$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa File: b3b3910d-a610-3b46-a9cb-c5249e265700.roa (raw, json) Hash identifier: CgIm7jJRfWanDoIfYP9oN/fDrlnfRqGY/jjt7dfN0Ak= Subject key identifier: 0C:F6:75:25:9F:E0:07:7C:3F:87:BE:96:26:E8:64:28:57:25:F7:7E Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584A2C200CCA5552FDBF3307FDD0 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 21947 IP address blocks: 2607:f8e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:0c:ca:55:52:fd:bf:33:07:fd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=459996b0-0cb3-480e-811a-f1a0582d51ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:8a:72:1f:8b:6b:45:42:e9:28:d2:77:ca: 5a:41:ed:a0:28:96:f9:56:28:e5:9d:23:7b:a2:a8: 4c:d7:38:7b:4d:b3:17:8c:f6:53:a8:8c:16:c8:65: a3:35:1c:5b:a6:95:21:3d:57:29:83:bd:aa:d7:42: 5a:2f:56:5b:ae:8b:90:c7:e4:92:18:f4:df:eb:06: 73:0a:dc:88:f4:2c:77:6f:46:1e:b0:ae:01:8d:27: e5:9d:a8:2f:69:4f:e7:15:e4:bf:0c:7a:5f:c5:85: 2c:09:7d:0d:39:61:13:a8:c7:0d:64:02:fa:d4:c2: 76:a7:a2:9b:27:17:ee:29:f4:8d:db:b5:ee:97:9c: fa:5b:d7:33:11:49:eb:c5:b1:60:30:56:f4:2f:a0: 42:4a:00:ae:62:d3:92:6d:10:bd:55:44:19:10:09: 54:e2:13:5f:20:dc:9e:79:51:b8:53:23:db:15:cc: 9b:dc:8c:05:3e:13:04:51:a8:52:f0:26:62:77:da: ee:28:43:66:0e:bd:4c:38:d9:90:09:57:87:a9:5b: d1:20:96:60:42:a0:0b:73:be:60:3d:01:99:ef:25: b2:89:e4:6d:66:e7:82:b4:61:86:f1:0a:cc:a4:20: f6:35:04:35:de:19:35:ab:ba:13:a5:45:5d:58:3b: 03:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F6:75:25:9F:E0:07:7C:3F:87:BE:96:26:E8:64:28:57:25:F7:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e8:57:e1:51:63:76:95:59:bf:c5:e6:f4:91:8a:a8:35:9e: 2d:0a:bd:ad:ac:07:45:b3:d5:31:b4:b2:85:fc:54:fc:e8:e5: 87:e4:ac:fc:68:5b:21:5e:8d:86:df:4e:41:66:48:9b:5e:30: bd:b3:9a:a2:99:c8:ed:e7:b7:4e:a0:b8:95:46:b5:7f:fe:ba: 23:cb:14:99:76:f4:b1:b4:e2:98:03:25:42:e9:ae:e2:43:50: d2:25:ab:41:77:1e:5c:1e:42:43:d0:72:21:33:9f:d2:c4:4c: f8:e8:54:e6:6b:a0:68:ca:ee:5b:bc:51:5a:6e:46:3f:65:87: 46:4f:2d:19:d7:0a:da:48:be:5f:1c:c4:8d:9c:f2:70:6a:97: 0e:9e:27:b8:28:93:8d:f5:4b:b3:f0:8f:ef:21:e1:ec:a6:84: e1:68:62:a0:c0:cd:7c:e1:fb:e6:21:91:81:58:11:b3:8c:88: 3a:46:2b:86:e8:cc:fd:e1:6d:35:5b:6e:7c:89:c3:56:c7:11: 06:8c:99:e0:4b:1e:3f:48:45:45:21:54:f3:7e:82:ac:fc:b2: 9d:0d:d2:11:0e:ec:29:1a:29:a9:fc:a6:81:09:32:69:a7:51: ad:01:68:ac:4f:56:cc:73:52:29:59:ec:51:9e:7f:78:3e:4c: bc:1c:6f:c1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEosIAzKVVL9vzMH/dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk NDU5OTk2YjAtMGNiMy00ODBlLTgxMWEtZjFhMDU4MmQ1MWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT+Kch+La0VC6SjSd8paQe2gKJb5VijlnSN7 oqhM1zh7TbMXjPZTqIwWyGWjNRxbppUhPVcpg72q10JaL1ZbrouQx+SSGPTf6wZz CtyI9Cx3b0YesK4BjSflnagvaU/nFeS/DHpfxYUsCX0NOWETqMcNZAL61MJ2p6Kb JxfuKfSN27Xul5z6W9czEUnrxbFgMFb0L6BCSgCuYtOSbRC9VUQZEAlU4hNfINye eVG4UyPbFcyb3IwFPhMEUahS8CZid9ruKENmDr1MONmQCVeHqVvRIJZgQqALc75g PQGZ7yWyieRtZueCtGGG8QrMpCD2NQQ13hk1q7oTpUVdWDsDLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAz2dSWf4Ad8P4e+liboZChXJfd+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYjNiMzkxMGQtYTYxMC0z YjQ2LWE5Y2ItYzUyNDllMjY1NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf44DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA36FfhUWN2lVm/xeb0kYqoNZ4tCr2trAdFs9UxtLKF/FT86OWH5Kz8 aFshXo2G305BZkibXjC9s5qimcjt57dOoLiVRrV//rojyxSZdvSxtOKYAyVC6a7i Q1DSJatBdx5cHkJD0HIhM5/SxEz46FTma6Boyu5bvFFabkY/ZYdGTy0Z1wraSL5f HMSNnPJwapcOnie4KJON9Uuz8I/vIeHspoThaGKgwM184fvmIZGBWBGzjIg6RiuG 6Mz94W01W258icNWxxEGjJngSx4/SEVFIVTzfoKs/LKdDdIRDuwpGimp/KaBCTJp p1GtAWisT1bMc1IpWexRnn94Pky8HG/B -----END CERTIFICATE-----Generated at Mon Jun 16 01:21:22 2025 by rpki-client