$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa File: 9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa (raw, json) Hash identifier: E8K4g1cnQ4EfGzb7HMfnksqEcHti1qQUO0Db+KJYtyQ= Subject key identifier: D5:F5:9A:F3:12:F7:BA:3A:F3:39:AB:29:B0:C0:55:79:19:82:97:A2 Certificate issuer: /CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Certificate serial: 010D0C9F432858499F249199E9CF14DF105FB880 Authority key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 63072 IP address blocks: 2605:1740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:91:99:e9:cf:14:df:10:5f:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=995fec80-9ddb-4662-b00f-fd4a527a6fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:00:b3:17:3e:72:d9:cb:70:75:46:72:4f:32: 23:bf:85:f2:e7:7d:00:1f:eb:7a:4c:f5:44:6d:ea: e3:9d:5f:92:f2:66:36:27:27:5f:fc:21:0f:fe:b1: 4e:bd:05:15:2a:b6:7b:54:62:64:b5:5b:c5:05:89: 7b:9c:a5:f8:fa:72:8e:8a:59:9a:0b:bf:a7:15:12: c5:91:8e:d4:9b:e0:47:79:7e:97:cd:95:4a:03:85: fe:d1:fb:2d:49:f0:4b:ff:38:dd:b1:22:5c:97:01: a4:f4:8d:14:31:11:b8:e0:d4:de:24:97:5d:f7:2f: 40:f7:35:aa:f3:09:88:9a:cb:50:9d:78:60:16:b3: 0e:29:b9:f3:1c:92:2f:eb:6b:07:da:b3:84:d4:1e: 28:92:88:23:dc:71:c9:21:c6:b6:22:41:12:71:ef: ae:59:ae:9c:ed:9b:ae:93:de:59:70:41:12:59:e9: bb:d9:b5:34:a6:73:16:6a:2a:84:a3:7e:24:25:e8: 1d:e8:0a:1e:41:39:3e:ac:06:c7:ac:a7:36:ee:8d: 25:6e:78:28:ea:65:06:35:da:61:5e:e8:2a:1f:f4: 46:40:7f:06:fc:8e:68:d7:3e:b1:c0:bb:41:4b:8d: 63:ca:18:6e:fc:ac:86:97:87:e7:45:99:62:66:57: 99:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F5:9A:F3:12:F7:BA:3A:F3:39:AB:29:B0:C0:55:79:19:82:97:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl X509v3 Authority Key Identifier: keyid:D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer sbgp-ipAddrBlock: critical IPv6: 2605:1740::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0d:bb:35:a1:a3:d0:57:cd:72:6b:4e:ef:79:93:bd:2d:e3: 1b:d5:b0:61:79:74:18:46:68:dc:d3:c9:23:be:dd:57:de:c7: d5:53:59:1d:bd:5b:d5:c0:b6:01:61:c7:e3:35:40:d9:3c:42: 6a:f2:46:cd:dd:1b:2a:dd:cc:ef:1c:c2:db:f3:6f:59:3f:0c: c9:81:09:f1:94:0b:8d:89:9f:2c:0b:50:9e:91:c7:76:40:88: be:05:57:d3:a3:4e:72:d3:2b:f9:92:6c:9c:a1:ea:06:44:1f: 35:23:7d:43:82:92:bc:72:17:52:e8:0e:29:88:a8:31:88:9f: c7:15:1b:4f:b9:b4:34:0d:99:53:a1:18:ba:a3:66:77:3e:47: b2:51:bc:40:32:c4:21:54:df:8f:4b:57:64:07:00:4f:eb:44: 93:4c:eb:66:47:18:b0:a3:fa:18:ea:03:07:f4:3b:e7:0e:20: 13:9d:23:85:71:a9:20:d9:1f:6c:21:79:98:3a:4c:2d:8b:f2: c6:67:69:1a:a2:72:26:13:ac:e7:3f:1f:31:6f:c1:6a:78:d8: 18:05:e7:e6:5a:4a:f7:0c:7a:58:4b:01:84:13:e3:2c:f0:f5: 70:19:20:7b:32:c8:68:68:4c:ed:90:d2:83:3d:9b:f5:71:c7: 6f:75:0d:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmfJJGZ6c8U3xBfuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThj M2VjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OTk1ZmVjODAtOWRkYi00NjYyLWIwMGYtZmQ0YTUyN2E2ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnACzFz5y2ctwdUZyTzIjv4Xy530AH+t6TPVE berjnV+S8mY2Jydf/CEP/rFOvQUVKrZ7VGJktVvFBYl7nKX4+nKOilmaC7+nFRLF kY7Um+BHeX6XzZVKA4X+0fstSfBL/zjdsSJclwGk9I0UMRG44NTeJJdd9y9A9zWq 8wmImstQnXhgFrMOKbnzHJIv62sH2rOE1B4okogj3HHJIca2IkESce+uWa6c7Zuu k95ZcEESWem72bU0pnMWaiqEo34kJegd6AoeQTk+rAbHrKc27o0lbngo6mUGNdph XugqH/RGQH8G/I5o1z6xwLtBS41jyhhu/KyGl4fnRZliZleZtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNX1mvMS97o68zmrKbDAVXkZgpeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5 ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvOWJhOWI3NjktYjc3ZS0z MTdiLTlhMTItMTBiMTlkY2YwMmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAwOWQ5M2EtZDllNy00ZWI3LTk0 Y2QtZmZlYzA2MThjM2VjLzQwMDlkOTNhLWQ5ZTctNGViNy05NGNkLWZmZWMwNjE4 YzNlYy5jcmwwHwYDVR0jBBgwFoAU2Sm45szUI0NGR4kzl0okdpmMq3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVj MDYxOGMzZWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUXQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8Dbs1oaPQV81ya07veZO9LeMb1bBheXQYRmjc08kjvt1X3sfVU1kd vVvVwLYBYcfjNUDZPEJq8kbN3Rsq3czvHMLb829ZPwzJgQnxlAuNiZ8sC1Cekcd2 QIi+BVfTo05y0yv5kmycoeoGRB81I31DgpK8chdS6A4piKgxiJ/HFRtPubQ0DZlT oRi6o2Z3PkeyUbxAMsQhVN+PS1dkBwBP60STTOtmRxiwo/oY6gMH9DvnDiATnSOF cakg2R9sIXmYOkwti/LGZ2kaonImE6znPx8xb8FqeNgYBefmWkr3DHpYSwGEE+Ms 8PVwGSB7MshoaEztkNKDPZv1ccdvdQ2K -----END CERTIFICATE-----Generated at Sun Jun 15 23:02:44 2025 by rpki-client