$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa File: 7dae324e-ec74-30c2-b235-13f1ed8695f9.roa (raw, json) Hash identifier: QH/c2cjDtjuKfpfxFIrdBn5LWKjj0wgQiYxFH3Ag7Yo= Subject key identifier: 83:1E:09:E1:8C:C7:62:71:8D:DE:9C:70:B6:56:20:C4:7E:59:A4:1F Certificate issuer: /CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Certificate serial: 010D0C9F4328584A23C0163579D80E85C8FFC380 Authority key identifier: 97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 394770 IP address blocks: 2607:68c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:16:35:79:d8:0e:85:c8:ff:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=fc173acd-fdf0-41f5-9669-bcfe6e2d3775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:25:dd:15:ca:3f:ef:95:a7:87:a8:ff:4e:ca: 8a:29:e4:ee:94:1c:ad:48:07:02:ce:22:6f:79:29: 18:42:ce:09:6e:f7:29:4f:da:0c:f3:15:d0:43:b7: b1:a0:50:4e:62:3c:01:fe:5d:17:98:28:b3:60:5b: 3c:da:02:b9:ee:42:88:e0:8f:8e:76:ad:e3:70:51: 02:14:77:ca:ad:cc:51:9e:ee:c5:90:bf:10:65:c6: b7:5a:a4:6f:51:63:ed:c5:06:88:3b:79:b4:d2:b0: 23:6c:83:7e:50:64:c2:15:b3:a5:38:35:e9:3b:c5: 84:93:27:77:a3:3d:23:16:62:e7:88:32:1b:80:fe: 09:29:04:81:d9:4b:40:d5:ea:04:91:0b:f4:85:e6: b1:e8:38:2b:95:e8:d8:ae:5e:20:50:e9:97:6f:1f: 5e:cd:48:bd:24:c6:8e:e8:eb:33:a0:8d:84:7f:d4: e1:97:86:e3:e8:0d:d9:1c:43:08:a5:b1:2e:33:d0: e3:f9:92:64:52:1f:8a:da:e3:cf:35:2a:85:87:40: 37:d5:f6:53:b0:1b:17:af:ee:20:53:b4:ca:ad:8c: 33:69:8c:0c:c1:eb:f7:b5:ba:ac:ac:be:9e:d0:bb: 19:99:7f:36:48:73:6c:37:f0:bb:e5:e9:2c:ca:54: 27:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1E:09:E1:8C:C7:62:71:8D:DE:9C:70:B6:56:20:C4:7E:59:A4:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl X509v3 Authority Key Identifier: keyid:97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer sbgp-ipAddrBlock: critical IPv6: 2607:68c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c3:87:89:db:b8:31:d9:09:30:bd:ee:54:41:ba:d2:bf:44: 4a:dc:b8:29:e6:4f:e5:ed:c1:29:90:70:e8:e5:ca:4d:77:d3: 8b:6f:a9:fe:bc:eb:1a:ea:ef:d9:4f:b6:22:fe:aa:79:7f:b2: 80:40:33:06:5a:1b:df:00:5c:fa:05:29:db:82:bb:9d:c1:98: 8e:03:a8:3d:bd:ba:cc:28:f0:b5:80:6f:b7:b4:ae:a6:4a:4b: 18:fa:ff:e4:c5:04:68:54:da:ee:3c:8e:7d:be:1e:a0:6a:75: b1:d6:2c:c2:3b:60:f8:9b:08:87:24:b6:71:81:3d:b2:21:51: 31:2f:f2:d2:7a:57:6f:d0:e0:ef:3c:92:45:d4:8d:17:7e:3a: 65:c3:d1:54:fc:69:70:3a:3a:2a:60:0d:22:ee:71:79:98:10: eb:17:ce:aa:e0:d3:26:01:9e:96:e5:06:15:03:2c:86:24:80: 86:3f:b6:d9:a8:e6:49:19:6c:d5:c3:61:8d:57:e6:bd:13:67: b7:8d:27:18:80:9b:6f:e6:44:95:c7:18:a1:8d:fb:7f:ee:ff: d2:b4:a0:e1:fa:cb:1f:95:17:95:68:07:c7:3b:0e:f7:df:15: 3b:a1:0a:8f:da:d1:67:31:0d:5a:05:0f:55:78:56:4c:e2:d3: 7b:9b:f4:08 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEojwBY1edgOhcj/w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1ZTZlODctNWY2NS00OTNiLWI2NjQtNWExMjgxOWNk YWE0MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZmMxNzNhY2QtZmRmMC00MWY1LTk2NjktYmNmZTZlMmQzNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSXdFco/75Wnh6j/TsqKKeTulBytSAcCziJv eSkYQs4JbvcpT9oM8xXQQ7exoFBOYjwB/l0XmCizYFs82gK57kKI4I+Odq3jcFEC FHfKrcxRnu7FkL8QZca3WqRvUWPtxQaIO3m00rAjbIN+UGTCFbOlODXpO8WEkyd3 oz0jFmLniDIbgP4JKQSB2UtA1eoEkQv0heax6DgrlejYrl4gUOmXbx9ezUi9JMaO 6OszoI2Ef9Thl4bj6A3ZHEMIpbEuM9Dj+ZJkUh+K2uPPNSqFh0A31fZTsBsXr+4g U7TKrYwzaYwMwev3tbqsrL6e0LsZmX82SHNsN/C75eksylQnGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIMeCeGMx2Jxjd6ccLZWIMR+WaQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVl NmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEyODE5Y2RhYTQvN2RhZTMyNGUtZWM3NC0z MGMyLWIyMzUtMTNmMWVkODY5NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWU1ZTZlODctNWY2NS00OTNiLWI2 NjQtNWExMjgxOWNkYWE0LzllNWU2ZTg3LTVmNjUtNDkzYi1iNjY0LTVhMTI4MTlj ZGFhNC5jcmwwHwYDVR0jBBgwFoAUl9Icz4rNdOOPsJMgf8bCkeBFoTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVlNmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEy ODE5Y2RhYTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQClw4eJ27gx2Qkwve5UQbrSv0RK3Lgp5k/l7cEpkHDo5cpNd9OLb6n+ vOsa6u/ZT7Yi/qp5f7KAQDMGWhvfAFz6BSnbgrudwZiOA6g9vbrMKPC1gG+3tK6m SksY+v/kxQRoVNruPI59vh6ganWx1izCO2D4mwiHJLZxgT2yIVExL/LSeldv0ODv PJJF1I0Xfjplw9FU/GlwOjoqYA0i7nF5mBDrF86q4NMmAZ6W5QYVAyyGJICGP7bZ qOZJGWzVw2GNV+a9E2e3jScYgJtv5kSVxxihjft/7v/StKDh+ssflReVaAfHOw73 3xU7oQqP2tFnMQ1aBQ9VeFZM4tN7m/QI -----END CERTIFICATE-----Generated at Sun Jun 15 23:17:42 2025 by rpki-client