$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa File: d770de6c-e795-3458-b3fa-76797a8fc14c.roa (raw, json) Hash identifier: Jredz3SVG9I7Ly2Ounv83N6mktE9rrHZT+2s0rngqFI= Subject key identifier: A8:DE:97:BC:3B:20:80:EE:AA:7C:78:17:0C:8D:D0:26:A2:22:3E:ED Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F4328584A549B18C2EAAE6E57385ACB80 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 229 IP address blocks: 2001:48a8:68f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:18:c2:ea:ae:6e:57:38:5a:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=e47cfbb9-d19a-4cf0-9996-53db30050838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:1a:90:27:c1:c4:22:56:a2:38:13:d3:aa: 2a:3f:d0:19:3d:46:76:f6:38:c8:80:a4:b2:28:34: f0:54:4e:1b:6c:cf:fa:2c:72:ce:fb:50:4f:d0:ce: 85:29:71:e1:f3:35:32:60:ea:5c:5f:25:99:7b:9f: bb:8b:12:7d:7b:9e:34:d7:9e:19:c5:cb:bb:96:fb: 3b:54:0b:37:6e:64:bc:2d:d1:4a:d4:5c:55:2d:ec: 34:bb:f2:b5:e5:4d:ea:60:79:b9:0a:7f:3d:22:17: 64:c6:dc:4a:21:43:6f:76:a5:aa:9d:c2:ac:a4:15: 0a:f9:be:6f:5e:f2:97:17:ca:e1:eb:59:2a:7d:95: c0:34:1c:dd:a0:3d:5e:2b:77:98:fe:e1:03:e2:da: 0a:5a:1f:43:f6:86:e0:90:17:78:72:63:0f:a9:e5: b7:2e:1d:07:34:c6:f4:55:f2:07:1a:e6:33:5c:50: 17:a6:ca:88:6e:8e:39:2f:3c:92:1c:5b:3a:22:31: 4e:1c:3b:77:5f:20:d1:cc:db:0b:ee:03:b3:e9:06: 8f:a6:29:67:ae:eb:09:93:24:f5:b4:0c:8e:36:84: cd:86:fd:65:a1:36:96:4c:e8:58:41:4a:04:27:ba: d6:da:4c:54:8b:e4:c6:db:01:b8:29:23:2d:1f:19: 5f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DE:97:BC:3B:20:80:EE:AA:7C:78:17:0C:8D:D0:26:A2:22:3E:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8:68f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:62:71:27:d0:54:57:88:43:74:fa:12:2f:27:2c:a9:0e:84: e8:53:1f:c5:9b:0c:7c:6d:34:f2:1f:f0:ab:69:51:56:63:13: f4:2f:f7:0b:2d:fa:7f:83:f0:45:13:97:ec:d8:bd:ab:d5:42: ee:7a:3b:28:45:a4:a2:8a:26:98:36:86:b1:28:c5:0f:4c:02: 0b:20:ab:fd:17:27:3d:47:79:7c:4f:1a:75:85:fa:5a:31:a5: ec:9a:29:eb:a8:69:e4:1e:dd:95:c4:9d:61:b7:c9:54:31:fc: fd:b7:c5:60:60:06:7a:29:55:4b:87:39:e2:a1:ab:4f:fb:16: 65:cf:c1:3a:88:11:67:c8:0d:a2:2e:67:24:b8:fe:14:53:55: 70:fc:cb:8a:95:fd:b6:ce:31:84:a4:c2:c9:d2:02:80:b3:0f: 6e:08:02:16:eb:a8:58:50:71:f7:94:bb:97:2e:52:f4:70:9f: 0c:98:e2:8f:47:75:e3:18:3a:ae:c8:9e:9a:26:5b:75:4b:2c: e4:89:45:3b:7c:5b:fd:68:12:c3:9c:2e:2b:36:79:75:ca:e6: d4:ca:fb:12:bb:c2:54:1b:79:bd:50:d3:ff:dd:7e:af:72:24: e4:a8:96:a2:57:70:f6:d4:36:8a:77:5c:2c:a3:92:7f:55:07: 0f:dd:9e:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpUmxjC6q5uVzhay4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZTQ3Y2ZiYjktZDE5YS00Y2YwLTk5OTYtNTNkYjMwMDUwODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRQakCfBxCJWojgT06oqP9AZPUZ29jjIgKSy KDTwVE4bbM/6LHLO+1BP0M6FKXHh8zUyYOpcXyWZe5+7ixJ9e540154Zxcu7lvs7 VAs3bmS8LdFK1FxVLew0u/K15U3qYHm5Cn89IhdkxtxKIUNvdqWqncKspBUK+b5v XvKXF8rh61kqfZXANBzdoD1eK3eY/uED4toKWh9D9obgkBd4cmMPqeW3Lh0HNMb0 VfIHGuYzXFAXpsqIbo45LzySHFs6IjFOHDt3XyDRzNsL7gOz6QaPpilnrusJkyT1 tAyONoTNhv1loTaWTOhYQUoEJ7rW2kxUi+TG2wG4KSMtHxlfjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKjel7w7IIDuqnx4FwyN0CaiIj7tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvZDc3MGRlNmMtZTc5NS0z NDU4LWIzZmEtNzY3OTdhOGZjMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIqGj3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADJicSfQVFeIQ3T6Ei8nLKkOhOhTH8WbDHxtNPIf8KtpUVZjE/Qv 9wst+n+D8EUTl+zYvavVQu56OyhFpKKKJpg2hrEoxQ9MAgsgq/0XJz1HeXxPGnWF +loxpeyaKeuoaeQe3ZXEnWG3yVQx/P23xWBgBnopVUuHOeKhq0/7FmXPwTqIEWfI DaIuZyS4/hRTVXD8y4qV/bbOMYSkwsnSAoCzD24IAhbrqFhQcfeUu5cuUvRwnwyY 4o9HdeMYOq7InpomW3VLLOSJRTt8W/1oEsOcLis2eXXK5tTK+xK7wlQbeb1Q0//d fq9yJOSolqJXcPbUNop3XCyjkn9VBw/dniM= -----END CERTIFICATE-----Generated at Mon Jun 30 10:31:04 2025 by rpki-client