$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa File: c062b811-5af4-3d93-883f-cd801dbdc422.roa (raw, json) Hash identifier: 2XPCwphwrFkuQEG/lfhwr1rYuFSqRGlYWOcaKvwHx8A= Subject key identifier: 0B:B7:F6:15:8A:EF:28:C5:C9:62:F4:85:50:98:48:31:5A:57:9C:FD Certificate issuer: /CN=68b39235-773a-4108-9528-465304a966b3 Certificate serial: 010D0C9F43285849F17FC0F6D4619B3F60381140 Authority key identifier: BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 63296 IP address blocks: 2605:fa40::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:c0:f6:d4:61:9b:3f:60:38:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b39235-773a-4108-9528-465304a966b3 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=5b2d9305-765c-4f20-9483-9beb765ebe2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b3:e4:b5:09:bd:56:12:a7:01:94:99:86:fe: 9f:21:92:56:a0:3c:2c:74:b5:e7:c1:68:d9:43:ef: cf:ed:8b:27:06:3b:5c:87:2a:95:c2:1c:0c:59:26: f1:c9:32:7c:cd:f6:11:33:24:da:ff:1f:ed:d7:e6: e8:0b:dd:97:f8:93:75:11:30:36:92:ea:47:22:6d: bc:d2:7e:f3:b4:a3:3b:b2:41:e3:e6:b1:32:f2:d0: 13:95:d6:d4:55:84:44:f9:47:cb:67:a3:2f:d7:11: 7c:37:09:e2:79:c7:a1:d9:4d:6a:9a:bb:09:44:51: 4b:22:1e:9f:4d:2f:f3:66:53:36:3d:42:f7:a7:38: 06:52:75:c0:e3:79:62:91:8d:62:19:51:93:22:72: 76:6d:2a:3a:3a:74:ca:90:6b:bf:01:6c:1e:0c:2b: 06:16:ff:64:44:f7:a9:96:bf:3d:2d:79:a5:67:b1: 3d:d9:42:88:d7:6d:90:fe:9a:33:1c:5d:06:51:bd: 08:d7:bf:9a:d3:b4:77:b1:85:75:b1:40:61:1d:34: 8f:bd:e8:51:95:df:de:de:5c:e1:dc:89:16:c8:04: 5f:b6:85:16:40:d0:71:98:66:5d:ac:5d:e1:4a:8b: fc:7e:46:66:20:dc:49:97:9b:f0:76:b2:5c:5d:c3: 5b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B7:F6:15:8A:EF:28:C5:C9:62:F4:85:50:98:48:31:5A:57:9C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl X509v3 Authority Key Identifier: keyid:BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer sbgp-ipAddrBlock: critical IPv6: 2605:fa40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:1f:e0:51:b7:f2:77:23:b0:9e:d4:64:56:f5:1f:0b:5f:3d: 75:82:53:93:44:f8:c1:93:10:69:27:d6:1d:86:f1:62:d6:03: 03:fe:2f:02:35:8f:fd:ba:68:cd:d6:24:ff:ac:28:4b:70:18: 71:54:70:c0:b5:20:b6:33:6a:f5:db:08:23:10:56:7c:a7:ce: 7c:ed:06:a2:6c:11:b0:26:fe:d9:f6:13:f8:59:f1:3a:3a:a6: 60:cf:f0:5f:f9:63:4d:dc:01:81:ff:a8:2d:e2:12:55:8b:b2: 6f:c8:86:0f:26:3e:a6:a2:63:17:78:bd:68:05:c1:a7:98:cf: c5:ea:bc:0f:db:c4:9e:a2:03:98:45:03:17:a9:be:f4:37:2c: a0:45:c5:a6:00:0b:f6:bf:59:32:04:b4:42:f7:60:e3:06:67: 9f:a3:92:1e:0f:82:db:da:5b:0f:fb:3d:73:e2:67:94:cf:27: 27:84:dc:74:64:e4:6b:82:df:de:77:f3:17:f6:b4:1b:26:82: d3:e9:33:62:8f:6b:b4:1a:de:77:05:a6:10:ae:23:72:57:88: 9e:19:08:72:d2:34:c6:2e:f1:cf:b1:b6:0f:ca:dd:95:7d:fb: 7d:34:17:02:16:6a:45:4c:2a:fe:41:5d:52:d9:a9:13:98:a3: 00:c1:55:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnxf8D21GGbP2A4EUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMzkyMzUtNzczYS00MTA4LTk1MjgtNDY1MzA0YTk2 NmIzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NWIyZDkzMDUtNzY1Yy00ZjIwLTk0ODMtOWJlYjc2NWViZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLPktQm9VhKnAZSZhv6fIZJWoDwsdLXnwWjZ Q+/P7YsnBjtchyqVwhwMWSbxyTJ8zfYRMyTa/x/t1+boC92X+JN1ETA2kupHIm28 0n7ztKM7skHj5rEy8tATldbUVYRE+UfLZ6Mv1xF8Nwnieceh2U1qmrsJRFFLIh6f TS/zZlM2PUL3pzgGUnXA43likY1iGVGTInJ2bSo6OnTKkGu/AWweDCsGFv9kRPep lr89LXmlZ7E92UKI122Q/pozHF0GUb0I17+a07R3sYV1sUBhHTSPvehRld/e3lzh 3IkWyARftoUWQNBxmGZdrF3hSov8fkZmINxJl5vwdrJcXcNbHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAu39hWK7yjFyWL0hVCYSDFaV5z9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OGIz OTIzNS03NzNhLTQxMDgtOTUyOC00NjUzMDRhOTY2YjMvYzA2MmI4MTEtNWFmNC0z ZDkzLTg4M2YtY2Q4MDFkYmRjNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjhiMzkyMzUtNzczYS00MTA4LTk1 MjgtNDY1MzA0YTk2NmIzLzY4YjM5MjM1LTc3M2EtNDEwOC05NTI4LTQ2NTMwNGE5 NjZiMy5jcmwwHwYDVR0jBBgwFoAUvreOD+NlP1rJBXpiTNx7ca7+RQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OGIzOTIzNS03NzNhLTQxMDgtOTUyOC00NjUz MDRhOTY2YjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX6QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDIH+BRt/J3I7Ce1GRW9R8LXz11glOTRPjBkxBpJ9YdhvFi1gMD/i8C NY/9umjN1iT/rChLcBhxVHDAtSC2M2r12wgjEFZ8p8587QaibBGwJv7Z9hP4WfE6 OqZgz/Bf+WNN3AGB/6gt4hJVi7JvyIYPJj6momMXeL1oBcGnmM/F6rwP28SeogOY RQMXqb70NyygRcWmAAv2v1kyBLRC92DjBmefo5IeD4Lb2lsP+z1z4meUzycnhNx0 ZORrgt/ed/MX9rQbJoLT6TNij2u0Gt53BaYQriNyV4ieGQhy0jTGLvHPsbYPyt2V fft9NBcCFmpFTCr+QV1S2akTmKMAwVUV -----END CERTIFICATE-----Generated at Thu Jun 19 05:44:39 2025 by rpki-client