$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/85c6424c-74b9-39b7-92e4-fc54805bebbd.roa File: 85c6424c-74b9-39b7-92e4-fc54805bebbd.roa (raw, json) Hash identifier: D9daGIatNJyjSk8xXkUUSxqCp1whte8ghCDzE7Cnp/E= Subject key identifier: B0:1F:A1:2A:0D:3A:F1:20:4E:99:49:B2:93:AD:7E:E4:74:93:61:8B Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584A363FEB7C7C3A51F1EA007B80 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/85c6424c-74b9-39b7-92e4-fc54805bebbd.roa Signing time: Mon 16 Jun 2025 16:03:12 +0000 ROA not before: Mon 16 Jun 2025 16:03:12 +0000 ROA not after: Sun 14 Sep 2025 16:03:12 +0000 asID: 81 IP address blocks: 2600:2700::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3f:eb:7c:7c:3a:51:f1:ea:00:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: Jun 16 16:03:12 2025 GMT Not After : Sep 14 16:03:12 2025 GMT Subject: CN=83054f4b-7da4-421d-b93a-88ca69d18491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:f4:cf:09:84:ba:e7:52:4b:c7:6d:26:8f: 21:52:d4:4b:a1:c7:dc:74:20:51:b8:6a:ae:05:39: d8:70:e4:c6:aa:98:a5:a6:bd:02:fb:46:95:12:88: 0a:8f:e4:35:cb:7a:c3:74:d9:d1:9d:bd:04:c0:e6: 93:d3:12:4a:a1:fc:a7:74:65:d1:cd:2c:88:03:ca: c4:70:f1:c9:89:79:28:4e:99:e4:97:6f:cf:ec:08: 24:4a:e8:8d:64:bc:cb:f3:fb:30:8a:9d:fa:db:b7: 8c:14:6f:65:79:0b:2a:0d:fd:bf:83:bc:14:84:c6: b8:45:3f:57:35:ab:96:70:d7:a6:b7:c9:3b:9c:90: c6:e4:74:3f:83:b3:d7:4b:77:29:df:0b:cd:68:b7: f6:ab:48:01:51:7a:32:dd:c5:86:eb:e3:5c:c1:b5: c1:73:94:0c:4b:fe:4c:c5:02:19:35:b5:08:07:02: 08:67:3d:74:58:6e:46:d4:cc:cf:7f:14:22:98:fc: b5:19:d3:5e:d4:c8:bb:3d:0b:19:fd:5a:20:ee:5f: 7f:c5:4d:e4:27:7d:cd:b5:de:3e:ac:74:3d:4d:98: f8:29:67:fe:77:8d:1a:b9:71:be:cd:9c:1e:cd:c1: cd:73:64:04:16:59:f2:87:1f:46:b1:50:0b:a2:04: 9c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1F:A1:2A:0D:3A:F1:20:4E:99:49:B2:93:AD:7E:E4:74:93:61:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/85c6424c-74b9-39b7-92e4-fc54805bebbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2600:2700::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:3c:1c:4f:a5:4c:1e:28:b1:95:0c:34:4b:e1:9b:51:74:fc: b7:93:1b:55:30:c3:4c:7a:15:80:bc:07:4b:a9:e0:00:79:c6: b1:17:42:bf:4b:d1:3c:19:13:d6:17:22:54:c2:56:cb:85:99: 6c:04:e5:0a:a9:a6:4c:05:be:18:a0:18:72:fb:1b:a7:41:3d: 3f:e4:d3:84:59:1a:45:b8:73:4e:f6:97:d0:38:a8:f9:15:8e: af:36:3d:f3:08:8f:74:e1:c4:64:dc:a3:bc:48:49:34:0c:ce: 1f:b9:8a:8f:c8:92:06:52:b6:4a:8f:ca:7d:af:55:cf:4d:52: 86:c2:0b:d1:68:a1:bb:30:60:91:e1:f6:3e:dd:53:68:d7:09: 8d:e3:43:00:14:2b:78:a3:aa:a0:02:fd:17:dc:d8:13:94:ae: 46:86:87:80:ee:18:e0:07:b9:d5:74:1b:90:3e:ee:04:40:9f: 62:72:69:fa:e9:4f:c5:74:4f:3b:13:2c:fc:0b:bd:cc:f5:77: 7a:ba:41:96:5c:aa:48:ba:85:a1:47:c5:6e:a0:30:07:8d:c4: b2:19:42:71:1d:04:e5:73:f6:4e:80:b4:f7:88:27:85:2f:d2: d7:b0:b1:2e:81:fb:54:80:9a:cf:f8:77:84:62:97:3a:3f:ec: bb:ac:30:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEo2P+t8fDpR8eoAe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI1MDYxNjE2MDMxMloXDTI1MDkxNDE2MDMxMlowLzEtMCsGA1UEAxMk ODMwNTRmNGItN2RhNC00MjFkLWI5M2EtODhjYTY5ZDE4NDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2r0zwmEuudSS8dtJo8hUtRLocfcdCBRuGqu BTnYcOTGqpilpr0C+0aVEogKj+Q1y3rDdNnRnb0EwOaT0xJKofyndGXRzSyIA8rE cPHJiXkoTpnkl2/P7AgkSuiNZLzL8/swip3627eMFG9leQsqDf2/g7wUhMa4RT9X NauWcNemt8k7nJDG5HQ/g7PXS3cp3wvNaLf2q0gBUXoy3cWG6+NcwbXBc5QMS/5M xQIZNbUIBwIIZz10WG5G1MzPfxQimPy1GdNe1Mi7PQsZ/Vog7l9/xU3kJ33Ntd4+ rHQ9TZj4KWf+d40auXG+zZwezcHNc2QEFlnyhx9GsVALogSccwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLAfoSoNOvEgTplJspOtfuR0k2GLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvODVjNjQyNGMtNzRiOS0z OWI3LTkyZTQtZmM1NDgwNWJlYmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAnADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8PBxPpUweKLGVDDRL4ZtRdPy3kxtVMMNMehWAvAdLqeAAecaxF0K/ S9E8GRPWFyJUwlbLhZlsBOUKqaZMBb4YoBhy+xunQT0/5NOEWRpFuHNO9pfQOKj5 FY6vNj3zCI904cRk3KO8SEk0DM4fuYqPyJIGUrZKj8p9r1XPTVKGwgvRaKG7MGCR 4fY+3VNo1wmN40MAFCt4o6qgAv0X3NgTlK5GhoeA7hjgB7nVdBuQPu4EQJ9icmn6 6U/FdE87Eyz8C73M9Xd6ukGWXKpIuoWhR8VuoDAHjcSyGUJxHQTlc/ZOgLT3iCeF L9LXsLEugftUgJrP+HeEYpc6P+y7rDB6 -----END CERTIFICATE-----Generated at Wed Jun 18 07:17:59 2025 by rpki-client