$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4906dfae-7130-3d98-87eb-e6c28df5e28c.roa File: 4906dfae-7130-3d98-87eb-e6c28df5e28c.roa (raw, json) Hash identifier: +l5iTCGlzdnCdF9RLnRKKv8S9gSwTktlKzzpswYfPYQ= Subject key identifier: 4B:15:E0:E0:FC:99:EE:B0:9D:CC:DE:99:B5:A3:4D:9F:16:78:C3:EE Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A1F9040486CAC19DCB2907D80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4906dfae-7130-3d98-87eb-e6c28df5e28c.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 54113 IP address blocks: 2607:8940:59d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:40:48:6c:ac:19:dc:b2:90:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=ad2e01c5-f9a9-4305-a43e-cdcf1e211060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:12:88:79:17:f7:d4:7c:b4:9c:e7:85:3d:94: 9d:44:74:d6:b8:d9:d4:25:9b:48:2c:08:d6:bf:3a: 46:33:d3:a2:51:0e:cc:3d:05:58:9a:f5:8d:e4:67: ee:c4:19:88:c0:e8:f2:8b:0a:05:8c:db:17:a5:ba: 8d:ff:2e:60:a4:1b:8c:99:7a:24:51:06:b8:e0:f6: 78:29:81:db:ff:ba:69:95:cf:eb:51:69:39:49:27: ce:c5:ee:82:35:c0:da:e2:41:eb:55:fa:18:5c:b9: d7:25:0c:26:e8:21:a0:b8:41:fa:66:26:25:73:f1: e9:d8:3f:63:e5:f2:17:96:8a:6d:73:01:64:94:05: ed:bd:e1:c1:8f:d4:bc:0b:41:9c:23:be:5c:00:44: 8c:4d:50:4e:ef:60:f1:0c:75:dc:26:bb:ef:91:67: 14:d3:ab:bd:be:98:b8:43:1a:ac:20:bd:52:e9:57: 41:e8:fa:5b:c2:b2:d3:da:15:f8:64:93:c5:1a:9e: ac:10:cf:17:70:93:c8:0c:7c:8d:6b:ac:bf:0f:48: a5:4c:92:30:85:53:da:f1:52:52:7b:2a:12:56:c9: 89:fa:09:d8:f2:c8:a7:10:4f:7f:f5:60:54:d5:ef: 47:b0:f9:e6:d1:da:0f:34:12:ee:c3:5e:fe:67:1b: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:15:E0:E0:FC:99:EE:B0:9D:CC:DE:99:B5:A3:4D:9F:16:78:C3:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4906dfae-7130-3d98-87eb-e6c28df5e28c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:59d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9f:47:c2:ca:98:bd:0f:dc:9b:fd:af:7a:cb:32:b8:c1:fb: 37:52:79:dd:4a:57:26:13:c4:ee:e4:63:3d:9e:4d:11:85:3d: 1f:db:73:fb:1d:7d:09:94:5d:1e:79:c0:64:79:e8:00:8b:25: b9:85:fe:09:0d:a0:1d:4c:8d:56:74:85:e5:18:9e:a6:05:0c: 73:6a:5e:3b:e4:1b:e7:eb:64:26:39:66:35:e1:12:dd:88:f5: ca:4e:98:17:5f:e4:77:2b:7b:87:c2:bc:d6:8c:50:e7:2b:0a: d4:65:01:46:af:5f:94:de:9b:43:4a:aa:48:be:8b:4b:8f:a8: 38:e4:d4:e5:ac:c5:95:17:c7:9d:77:91:ea:5e:8e:f0:7a:83: e2:e8:66:3c:33:26:63:3f:3d:3b:32:76:27:3d:47:70:03:92: 55:e3:f0:55:8b:53:5f:3e:26:87:22:9b:da:31:3b:03:88:86: dd:a7:63:8f:f0:8d:09:12:49:69:59:f2:3c:1b:50:39:95:29: 4b:9c:c9:34:bf:2d:e1:ef:55:7e:5d:ac:fa:4f:0d:8f:3a:f8: bf:31:b5:d6:06:69:70:a5:96:0f:8d:47:72:2f:8e:84:a4:1c: 31:87:cc:3a:89:a0:e2:27:70:bf:d2:b5:fc:11:f2:2a:dd:76: 64:ff:8f:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEofkEBIbKwZ3LKQfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk YWQyZTAxYzUtZjlhOS00MzA1LWE0M2UtY2RjZjFlMjExMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBKIeRf31Hy0nOeFPZSdRHTWuNnUJZtILAjW vzpGM9OiUQ7MPQVYmvWN5GfuxBmIwOjyiwoFjNsXpbqN/y5gpBuMmXokUQa44PZ4 KYHb/7pplc/rUWk5SSfOxe6CNcDa4kHrVfoYXLnXJQwm6CGguEH6ZiYlc/Hp2D9j 5fIXloptcwFklAXtveHBj9S8C0GcI75cAESMTVBO72DxDHXcJrvvkWcU06u9vpi4 QxqsIL1S6VdB6PpbwrLT2hX4ZJPFGp6sEM8XcJPIDHyNa6y/D0ilTJIwhVPa8VJS eyoSVsmJ+gnY8sinEE9/9WBU1e9HsPnm0doPNBLuw17+ZxtWTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEsV4OD8me6wnczembWjTZ8WeMPuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDkwNmRmYWUtNzEzMC0z ZDk4LTg3ZWItZTZjMjhkZjVlMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFnQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEufR8LKmL0P3Jv9r3rLMrjB+zdSed1KVyYTxO7kYz2eTRGFPR/b c/sdfQmUXR55wGR56ACLJbmF/gkNoB1MjVZ0heUYnqYFDHNqXjvkG+frZCY5ZjXh Et2I9cpOmBdf5Hcre4fCvNaMUOcrCtRlAUavX5Tem0NKqki+i0uPqDjk1OWsxZUX x513kepejvB6g+LoZjwzJmM/PTsydic9R3ADklXj8FWLU18+Jocim9oxOwOIht2n Y4/wjQkSSWlZ8jwbUDmVKUucyTS/LeHvVX5drPpPDY86+L8xtdYGaXCllg+NR3Iv joSkHDGHzDqJoOIncL/StfwR8irddmT/j74= -----END CERTIFICATE-----Generated at Sun Jun 29 19:20:54 2025 by rpki-client