$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa File: b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa (raw, json) Hash identifier: d1Zf+4iTL7qk25bEtRyg8g1fewjpI76S8/wfg6g4wqk= Subject key identifier: 75:DF:D3:4E:43:B4:9F:22:57:D5:86:BF:4F:E3:F9:F5:82:A2:42:CD Certificate issuer: /CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Certificate serial: 010D0C9F43285849F2E53553693C54780DBD1A60 Authority key identifier: EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 53507 IP address blocks: 2604:56c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:35:53:69:3c:54:78:0d:bd:1a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=49611d07-14d9-4ce8-8acc-60f8fb423cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:36:99:a5:16:c0:14:6b:14:22:5c:e5:35:95: 39:48:10:1c:7d:ea:e8:f9:14:ed:18:d8:ac:6b:c7: 76:83:84:d8:c9:a7:93:8b:14:9c:63:37:e4:f6:4a: b7:5f:0f:aa:38:b9:80:50:97:64:2a:43:8f:3c:a5: b1:81:d7:8e:42:d3:ca:f0:37:a9:15:02:dc:0b:02: 55:ee:6b:b1:6c:9e:07:f9:be:74:a1:db:56:4b:ba: dd:f8:77:97:54:44:1e:05:41:4d:18:51:d1:1f:0c: 49:6c:74:4d:fd:b9:15:bc:2a:d9:6b:ed:87:4a:26: f5:7c:35:c5:ce:aa:fa:88:70:c8:65:12:4b:0f:b3: f8:5c:a8:f5:1e:28:07:e7:2c:e9:b4:7f:02:e4:5d: 4c:a6:6c:51:61:95:37:7b:71:c3:8e:c9:66:6d:2c: 5c:7d:80:47:9b:39:7c:e8:7a:18:1d:55:6e:8b:7f: cf:2a:eb:2b:7c:bf:15:01:de:5d:72:41:19:ce:4c: fc:d1:d4:87:57:5a:36:8d:e3:dd:d6:4e:cf:61:47: 66:40:28:a0:97:98:29:c2:dc:96:27:3f:7d:fb:5b: e8:58:38:02:13:1d:c0:6f:84:75:60:b8:0d:f0:78: 73:c9:46:7d:ad:e2:c7:9f:6f:4f:d1:91:ae:61:35: fa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DF:D3:4E:43:B4:9F:22:57:D5:86:BF:4F:E3:F9:F5:82:A2:42:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl X509v3 Authority Key Identifier: keyid:EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer sbgp-ipAddrBlock: critical IPv6: 2604:56c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:6f:ee:4e:15:b8:42:a2:af:bd:66:d1:0e:7c:15:23:c7:bb: 4d:38:e0:a1:1d:64:a9:1c:b5:d6:79:35:f3:e0:9e:34:62:c8: 6a:01:e9:f5:7d:73:91:a3:3c:29:72:5a:f9:a9:35:27:da:a0: 85:54:0d:43:65:d2:f9:b4:a1:65:46:4c:c1:92:3e:f4:f1:bc: 0b:4b:14:84:b1:f2:66:31:f6:e9:18:06:2b:15:39:36:bd:da: a9:ce:34:4e:da:aa:8b:76:23:aa:84:cb:c1:d0:6f:9b:24:75: a3:33:83:83:9d:3d:c1:a2:ab:6e:a8:cb:55:d6:e7:d7:de:71: 1e:6c:81:19:8e:1a:f1:bf:f4:a7:69:4e:24:26:32:ef:86:bf: 32:f5:92:93:bf:c9:0b:ad:0e:b4:88:16:51:33:64:b4:40:e9: 9e:0c:57:9b:dc:7c:73:e3:66:41:b4:29:e9:36:87:d1:ea:23: f2:e2:47:e6:b6:49:e5:78:87:fb:b8:26:f5:3a:d1:8c:f9:f6: de:73:d9:3e:de:a2:9d:74:5a:49:fa:97:bf:9d:18:aa:de:2e: 27:b3:c5:72:73:a9:56:ba:3c:6e:da:77:f9:43:c6:66:2c:9d: f3:0d:12:9a:95:ef:01:e5:1e:8b:a0:32:a7:9a:c6:d1:b3:35: 0c:c3:f3:1f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEny5TVTaTxUeA29GmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlZjM2MzQtN2I0OS00Yjk3LTg3ODctNjgwZDYxOTZl NmU0MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NDk2MTFkMDctMTRkOS00Y2U4LThhY2MtNjBmOGZiNDIzY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jaZpRbAFGsUIlzlNZU5SBAcfero+RTtGNis a8d2g4TYyaeTixScYzfk9kq3Xw+qOLmAUJdkKkOPPKWxgdeOQtPK8DepFQLcCwJV 7muxbJ4H+b50odtWS7rd+HeXVEQeBUFNGFHRHwxJbHRN/bkVvCrZa+2HSib1fDXF zqr6iHDIZRJLD7P4XKj1HigH5yzptH8C5F1MpmxRYZU3e3HDjslmbSxcfYBHmzl8 6HoYHVVui3/PKusrfL8VAd5dckEZzkz80dSHV1o2jePd1k7PYUdmQCigl5gpwtyW Jz99+1voWDgCEx3Ab4R1YLgN8HhzyUZ9reLHn29P0ZGuYTX6uwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHXf005DtJ8iV9WGv0/j+fWCokLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVm MzYzNC03YjQ5LTRiOTctODc4Ny02ODBkNjE5NmU2ZTQvYjlhMjZjZjEtZTJhNy0z MDVkLThhYjgtNzFlMDRiNDQ0MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFlZjM2MzQtN2I0OS00Yjk3LTg3 ODctNjgwZDYxOTZlNmU0L2ExZWYzNjM0LTdiNDktNGI5Ny04Nzg3LTY4MGQ2MTk2 ZTZlNC5jcmwwHwYDVR0jBBgwFoAU64YxEagOCq33QaX8gmjaFICXvrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVmMzYzNC03YjQ5LTRiOTctODc4Ny02ODBk NjE5NmU2ZTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRWwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQChb+5OFbhCoq+9ZtEOfBUjx7tNOOChHWSpHLXWeTXz4J40YshqAen1 fXORozwpclr5qTUn2qCFVA1DZdL5tKFlRkzBkj708bwLSxSEsfJmMfbpGAYrFTk2 vdqpzjRO2qqLdiOqhMvB0G+bJHWjM4ODnT3BoqtuqMtV1ufX3nEebIEZjhrxv/Sn aU4kJjLvhr8y9ZKTv8kLrQ60iBZRM2S0QOmeDFeb3Hxz42ZBtCnpNofR6iPy4kfm tknleIf7uCb1OtGM+fbec9k+3qKddFpJ+pe/nRiq3i4ns8Vyc6lWujxu2nf5Q8Zm LJ3zDRKale8B5R6LoDKnmsbRszUMw/Mf -----END CERTIFICATE-----Generated at Mon Jun 16 21:00:45 2025 by rpki-client