc:7c:38:eb:58:10:93:66:c8: 32:c8:96:4c:03:70:6c:fb:f5:4c:38:24:da:9d:8c: 98:8a:57:bf:ce:11:35:97:ed:18:e4:d5:b5:4c:bb: 6a:58:76:3c:d5:2a:18:88:5b:e5:80:79:06:7b:5b: c0:c4:28:25:db:f6:30:f5:e1:e0:45:6f:d8:bf:33: 78:55:b6:aa:ac:ec:d7:dc:2d:94:60:1e:f9:c3:4b: eb:16:6b:78:0e:16:77:20:4f:77:4d:11:79:5e:50: a3:79:23:9e:09:a7:84:a0:61:ee:2a:b8:3e:ad:03: c3:fb:7b:68:6c:5b:d9:5c:e6:fa:3f:c0:0e:fc:e5: d5:d5:ba:11:7a:62:76:19:92:89:b1:a6:78:8e:33: 05:9e:ba:c7:12:1b:bf:17:69:53:e5:de:40:fb:5b: 4f:94:a0:dd:c4:9f:81:6a:0f:02:d9:07:73:67:f3: c9:59:f2:97:43:b6:95:2d:62:d8:00:65:d4:a7:06: fd:c2:52:2a:00:1c:67:f7:8d:fe:4e:c9:90:49:03: 9d:50:27:b6:22:33:4b:51:2c:a6:91:ee:60:5e:9c: 19:6c:ec:c7:c8:64:46:aa:ee:99:93:64:dd:fd:5d: 7c:bc:2f:76:f5:28:c9:48:c5:ab:aa:e4:0a:56:aa: 7e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:35:5F:04:45:3F:E1:35:38:CB:D5:31:B3:31:52:71:95:E8:FB:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff5f4971-868f-3436-b104-9d9a543d1661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:44a0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:28:a9:7d:de:78:0f:c0:36:b3:03:37:be:8b:3e:a6:5c:2d: 41:d2:77:5b:0a:02:77:62:d6:63:b5:33:43:67:ff:43:9b:51: a0:58:ff:83:74:97:1f:a4:b5:f5:7a:d8:80:3a:4d:9f:f1:24: 1c:81:27:a0:34:8b:0f:15:76:b8:9e:4f:6e:cd:32:63:b6:30: fb:68:da:e7:02:07:b9:47:94:dd:04:39:0a:d9:51:1b:14:36: 83:94:bc:92:ac:f6:99:9b:a1:be:ee:6a:fa:50:b4:b4:c9:34: 83:38:f0:3d:a9:5d:40:d9:e9:b8:cf:ae:c0:48:b2:e3:dd:02: 26:b5:22:dc:72:79:75:b0:b0:f4:c0:7a:9a:9a:d5:3c:f3:49: 8f:c9:35:50:cc:f7:47:62:14:94:e3:9c:88:c3:4b:e5:59:cb: ee:07:79:45:5e:e9:b4:7f:d2:bf:ad:92:15:54:0c:f2:af:0a: f6:76:46:f5:0f:6d:1d:46:cc:3d:c3:cd:36:64:c2:85:76:33: e9:ee:9a:d5:f1:01:55:6e:35:da:78:3d:56:2f:af:f1:16:35: 2b:61:94:7b:e9:77:4a:7b:85:41:8f:e0:51:64:9a:da:a4:d4: a9:de:c5:f6:f5:6c:7a:f9:be:75:5c:42:36:ce:e4:2c:30:29: e2:1a:d3:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEofkDRHN6fxrN48v8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk ODBhMTg0NTQtODI5Zi00MGRlLThhZDItYjliODA3MWRjNWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTiVbCn8fDjrWBCTZsgyyJZMA3Bs+/VMOCTa nYyYile/zhE1l+0Y5NW1TLtqWHY81SoYiFvlgHkGe1vAxCgl2/Yw9eHgRW/YvzN4 VbaqrOzX3C2UYB75w0vrFmt4DhZ3IE93TRF5XlCjeSOeCaeEoGHuKrg+rQPD+3to bFvZXOb6P8AO/OXV1boRemJ2GZKJsaZ4jjMFnrrHEhu/F2lT5d5A+1tPlKDdxJ+B ag8C2QdzZ/PJWfKXQ7aVLWLYAGXUpwb9wlIqABxn943+TsmQSQOdUCe2IjNLUSym ke5gXpwZbOzHyGRGqu6Zk2Td/V18vC929SjJSMWrquQKVqp+FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHE1XwRFP+E1OMvVMbMxUnGV6PssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmY1ZjQ5NzEtODY4Zi0z NDM2LWIxMDQtOWQ5YTU0M2QxNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQESg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQoqX3eeA/ANrMDN76LPqZcLUHSd1sKAndi1mO1M0Nn/0ObUaBY /4N0lx+ktfV62IA6TZ/xJByBJ6A0iw8VdrieT27NMmO2MPto2ucCB7lHlN0EOQrZ URsUNoOUvJKs9pmbob7uavpQtLTJNIM48D2pXUDZ6bjPrsBIsuPdAia1ItxyeXWw sPTAepqa1TzzSY/JNVDM90diFJTjnIjDS+VZy+4HeUVe6bR/0r+tkhVUDPKvCvZ2 RvUPbR1GzD3DzTZkwoV2M+numtXxAVVuNdp4PVYvr/EWNSthlHvpd0p7hUGP4FFk mtqk1Knexfb1bHr5vnVcQjbO5CwwKeIa00M= -----END CERTIFICATE-----Generated at Mon Jun 16 13:33:45 2025 by rpki-client