$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa File: 3af3cf4a-452f-3c16-a0c5-87928368d443.roa (raw, json) Hash identifier: Ia5F6a/lNpY3JlDQiHrf2Jt9PMd9kXNBWuz2YcahRNM= Subject key identifier: 6B:B9:84:1D:A9:BE:E2:55:57:9E:E1:CF:99:35:A0:8E:9B:1C:8D:D8 Certificate issuer: /CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5 Certificate serial: 010D0C9F4328584A14655E3CDAAB8788BF175080 Authority key identifier: B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 2605:32c0:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:5e:3c:da:ab:87:88:bf:17:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=8454141c-893b-4a87-9756-7a4d8979330d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c9:96:18:8f:69:0c:91:3a:47:cc:cf:08:b3: 57:c5:48:ef:91:07:ef:6a:fa:55:34:81:51:b5:81: 8f:6b:f4:5d:ff:eb:29:b2:15:a7:90:d2:c4:08:7a: cb:af:f3:cb:b7:3a:72:b9:03:fa:f5:67:b3:9a:76: 6e:b3:78:65:e5:8f:14:83:72:51:08:bc:6a:ed:1b: 3b:5f:62:15:fe:be:42:32:78:4d:fe:29:d7:e0:d8: 70:5d:e4:f4:18:07:e7:ca:9b:b3:68:9d:22:2b:ae: 9a:5b:05:62:ab:81:75:33:17:cd:d4:a0:92:c2:36: d3:b8:ed:b8:43:67:ef:40:21:ab:39:b7:92:6c:46: 71:12:a0:f4:88:86:a4:d4:4f:67:df:7f:e6:e1:52: 2d:f3:98:9c:6d:12:0e:b8:db:f4:a7:f4:eb:04:94: c1:af:4b:be:85:0a:62:f9:d2:df:7e:41:6c:db:04: fe:99:fd:bd:26:da:62:3b:4f:f7:73:7d:2e:63:35: f5:9b:9d:52:c0:a3:fc:6c:51:09:88:fb:11:89:b0: 06:a3:12:bf:9c:5c:39:d2:b3:a3:a6:cd:a8:df:12: e8:04:a3:f9:fa:c6:3e:c9:41:c0:a7:bf:f6:74:ec: 66:df:e6:49:4f:8a:0b:f5:2c:64:f8:a8:cb:b2:3b: 19:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B9:84:1D:A9:BE:E2:55:57:9E:E1:CF:99:35:A0:8E:9B:1C:8D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl X509v3 Authority Key Identifier: keyid:B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer sbgp-ipAddrBlock: critical IPv6: 2605:32c0:a000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f0:86:98:d6:cf:72:df:be:23:68:64:b0:6f:65:6c:f5:af: 4f:91:9f:9c:91:03:91:d1:c5:1b:c7:c6:4a:a4:40:cc:e9:50: 21:1c:91:ea:de:53:75:6b:7b:55:9e:4d:d5:8b:fe:b7:02:c5: a7:d7:47:f4:58:bb:b1:41:12:95:de:d4:d2:80:61:1e:b6:85: 28:cb:45:f4:c0:49:03:e5:2a:06:cd:bc:de:0f:f2:a9:3b:37: 1d:71:46:e6:04:42:71:70:a4:80:32:fe:b1:1c:13:8a:2e:8d: 45:d6:5c:5b:9c:1a:9f:3d:e1:5a:63:09:7a:70:af:7b:ec:92: 38:ed:d8:f1:c2:61:0b:9d:47:77:c3:5b:07:b6:e9:df:c6:31: f4:f1:ed:16:00:57:7a:16:92:b8:0c:91:30:82:c8:7b:6e:6b: 21:52:8d:fa:52:06:3d:0a:c5:ac:aa:a3:07:5d:7a:fc:ef:f6: fd:30:1b:d8:9a:bf:c3:4b:8f:b5:f4:ad:08:67:2a:98:d8:e6: 03:cf:a0:9c:d1:47:c4:55:e4:3a:e4:50:52:21:59:8b:ef:d7: 02:17:1e:d7:51:a0:88:3a:42:96:e8:8c:e3:c3:15:4d:de:87: dc:6f:d0:12:2f:8c:28:1f:60:7d:db:2d:61:e5:9f:d3:14:fd: 66:a6:30:d5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoUZV482quHiL8XUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjMmZjYjUtODIyNC00MGFhLWJhY2UtMjMwZmNkZWZi YWE1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ODQ1NDE0MWMtODkzYi00YTg3LTk3NTYtN2E0ZDg5NzkzMzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8mWGI9pDJE6R8zPCLNXxUjvkQfvavpVNIFR tYGPa/Rd/+spshWnkNLECHrLr/PLtzpyuQP69WezmnZus3hl5Y8Ug3JRCLxq7Rs7 X2IV/r5CMnhN/inX4NhwXeT0GAfnypuzaJ0iK66aWwViq4F1MxfN1KCSwjbTuO24 Q2fvQCGrObeSbEZxEqD0iIak1E9n33/m4VIt85icbRIOuNv0p/TrBJTBr0u+hQpi +dLffkFs2wT+mf29JtpiO0/3c30uYzX1m51SwKP8bFEJiPsRibAGoxK/nFw50rOj ps2o3xLoBKP5+sY+yUHAp7/2dOxm3+ZJT4oL9Sxk+KjLsjsZdwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGu5hB2pvuJVV57hz5k1oI6bHI3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMWMy ZmNiNS04MjI0LTQwYWEtYmFjZS0yMzBmY2RlZmJhYTUvM2FmM2NmNGEtNDUyZi0z YzE2LWEwYzUtODc5MjgzNjhkNDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzFjMmZjYjUtODIyNC00MGFhLWJh Y2UtMjMwZmNkZWZiYWE1L2MxYzJmY2I1LTgyMjQtNDBhYS1iYWNlLTIzMGZjZGVm YmFhNS5jcmwwHwYDVR0jBBgwFoAUsyEefqI73O8Sc7jmR075Z0ZYYLEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMWMyZmNiNS04MjI0LTQwYWEtYmFjZS0yMzBm Y2RlZmJhYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgUywKAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKvCGmNbPct++I2hksG9lbPWvT5GfnJEDkdHFG8fGSqRAzOlQIRyR 6t5TdWt7VZ5N1Yv+twLFp9dH9Fi7sUESld7U0oBhHraFKMtF9MBJA+UqBs283g/y qTs3HXFG5gRCcXCkgDL+sRwTii6NRdZcW5wanz3hWmMJenCve+ySOO3Y8cJhC51H d8NbB7bp38Yx9PHtFgBXehaSuAyRMILIe25rIVKN+lIGPQrFrKqjB116/O/2/TAb 2Jq/w0uPtfStCGcqmNjmA8+gnNFHxFXkOuRQUiFZi+/XAhce11GgiDpCluiM48MV Td6H3G/QEi+MKB9gfdstYeWf0xT9ZqYw1Q== -----END CERTIFICATE-----Generated at Sat Jun 14 06:38:23 2025 by rpki-client