$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/88d06485-5d98-30f8-83db-02c1cef141e4.roa File: 88d06485-5d98-30f8-83db-02c1cef141e4.roa (raw, json) Hash identifier: xJowsgvgInTATey5vN/btKHcbEudXvMM+eaJyv1Kx2s= Subject key identifier: 72:57:07:C6:BF:91:AF:78:AF:A7:30:9B:B5:0E:AC:00:E9:3F:1C:96 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F43285849806F226C6A045C0CCF7B8160 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/88d06485-5d98-30f8-83db-02c1cef141e4.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 63240 IP address blocks: 2605:5d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:22:6c:6a:04:5c:0c:cf:7b:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=2ee03915-a5a5-4b86-890d-38ead35b4633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:e6:76:92:75:6a:c4:de:c8:e3:e2:23:14: bc:9b:42:f5:1e:17:49:3c:ff:bc:ad:e0:57:5a:76: 45:bc:a6:64:37:14:9f:ae:35:11:14:d8:40:fa:09: 19:1b:22:82:2c:ba:c7:ac:9b:6f:9c:ed:c3:d6:02: db:fd:51:76:c1:e4:e3:fb:e3:2d:4b:8f:39:af:fe: 46:c8:3d:30:bd:8e:2e:71:8c:a5:bc:a0:71:6b:0a: 76:a4:39:a1:19:01:61:da:8b:09:2f:13:ee:93:78: db:16:e8:68:e9:3b:99:78:f6:21:32:54:fa:19:1b: 11:14:69:bf:6d:7b:b2:b7:4d:34:3c:91:68:82:d2: 9d:67:3f:d0:ed:72:e6:28:1a:75:41:cc:51:54:a3: 4f:1d:e1:03:af:54:0f:3e:f1:b2:63:69:a8:cd:da: 61:3b:99:be:35:ae:d2:81:0e:fc:33:71:c7:6f:9c: 1f:c1:7d:90:db:70:b1:d5:b0:82:e0:d5:21:b5:43: 6e:f1:4a:43:ce:46:da:b1:63:2d:10:53:30:96:2d: 29:0c:05:9f:4e:c4:fd:36:69:c5:db:1e:57:8c:64: 51:6b:6d:f3:9a:5b:99:b1:aa:8a:f2:2c:29:dc:dd: 95:6d:ec:1e:1a:c8:db:23:4f:d9:d8:5b:50:78:f3: 22:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:57:07:C6:BF:91:AF:78:AF:A7:30:9B:B5:0E:AC:00:E9:3F:1C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/88d06485-5d98-30f8-83db-02c1cef141e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv6: 2605:5d40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:35:8b:26:05:ee:e0:dc:94:30:3b:d4:47:a0:b2:bf:95:0a: fb:ff:2e:63:5c:66:d6:68:de:71:3b:ba:3a:dd:1c:fc:aa:34: 2d:7c:8d:d7:83:5a:8f:1d:6b:97:c9:57:31:ae:62:f8:ab:b6: 80:d6:0a:87:4e:42:65:e3:ba:91:d1:a8:4e:37:b7:90:f9:72: 5f:de:45:41:84:39:63:99:41:33:47:26:8a:25:df:13:70:97: 8d:ab:08:f2:c4:9c:2e:81:e7:58:85:89:f5:1a:8a:e5:aa:48: 25:fc:ef:1c:e8:9c:fa:88:de:2c:e7:33:c9:c9:d0:bc:f5:77: 4e:60:7b:4c:b8:bb:6d:ed:8a:56:73:ba:ea:f0:d3:64:fc:67: 74:86:8a:b3:09:1e:49:7e:9c:7e:1a:d1:9d:5f:ff:3b:88:62: 7f:f2:b8:72:57:84:01:80:0a:7f:9a:d2:9c:2e:12:3d:d0:fd: 47:b1:63:4a:8e:6c:d6:fa:5f:1d:78:e6:81:c7:04:a1:e6:30: e4:c1:62:d5:1c:0f:fe:a7:eb:c3:ce:97:6d:9f:91:f6:22:8a: fa:b0:81:da:b4:bd:9f:07:2a:41:29:80:6d:60:27:fb:99:64: 93:9f:db:5c:45:55:0f:dd:b9:0b:25:e8:c8:a5:3b:a0:4e:8e: 97:47:a4:88 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmAbyJsagRcDM97gWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk MmVlMDM5MTUtYTVhNS00Yjg2LTg5MGQtMzhlYWQzNWI0NjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3/mdpJ1asTeyOPiIxS8m0L1HhdJPP+8reBX WnZFvKZkNxSfrjURFNhA+gkZGyKCLLrHrJtvnO3D1gLb/VF2weTj++MtS485r/5G yD0wvY4ucYylvKBxawp2pDmhGQFh2osJLxPuk3jbFuho6TuZePYhMlT6GRsRFGm/ bXuyt000PJFogtKdZz/Q7XLmKBp1QcxRVKNPHeEDr1QPPvGyY2mozdphO5m+Na7S gQ78M3HHb5wfwX2Q23Cx1bCC4NUhtUNu8UpDzkbasWMtEFMwli0pDAWfTsT9NmnF 2x5XjGRRa23zmluZsaqK8iwp3N2VbeweGsjbI0/Z2FtQePMiUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHJXB8a/ka94r6cwm7UOrADpPxyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvODhkMDY0ODUtNWQ5OC0z MGY4LTgzZGItMDJjMWNlZjE0MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVdQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwNYsmBe7g3JQwO9RHoLK/lQr7/y5jXGbWaN5xO7o63Rz8qjQtfI3X g1qPHWuXyVcxrmL4q7aA1gqHTkJl47qR0ahON7eQ+XJf3kVBhDljmUEzRyaKJd8T cJeNqwjyxJwugedYhYn1Gorlqkgl/O8c6Jz6iN4s5zPJydC89XdOYHtMuLtt7YpW c7rq8NNk/Gd0hoqzCR5Jfpx+GtGdX/87iGJ/8rhyV4QBgAp/mtKcLhI90P1HsWNK jmzW+l8deOaBxwSh5jDkwWLVHA/+p+vDzpdtn5H2Ior6sIHatL2fBypBKYBtYCf7 mWSTn9tcRVUP3bkLJejIpTugTo6XR6SI -----END CERTIFICATE-----Generated at Mon Jun 16 15:26:09 2025 by rpki-client