$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/2102d3b5-5c47-3181-bcb5-1cd7600fa6c7.roa File: 2102d3b5-5c47-3181-bcb5-1cd7600fa6c7.roa (raw, json) Hash identifier: wxpS/nBA8KLPBd6GMxCTPxy1uRQizUuc7/bspoGv1Ec= Subject key identifier: 95:67:7E:20:06:22:D6:6F:8C:74:76:60:85:86:77:C9:98:2C:96:2A Certificate issuer: /CN=bc061f95-a504-48f1-88f1-fae53628511e Certificate serial: 010D0C9F4328584A77807EDB668917BB5EB8AA0F Authority key identifier: 14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/2102d3b5-5c47-3181-bcb5-1cd7600fa6c7.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 398885 IP address blocks: 2607:b940::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:7e:db:66:89:17:bb:5e:b8:aa:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc061f95-a504-48f1-88f1-fae53628511e Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=9c222ff8-516a-489a-be3e-8c1fec959f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:d7:a2:f4:65:86:b4:ec:39:1e:0b:37:39: 07:96:7e:18:85:4b:88:ca:67:77:6e:78:46:08:13: ec:55:72:2d:1e:43:45:5c:e7:64:b4:66:0b:00:ff: 0a:34:97:f5:23:55:e1:53:82:5e:95:b5:81:5f:61: ae:98:71:9a:9e:fb:cb:ba:44:9e:22:ca:96:14:6c: 13:da:32:a7:df:b2:c3:bd:ec:ef:a5:5c:ed:4e:0b: 1b:4c:a4:88:7c:d1:ff:7b:75:b5:06:b6:bc:05:66: ad:08:39:3b:ff:d1:5d:b3:d1:a4:49:d7:d1:6b:37: 66:41:ce:a4:1a:5e:64:58:1b:01:2b:0a:4b:cc:af: f6:fd:1e:7a:c5:54:da:78:14:3d:21:fd:89:25:30: 00:0b:6c:76:2a:56:a7:1d:b5:b3:c1:b2:75:16:e4: 3b:54:e0:85:66:74:0f:e2:9e:e8:59:85:0c:71:79: e6:71:74:bd:d6:de:86:b0:10:83:84:00:61:d6:86: ac:c6:08:2d:27:f1:13:df:96:0b:02:5a:5a:9c:d0: d7:0d:65:f4:9e:c4:a7:5a:d0:58:7b:7e:a3:e0:01: d7:7b:d3:d6:0c:27:32:bc:81:5d:22:59:0f:6c:7a: 2f:c0:6a:72:a1:db:f8:96:4b:c3:a5:f6:63:21:82: f2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:67:7E:20:06:22:D6:6F:8C:74:76:60:85:86:77:C9:98:2C:96:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/2102d3b5-5c47-3181-bcb5-1cd7600fa6c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl X509v3 Authority Key Identifier: keyid:14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer sbgp-ipAddrBlock: critical IPv6: 2607:b940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:34:df:5f:40:85:32:1b:d8:86:71:b8:b3:0d:34:38:b4:b7: d0:15:b3:9d:9c:c4:df:5a:2f:49:0e:dc:b6:b7:16:24:d5:88: a4:31:c8:8c:30:ae:f6:12:fd:e2:72:58:ae:08:c0:c8:b9:83: 4b:ce:da:79:40:91:7f:e0:84:4a:11:5c:bf:e1:58:19:e0:ab: 4e:2c:5a:d2:bc:3c:67:31:46:41:09:3d:79:d6:b0:5e:1f:48: 69:c8:b3:dd:8d:46:59:3e:58:44:c7:b4:9e:70:3f:39:75:36: 79:30:54:57:2e:4e:4d:60:43:0a:b2:63:36:d4:4f:8c:0b:b5: 43:a3:54:95:d7:aa:d8:67:85:69:40:d1:06:e4:14:a6:b4:20: 0e:ee:02:87:ab:ad:59:5b:13:90:e9:17:11:bf:16:3b:df:e7: a4:73:bf:48:20:19:d0:c9:f8:4a:de:69:0d:0e:de:07:b4:b6: 15:08:d4:3c:2d:c8:70:93:5c:49:f4:05:8a:95:37:d4:51:27: 31:02:42:8d:b2:50:1c:21:71:3f:fe:82:a6:19:eb:ce:80:6b: d9:a1:fa:27:fd:3e:63:6d:1e:f1:5a:0a:6c:8a:89:15:f5:9c: c9:35:9b:52:cc:f1:e2:48:a2:d3:fb:6d:5b:d3:43:20:b7:29: fe:3e:71:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp3gH7bZokXu164qg8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMwNjFmOTUtYTUwNC00OGYxLTg4ZjEtZmFlNTM2Mjg1 MTFlMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk OWMyMjJmZjgtNTE2YS00ODlhLWJlM2UtOGMxZmVjOTU5ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOnXovRlhrTsOR4LNzkHln4YhUuIymd3bnhG CBPsVXItHkNFXOdktGYLAP8KNJf1I1XhU4JelbWBX2GumHGanvvLukSeIsqWFGwT 2jKn37LDvezvpVztTgsbTKSIfNH/e3W1Bra8BWatCDk7/9Fds9GkSdfRazdmQc6k Gl5kWBsBKwpLzK/2/R56xVTaeBQ9If2JJTAAC2x2KlanHbWzwbJ1FuQ7VOCFZnQP 4p7oWYUMcXnmcXS91t6GsBCDhABh1oasxggtJ/ET35YLAlpanNDXDWX0nsSnWtBY e36j4AHXe9PWDCcyvIFdIlkPbHovwGpyodv4lkvDpfZjIYLybwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJVnfiAGItZvjHR2YIWGd8mYLJYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYzA2 MWY5NS1hNTA0LTQ4ZjEtODhmMS1mYWU1MzYyODUxMWUvMjEwMmQzYjUtNWM0Ny0z MTgxLWJjYjUtMWNkNzYwMGZhNmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmMwNjFmOTUtYTUwNC00OGYxLTg4 ZjEtZmFlNTM2Mjg1MTFlL2JjMDYxZjk1LWE1MDQtNDhmMS04OGYxLWZhZTUzNjI4 NTExZS5jcmwwHwYDVR0jBBgwFoAUFFAVosutB3c4zIGLkq2jLlFK84EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYzA2MWY5NS1hNTA0LTQ4ZjEtODhmMS1mYWU1 MzYyODUxMWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge5QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCENN9fQIUyG9iGcbizDTQ4tLfQFbOdnMTfWi9JDty2txYk1YikMciM MK72Ev3icliuCMDIuYNLztp5QJF/4IRKEVy/4VgZ4KtOLFrSvDxnMUZBCT151rBe H0hpyLPdjUZZPlhEx7SecD85dTZ5MFRXLk5NYEMKsmM21E+MC7VDo1SV16rYZ4Vp QNEG5BSmtCAO7gKHq61ZWxOQ6RcRvxY73+ekc79IIBnQyfhK3mkNDt4HtLYVCNQ8 Lchwk1xJ9AWKlTfUUScxAkKNslAcIXE//oKmGevOgGvZofon/T5jbR7xWgpsiokV 9ZzJNZtSzPHiSKLT+21b00Mgtyn+PnFM -----END CERTIFICATE-----Generated at Wed Aug 6 09:36:25 2025 by rpki-client