$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68a2e22a-71e8-3050-9a38-54a304d98477.roa File: 68a2e22a-71e8-3050-9a38-54a304d98477.roa (raw, json) Hash identifier: z7Y34aCO67vOOaVWU3sP2u+IHP9+5dMulA39Z2j/ZLM= Subject key identifier: C7:02:27:CD:42:A0:E1:63:C6:60:CB:FB:69:2E:21:62:47:75:71:A2 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F43285849E2253256C24311B5928BDE00 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68a2e22a-71e8-3050-9a38-54a304d98477.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 20253 IP address blocks: 2606:bc40:f00b::/48 maxlen: 48 2606:bc40:f00c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:32:56:c2:43:11:b5:92:8b:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=f1c0e7cf-927e-41a0-a79c-5735f074e834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:b8:78:64:44:e4:36:e8:9a:96:05:1b:9a: 2d:3e:ef:7a:09:79:65:d1:21:75:cc:bf:2b:75:60: f5:ca:f6:e2:27:09:f6:57:8d:5b:29:3e:a3:37:d5: 0f:b1:99:f6:79:3c:b8:32:29:c6:ff:d9:02:8b:18: 6a:cd:4f:53:c7:12:b0:94:3b:f8:58:2e:e2:35:e7: 84:8b:87:c8:6c:5c:19:5f:a9:0b:d8:81:6d:a6:22: a4:9f:04:a6:c2:38:23:e1:f6:98:5a:a1:20:7e:43: ee:5d:06:a5:71:04:4a:95:6c:fe:4e:4a:64:59:42: 9e:9a:af:e1:9f:bb:9b:6b:6e:2a:fe:7a:ba:3d:7a: 24:28:b0:ce:bf:8b:ec:e0:0d:8c:20:63:a4:3d:86: 2f:1a:97:5c:2e:46:4c:61:48:05:a7:b0:de:35:f2: 9b:22:8e:02:5f:51:33:35:37:f4:26:89:3d:b6:68: 48:0f:9a:50:83:45:db:ae:96:35:99:c4:c0:b0:bd: 4e:a7:0b:35:0a:bc:1d:8b:9f:12:19:06:7e:9e:0e: 21:9a:d1:af:ea:c5:a5:11:03:b7:13:f6:22:96:63: 2e:cf:f7:83:bd:45:0f:ce:23:f7:bd:f5:6f:a0:a1: ed:ec:0c:3f:11:e2:4a:a1:1f:25:0a:ef:76:12:72: 08:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:02:27:CD:42:A0:E1:63:C6:60:CB:FB:69:2E:21:62:47:75:71:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68a2e22a-71e8-3050-9a38-54a304d98477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f00b::-2606:bc40:f00c:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:3d:6a:12:49:2b:c9:6f:ec:e2:96:1c:1e:94:52:fd:3c:54: da:0e:0a:c0:7b:93:11:9e:7c:b6:c2:97:d1:a9:62:06:34:67: 33:98:96:b3:c7:4c:b5:90:68:a6:39:c5:ae:52:91:56:cd:96: 73:c4:37:d0:d7:05:6c:4b:74:03:b5:9d:ff:c7:4d:4f:e3:e0: d3:9d:99:ca:06:b8:62:7e:6e:ce:03:a0:b2:85:1f:fd:db:cf: 7f:63:08:59:44:35:25:8a:4b:3d:2a:78:ae:d5:a0:d8:83:aa: c8:29:b1:a4:50:cc:77:d8:c4:52:ee:eb:2c:04:60:2f:1b:31: fb:33:38:fe:11:ce:9e:11:e8:7c:f7:86:f9:b9:66:33:83:29: 66:5e:64:5e:06:bf:26:43:63:47:b6:5f:9f:4b:d7:9c:f4:7d: 80:c4:c2:d6:7b:48:ca:9c:c2:e5:e3:c6:99:36:76:b7:58:ce: 42:aa:db:9c:b7:c2:5f:70:aa:91:c6:d4:8e:18:8a:ea:1c:78: af:eb:28:be:f2:a5:00:1a:4c:18:f8:4b:a6:8c:5b:c3:a9:5b: 1a:da:1c:0a:21:9f:69:a2:6f:e0:9b:56:a4:e5:fd:e0:fd:29: 0a:d8:09:62:b7:53:f6:1e:21:d8:eb:c4:93:40:d5:61:9b:c8: 9f:58:d1:0a -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEniJTJWwkMRtZKL3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ZjFjMGU3Y2YtOTI3ZS00MWEwLWE3OWMtNTczNWYwNzRlODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse+4eGRE5DbompYFG5otPu96CXll0SF1zL8r dWD1yvbiJwn2V41bKT6jN9UPsZn2eTy4MinG/9kCixhqzU9TxxKwlDv4WC7iNeeE i4fIbFwZX6kL2IFtpiKknwSmwjgj4faYWqEgfkPuXQalcQRKlWz+TkpkWUKemq/h n7uba24q/nq6PXokKLDOv4vs4A2MIGOkPYYvGpdcLkZMYUgFp7DeNfKbIo4CX1Ez NTf0Jok9tmhID5pQg0XbrpY1mcTAsL1Opws1Crwdi58SGQZ+ng4hmtGv6sWlEQO3 E/YilmMuz/eDvUUPziP3vfVvoKHt7Aw/EeJKoR8lCu92EnIIJwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFMcCJ81CoOFjxmDL+2kuIWJHdXGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvNjhhMmUyMmEtNzFlOC0z MDUwLTlhMzgtNTRhMzA0ZDk4NDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmBrxA 8AsDBwAmBrxA8AwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAFD1qEkkryW/s4pYcHpRS/TxU2g4KwHuTEZ58 tsKX0aliBjRnM5iWs8dMtZBopjnFrlKRVs2Wc8Q30NcFbEt0A7Wd/8dNT+Pg052Z yga4Yn5uzgOgsoUf/dvPf2MIWUQ1JYpLPSp4rtWg2IOqyCmxpFDMd9jEUu7rLARg Lxsx+zM4/hHOnhHofPeG+blmM4MpZl5kXga/JkNjR7Zfn0vXnPR9gMTC1ntIypzC 5ePGmTZ2t1jOQqrbnLfCX3CqkcbUjhiK6hx4r+sovvKlABpMGPhLpoxbw6lbGtoc CiGfaaJv4JtWpOX94P0pCtgJYrdT9h4h2OvEk0DVYZvIn1jRCg== -----END CERTIFICATE-----Generated at Mon Jun 16 12:25:50 2025 by rpki-client