$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/337b4a41-4259-3b79-b057-759503f23ee8.roa File: 337b4a41-4259-3b79-b057-759503f23ee8.roa (raw, json) Hash identifier: WEq9XAR+nZYqp6zpXEH4631TWKWQsyW6GatxCAyzcNs= Subject key identifier: 5A:36:B8:C4:EA:4E:05:0A:72:0E:F8:70:7A:8F:EC:27:68:9D:BC:2B Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584A51D06AC9D3A88B5093CDC580 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/337b4a41-4259-3b79-b057-759503f23ee8.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 2607:fb90:c150::/48 maxlen: 48 2607:fb90:c151::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:6a:c9:d3:a8:8b:50:93:cd:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=fac29f5d-5516-4b2c-8948-ff4523913c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:9b:a9:28:a0:4d:01:a6:b2:b8:e3:3a:8f: 4b:2a:d0:6f:8e:60:b9:b1:f5:78:d9:40:fe:90:66: 77:a4:6e:f1:5a:e1:01:83:c7:24:bd:af:52:e8:bc: d7:79:cd:e5:f7:c9:15:e5:a9:f1:c4:70:08:60:ae: f3:be:b3:8d:cb:4e:54:82:60:60:45:9e:36:bb:1f: 25:74:7c:98:f6:4c:ca:c4:08:c8:18:39:51:2b:e2: 2c:b1:09:1a:a0:da:66:4c:84:ac:2d:e0:78:a8:dc: 54:be:0f:36:96:c8:c3:20:a4:92:9d:c5:c0:bc:bd: 55:45:ee:9d:e6:a8:2d:7b:51:88:13:a8:df:2f:b9: 1f:93:2b:c5:ed:76:87:23:6f:79:57:f6:7e:0f:ee: ca:5e:80:d5:7d:6d:37:fd:01:b6:37:53:25:c9:34: 4d:b1:a9:55:a0:35:df:28:86:5b:1e:c9:58:70:bc: 04:c1:5d:83:42:2b:f5:c9:63:40:7a:16:d0:7a:fc: b5:ee:66:18:e0:4a:fc:1c:8a:c3:e2:6a:a7:2a:b0: a7:33:aa:26:64:5c:f3:e2:27:b5:de:2f:a1:15:0c: 7f:10:1f:af:62:76:ea:16:df:ac:c8:3c:eb:b4:16: 2b:41:e3:09:75:9b:ed:04:ab:cb:8d:43:5a:19:6d: e9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:36:B8:C4:EA:4E:05:0A:72:0E:F8:70:7A:8F:EC:27:68:9D:BC:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/337b4a41-4259-3b79-b057-759503f23ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fb90:c150::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1d:65:7e:6b:2f:4b:50:76:1b:88:38:5f:3e:93:93:4a:65: 33:23:1c:d4:44:f3:10:19:67:56:4a:2b:8c:e6:ab:f2:e1:a1: af:e0:c0:ae:1f:4c:ff:76:f4:18:c5:55:51:58:d5:71:7c:a3: dc:d7:a3:b2:dd:12:4a:ce:b0:fb:d3:43:72:9d:df:02:0d:d0: 8a:58:ee:09:d2:15:d2:81:fb:cb:4c:99:51:9c:0b:88:3a:65: 5d:ed:18:b7:bb:d4:1b:eb:64:13:da:2b:ad:a9:84:b2:e2:4c: 13:8d:c3:d8:a8:5c:4a:85:ba:95:b2:50:b7:b0:67:8b:27:0d: 13:2c:2a:ba:f1:60:90:08:fe:b7:2a:58:75:8c:c3:88:ff:1c: 75:e0:b5:fc:00:15:cf:68:df:30:37:d0:10:31:a9:c5:6b:c9: b0:59:34:4a:45:f9:a2:7f:b8:82:67:c5:c7:43:c7:40:15:b6: 54:70:b5:ec:09:ef:00:ad:72:65:a9:a6:57:c5:2b:0c:d7:31: 6a:70:89:35:61:41:67:c3:0a:67:dd:b5:e3:39:a8:26:90:1e: be:75:4f:62:e5:9c:bc:59:42:d0:83:7a:1d:b3:eb:d8:51:f6: 5b:80:4e:5f:82:e7:3d:a6:11:93:bf:cf:55:b5:bf:e0:5b:f7: f1:b7:83:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpR0GrJ06iLUJPNxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk ZmFjMjlmNWQtNTUxNi00YjJjLTg5NDgtZmY0NTIzOTEzYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt+bqSigTQGmsrjjOo9LKtBvjmC5sfV42UD+ kGZ3pG7xWuEBg8ckva9S6LzXec3l98kV5anxxHAIYK7zvrONy05UgmBgRZ42ux8l dHyY9kzKxAjIGDlRK+IssQkaoNpmTISsLeB4qNxUvg82lsjDIKSSncXAvL1VRe6d 5qgte1GIE6jfL7kfkyvF7XaHI295V/Z+D+7KXoDVfW03/QG2N1MlyTRNsalVoDXf KIZbHslYcLwEwV2DQiv1yWNAehbQevy17mYY4Er8HIrD4mqnKrCnM6omZFzz4ie1 3i+hFQx/EB+vYnbqFt+syDzrtBYrQeMJdZvtBKvLjUNaGW3pfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFo2uMTqTgUKcg74cHqP7CdonbwrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvMzM3YjRhNDEtNDI1OS0z Yjc5LWIwNTctNzU5NTAzZjIzZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgf7kMFQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEodZX5rL0tQdhuIOF8+k5NKZTMjHNRE8xAZZ1ZKK4zmq/Lhoa/g wK4fTP929BjFVVFY1XF8o9zXo7LdEkrOsPvTQ3Kd3wIN0IpY7gnSFdKB+8tMmVGc C4g6ZV3tGLe71BvrZBPaK62phLLiTBONw9ioXEqFupWyULewZ4snDRMsKrrxYJAI /rcqWHWMw4j/HHXgtfwAFc9o3zA30BAxqcVrybBZNEpF+aJ/uIJnxcdDx0AVtlRw tewJ7wCtcmWpplfFKwzXMWpwiTVhQWfDCmfdteM5qCaQHr51T2LlnLxZQtCDeh2z 69hR9luATl+C5z2mEZO/z1W1v+Bb9/G3gzw= -----END CERTIFICATE-----Generated at Wed Jul 2 01:08:29 2025 by rpki-client