$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/fef891a5-b993-3e38-8e28-d12d12385a6a.roa File: fef891a5-b993-3e38-8e28-d12d12385a6a.roa (raw, json) Hash identifier: BXJfR93z0GuaDgDfh1UqF8o0EPeE+UAcK0TP/1cE+gk= Subject key identifier: E6:A0:AC:C2:78:95:B5:96:20:80:D1:09:0C:C1:6A:23:06:8B:B8:6D Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A1465637276115098A1E4FE00 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/fef891a5-b993-3e38-8e28-d12d12385a6a.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 2606:7bc0:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:63:72:76:11:50:98:a1:e4:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=97ae5fe0-1fdf-45d1-ae72-45d0c4089d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:26:83:10:a6:00:fe:06:db:1e:e1:1e:c6: bc:73:f5:8d:d9:70:f1:8e:fb:60:3c:ec:a3:e8:6d: f3:72:a2:eb:1f:be:06:06:46:65:cc:6e:26:6c:25: ed:f1:96:b4:36:c3:1d:4c:71:70:23:89:37:04:9d: db:2b:5e:a8:a2:98:4e:1c:36:49:f0:96:7b:7d:19: ae:bc:26:d4:43:49:10:51:f1:33:e9:6a:24:ad:51: c3:f8:f1:93:3a:5f:13:5f:05:c0:4a:15:e7:10:30: d7:d4:2c:af:ae:1a:fe:84:b8:9a:da:a9:57:12:d3: da:64:33:13:2d:3b:1d:e4:d8:2d:c5:31:dd:fb:25: 96:61:3e:5b:23:21:f3:4f:55:ce:4d:f1:15:a3:65: 0b:fa:fe:59:6f:52:5e:44:18:46:00:3c:7d:a2:e2: 20:69:cb:32:6f:d0:96:82:8b:29:a8:15:ad:f2:7c: ba:05:e6:cf:6d:d5:07:81:95:1e:0c:1d:5c:82:ab: 5a:b8:73:ca:e1:6e:2f:28:71:b7:ca:d0:d1:a9:75: ec:74:03:32:a5:80:21:e5:44:f1:88:94:b2:55:1a: dc:e5:61:d2:e9:0a:ff:1c:1c:31:9d:50:99:43:4e: 3b:42:3e:76:0e:f2:46:4e:9c:95:79:22:46:6d:3b: 7b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A0:AC:C2:78:95:B5:96:20:80:D1:09:0C:C1:6A:23:06:8B:B8:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/fef891a5-b993-3e38-8e28-d12d12385a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1080::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:01:a8:34:d6:3d:bc:b9:9d:6d:ab:40:dc:87:ba:ed:18:77: 9b:46:28:55:92:4e:38:f7:d7:cd:d4:61:29:2c:52:24:f3:fc: 6a:32:79:82:93:85:0e:84:36:0c:0a:32:f4:c2:9e:d6:4b:63: fb:0b:70:aa:37:21:c9:4b:1b:65:3b:37:0d:19:95:89:2b:5c: 46:21:a7:f5:04:38:28:92:2b:40:6b:fb:74:0a:5b:d1:1d:20: b7:90:51:ec:dc:a1:a9:29:27:67:80:01:59:72:0f:54:15:c5: 76:94:d0:92:85:7c:30:f8:ba:49:e0:90:73:06:e6:18:2e:bd: 03:1d:1c:74:01:99:92:1f:86:cb:01:96:a0:2c:9d:4b:2a:6a: 4f:65:11:60:9c:69:10:24:08:25:91:9d:55:8a:88:2b:dd:01: 16:91:6a:b4:6c:32:44:dd:99:81:30:b4:da:57:80:43:54:5e: 11:9d:ac:af:0d:c2:3c:a1:8a:43:05:57:e6:d7:35:8e:0b:7f: 92:26:b5:d3:f8:ec:80:03:e4:29:6f:21:7a:c8:6b:c6:1e:09: 8a:48:79:96:7d:86:4e:d7:2e:a5:12:ef:40:c4:65:47:2d:49: 29:4e:c3:22:93:4e:5a:6a:da:a1:82:75:0d:ed:d6:b9:01:c0: 58:ce:76:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZWNydhFQmKHk/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk OTdhZTVmZTAtMWZkZi00NWQxLWFlNzItNDVkMGM0MDg5ZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+QmgxCmAP4G2x7hHsa8c/WN2XDxjvtgPOyj 6G3zcqLrH74GBkZlzG4mbCXt8Za0NsMdTHFwI4k3BJ3bK16oophOHDZJ8JZ7fRmu vCbUQ0kQUfEz6WokrVHD+PGTOl8TXwXAShXnEDDX1Cyvrhr+hLia2qlXEtPaZDMT LTsd5NgtxTHd+yWWYT5bIyHzT1XOTfEVo2UL+v5Zb1JeRBhGADx9ouIgacsyb9CW gospqBWt8ny6BebPbdUHgZUeDB1cgqtauHPK4W4vKHG3ytDRqXXsdAMypYAh5UTx iJSyVRrc5WHS6Qr/HBwxnVCZQ047Qj52DvJGTpyVeSJGbTt7xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOagrMJ4lbWWIIDRCQzBaiMGi7htMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZmVmODkxYTUtYjk5My0z ZTM4LThlMjgtZDEyZDEyMzg1YTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEoBqDTWPby5nW2rQNyHuu0Yd5tGKFWSTjj3183UYSksUiTz/Goy eYKThQ6ENgwKMvTCntZLY/sLcKo3IclLG2U7Nw0ZlYkrXEYhp/UEOCiSK0Br+3QK W9EdILeQUezcoakpJ2eAAVlyD1QVxXaU0JKFfDD4ukngkHMG5hguvQMdHHQBmZIf hssBlqAsnUsqak9lEWCcaRAkCCWRnVWKiCvdARaRarRsMkTdmYEwtNpXgENUXhGd rK8NwjyhikMFV+bXNY4Lf5ImtdP47IAD5ClvIXrIa8YeCYpIeZZ9hk7XLqUS70DE ZUctSSlOwyKTTlpq2qGCdQ3t1rkBwFjOdiE= -----END CERTIFICATE-----Generated at Sat Jun 14 06:31:33 2025 by rpki-client