$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa File: 6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa (raw, json) Hash identifier: zGt6SAtjaFYZ7RN+2s+0jA8onGfGPgR/Mr3TVO7jtys= Subject key identifier: F8:AF:8B:69:43:92:EA:02:46:C6:80:7F:72:2B:2E:BD:41:C6:9D:38 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F43285849D594E183A738893D3B12A000 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 12129 IP address blocks: 2607:f790::/32 maxlen: 32 2607:f790:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e1:83:a7:38:89:3d:3b:12:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=a20d25d0-0c7f-499a-b035-eb9932d7720c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:08:68:50:24:58:84:7a:13:35:59:18:16: a2:66:df:ef:45:9e:24:31:f2:1b:43:bc:f8:7f:18: a6:05:9c:1a:36:c4:6f:da:dc:ea:a5:b3:fd:e7:2a: 2c:7a:9f:f0:d7:93:38:50:ea:f0:2e:62:df:45:43: 49:b8:10:c5:06:73:2f:ea:ea:cf:af:4d:e8:89:ae: 39:04:4d:a6:ae:52:96:d5:99:0b:1c:8c:18:19:1c: a7:b0:6d:84:b2:a1:0b:8f:99:08:30:90:c0:20:1d: ce:1f:0f:c3:97:97:b9:e4:ed:1d:ca:ce:43:3e:ad: 19:61:72:4e:d6:e9:22:b2:a2:8a:b8:54:ba:8c:fe: 31:a9:82:91:08:47:b4:21:60:d3:10:47:b4:5b:2d: d3:c7:b5:93:3a:84:7c:28:be:9a:d1:bb:9c:75:5f: 0d:90:21:59:07:00:44:1b:6f:ec:b4:1b:35:c0:e2: be:b4:2a:ba:c8:17:55:9c:52:ae:08:1e:63:b2:38: 82:88:a7:11:4a:ff:99:3a:71:47:83:a1:f9:bc:f7: 63:b6:b8:7d:b1:92:1e:48:b0:97:6a:db:13:bc:2c: d8:cb:8d:3c:b6:5f:e4:62:a9:ee:ae:63:e1:86:7a: f3:74:28:a5:42:53:3c:3b:d1:c5:50:88:8e:2f:36: f2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AF:8B:69:43:92:EA:02:46:C6:80:7F:72:2B:2E:BD:41:C6:9D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv6: 2607:f790::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c0:42:9a:15:83:e8:87:b7:2f:ce:bc:01:94:b3:34:05:e5: bf:d6:19:d9:34:b1:fa:26:d4:83:cf:7e:bf:4a:a2:76:52:76: d6:c7:2d:66:00:eb:08:b2:cf:f8:67:1a:82:c2:26:03:3a:71: be:da:bb:57:c0:ec:32:48:fc:34:f8:b8:c5:19:e5:b8:41:4f: 5c:06:72:6d:8a:f7:b3:58:8d:5c:e0:71:1a:43:07:d3:e3:6c: 9c:ad:8a:ba:a7:40:42:00:83:7a:3e:fc:91:b6:0f:6e:cb:2f: 75:1b:a2:a4:61:ab:6c:a1:78:2c:af:81:42:01:33:41:12:23: e6:b7:f7:a3:03:7a:9b:41:fe:7b:2a:ad:49:ba:8d:a9:5f:ca: 27:06:b2:c5:5b:07:15:81:f3:b3:0d:ea:98:41:ed:6e:e8:40: 2a:af:1c:28:e6:fd:9d:ec:06:83:30:30:4b:40:bf:1d:c3:96: 71:59:9d:61:6c:3b:e5:3a:18:20:e3:8f:01:c1:ee:53:99:ba: a8:a8:be:13:0d:fe:ae:38:2f:15:c9:f9:2b:a2:6e:a5:b2:74: dd:d2:fd:0a:54:e1:be:6f:f0:ac:dc:6f:31:a6:50:e4:29:b1: 2c:16:29:ba:2d:58:fc:a1:f6:2c:84:c0:5c:2f:91:d5:3d:22: 56:cb:4f:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnVlOGDpziJPTsSoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YTIwZDI1ZDAtMGM3Zi00OTlhLWIwMzUtZWI5OTMyZDc3MjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5wIaFAkWIR6EzVZGBaiZt/vRZ4kMfIbQ7z4 fximBZwaNsRv2tzqpbP95yosep/w15M4UOrwLmLfRUNJuBDFBnMv6urPr03oia45 BE2mrlKW1ZkLHIwYGRynsG2EsqELj5kIMJDAIB3OHw/Dl5e55O0dys5DPq0ZYXJO 1ukisqKKuFS6jP4xqYKRCEe0IWDTEEe0Wy3Tx7WTOoR8KL6a0bucdV8NkCFZBwBE G2/stBs1wOK+tCq6yBdVnFKuCB5jsjiCiKcRSv+ZOnFHg6H5vPdjtrh9sZIeSLCX atsTvCzYy408tl/kYqnurmPhhnrzdCilQlM8O9HFUIiOLzbyVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPivi2lDkuoCRsaAf3IrLr1Bxp04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNmJhOTRkZjMtMzVjNi0z MmMyLWE3YzAtZTFiMDgxN2YwNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf3kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQACwEKaFYPoh7cvzrwBlLM0BeW/1hnZNLH6JtSDz36/SqJ2UnbWxy1m AOsIss/4ZxqCwiYDOnG+2rtXwOwySPw0+LjFGeW4QU9cBnJtivezWI1c4HEaQwfT 42ycrYq6p0BCAIN6PvyRtg9uyy91G6KkYatsoXgsr4FCATNBEiPmt/ejA3qbQf57 Kq1Juo2pX8onBrLFWwcVgfOzDeqYQe1u6EAqrxwo5v2d7AaDMDBLQL8dw5ZxWZ1h bDvlOhgg448Bwe5TmbqoqL4TDf6uOC8Vyfkrom6lsnTd0v0KVOG+b/Cs3G8xplDk KbEsFim6LVj8ofYshMBcL5HVPSJWy09b -----END CERTIFICATE-----Generated at Mon Jun 16 00:32:40 2025 by rpki-client