$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa File: f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa (raw, json) Hash identifier: 8kqk40vFNmu6BT4grXO6sGoowJ/DTFAjbt4eXN8xcU0= Subject key identifier: B8:3B:BB:42:65:59:34:7B:CF:C6:AA:E8:20:54:2D:80:DB:97:C4:C9 Certificate issuer: /CN=c17eacde-68de-455f-97dc-4d67847c03ff Certificate serial: 010D0C9F43285849C904F0FA6094BA6EADDB9200 Authority key identifier: 34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 21577 IP address blocks: 2604:d580::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f0:fa:60:94:ba:6e:ad:db:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c17eacde-68de-455f-97dc-4d67847c03ff Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=a771e1e7-7202-42a0-ba98-ef608b91f8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7c:eb:bf:aa:f7:cc:5c:c2:29:94:91:4b:51: 70:97:a3:3f:f8:a6:f5:5d:27:da:bf:48:cf:b5:ce: 76:28:3f:9d:de:d3:be:5a:db:75:95:13:f1:65:77: d6:f2:5b:d2:38:45:ac:ec:3d:78:1c:ea:76:ce:9b: 29:f1:fe:db:8b:b7:aa:36:71:c7:c9:54:f5:ba:01: 5e:a6:93:15:3c:3e:c7:da:22:d2:4a:a3:5f:ec:90: 2f:81:eb:64:a3:d7:39:08:54:1c:14:85:a3:60:20: d6:6a:3a:a3:b3:95:22:c4:ff:44:ac:11:c6:2d:8e: cf:70:33:12:f3:f8:30:6a:9e:b2:c6:c8:2a:2e:bb: fb:50:6d:ba:38:41:28:c8:80:89:d0:2d:12:68:2b: 59:fe:85:95:55:82:b0:3f:4e:ec:b7:a0:84:e7:83: b8:30:1c:b0:d8:83:5f:14:f5:2e:e8:11:6c:01:d5: 24:19:8d:13:60:ab:3c:4b:82:87:dc:b9:08:93:8f: d4:0f:a7:42:75:25:24:a3:6e:63:79:7d:14:ef:74: a0:25:ef:60:db:16:31:8d:ee:70:27:27:4f:3e:25: 99:5d:63:a7:b7:52:b8:7e:92:cc:ec:3a:1a:b9:9c: 3b:80:96:74:38:22:f5:5b:50:bb:45:bf:ca:4b:30: 64:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3B:BB:42:65:59:34:7B:CF:C6:AA:E8:20:54:2D:80:DB:97:C4:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl X509v3 Authority Key Identifier: keyid:34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer sbgp-ipAddrBlock: critical IPv6: 2604:d580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:23:3c:ae:f1:7a:26:a3:e7:a4:fb:d0:00:7b:90:5d:a5:26: 5d:c8:1b:65:89:d0:76:6e:13:e3:cc:f4:69:1d:e4:0a:24:68: dd:d5:90:97:bb:2a:e8:b4:54:3c:a4:c9:a7:17:f0:bf:e1:e2: a6:2f:44:e0:87:7d:dc:ed:72:d9:9e:70:62:e4:a8:67:29:24: 73:18:c5:77:09:75:b3:bd:a1:8d:2d:76:84:e6:da:6b:b9:a0: e3:b7:95:ed:8b:21:d9:a3:99:f3:3f:80:07:8f:3d:84:77:3d: e4:40:4d:0d:97:3e:db:74:cd:85:b2:d4:92:90:24:39:40:85: 36:8e:c4:a6:cb:96:f9:2d:45:47:55:bc:48:74:77:5c:ba:2d: dc:7f:79:6c:51:83:d5:2a:a1:d0:e1:0f:b7:2a:ae:33:2b:54: 6c:db:5c:fa:30:7e:4d:d1:d6:50:78:dd:1f:d4:56:2e:5e:e1: 74:d9:09:1e:9c:b3:f7:f5:74:63:af:ed:ab:6d:a0:0d:01:30: 0d:e2:08:f1:0a:59:f5:63:94:cf:79:8a:26:71:30:29:5c:a8: 31:c1:e1:4a:fe:54:92:45:0b:dc:0d:ce:35:26:8a:b8:da:50: 4d:10:e8:e2:d6:93:d7:d3:cb:67:d7:34:9f:48:34:4d:79:4a: e3:30:fe:99 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnJBPD6YJS6bq3bkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE3ZWFjZGUtNjhkZS00NTVmLTk3ZGMtNGQ2Nzg0N2Mw M2ZmMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk YTc3MWUxZTctNzIwMi00MmEwLWJhOTgtZWY2MDhiOTFmOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknzrv6r3zFzCKZSRS1Fwl6M/+Kb1XSfav0jP tc52KD+d3tO+Wtt1lRPxZXfW8lvSOEWs7D14HOp2zpsp8f7bi7eqNnHHyVT1ugFe ppMVPD7H2iLSSqNf7JAvgetko9c5CFQcFIWjYCDWajqjs5UixP9ErBHGLY7PcDMS 8/gwap6yxsgqLrv7UG26OEEoyICJ0C0SaCtZ/oWVVYKwP07st6CE54O4MByw2INf FPUu6BFsAdUkGY0TYKs8S4KH3LkIk4/UD6dCdSUko25jeX0U73SgJe9g2xYxje5w JydPPiWZXWOnt1K4fpLM7DoauZw7gJZ0OCL1W1C7Rb/KSzBkRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLg7u0JlWTR7z8aq6CBULYDbl8TJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jMTdl YWNkZS02OGRlLTQ1NWYtOTdkYy00ZDY3ODQ3YzAzZmYvZjFhYjc5ZDgtOWJhOC0z NDFmLWI0YWUtMTY1Y2RiOTY5YTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzE3ZWFjZGUtNjhkZS00NTVmLTk3 ZGMtNGQ2Nzg0N2MwM2ZmL2MxN2VhY2RlLTY4ZGUtNDU1Zi05N2RjLTRkNjc4NDdj MDNmZi5jcmwwHwYDVR0jBBgwFoAUNPoZkyy8mDwALlB7+J68csnzvK8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jMTdlYWNkZS02OGRlLTQ1NWYtOTdkYy00ZDY3 ODQ3YzAzZmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTVgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASIzyu8Xomo+ek+9AAe5BdpSZdyBtlidB2bhPjzPRpHeQKJGjd1ZCX uyrotFQ8pMmnF/C/4eKmL0Tgh33c7XLZnnBi5KhnKSRzGMV3CXWzvaGNLXaE5tpr uaDjt5XtiyHZo5nzP4AHjz2Edz3kQE0Nlz7bdM2FstSSkCQ5QIU2jsSmy5b5LUVH VbxIdHdcui3cf3lsUYPVKqHQ4Q+3Kq4zK1Rs21z6MH5N0dZQeN0f1FYuXuF02Qke nLP39XRjr+2rbaANATAN4gjxCln1Y5TPeYomcTApXKgxweFK/lSSRQvcDc41Joq4 2lBNEOji1pPX08tn1zSfSDRNeUrjMP6Z -----END CERTIFICATE-----Generated at Sun Jun 15 21:56:05 2025 by rpki-client