$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa File: 0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa (raw, json) Hash identifier: CsQe5rgCyHtS+Z9WG6rYhz5h1MJOq72dGvYn8Al63jc= Subject key identifier: 98:7A:45:A9:32:CA:D1:CA:43:F2:93:79:DD:41:5C:F6:D6:39:6C:D6 Certificate issuer: /CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6 Certificate serial: 010D0C9F43285849D85F8E2CA8118F5E92955780 Authority key identifier: 95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 14585 IP address blocks: 2604:65c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:8e:2c:a8:11:8f:5e:92:95:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=aa9d77fd-0e8c-48bc-8b2c-ba153a297f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8f:32:0e:84:11:4f:6c:e0:97:c3:6f:f8:c1: 40:95:84:67:36:d2:4d:70:32:07:59:80:b7:62:24: 01:6f:82:c5:df:3e:d5:c0:39:ce:46:71:16:89:d1: 6f:64:67:2f:f4:6f:c6:e3:f2:3c:22:a5:ce:e7:fc: 0f:b8:25:f8:44:f1:d8:72:99:63:df:29:1c:6b:8c: 81:92:f8:df:78:6d:1f:de:c1:97:c8:77:4a:dd:ed: 76:a4:14:92:5c:3c:65:5d:ba:4e:68:a8:ed:b6:44: 36:84:9b:74:1c:86:3c:13:35:c5:08:0c:21:20:b0: c0:5a:c2:2d:4e:5b:9f:11:b0:c9:28:da:85:29:b6: 16:49:96:fa:c0:fd:88:07:7e:8c:5e:aa:63:b0:cb: 22:52:e4:98:81:9f:96:c6:eb:de:5a:6f:1b:6b:42: f3:fa:bd:2c:a2:ed:31:1b:02:51:df:17:57:d7:33: 83:b7:cf:3e:67:39:a0:21:ad:7e:73:67:f8:d9:4e: 6d:25:83:4a:9e:1d:91:42:25:4d:6b:9a:1d:f6:7d: 9e:71:eb:c4:e4:25:b5:d8:df:72:7c:ee:d9:f6:40: 4e:19:f6:3d:31:d6:2f:80:bf:f2:aa:ce:69:3b:49: fd:ae:bd:88:ca:b6:d4:da:f6:65:b6:8e:2f:16:44: b9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7A:45:A9:32:CA:D1:CA:43:F2:93:79:DD:41:5C:F6:D6:39:6C:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl X509v3 Authority Key Identifier: keyid:95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer sbgp-ipAddrBlock: critical IPv6: 2604:65c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f5:dd:8d:e0:cd:95:0b:96:96:a5:aa:59:0e:0e:82:9e:4f: ba:0d:5c:63:e3:04:99:23:1f:fb:d8:7c:4b:03:5d:f0:75:01: 05:85:92:60:79:a0:ee:b9:df:17:c4:90:06:6d:29:b9:cf:36: 12:bf:8d:46:85:4f:56:50:24:37:81:af:c9:59:ca:2c:20:1d: 94:db:35:c1:03:eb:18:64:13:7a:ed:d1:4e:51:06:a0:67:10: d1:09:88:67:16:5f:0b:74:4d:c4:ec:87:20:9e:92:34:1e:5e: a8:ce:6d:fd:a7:3a:93:7a:bd:b3:da:ac:5c:ae:31:17:96:91: f8:a1:27:2d:9b:46:d5:62:7d:2e:91:7e:48:31:b3:36:a5:ca: c2:ae:e8:b8:9d:d5:3c:03:a7:d1:29:4a:8f:c1:a4:de:5b:0b: 1e:03:8d:70:cb:ce:b3:ff:d4:56:9a:6b:2a:20:2d:2e:c7:3c: e5:b4:e6:e7:a3:06:b6:56:65:b3:de:8a:2e:02:15:4d:cf:e3: 48:dd:06:a1:71:04:6f:1d:f3:09:cc:97:53:08:08:f6:08:e5: b8:90:09:64:54:55:b7:60:d5:bd:9d:78:14:f9:08:0a:27:2c: 76:7b:68:12:8c:34:4d:63:44:6d:26:54:94:e7:00:59:a1:35: 9f:0e:e7:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnYX44sqBGPXpKVV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QzODE2MjYtMGI3MC00YmJjLWIyZjEtMGVhYzRmMDgw MWY2MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YWE5ZDc3ZmQtMGU4Yy00OGJjLThiMmMtYmExNTNhMjk3ZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY8yDoQRT2zgl8Nv+MFAlYRnNtJNcDIHWYC3 YiQBb4LF3z7VwDnORnEWidFvZGcv9G/G4/I8IqXO5/wPuCX4RPHYcplj3ykca4yB kvjfeG0f3sGXyHdK3e12pBSSXDxlXbpOaKjttkQ2hJt0HIY8EzXFCAwhILDAWsIt TlufEbDJKNqFKbYWSZb6wP2IB36MXqpjsMsiUuSYgZ+WxuveWm8ba0Lz+r0sou0x GwJR3xdX1zODt88+ZzmgIa1+c2f42U5tJYNKnh2RQiVNa5od9n2ecevE5CW12N9y fO7Z9kBOGfY9MdYvgL/yqs5pO0n9rr2IyrbU2vZlto4vFkS59wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJh6RakyytHKQ/KTed1BXPbWOWzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDM4 MTYyNi0wYjcwLTRiYmMtYjJmMS0wZWFjNGYwODAxZjYvMGUxN2Y2YTEtOWYyNi0z OGYxLTkzYmMtMGMwYTZkYTY4MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2QzODE2MjYtMGI3MC00YmJjLWIy ZjEtMGVhYzRmMDgwMWY2L2NkMzgxNjI2LTBiNzAtNGJiYy1iMmYxLTBlYWM0ZjA4 MDFmNi5jcmwwHwYDVR0jBBgwFoAUleDTwKqq2PWm8uGCyVlyFvBiUfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDM4MTYyNi0wYjcwLTRiYmMtYjJmMS0wZWFj NGYwODAxZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRlwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAz9d2N4M2VC5aWpapZDg6Cnk+6DVxj4wSZIx/72HxLA13wdQEFhZJg eaDuud8XxJAGbSm5zzYSv41GhU9WUCQ3ga/JWcosIB2U2zXBA+sYZBN67dFOUQag ZxDRCYhnFl8LdE3E7IcgnpI0Hl6ozm39pzqTer2z2qxcrjEXlpH4oSctm0bVYn0u kX5IMbM2pcrCrui4ndU8A6fRKUqPwaTeWwseA41wy86z/9RWmmsqIC0uxzzltObn owa2VmWz3oouAhVNz+NI3QahcQRvHfMJzJdTCAj2COW4kAlkVFW3YNW9nXgU+QgK Jyx2e2gSjDRNY0RtJlSU5wBZoTWfDue2 -----END CERTIFICATE-----Generated at Mon Jun 16 12:23:39 2025 by rpki-client