$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/c730344e-7e34-3542-b771-2ccda9e850ac.roa File: c730344e-7e34-3542-b771-2ccda9e850ac.roa (raw, json) Hash identifier: QqfPvz2DIM02i7727qz09lLcsFaIbSAQ8rpN7rdk4Jk= Subject key identifier: C1:2F:54:EF:00:69:43:89:2A:2D:E4:7A:6F:F9:1F:AA:4F:73:44:66 Certificate issuer: /CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd Certificate serial: 010D0C9F4328584A9BCB766A9625E70344599EC8 Authority key identifier: 53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/c730344e-7e34-3542-b771-2ccda9e850ac.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 11821 IP address blocks: 2604:5d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:76:6a:96:25:e7:03:44:59:9e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=7e791768-d564-4e45-b638-ffeeb7006bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:7a:73:b8:26:e3:34:ac:ca:ce:87:d6:7b: b4:f6:89:1c:4f:88:8d:ba:d6:ee:16:a7:64:62:84: 87:71:f4:56:f9:95:34:08:b7:d7:4b:70:23:45:10: 71:f3:12:21:97:78:f9:3c:d2:ca:9d:90:34:2f:92: 69:8b:59:a1:ad:3d:53:6b:b0:d5:95:2c:c9:82:8f: 26:be:58:c8:0b:b1:0a:62:11:82:34:81:15:70:74: 12:31:a1:4a:4b:dc:e9:34:f1:db:3b:11:ee:8d:46: d0:af:70:36:2e:4d:a8:69:22:29:93:24:c5:10:7d: 86:15:c5:9e:04:56:f3:86:db:61:52:e5:39:a6:20: 5c:9a:43:4f:b4:bc:98:1e:79:9f:7b:79:84:eb:1b: 49:a4:b1:1b:c7:36:11:cf:3f:e2:e3:42:4e:22:9d: 7e:3c:d2:d5:31:d1:26:12:e6:40:30:bf:0f:2d:32: 82:27:29:b1:c9:a3:fe:bd:de:c3:f9:35:3e:e7:b7: c5:90:46:aa:d1:e0:38:73:60:18:3f:1f:df:27:e1: 0d:9f:8c:af:4c:c1:63:b7:5b:b3:95:3f:5c:4d:de: 49:ec:b1:24:90:d6:e2:ff:6f:48:a7:18:5a:33:72: 93:8e:42:52:d2:bd:8d:e7:4a:d0:b5:55:1c:18:d0: f5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2F:54:EF:00:69:43:89:2A:2D:E4:7A:6F:F9:1F:AA:4F:73:44:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/c730344e-7e34-3542-b771-2ccda9e850ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl X509v3 Authority Key Identifier: keyid:53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer sbgp-ipAddrBlock: critical IPv6: 2604:5d40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:0b:51:b1:0e:96:e7:b9:3c:d7:17:c2:70:b1:25:34:f4:77: a8:7e:a1:87:44:b8:91:9a:bd:db:c0:0a:55:2c:6a:87:37:95: c2:01:a1:f9:53:00:43:af:32:04:11:ea:f7:38:a4:0f:f9:ad: 4d:1c:44:67:d4:0b:38:8b:77:ed:7b:9e:f2:87:45:6a:31:e0: f6:6b:46:3c:a0:76:62:2a:49:d9:32:5a:be:81:5b:f9:e2:d6: 18:6c:4f:65:fe:d6:a0:5f:99:55:14:13:e9:16:31:14:1f:18: 75:d1:e4:d6:47:6b:ab:0c:1a:3a:88:85:f2:84:7d:da:e2:47: 73:de:b2:0f:90:5a:48:6a:de:22:d0:ab:b8:a6:28:5d:94:47: c4:9e:89:5b:1b:37:4b:05:98:ba:8b:47:f5:bb:3b:a8:7b:9e: 80:41:c0:dc:ed:50:86:8d:e1:82:13:4a:df:ee:42:e2:24:38: a0:fa:f9:81:6b:9c:2b:8e:01:20:7b:c1:f7:57:e4:a5:73:b6: b4:6e:50:1a:4c:c3:66:7d:cf:a4:5d:0b:e6:0d:c5:7f:49:e0: 1c:c4:e1:d9:64:19:e6:d2:fc:0b:bd:46:05:aa:b4:f1:78:1b: d5:53:97:9d:39:3a:17:ba:aa:a2:20:73:90:c6:a4:58:68:db: 74:8f:de:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqby3ZqliXnA0RZnsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMwNTljNGUtOWNiOC00NWNlLWE3MWMtYzNhNGNmMzc5 ZWRkMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk N2U3OTE3NjgtZDU2NC00ZTQ1LWI2MzgtZmZlZWI3MDA2YmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS16c7gm4zSsys6H1nu09okcT4iNutbuFqdk YoSHcfRW+ZU0CLfXS3AjRRBx8xIhl3j5PNLKnZA0L5Jpi1mhrT1Ta7DVlSzJgo8m vljIC7EKYhGCNIEVcHQSMaFKS9zpNPHbOxHujUbQr3A2Lk2oaSIpkyTFEH2GFcWe BFbzhtthUuU5piBcmkNPtLyYHnmfe3mE6xtJpLEbxzYRzz/i40JOIp1+PNLVMdEm EuZAML8PLTKCJymxyaP+vd7D+TU+57fFkEaq0eA4c2AYPx/fJ+ENn4yvTMFjt1uz lT9cTd5J7LEkkNbi/29IpxhaM3KTjkJS0r2N50rQtVUcGND11QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMEvVO8AaUOJKi3kem/5H6pPc0RmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYzA1 OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0Y2YzNzllZGQvYzczMDM0NGUtN2UzNC0z NTQyLWI3NzEtMmNjZGE5ZTg1MGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmMwNTljNGUtOWNiOC00NWNlLWE3 MWMtYzNhNGNmMzc5ZWRkLzJjMDU5YzRlLTljYjgtNDVjZS1hNzFjLWMzYTRjZjM3 OWVkZC5jcmwwHwYDVR0jBBgwFoAUU+z9lABv9PFrpVjIbhm02wYcX1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYzA1OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0 Y2YzNzllZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRdQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBVC1GxDpbnuTzXF8JwsSU09HeofqGHRLiRmr3bwApVLGqHN5XCAaH5 UwBDrzIEEer3OKQP+a1NHERn1As4i3fte57yh0VqMeD2a0Y8oHZiKknZMlq+gVv5 4tYYbE9l/tagX5lVFBPpFjEUHxh10eTWR2urDBo6iIXyhH3a4kdz3rIPkFpIat4i 0Ku4pihdlEfEnolbGzdLBZi6i0f1uzuoe56AQcDc7VCGjeGCE0rf7kLiJDig+vmB a5wrjgEge8H3V+Slc7a0blAaTMNmfc+kXQvmDcV/SeAcxOHZZBnm0vwLvUYFqrTx eBvVU5edOToXuqqiIHOQxqRYaNt0j95D -----END CERTIFICATE-----Generated at Wed Aug 6 00:46:53 2025 by rpki-client