$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d1bc157d-452c-3df9-8b8f-0af48916ab94.roa File: d1bc157d-452c-3df9-8b8f-0af48916ab94.roa (raw, json) Hash identifier: bwaQinNxkyCi3f5NXwU1Zdbp4bDy6wPJMFFExAhE69A= Subject key identifier: 06:AC:F8:E7:7D:0E:5F:3B:6D:9B:94:38:E9:36:74:38:8D:D6:10:98 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F43285849D42FA52316855A13D6AF22F0 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d1bc157d-452c-3df9-8b8f-0af48916ab94.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 13984 IP address blocks: 2604:2ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a5:23:16:85:5a:13:d6:af:22:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=e6503ad4-9b4e-4563-9907-bea1336adccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:13:a5:3a:5d:9c:48:40:fd:a0:8f:2d:2a:0f: 88:e5:0e:6f:1b:25:5a:96:5f:c4:b6:c8:51:1c:9a: d4:22:92:ea:42:c7:72:a3:d6:f1:05:1d:73:be:e1: f8:88:dc:68:40:d8:3b:2b:b3:6e:c7:71:4a:60:26: d6:28:cf:b3:cc:eb:8e:44:fe:84:51:17:57:fc:b6: e9:eb:4b:71:64:d6:f5:f1:1f:09:b5:e5:08:69:72: a2:49:31:43:7a:8f:7a:92:8d:f1:1e:93:26:98:a5: ce:f9:60:c2:94:36:64:2b:ea:d4:b4:da:d4:90:21: e5:1f:b7:80:22:c3:14:02:c4:2d:bd:3a:09:f1:66: ce:fc:fc:ba:ba:82:23:42:fd:91:90:31:a0:48:a0: 15:3e:ef:6d:c1:35:17:c3:7b:8b:05:37:2d:e8:e4: ea:82:af:c5:3f:05:99:e5:e7:37:06:9b:84:48:c3: 58:cf:26:12:82:8b:81:71:4c:d5:4e:a0:99:af:37: 20:94:36:13:6c:97:d4:f5:bd:5d:3a:f6:65:6f:3c: bb:4c:64:3a:ed:da:96:93:f8:26:14:1d:37:98:d2: 8d:43:05:9c:4d:51:1c:aa:de:3e:0e:b5:f1:b1:5b: 1d:71:30:75:24:ec:bc:f2:6d:55:04:73:9e:a0:7f: b7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AC:F8:E7:7D:0E:5F:3B:6D:9B:94:38:E9:36:74:38:8D:D6:10:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d1bc157d-452c-3df9-8b8f-0af48916ab94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv6: 2604:2ec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:bf:62:5d:b2:bc:e2:a3:89:6e:e3:e8:e3:6e:1b:6f:f3:2b: e4:b8:7c:84:e4:61:71:9d:b3:b6:86:c8:1e:b6:55:39:da:b7: 01:4b:90:11:ba:45:8f:f7:9a:50:54:63:09:7e:a4:66:41:7b: af:fe:99:c6:7a:86:89:25:ab:1e:21:3f:f7:a4:e6:6a:5a:41: a2:71:ba:9c:91:9d:d4:d4:a9:dc:35:2d:b6:38:cf:06:e8:fd: 5e:2c:ab:b0:8f:92:d2:97:b8:7d:03:b3:50:f3:7f:3e:21:7f: 07:b1:19:1e:ae:a1:b5:95:20:f8:d0:2f:2b:de:ad:a8:74:0f: 89:48:43:74:aa:02:42:4e:c3:72:c4:b4:67:4c:fc:d9:c9:37: 88:bd:11:76:d0:3a:50:ae:56:b0:b5:ce:07:79:80:ee:e6:cb: 38:ce:7e:e7:49:1f:fa:e3:89:92:3a:ed:63:78:33:70:64:f2: 7a:5f:57:9f:13:e7:82:aa:76:f9:22:7f:df:d2:64:54:73:7a: 89:f7:40:ec:56:b1:84:80:65:95:c9:87:23:a9:e2:92:16:c7: 4f:53:4e:7a:c0:89:72:2f:c5:69:4c:9f:1d:ae:95:b4:f6:62: 63:bd:b7:d6:87:0f:9e:87:92:e7:1b:30:86:4d:9a:d1:62:fe: 26:f4:69:30 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnUL6UjFoVaE9avIvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZTY1MDNhZDQtOWI0ZS00NTYzLTk5MDctYmVhMTMzNmFkY2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxOlOl2cSED9oI8tKg+I5Q5vGyVall/EtshR HJrUIpLqQsdyo9bxBR1zvuH4iNxoQNg7K7Nux3FKYCbWKM+zzOuORP6EURdX/Lbp 60txZNb18R8JteUIaXKiSTFDeo96ko3xHpMmmKXO+WDClDZkK+rUtNrUkCHlH7eA IsMUAsQtvToJ8WbO/Py6uoIjQv2RkDGgSKAVPu9twTUXw3uLBTct6OTqgq/FPwWZ 5ec3BpuESMNYzyYSgouBcUzVTqCZrzcglDYTbJfU9b1dOvZlbzy7TGQ67dqWk/gm FB03mNKNQwWcTVEcqt4+DrXxsVsdcTB1JOy88m1VBHOeoH+36wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAas+Od9Dl87bZuUOOk2dDiN1hCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvZDFiYzE1N2QtNDUyYy0z ZGY5LThiOGYtMGFmNDg5MTZhYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQuwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6v2Jdsrzio4lu4+jjbhtv8yvkuHyE5GFxnbO2hsgetlU52rcBS5AR ukWP95pQVGMJfqRmQXuv/pnGeoaJJaseIT/3pOZqWkGicbqckZ3U1KncNS22OM8G 6P1eLKuwj5LSl7h9A7NQ838+IX8HsRkerqG1lSD40C8r3q2odA+JSEN0qgJCTsNy xLRnTPzZyTeIvRF20DpQrlawtc4HeYDu5ss4zn7nSR/644mSOu1jeDNwZPJ6X1ef E+eCqnb5In/f0mRUc3qJ90DsVrGEgGWVyYcjqeKSFsdPU056wIlyL8VpTJ8drpW0 9mJjvbfWhw+eh5LnGzCGTZrRYv4m9Gkw -----END CERTIFICATE-----Generated at Sun Jun 15 17:58:03 2025 by rpki-client