$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ce877e20-3760-3ae7-af09-9478dcb48f9c.roa File: ce877e20-3760-3ae7-af09-9478dcb48f9c.roa (raw, json) Hash identifier: aFt9cgF1sZUUKLKIrBtfffB0E6QjvnWlYEeUaEdxesQ= Subject key identifier: 3F:22:7D:AD:B4:9F:9D:E7:3B:4F:04:D0:71:7D:EB:B7:74:C4:8B:54 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F43285849C904DC3C7FCA2F345EE70480 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ce877e20-3760-3ae7-af09-9478dcb48f9c.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 13807 IP address blocks: 2604:9500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:dc:3c:7f:ca:2f:34:5e:e7:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=b4f52de7-2e23-4ed8-b53b-1177f97ff663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:ba:c1:82:02:9c:45:8b:59:39:1a:53:6c: e0:88:1a:5e:68:81:ec:62:d7:0e:ab:53:f1:76:38: d4:05:38:ba:3f:22:d2:f1:b1:01:31:75:81:0e:d3: ca:f9:04:c0:e0:ff:f6:0c:f6:34:2f:e7:01:d0:08: 48:47:72:45:9c:9d:64:19:de:2a:a0:ff:3c:c6:d0: 88:21:5e:a5:86:4e:0e:5e:ad:87:b8:17:9c:9d:e6: df:60:bf:86:ce:ed:5b:a9:ca:60:4e:94:44:6e:15: 8f:40:bb:c6:a3:27:76:f1:af:6f:7b:d6:a5:c1:4c: 42:c6:61:68:31:6f:bd:56:3e:88:19:3e:92:6e:22: af:e4:c6:74:c5:bf:ec:25:1c:58:e3:2d:d5:42:84: e3:5e:80:22:09:07:fb:df:f1:60:47:cc:9b:45:b8: 93:70:b3:1a:64:fb:36:39:2e:1b:ce:08:86:bc:b5: 79:d5:1f:e0:ba:ac:fa:ce:f0:51:f3:a7:a9:8d:20: b3:78:5b:9f:38:48:11:1d:84:f0:89:62:07:8d:17: 2b:54:d2:ab:e6:a9:52:14:03:2c:f5:b7:69:25:20: 27:db:31:64:6b:e5:68:f3:1f:0c:90:68:f8:a7:92: 32:58:5c:2d:cf:5d:68:01:13:7c:46:d2:79:4a:91: 3f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:22:7D:AD:B4:9F:9D:E7:3B:4F:04:D0:71:7D:EB:B7:74:C4:8B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ce877e20-3760-3ae7-af09-9478dcb48f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv6: 2604:9500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:81:15:d0:af:1c:51:5d:9f:81:d5:17:c3:fc:93:0b:38:28: a3:d2:03:04:55:c6:65:54:61:91:9c:2e:c7:0f:68:d1:a5:16: 56:c5:c8:92:af:4d:57:8f:34:c9:8e:5d:79:2b:82:45:f6:2d: fc:cb:31:26:ad:1b:63:ea:51:0c:93:c4:4b:41:3c:e9:53:58: a0:ee:84:01:40:71:ca:c2:6f:e1:34:6e:b2:26:b8:34:49:37: 4b:7f:31:32:b0:4b:90:ae:0a:b5:f2:92:a5:3b:2f:58:92:4b: 09:d8:9b:5b:e3:18:a7:19:8b:8d:5d:c2:5a:64:c0:b2:ad:87: d0:7e:96:62:35:b9:09:67:d2:52:cd:0f:50:94:75:11:44:99: 41:07:77:40:49:3a:b6:5d:ea:fd:f7:33:08:c0:7e:37:f6:b2: 1a:25:8b:2f:2f:47:77:a4:91:c5:7c:df:09:a2:57:cd:fd:72: 3d:92:22:9e:99:d7:1f:2f:7a:dd:40:27:a3:39:4f:45:dd:67: 54:d4:9f:c0:10:3f:b1:30:55:01:66:04:8d:ca:4c:76:97:9c: a6:7e:aa:8d:4f:ce:55:85:8d:6f:c0:ff:4b:07:06:17:be:41: 45:27:1c:fd:a9:00:d4:49:fb:83:a0:89:19:06:d4:00:a0:9d: 0a:f9:6d:77 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnJBNw8f8ovNF7nBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk YjRmNTJkZTctMmUyMy00ZWQ4LWI1M2ItMTE3N2Y5N2ZmNjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpW6wYICnEWLWTkaU2zgiBpeaIHsYtcOq1Px djjUBTi6PyLS8bEBMXWBDtPK+QTA4P/2DPY0L+cB0AhIR3JFnJ1kGd4qoP88xtCI IV6lhk4OXq2HuBecnebfYL+Gzu1bqcpgTpREbhWPQLvGoyd28a9ve9alwUxCxmFo MW+9Vj6IGT6SbiKv5MZ0xb/sJRxY4y3VQoTjXoAiCQf73/FgR8ybRbiTcLMaZPs2 OS4bzgiGvLV51R/guqz6zvBR86epjSCzeFufOEgRHYTwiWIHjRcrVNKr5qlSFAMs 9bdpJSAn2zFka+Vo8x8MkGj4p5IyWFwtz11oARN8RtJ5SpE/+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD8ifa20n53nO08E0HF967d0xItUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvY2U4NzdlMjAtMzc2MC0z YWU3LWFmMDktOTQ3OGRjYjQ4ZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSVADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUgRXQrxxRXZ+B1RfD/JMLOCij0gMEVcZlVGGRnC7HD2jRpRZWxciS r01XjzTJjl15K4JF9i38yzEmrRtj6lEMk8RLQTzpU1ig7oQBQHHKwm/hNG6yJrg0 STdLfzEysEuQrgq18pKlOy9YkksJ2Jtb4xinGYuNXcJaZMCyrYfQfpZiNbkJZ9JS zQ9QlHURRJlBB3dASTq2Xer99zMIwH439rIaJYsvL0d3pJHFfN8JolfN/XI9kiKe mdcfL3rdQCejOU9F3WdU1J/AED+xMFUBZgSNykx2l5ymfqqNT85VhY1vwP9LBwYX vkFFJxz9qQDUSfuDoIkZBtQAoJ0K+W13 -----END CERTIFICATE-----Generated at Mon Jun 16 05:14:52 2025 by rpki-client