$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa File: 58ea7f89-b5b6-3671-a6c0-811e6620195c.roa (raw, json) Hash identifier: AVHY9NFCdfVoSkFYyXyWITooHd5OI6+6hQzg2gk9who= Subject key identifier: B2:7C:0C:86:04:BA:52:95:7F:07:EA:5C:7F:A5:42:4F:17:6E:9F:75 Certificate issuer: /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249 Certificate serial: 010D0C9F4328584A88409C8AEC78592B2547E280 Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 54885 IP address blocks: 2601:3000::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:9c:8a:ec:78:59:2b:25:47:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=e69b75d8-2eed-4463-aa7f-31cfde0601af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:84:7a:f1:12:e7:96:1e:29:ac:7a:38:bb: e3:79:1d:25:e1:51:53:42:37:87:cb:8b:eb:ac:95: 42:be:bf:66:4c:c4:8d:36:1c:4a:23:a7:2a:b4:51: e6:32:5d:a6:e0:d2:2c:ff:58:a3:c1:b9:81:a1:49: c1:11:e0:bd:7a:4d:33:b4:58:7c:1c:ae:f5:ee:16: 9e:45:60:8d:c1:26:23:ef:06:c7:fd:49:e3:61:09: e7:e0:80:9f:07:05:60:88:30:f1:69:d8:64:51:e6: bc:7d:ae:c8:82:f4:dd:7d:fa:fa:04:fe:70:f2:a4: fe:82:d8:74:a8:9d:56:1c:7b:21:8a:3f:02:c3:eb: 4c:2e:ab:5e:b2:d9:c0:09:1e:9b:e4:a3:fa:c4:95: 13:ff:a4:e1:3c:05:ce:72:b3:a9:15:52:8a:22:f4: a3:84:7f:91:1b:0f:3e:e9:51:d6:19:4c:34:ca:07: d7:36:75:f2:35:da:a7:71:24:e7:9f:e0:6b:26:f3: 57:cd:69:62:55:b1:4e:32:ad:6a:57:61:74:d5:86: bc:f2:4a:63:bd:16:32:b5:90:23:4d:d5:6a:13:37: 11:53:1e:d0:85:d4:13:4c:98:42:dc:a5:5a:c2:7c: d4:c7:9f:26:0b:48:88:91:6f:5d:28:1e:ea:23:78: ac:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7C:0C:86:04:BA:52:95:7F:07:EA:5C:7F:A5:42:4F:17:6E:9F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl X509v3 Authority Key Identifier: keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer sbgp-ipAddrBlock: critical IPv6: 2601:3000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9a:45:ad:39:fd:8b:ed:ee:1f:dd:b8:00:c3:23:99:36:48: fa:63:27:6f:f9:e0:d8:e8:87:63:2e:0f:74:37:ef:69:93:1d: 2d:f8:5d:03:fa:0a:91:e9:04:ca:f0:c9:b8:56:9d:30:5d:3e: ab:96:10:2d:d6:dc:86:d5:b4:76:9d:a7:d5:7b:0f:50:75:1e: 83:0d:a4:ab:ae:4f:ed:89:52:2d:cc:b6:08:73:c3:c0:54:3b: 91:4d:42:13:7c:1c:1b:ba:f3:32:22:bc:64:a7:f4:e9:76:87: 56:69:be:b6:41:33:0c:45:f8:5f:a1:d3:c9:55:00:1e:9c:34: cd:28:5f:f1:06:e2:dd:67:69:55:a4:2c:93:c9:2e:36:d3:df: 30:c1:72:04:f9:bf:0e:a0:43:5d:c7:07:ed:d2:14:b3:e3:5c: ba:0f:44:14:18:b1:1a:fa:76:7c:61:85:27:95:36:ef:0d:ee: b2:ef:5a:a5:cd:ea:03:42:ee:42:a2:72:28:47:18:5b:3d:47: 28:71:48:b5:79:b1:c2:ca:72:91:ab:5a:0e:40:78:af:56:d2: ff:95:fc:29:7d:d5:0f:06:2f:f1:9e:86:6f:76:19:a3:83:99: 39:c1:35:e5:57:52:48:ad:e9:82:07:dd:7d:1d:6d:21:dd:ef: 3f:39:42:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqIQJyK7HhZKyVH4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE2MzYxZDItYmNlNy00MDlhLThmMTktZGRkODFhMWY2 MjQ5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk ZTY5Yjc1ZDgtMmVlZC00NDYzLWFhN2YtMzFjZmRlMDYwMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsCEevES55YeKax6OLvjeR0l4VFTQjeHy4vr rJVCvr9mTMSNNhxKI6cqtFHmMl2m4NIs/1ijwbmBoUnBEeC9ek0ztFh8HK717hae RWCNwSYj7wbH/UnjYQnn4ICfBwVgiDDxadhkUea8fa7IgvTdffr6BP5w8qT+gth0 qJ1WHHshij8Cw+tMLqtestnACR6b5KP6xJUT/6ThPAXOcrOpFVKKIvSjhH+RGw8+ 6VHWGUw0ygfXNnXyNdqncSTnn+BrJvNXzWliVbFOMq1qV2F01Ya88kpjvRYytZAj TdVqEzcRUx7QhdQTTJhC3KVawnzUx58mC0iIkW9dKB7qI3isTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLJ8DIYEulKVfwfqXH+lQk8Xbp91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YTYz NjFkMi1iY2U3LTQwOWEtOGYxOS1kZGQ4MWExZjYyNDkvNThlYTdmODktYjViNi0z NjcxLWE2YzAtODExZTY2MjAxOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWE2MzYxZDItYmNlNy00MDlhLThm MTktZGRkODFhMWY2MjQ5LzlhNjM2MWQyLWJjZTctNDA5YS04ZjE5LWRkZDgxYTFm NjI0OS5jcmwwHwYDVR0jBBgwFoAU7aJGTlftF2Y9jLAvYYv0eGpLW7kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YTYzNjFkMi1iY2U3LTQwOWEtOGYxOS1kZGQ4 MWExZjYyNDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgEwADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMmkWtOf2L7e4f3bgAwyOZNkj6Yydv+eDY6IdjLg90N+9pkx0t+F0D +gqR6QTK8Mm4Vp0wXT6rlhAt1tyG1bR2nafVew9QdR6DDaSrrk/tiVItzLYIc8PA VDuRTUITfBwbuvMyIrxkp/TpdodWab62QTMMRfhfodPJVQAenDTNKF/xBuLdZ2lV pCyTyS42098wwXIE+b8OoENdxwft0hSz41y6D0QUGLEa+nZ8YYUnlTbvDe6y71ql zeoDQu5ConIoRxhbPUcocUi1ebHCynKRq1oOQHivVtL/lfwpfdUPBi/xnoZvdhmj g5k5wTXlV1JIremCB919HW0h3e8/OUIz -----END CERTIFICATE-----Generated at Wed Aug 6 07:58:19 2025 by rpki-client