$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/43384fc3-deb1-37e9-988c-78d975951fe7.roa File: 43384fc3-deb1-37e9-988c-78d975951fe7.roa (raw, json) Hash identifier: cjL2oqf9rVzCI9s0c1afdRAwdabY1L7Qn6MuF03Iss0= Subject key identifier: FF:67:AC:8C:DA:A2:5E:75:D2:FD:DE:29:C3:4F:46:72:13:E3:F1:F3 Certificate issuer: /CN=f0682b49-784e-4da6-8c82-9a4562d0b08c Certificate serial: 010D0C9F4328584A331AEBD51C643DB0C00CE900 Authority key identifier: C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/43384fc3-deb1-37e9-988c-78d975951fe7.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 19382 IP address blocks: 2620:13c:e000::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:eb:d5:1c:64:3d:b0:c0:0c:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0682b49-784e-4da6-8c82-9a4562d0b08c Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=b8379a2e-5624-4301-8ea0-25e2d1eb06ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:20:73:7f:fa:52:67:41:5c:d2:0c:33:c9: 0c:0d:3d:06:bd:ea:a4:00:34:c7:b7:a3:98:1a:bd: d0:ec:1a:00:2e:1c:71:3d:30:94:04:43:92:57:b0: ea:86:bf:fc:be:68:c9:a2:b0:cf:54:77:0c:24:84: a9:a3:d1:81:fb:6c:48:13:f8:5a:f9:5c:ef:e3:09: 99:7b:2f:00:90:82:e5:57:66:53:a6:50:26:39:38: cf:ee:a3:f4:a1:f9:cb:83:50:a4:7c:64:6c:49:e7: cf:83:8c:0d:3d:d1:1a:a8:a4:64:53:94:17:6b:42: 41:6a:73:f2:21:b2:dd:6d:72:a0:b9:07:c6:ec:ce: c9:57:cb:b7:f6:03:69:2a:1c:4c:57:1d:a6:a0:84: fd:3f:95:dd:27:7e:a3:f4:d2:78:17:3f:f5:f1:60: 4b:48:f2:9c:97:bd:58:73:7f:df:b6:58:31:15:22: 0e:16:27:88:64:db:be:a9:d4:67:b1:2d:bb:4b:c2: 38:e3:4c:c8:ca:c5:90:b2:9c:e4:c1:ae:1e:28:0a: 42:eb:f6:3e:4c:d6:98:52:80:3c:c7:e4:b0:e0:01: 70:a9:b8:96:33:95:bf:a8:31:e5:ab:db:69:b0:5a: 2a:2b:9e:d2:ed:0b:05:d7:45:ff:24:e3:87:00:e7: 09:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:67:AC:8C:DA:A2:5E:75:D2:FD:DE:29:C3:4F:46:72:13:E3:F1:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/43384fc3-deb1-37e9-988c-78d975951fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl X509v3 Authority Key Identifier: keyid:C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer sbgp-ipAddrBlock: critical IPv6: 2620:13c:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5c:a0:3b:81:e0:4a:2f:53:4f:89:7c:2b:b9:2c:bc:6c:3f: 8a:fd:6c:a2:80:c1:b6:86:f6:34:4a:cb:17:c3:70:19:df:84: 30:51:e4:34:ee:0a:c7:d4:82:b3:16:6b:a9:12:df:14:05:3d: e9:6d:33:90:06:97:4e:3e:6c:57:c7:70:9b:6d:48:97:7c:a0: 81:d2:0a:9b:a7:67:50:ed:cd:2a:9a:5c:a9:96:f5:ec:cf:c3: f5:f3:7f:5d:f4:f9:d1:d1:b1:5b:fc:a9:33:4f:0c:e6:5d:50: 71:1f:89:d7:e5:4e:76:ec:9a:96:e9:e8:71:e7:28:e4:d8:19: 0e:88:62:3e:20:25:2c:51:4f:41:54:d4:f5:39:d1:48:14:ad: a9:9c:f1:5e:9f:48:85:6c:f9:f0:85:73:b2:38:df:1f:e1:cf: ed:b6:bf:ec:4c:c4:ca:74:38:cd:b0:bf:e0:34:e1:ed:41:43: 5d:45:2b:68:81:6a:a0:16:a6:ed:55:59:79:b5:43:aa:1c:2d: 06:6a:0d:db:b5:c9:b5:5b:90:95:4b:eb:6e:84:9f:4c:5e:64: b7:ad:4f:1b:88:8a:9a:e7:69:e0:a4:76:fc:f1:81:06:9f:93: 96:cb:c0:2c:9b:59:1e:61:b0:ec:6c:ed:f0:dc:b9:d9:74:24: 6c:b1:72:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEozGuvVHGQ9sMAM6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2ODJiNDktNzg0ZS00ZGE2LThjODItOWE0NTYyZDBi MDhjMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk YjgzNzlhMmUtNTYyNC00MzAxLThlYTAtMjVlMmQxZWIwNmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHAgc3/6UmdBXNIMM8kMDT0GveqkADTHt6OY Gr3Q7BoALhxxPTCUBEOSV7Dqhr/8vmjJorDPVHcMJISpo9GB+2xIE/ha+Vzv4wmZ ey8AkILlV2ZTplAmOTjP7qP0ofnLg1CkfGRsSefPg4wNPdEaqKRkU5QXa0JBanPy IbLdbXKguQfG7M7JV8u39gNpKhxMVx2moIT9P5XdJ36j9NJ4Fz/18WBLSPKcl71Y c3/ftlgxFSIOFieIZNu+qdRnsS27S8I440zIysWQspzkwa4eKApC6/Y+TNaYUoA8 x+Sw4AFwqbiWM5W/qDHlq9tpsFoqK57S7QsF10X/JOOHAOcJJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP9nrIzaol510v3eKcNPRnIT4/HzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMDY4 MmI0OS03ODRlLTRkYTYtOGM4Mi05YTQ1NjJkMGIwOGMvNDMzODRmYzMtZGViMS0z N2U5LTk4OGMtNzhkOTc1OTUxZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjA2ODJiNDktNzg0ZS00ZGE2LThj ODItOWE0NTYyZDBiMDhjL2YwNjgyYjQ5LTc4NGUtNGRhNi04YzgyLTlhNDU2MmQw YjA4Yy5jcmwwHwYDVR0jBBgwFoAUw3a1SHitkqHaGdXUnQ0oIqrnR4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMDY4MmI0OS03ODRlLTRkYTYtOGM4Mi05YTQ1 NjJkMGIwOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABPOAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGBcoDuB4EovU0+JfCu5LLxsP4r9bKKAwbaG9jRKyxfDcBnfhDBR 5DTuCsfUgrMWa6kS3xQFPeltM5AGl04+bFfHcJttSJd8oIHSCpunZ1DtzSqaXKmW 9ezPw/Xzf130+dHRsVv8qTNPDOZdUHEfidflTnbsmpbp6HHnKOTYGQ6IYj4gJSxR T0FU1PU50UgUramc8V6fSIVs+fCFc7I43x/hz+22v+xMxMp0OM2wv+A04e1BQ11F K2iBaqAWpu1VWXm1Q6ocLQZqDdu1ybVbkJVL626En0xeZLetTxuIiprnaeCkdvzx gQafk5bLwCybWR5hsOxs7fDcudl0JGyxcm4= -----END CERTIFICATE-----Generated at Sun Jun 15 21:21:37 2025 by rpki-client