$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/383a3fcc-da13-31fe-9fb7-abe63f181588.roa File: 383a3fcc-da13-31fe-9fb7-abe63f181588.roa (raw, json) Hash identifier: QPFbIQCWdKOLwrtPmFXaIO9DS5OSB5HzTkuKAc4Mj6w= Subject key identifier: D7:99:C6:65:9A:84:9C:36:D8:69:AE:50:7B:02:4E:21:BB:09:3E:EE Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAF0CD44E1774BB6B47700 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/383a3fcc-da13-31fe-9fb7-abe63f181588.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 54858 IP address blocks: 2607:f060:a000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:f0:cd:44:e1:77:4b:b6:b4:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=edb0ef9b-0695-411c-81e1-90e7292aebed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:96:20:06:23:13:11:cd:4a:09:ec:79:1f: 3d:04:85:10:f5:00:0b:18:be:c7:b0:87:fd:d1:95: 96:26:d8:fc:c9:10:45:6c:e5:b6:c7:a4:a5:19:12: 89:b9:d7:57:34:a5:6e:9c:cf:79:65:f1:4f:13:f1: b4:67:df:17:9a:e3:27:1c:3a:97:49:8a:68:5c:65: 3d:49:9d:04:ad:6d:4e:85:81:1f:0b:6d:bc:0d:70: 40:3c:56:21:20:95:a4:83:88:75:5b:09:e0:70:19: 36:87:3d:3e:71:c0:c8:38:c3:dd:c0:97:df:9a:9b: f3:3b:26:0f:db:98:76:57:45:fa:ad:fd:c0:10:6a: 22:95:70:74:3e:15:b4:51:c9:97:6f:b8:13:8c:7c: 5f:cb:19:a7:62:7c:ae:fb:1b:24:d0:4c:6f:fd:eb: e9:12:00:83:74:c1:60:1c:50:59:20:8a:a0:32:f2: fe:27:59:46:72:9e:96:aa:ca:35:18:c9:ee:e6:45: f1:fe:f4:28:df:93:d6:7b:97:d7:e7:fa:9b:c7:89: bc:39:67:6d:e6:75:9e:87:13:38:c8:03:a0:8f:92: a7:a9:69:f5:1a:11:00:ce:be:61:45:d6:06:59:94: c6:8e:08:f3:40:c4:0a:40:57:00:16:b4:7e:c2:aa: 02:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:99:C6:65:9A:84:9C:36:D8:69:AE:50:7B:02:4E:21:BB:09:3E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/383a3fcc-da13-31fe-9fb7-abe63f181588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2607:f060:a000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:39:a6:8f:78:46:e7:47:a2:c7:84:0d:86:ea:9f:fd:09:28: 67:86:45:3a:bb:11:7c:9f:dd:0e:34:bf:d4:91:2f:36:3d:33: f2:d3:4c:bc:32:05:5d:78:3f:b0:bc:f3:0f:69:27:48:c6:6d: 26:81:cb:d8:1b:a2:a8:2f:05:ef:b6:66:78:14:77:f9:c7:96: 6f:11:8d:90:2b:56:05:e8:5d:7c:0c:5b:f6:4a:75:78:2c:59: d7:c1:21:b4:4b:1a:b0:1f:1d:50:b8:6a:eb:9a:58:9a:d3:bf: 5c:61:8e:95:58:76:04:8c:1d:17:75:09:11:e2:2a:52:3d:aa: a3:3e:6f:a7:bf:0c:f4:5a:29:d7:14:d6:93:53:32:52:98:f8: 99:6e:4b:e4:e4:e4:f2:bb:a0:7e:ad:1d:5d:76:58:bd:90:5c: 43:6a:f9:f0:91:c7:58:f4:da:c3:a9:72:24:90:f2:b3:d2:e2: 4f:69:dc:1b:71:7f:86:e8:cf:b1:e1:b8:e1:42:4f:8f:c5:e9: f1:32:72:18:7a:68:50:e7:c0:c9:42:70:9e:d8:b6:18:ed:59: fd:92:3a:0f:77:39:4c:ca:1d:ea:1e:34:3c:9c:2b:41:a9:c5: 8d:ed:43:74:af:db:d7:fc:f8:3e:a2:30:a4:c9:9a:70:90:6d: 86:f0:ed:94 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoquvDNROF3S7a0dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZWRiMGVmOWItMDY5NS00MTFjLTgxZTEtOTBlNzI5MmFlYmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5yWIAYjExHNSgnseR89BIUQ9QALGL7HsIf9 0ZWWJtj8yRBFbOW2x6SlGRKJuddXNKVunM95ZfFPE/G0Z98XmuMnHDqXSYpoXGU9 SZ0ErW1OhYEfC228DXBAPFYhIJWkg4h1WwngcBk2hz0+ccDIOMPdwJffmpvzOyYP 25h2V0X6rf3AEGoilXB0PhW0UcmXb7gTjHxfyxmnYnyu+xsk0Exv/evpEgCDdMFg HFBZIIqgMvL+J1lGcp6Wqso1GMnu5kXx/vQo35PWe5fX5/qbx4m8OWdt5nWehxM4 yAOgj5KnqWn1GhEAzr5hRdYGWZTGjgjzQMQKQFcAFrR+wqoCTwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNeZxmWahJw22GmuUHsCTiG7CT7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMzgzYTNmY2MtZGExMy0z MWZlLTlmYjctYWJlNjNmMTgxNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfwYKAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKTmmj3hG50eix4QNhuqf/QkoZ4ZFOrsRfJ/dDjS/1JEvNj0z8tNM vDIFXXg/sLzzD2knSMZtJoHL2BuiqC8F77ZmeBR3+ceWbxGNkCtWBehdfAxb9kp1 eCxZ18EhtEsasB8dULhq65pYmtO/XGGOlVh2BIwdF3UJEeIqUj2qoz5vp78M9Fop 1xTWk1MyUpj4mW5L5OTk8rugfq0dXXZYvZBcQ2r58JHHWPTaw6lyJJDys9LiT2nc G3F/hujPseG44UJPj8Xp8TJyGHpoUOfAyUJwnti2GO1Z/ZI6D3c5TMod6h40PJwr QanFje1DdK/b1/z4PqIwpMmacJBthvDtlA== -----END CERTIFICATE-----Generated at Sun Jun 15 23:35:42 2025 by rpki-client