$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/5e9ca8eb-7d6e-3139-a953-42189e507e24.roa File: 5e9ca8eb-7d6e-3139-a953-42189e507e24.roa (raw, json) Hash identifier: tL79p5DQJm6NQFD0G+SJyPqgaQEVDy6atiOOkov4riQ= Subject key identifier: 97:8A:AB:64:5A:62:B2:78:BA:31:B1:35:18:24:75:52:41:F9:15:80 Certificate issuer: /CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf Certificate serial: 010D0C9F4328584A34870A28A13AB23272AD0800 Authority key identifier: 43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/5e9ca8eb-7d6e-3139-a953-42189e507e24.roa Signing time: Mon 16 Jun 2025 01:14:53 +0000 ROA not before: Mon 16 Jun 2025 01:14:53 +0000 ROA not after: Sun 14 Sep 2025 01:14:53 +0000 asID: 397493 IP address blocks: 2604:13a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:87:0a:28:a1:3a:b2:32:72:ad:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf Validity Not Before: Jun 16 01:14:53 2025 GMT Not After : Sep 14 01:14:53 2025 GMT Subject: CN=fbb4e488-7665-48db-b8c2-b36781e376b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6b:6e:d7:05:8d:9b:fd:99:22:a9:83:c3:20: b7:0f:65:de:4f:44:19:c4:5c:95:48:75:3e:a9:94: fb:91:ef:f6:c8:50:e7:e3:b2:e5:dc:72:16:d7:e6: 50:e8:e4:4b:85:aa:59:a1:0b:ae:ce:64:8c:ef:da: ea:3a:c8:85:65:8f:75:3d:0b:05:50:e4:48:ea:4b: 00:72:9c:1a:a0:cc:07:bf:c7:3e:55:75:7e:60:a3: 32:8c:ce:c6:0f:45:7b:de:05:8f:45:4f:9d:f0:cc: 7d:c5:85:c8:c0:d7:1f:1c:d4:37:05:ec:78:0a:ab: 9b:07:60:56:a7:9d:0b:a4:eb:2c:5e:7e:5e:b2:dc: 79:02:f3:5d:dc:99:2e:4b:a6:0c:11:94:7f:38:23: cb:cf:d6:4a:29:45:b8:08:29:cb:2f:bf:7d:28:45: 18:ee:83:79:90:89:99:db:a6:c1:93:36:d4:1d:65: ed:43:e7:c3:f8:97:e0:37:26:c3:ee:a4:ae:3c:fd: ec:f5:fe:b7:03:5d:ee:f6:ac:21:76:a6:fa:f8:ee: b1:23:f4:32:50:29:27:1a:ae:eb:31:d0:f9:d6:5e: 13:e3:da:0d:10:f4:43:00:2b:a2:48:39:20:df:4b: 4e:59:ae:a9:8d:f8:e9:a6:29:db:94:f0:b7:24:94: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8A:AB:64:5A:62:B2:78:BA:31:B1:35:18:24:75:52:41:F9:15:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/5e9ca8eb-7d6e-3139-a953-42189e507e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl X509v3 Authority Key Identifier: keyid:43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer sbgp-ipAddrBlock: critical IPv6: 2604:13a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e5:52:de:3a:6a:16:bd:ca:99:71:d1:0d:d4:42:0f:4b:ac: 71:32:92:82:66:2d:7a:20:66:40:28:e0:b4:05:22:79:97:0a: 4e:9e:3a:b6:90:22:99:2a:01:93:c6:a0:8e:47:0f:fd:33:25: 80:ac:74:95:60:e4:0f:30:0d:a5:95:b9:ac:0a:50:d8:51:bb: 49:7f:68:ab:df:84:e6:31:0d:a3:5a:b9:7d:b3:70:64:cc:7d: c7:f5:78:ca:53:93:4f:cf:de:13:b5:10:5d:1f:7e:27:16:61: 2c:77:bd:d8:c3:14:fb:5e:b4:0d:72:56:f5:01:94:69:c3:43: 3a:88:11:c1:14:47:75:cd:f2:7b:36:7d:38:07:b6:8e:8d:a6: 8f:d9:90:4c:c3:33:7c:ea:d7:cc:e3:dc:97:fc:7d:08:45:0d: a5:48:fc:d2:52:6d:2b:0c:a4:bd:4b:e2:a5:c2:46:45:a5:bc: 6d:68:59:11:96:6b:79:11:9e:89:1a:e1:91:ce:04:27:10:3b: 53:17:56:8d:b2:06:09:b9:32:ef:17:af:42:8b:55:23:f5:54: b1:99:80:3d:eb:78:88:f0:a8:32:35:8f:41:6f:34:37:5e:54: 65:d4:0e:aa:ba:8b:85:5a:47:0e:a4:73:e3:8d:e4:0d:a7:f4: 9a:3d:a3:ad -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEo0hwoooTqyMnKtCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyNjk1YjctZTgyMy00Zjc0LTkzYjgtOThkYmJmNzc1 YmNmMB4XDTI1MDYxNjAxMTQ1M1oXDTI1MDkxNDAxMTQ1M1owLzEtMCsGA1UEAxMk ZmJiNGU0ODgtNzY2NS00OGRiLWI4YzItYjM2NzgxZTM3NmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmtu1wWNm/2ZIqmDwyC3D2XeT0QZxFyVSHU+ qZT7ke/2yFDn47Ll3HIW1+ZQ6ORLhapZoQuuzmSM79rqOsiFZY91PQsFUORI6ksA cpwaoMwHv8c+VXV+YKMyjM7GD0V73gWPRU+d8Mx9xYXIwNcfHNQ3Bex4CqubB2BW p50LpOssXn5estx5AvNd3JkuS6YMEZR/OCPLz9ZKKUW4CCnLL799KEUY7oN5kImZ 26bBkzbUHWXtQ+fD+JfgNybD7qSuPP3s9f63A13u9qwhdqb6+O6xI/QyUCknGq7r MdD51l4T49oNEPRDACuiSDkg30tOWa6pjfjppinblPC3JJTAewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJeKq2RaYrJ4ujGxNRgkdVJB+RWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YTI2 OTViNy1lODIzLTRmNzQtOTNiOC05OGRiYmY3NzViY2YvNWU5Y2E4ZWItN2Q2ZS0z MTM5LWE5NTMtNDIxODllNTA3ZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGEyNjk1YjctZTgyMy00Zjc0LTkz YjgtOThkYmJmNzc1YmNmLzhhMjY5NWI3LWU4MjMtNGY3NC05M2I4LTk4ZGJiZjc3 NWJjZi5jcmwwHwYDVR0jBBgwFoAUQwpY7vmeeMU73CWitIOTgUZpxGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84YTI2OTViNy1lODIzLTRmNzQtOTNiOC05OGRi YmY3NzViY2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQToDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAC5VLeOmoWvcqZcdEN1EIPS6xxMpKCZi16IGZAKOC0BSJ5lwpOnjq2 kCKZKgGTxqCORw/9MyWArHSVYOQPMA2llbmsClDYUbtJf2ir34TmMQ2jWrl9s3Bk zH3H9XjKU5NPz94TtRBdH34nFmEsd73YwxT7XrQNclb1AZRpw0M6iBHBFEd1zfJ7 Nn04B7aOjaaP2ZBMwzN86tfM49yX/H0IRQ2lSPzSUm0rDKS9S+KlwkZFpbxtaFkR lmt5EZ6JGuGRzgQnEDtTF1aNsgYJuTLvF69Ci1Uj9VSxmYA963iI8KgyNY9BbzQ3 XlRl1A6quouFWkcOpHPjjeQNp/SaPaOt -----END CERTIFICATE-----Generated at Mon Jun 16 20:49:07 2025 by rpki-client