$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa File: 3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa (raw, json) Hash identifier: Tfhr4cwPnQqEzREBP503lwXdYdG5TLWBjlzV+m4aSUA= Subject key identifier: 53:94:74:7B:DD:C0:CB:7B:70:04:4E:D3:A8:CA:94:19:15:E7:67:C4 Certificate issuer: /CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8 Certificate serial: 010D0C9F4328584A23C00C3D41AC6F2E10C61640 Authority key identifier: 0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 63178 IP address blocks: 2607:6840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:0c:3d:41:ac:6f:2e:10:c6:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=c85279bf-4757-4bf4-85f0-35cc8fe5701e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:76:24:a0:aa:a7:0c:e7:b3:49:25:56:d0: 94:3e:48:84:0c:0a:09:4c:60:3a:fb:74:39:62:95: bf:61:cd:5b:c8:df:fb:7b:8e:ad:91:3f:69:1f:f7: 20:a5:b2:53:04:24:7a:23:2d:96:67:c8:05:09:c9: b4:36:17:12:ed:58:7d:c3:2d:4e:aa:97:77:02:30: 82:54:93:7d:bd:ff:f9:5d:2b:41:e0:37:f2:1f:e7: 7d:c4:53:f2:8d:64:28:a7:69:c8:75:40:cd:91:5c: 7a:19:d2:62:f9:0a:a0:75:44:c3:c1:e6:07:6a:74: 20:12:5a:02:e3:15:bb:c5:5f:e4:33:f5:33:4e:8f: 58:b1:50:a7:ed:cd:81:ef:7e:7c:23:d5:d6:7b:43: 91:51:30:2b:07:b0:8f:52:a1:40:67:0d:d3:a9:a2: 41:b9:8d:fc:2e:9e:a6:06:da:f7:2c:6f:13:9f:3b: 40:66:ad:dc:b6:20:27:97:53:04:33:52:99:72:cd: 6a:4a:0f:9e:7c:0a:22:f0:8e:e5:db:ba:55:38:f0: 78:49:e1:aa:96:98:ce:37:94:0a:02:51:f9:2c:54: fa:56:ab:c1:0b:87:fc:92:50:ab:09:e0:ac:a3:8b: 74:13:b9:4d:af:84:a3:68:b0:39:58:fb:be:62:6b: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:94:74:7B:DD:C0:CB:7B:70:04:4E:D3:A8:CA:94:19:15:E7:67:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.crl X509v3 Authority Key Identifier: keyid:0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer sbgp-ipAddrBlock: critical IPv6: 2607:6840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:0d:69:15:9b:23:9d:6f:0a:42:dc:68:22:0c:e9:6e:9e:89: 87:31:d3:9b:48:5f:27:ed:eb:b7:71:0f:63:fa:29:7c:df:b7: 89:45:4e:53:07:4d:de:a9:64:f3:78:71:40:de:da:f3:d7:5a: 84:bb:fa:3c:c1:6c:22:c0:57:29:85:52:5c:9c:2d:f0:8f:5a: b5:63:a7:4f:e9:53:d5:95:e4:0e:79:4c:0f:4c:64:3c:c1:39: 31:1c:91:15:c2:e2:43:c3:4f:98:84:d3:25:11:af:2a:0a:f7: 1c:3d:15:e8:1c:28:eb:a2:c1:36:bc:37:46:3d:a7:72:f6:09: aa:de:76:84:44:6a:93:8d:45:59:b9:54:4f:46:98:ca:09:e6: e2:07:bb:f9:31:23:4f:d8:a9:6a:d0:36:82:09:8d:f2:36:8a: 33:89:a3:0a:fb:a8:4d:d5:a0:3b:1a:26:ca:c9:9d:27:a9:27: 5d:09:2a:0d:bf:ed:67:51:d4:2a:3e:6b:c1:f1:eb:7c:0a:16: 4d:16:91:da:c6:d9:6b:64:b7:7d:3f:3a:50:f3:10:cf:7d:02: a7:ed:6d:d6:37:9a:6b:00:b6:d9:1b:b4:5c:d9:e2:10:de:5b: 4e:c2:d9:af:91:f7:70:b1:92:0a:71:7a:af:ea:3d:32:52:8a: e5:c9:1f:52 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEojwAw9QaxvLhDGFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzZTY2NDYtN2M5OS00OWMwLTljYjAtNTRiOGU0NTc4 OGI4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk Yzg1Mjc5YmYtNDc1Ny00YmY0LTg1ZjAtMzVjYzhmZTU3MDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa12JKCqpwzns0klVtCUPkiEDAoJTGA6+3Q5 YpW/Yc1byN/7e46tkT9pH/cgpbJTBCR6Iy2WZ8gFCcm0NhcS7Vh9wy1Oqpd3AjCC VJN9vf/5XStB4DfyH+d9xFPyjWQop2nIdUDNkVx6GdJi+QqgdUTDweYHanQgEloC 4xW7xV/kM/UzTo9YsVCn7c2B7358I9XWe0ORUTArB7CPUqFAZw3TqaJBuY38Lp6m Btr3LG8TnztAZq3ctiAnl1MEM1KZcs1qSg+efAoi8I7l27pVOPB4SeGqlpjON5QK AlH5LFT6VqvBC4f8klCrCeCso4t0E7lNr4SjaLA5WPu+YmtAKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFOUdHvdwMt7cARO06jKlBkV52fEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZTNl NjY0Ni03Yzk5LTQ5YzAtOWNiMC01NGI4ZTQ1Nzg4YjgvM2IzYWY3ZTItMTFjMy0z ZTEzLTkyY2QtMTljMmQyOTFiNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmUzZTY2NDYtN2M5OS00OWMwLTlj YjAtNTRiOGU0NTc4OGI4LzJlM2U2NjQ2LTdjOTktNDljMC05Y2IwLTU0YjhlNDU3 ODhiOC5jcmwwHwYDVR0jBBgwFoAUDMaPYFMxrylXqe3x1gkGXUdmhO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZTNlNjY0Ni03Yzk5LTQ5YzAtOWNiMC01NGI4 ZTQ1Nzg4YjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdoQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCaDWkVmyOdbwpC3GgiDOlunomHMdObSF8n7eu3cQ9j+il837eJRU5T B03eqWTzeHFA3trz11qEu/o8wWwiwFcphVJcnC3wj1q1Y6dP6VPVleQOeUwPTGQ8 wTkxHJEVwuJDw0+YhNMlEa8qCvccPRXoHCjrosE2vDdGPady9gmq3naERGqTjUVZ uVRPRpjKCebiB7v5MSNP2Klq0DaCCY3yNooziaMK+6hN1aA7GibKyZ0nqSddCSoN v+1nUdQqPmvB8et8ChZNFpHaxtlrZLd9PzpQ8xDPfQKn7W3WN5prALbZG7Rc2eIQ 3ltOwtmvkfdwsZIKcXqv6j0yUorlyR9S -----END CERTIFICATE-----Generated at Sun Jun 15 14:15:11 2025 by rpki-client