$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/cf28d96d-39da-39e5-aade-7826c420cf3f.roa File: cf28d96d-39da-39e5-aade-7826c420cf3f.roa (raw, json) Hash identifier: K0iFOVX5i2bb/dc4n0PPxI1FT+znpU0eKlE3ShS5Flw= Subject key identifier: 14:C2:FB:60:1E:E5:D0:86:A9:4A:DF:D9:CE:B9:40:0E:41:E4:BA:AD Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F43285849FE1F1E5D1B077914E8338620 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/cf28d96d-39da-39e5-aade-7826c420cf3f.roa Signing time: Tue 27 May 2025 13:31:51 +0000 ROA not before: Tue 27 May 2025 13:31:51 +0000 ROA not after: Mon 25 Aug 2025 13:31:51 +0000 asID: 6363 IP address blocks: 2606:9fc0:d000::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:1f:1e:5d:1b:07:79:14:e8:33:86:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: May 27 13:31:51 2025 GMT Not After : Aug 25 13:31:51 2025 GMT Subject: CN=3ca70efb-6a15-47a0-9c0d-b1fccb8c57f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:08:09:ac:fa:3e:84:0d:e3:12:72:53:4e:be: 5b:c0:60:9a:dc:de:6e:f6:df:12:d7:92:87:b9:e6: fb:fd:6c:44:75:08:50:b4:73:31:43:2f:31:50:ee: 59:aa:97:c0:b6:31:b7:18:d3:41:61:95:45:8d:87: 5f:f0:a1:95:be:3f:4a:bf:34:c0:bc:ea:35:88:97: 25:29:a8:81:d3:bd:19:00:a5:70:ff:7c:5a:a1:02: 91:80:d8:e0:79:a6:50:da:8a:39:28:68:f7:3a:5f: 50:d9:8c:f1:f4:73:27:8a:79:53:f1:a4:f1:c3:31: 01:9f:07:9e:18:9a:52:3d:20:50:1b:cc:2b:6e:5e: a9:5d:8f:6c:8b:31:49:0c:6f:1d:d5:f3:34:86:c1: 3f:18:c9:cb:3c:48:e5:f9:f9:3b:ec:9f:ae:7a:59: ec:7a:e7:47:3e:99:3d:c8:7b:05:b6:67:3d:d9:91: 51:2a:65:5c:1c:be:a2:02:ab:b7:56:dc:6d:dd:35: fe:fd:95:eb:67:5f:35:24:5f:f1:03:7b:85:88:38: 80:45:9a:dd:02:bc:17:88:7c:52:b6:40:70:c3:f7: 0e:85:8a:f6:fe:e4:5f:95:f1:12:c5:e0:35:7b:93: 89:d4:e1:60:18:75:ab:0f:7f:37:68:5a:bb:d7:08: bc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C2:FB:60:1E:E5:D0:86:A9:4A:DF:D9:CE:B9:40:0E:41:E4:BA:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/cf28d96d-39da-39e5-aade-7826c420cf3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:d000::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f1:5c:3e:a3:1a:6f:3c:2f:81:4b:ba:bf:e2:76:43:25:63: 95:3a:46:12:8a:0a:62:e0:4c:c3:f0:1a:36:b6:33:f0:aa:83: 5f:2b:c7:4d:a0:b8:36:0c:e1:6a:bc:30:b5:5b:a3:86:34:b0: 16:08:7d:30:a0:e0:13:92:45:47:f3:29:f7:02:41:b3:66:5f: e4:40:07:3b:af:37:e9:a2:9b:3b:97:16:0e:e8:38:13:fa:5c: 63:45:21:fd:a5:53:10:df:06:fe:04:64:e9:ea:c0:7e:2f:1c: 36:e0:b5:46:9c:84:4a:e6:f6:39:75:16:c5:3e:1f:b4:83:37: 49:44:f3:be:be:af:5b:2a:ef:d0:76:ed:84:1f:64:2a:53:34: d9:92:db:35:fd:48:6f:e3:e7:59:e0:3c:36:37:23:05:c3:d8: 6c:3d:ec:c1:eb:0f:a9:41:60:75:fe:62:74:b8:ee:c3:7c:5b: 7e:77:6c:d6:9c:10:2e:c7:da:56:9f:40:73:f1:0d:73:b6:34: c3:2f:7c:1c:5f:ab:ca:c1:12:70:aa:98:c8:a8:0a:35:33:32: 23:98:b2:ad:29:22:a9:22:1d:f2:55:14:2b:b9:1d:29:06:e8: e0:fd:b0:b1:83:7a:a8:8d:a8:1c:78:72:9e:39:bb:9a:17:a1: d9:ba:6b:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn+Hx5dGwd5FOgzhiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI1MDUyNzEzMzE1MVoXDTI1MDgyNTEzMzE1MVowLzEtMCsGA1UEAxMk M2NhNzBlZmItNmExNS00N2EwLTljMGQtYjFmY2NiOGM1N2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQgJrPo+hA3jEnJTTr5bwGCa3N5u9t8S15KH ueb7/WxEdQhQtHMxQy8xUO5ZqpfAtjG3GNNBYZVFjYdf8KGVvj9KvzTAvOo1iJcl KaiB070ZAKVw/3xaoQKRgNjgeaZQ2oo5KGj3Ol9Q2Yzx9HMninlT8aTxwzEBnwee GJpSPSBQG8wrbl6pXY9sizFJDG8d1fM0hsE/GMnLPEjl+fk77J+uelnseudHPpk9 yHsFtmc92ZFRKmVcHL6iAqu3Vtxt3TX+/ZXrZ181JF/xA3uFiDiARZrdArwXiHxS tkBww/cOhYr2/uRflfESxeA1e5OJ1OFgGHWrD383aFq71wi8lQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBTC+2Ae5dCGqUrf2c65QA5B5LqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvY2YyOGQ5NmQtMzlkYS0z OWU1LWFhZGUtNzgyNmM0MjBjZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwNAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFzxXD6jGm88L4FLur/idkMlY5U6RhKKCmLgTMPwGja2M/Cqg18r x02guDYM4Wq8MLVbo4Y0sBYIfTCg4BOSRUfzKfcCQbNmX+RABzuvN+mimzuXFg7o OBP6XGNFIf2lUxDfBv4EZOnqwH4vHDbgtUachErm9jl1FsU+H7SDN0lE876+r1sq 79B27YQfZCpTNNmS2zX9SG/j51ngPDY3IwXD2Gw97MHrD6lBYHX+YnS47sN8W353 bNacEC7H2lafQHPxDXO2NMMvfBxfq8rBEnCqmMioCjUzMiOYsq0pIqkiHfJVFCu5 HSkG6OD9sLGDeqiNqBx4cp45u5oXodm6azw= -----END CERTIFICATE-----Generated at Mon Jun 16 11:54:09 2025 by rpki-client