$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/315d9381-681b-3acd-9f5e-9794115facf7.roa File: 315d9381-681b-3acd-9f5e-9794115facf7.roa (raw, json) Hash identifier: ovN2KlE4HmTgECzL3GmpNjM48SMAmVoQddQOTJRAPOY= Subject key identifier: 04:F7:47:2D:D8:26:A5:9B:7F:F3:C3:70:0C:55:A0:0D:A5:49:58:A7 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584A103535935C582631E0C0C3E0 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/315d9381-681b-3acd-9f5e-9794115facf7.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 32298 IP address blocks: 2600:cc00::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:35:93:5c:58:26:31:e0:c0:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=71e4329d-0758-4227-b754-32076018f0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:d7:3d:fc:7e:ae:b9:4f:a2:ca:4f:4b:89: 28:e2:62:2c:72:e7:91:2a:dc:4d:49:ce:d8:e7:e4: cb:fe:f9:75:ef:2c:2d:c2:82:28:5b:a7:1a:d9:41: 29:85:8c:0c:c8:61:ab:1a:97:5f:14:e5:ed:47:95: 79:39:bd:2c:71:b0:31:54:f7:02:0f:a9:e3:9b:a3: f3:a7:27:b8:75:51:a3:c4:80:54:41:28:07:54:37: dc:f6:38:5d:c3:de:5f:44:ed:ac:3c:6f:9f:e6:3f: 49:0c:c3:3f:e4:77:a6:02:0c:fb:ec:50:4d:2f:21: fb:cf:a5:89:31:c2:b5:d1:4d:f3:3d:0f:36:17:a2: f4:23:ef:3a:52:84:b9:20:c1:f3:9b:d4:7c:0f:ba: 9a:9d:b9:ed:b1:6c:85:27:0a:27:2f:6f:ef:8e:ca: 0e:ff:72:ed:2a:59:ad:d0:84:8e:b1:4f:bd:73:30: 58:d1:bc:14:01:07:e2:9f:e5:d6:d1:06:4a:bd:76: ea:f8:45:11:2c:1c:0c:78:15:a4:e5:e5:d8:be:26: 93:e5:ca:0f:e1:e3:1e:2e:94:b5:47:59:40:0a:27: 90:2b:cc:00:89:ee:98:b1:b3:39:cf:5e:ac:10:4e: 00:f6:e3:5a:95:5f:26:62:52:4d:cf:d7:fd:18:31: 16:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F7:47:2D:D8:26:A5:9B:7F:F3:C3:70:0C:55:A0:0D:A5:49:58:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/315d9381-681b-3acd-9f5e-9794115facf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv6: 2600:cc00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3e:1e:03:98:63:b2:df:82:7f:58:6c:37:0f:4b:3b:db:3f: cf:d7:2a:69:c6:27:da:06:ba:ce:25:6d:92:be:8b:8e:30:36: 77:e2:08:0a:c7:9d:c7:85:67:a1:84:62:81:fe:87:ab:ed:a7: 12:cf:43:25:34:78:91:bd:94:24:47:75:11:29:0b:7e:17:80: d5:1d:0f:bf:0e:3f:10:f6:1c:50:60:5a:ad:e1:9c:5d:0e:97: 70:e4:42:80:fa:25:cb:0d:9d:76:91:c1:e1:fd:06:b0:22:9e: b8:68:ce:c8:12:d5:23:8c:46:00:1f:43:f8:96:a5:9a:9e:df: bb:0b:62:4f:f4:93:37:33:68:9f:1c:46:00:c0:8d:de:57:8c: 38:f0:b8:c0:00:50:0f:51:a7:f8:db:96:89:5f:a9:4d:82:4a: 98:42:fe:13:5a:77:81:91:a7:09:54:e3:10:b7:25:b3:8e:f5: bb:04:64:ed:88:c4:9d:49:32:af:f5:d6:9a:3d:34:0f:31:8d: 6d:d9:34:c7:32:4e:ed:94:8a:ee:5a:f5:66:69:19:f9:0d:93: e8:ae:1f:d7:ed:a9:dc:31:54:98:d5:53:ea:f6:36:3e:82:40: 8f:7d:b7:dd:9e:c5:c9:52:ea:af:6c:39:b7:18:a9:97:d6:d4: c1:8d:12:e4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoQNTWTXFgmMeDAw+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NzFlNDMyOWQtMDc1OC00MjI3LWI3NTQtMzIwNzYwMThmMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIPXPfx+rrlPospPS4ko4mIscueRKtxNSc7Y 5+TL/vl17ywtwoIoW6ca2UEphYwMyGGrGpdfFOXtR5V5Ob0scbAxVPcCD6njm6Pz pye4dVGjxIBUQSgHVDfc9jhdw95fRO2sPG+f5j9JDMM/5HemAgz77FBNLyH7z6WJ McK10U3zPQ82F6L0I+86UoS5IMHzm9R8D7qanbntsWyFJwonL2/vjsoO/3LtKlmt 0ISOsU+9czBY0bwUAQfin+XW0QZKvXbq+EURLBwMeBWk5eXYviaT5coP4eMeLpS1 R1lACieQK8wAie6YsbM5z16sEE4A9uNalV8mYlJNz9f9GDEWcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAT3Ry3YJqWbf/PDcAxVoA2lSVinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMzE1ZDkzODEtNjgxYi0z YWNkLTlmNWUtOTc5NDExNWZhY2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgDMADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmPh4DmGOy34J/WGw3D0s72z/P1yppxifaBrrOJW2SvouOMDZ34ggK x53HhWehhGKB/oer7acSz0MlNHiRvZQkR3URKQt+F4DVHQ+/Dj8Q9hxQYFqt4Zxd Dpdw5EKA+iXLDZ12kcHh/QawIp64aM7IEtUjjEYAH0P4lqWant+7C2JP9JM3M2if HEYAwI3eV4w48LjAAFAPUaf425aJX6lNgkqYQv4TWneBkacJVOMQtyWzjvW7BGTt iMSdSTKv9daaPTQPMY1t2TTHMk7tlIruWvVmaRn5DZPorh/X7ancMVSY1VPq9jY+ gkCPfbfdnsXJUuqvbDm3GKmX1tTBjRLk -----END CERTIFICATE-----Generated at Tue Jun 17 21:05:02 2025 by rpki-client