$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d286ed7-a87d-3f27-9d7f-738f4a039bb1.roa File: 4d286ed7-a87d-3f27-9d7f-738f4a039bb1.roa (raw, json) Hash identifier: bde68K0zs7FfhESdXHfIhEPxzjgTv4qEe5RcywzAsyI= Subject key identifier: 9B:D1:BB:68:D8:F2:0C:38:A5:5B:6B:AF:41:72:AD:72:93:C2:10:92 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAEE6D8E6C527FBC297BD0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d286ed7-a87d-3f27-9d7f-738f4a039bb1.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11404 IP address blocks: 2604:4080::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:ee:6d:8e:6c:52:7f:bc:29:7b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=8d925fb0-fee5-4a75-8af2-96e831aadcba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:3d:da:8c:b2:0e:c2:b8:f0:c5:80:6f:1b: 4f:e7:2f:ec:16:e9:94:47:89:0c:f1:91:fc:27:9e: 49:4e:ca:44:0a:10:5f:05:17:67:bb:e9:60:14:c1: 14:e1:ab:0e:d8:58:1a:93:be:b1:99:32:0b:0e:34: fd:4d:33:34:78:36:26:81:f1:97:71:53:f0:ac:dc: f3:71:ef:3d:62:e3:66:b6:cc:73:e8:c3:72:9f:78: 69:a5:26:c9:3e:ef:ac:0c:8c:ef:e4:f7:5d:eb:64: 3b:3f:a1:2a:0b:48:3c:77:5c:1a:95:79:15:b9:49: 0e:ad:80:17:af:a1:1e:f5:00:88:bd:b6:2f:1a:ce: 34:4a:e6:fd:ba:11:bf:92:1b:5e:f2:4e:d1:24:59: a8:8e:40:e4:26:6b:4f:da:17:b3:3b:6d:f5:ef:81: ec:5a:9f:ef:58:1d:bb:38:47:8a:18:57:58:3c:ea: aa:31:75:ef:87:46:aa:2e:16:37:22:77:a4:03:c1: 8d:31:b6:82:c3:a5:d8:77:58:d4:7d:6c:9b:57:75: 59:88:ab:5c:e1:e4:44:0e:6c:43:74:d5:c9:25:2c: 8a:78:94:d7:c3:33:41:ad:58:c7:bb:54:ff:f4:05: af:2d:a4:ef:a6:de:41:63:62:27:9f:f0:84:9a:eb: e2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D1:BB:68:D8:F2:0C:38:A5:5B:6B:AF:41:72:AD:72:93:C2:10:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d286ed7-a87d-3f27-9d7f-738f4a039bb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2604:4080::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:07:42:aa:01:21:07:75:84:45:f8:15:ad:17:67:39:50:74: 2a:a9:d8:23:d0:93:ab:46:1c:d7:fe:5a:85:d1:3c:1f:f6:a2: 76:74:22:d9:bd:59:2e:02:02:83:ae:98:68:4a:63:52:54:0c: 6f:25:f2:ab:b6:22:04:de:6a:fc:05:ad:bc:a6:c8:f9:46:7d: e0:97:e4:b8:4b:5e:bc:94:71:b7:9e:9e:d7:3e:d9:ba:8d:56: 5d:94:eb:86:06:5e:7b:55:b2:fb:09:ef:af:60:b7:eb:ae:4d: 11:ec:49:5b:c2:4d:da:d4:c4:51:1f:f3:15:e1:f9:cb:5b:fc: b0:62:06:3d:c7:68:95:ba:a7:0f:b3:b3:c5:59:6c:ad:b2:7c: cf:8a:dc:08:10:65:dd:a1:2e:a1:fa:6d:93:6e:e8:de:83:91: dc:4f:23:8d:75:d0:e3:2d:11:ba:3d:c3:a8:1f:79:52:f2:e0: ad:42:cc:79:5a:b4:15:f4:e2:cb:b9:1d:2c:cd:c1:37:64:8d: db:13:5e:f1:64:5e:59:ee:d8:0b:91:d6:b5:6b:11:e9:6f:2d: f2:13:79:26:ea:6a:52:f5:53:4f:bb:d4:11:de:c6:23:0b:97: 8f:c5:ec:4b:d8:1c:79:ef:cc:c0:4d:09:a0:ae:fd:51:4c:12: b0:6c:7e:38 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoquu5tjmxSf7wpe9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk OGQ5MjVmYjAtZmVlNS00YTc1LThhZjItOTZlODMxYWFkY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKM92oyyDsK48MWAbxtP5y/sFumUR4kM8ZH8 J55JTspEChBfBRdnu+lgFMEU4asO2Fgak76xmTILDjT9TTM0eDYmgfGXcVPwrNzz ce89YuNmtsxz6MNyn3hppSbJPu+sDIzv5Pdd62Q7P6EqC0g8d1walXkVuUkOrYAX r6Ee9QCIvbYvGs40Sub9uhG/khte8k7RJFmojkDkJmtP2hezO23174HsWp/vWB27 OEeKGFdYPOqqMXXvh0aqLhY3InekA8GNMbaCw6XYd1jUfWybV3VZiKtc4eREDmxD dNXJJSyKeJTXwzNBrVjHu1T/9AWvLaTvpt5BY2Inn/CEmuviDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJvRu2jY8gw4pVtrr0FyrXKTwhCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNGQyODZlZDctYTg3ZC0z ZjI3LTlkN2YtNzM4ZjRhMDM5YmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRAgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANB0KqASEHdYRF+BWtF2c5UHQqqdgj0JOrRhzX/lqF0Twf9qJ2dCLZ vVkuAgKDrphoSmNSVAxvJfKrtiIE3mr8Ba28psj5Rn3gl+S4S168lHG3np7XPtm6 jVZdlOuGBl57VbL7Ce+vYLfrrk0R7Elbwk3a1MRRH/MV4fnLW/ywYgY9x2iVuqcP s7PFWWytsnzPitwIEGXdoS6h+m2Tbujeg5HcTyONddDjLRG6PcOoH3lS8uCtQsx5 WrQV9OLLuR0szcE3ZI3bE17xZF5Z7tgLkda1axHpby3yE3km6mpS9VNPu9QR3sYj C5ePxexL2Bx578zATQmgrv1RTBKwbH44 -----END CERTIFICATE-----Generated at Mon Jun 16 04:39:20 2025 by rpki-client