$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/286051fc-f991-3a51-a698-ca99e043f07a.roa File: 286051fc-f991-3a51-a698-ca99e043f07a.roa (raw, json) Hash identifier: DAGmDeT0r/opR9zOxEFi9149HriVKZ9DGqX3LLa+SNU= Subject key identifier: 25:AB:D5:76:92:62:A0:C9:89:D7:C9:12:B0:76:9E:A3:9F:17:DA:01 Certificate issuer: /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99 Certificate serial: 010D0C9F4328584A3F25C084E1C94F9CC07D7900 Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/286051fc-f991-3a51-a698-ca99e043f07a.roa Signing time: Thu 19 Jun 2025 20:32:45 +0000 ROA not before: Thu 19 Jun 2025 20:32:45 +0000 ROA not after: Wed 17 Sep 2025 20:32:45 +0000 asID: 27317 IP address blocks: 2607:9f40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:25:c0:84:e1:c9:4f:9c:c0:7d:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99 Validity Not Before: Jun 19 20:32:45 2025 GMT Not After : Sep 17 20:32:45 2025 GMT Subject: CN=ab9a6d4f-12ae-4c96-97ab-0453cb419ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:55:85:0b:cb:33:1a:a3:41:1d:55:3a:d1:cd: be:00:03:47:2d:35:15:0f:03:da:f9:8f:d1:d6:5d: 3e:eb:be:79:d2:3b:5c:08:c6:24:34:8f:1c:02:7c: 60:4a:3d:11:d5:31:b5:11:f1:83:9d:d6:23:d5:3e: f4:61:86:af:6a:f3:8a:0a:4b:2c:91:33:2c:75:f9: db:5a:7e:76:7f:4f:13:63:af:38:ba:bd:35:ef:6a: 90:5b:b0:a0:cc:68:78:c5:05:77:69:38:d7:86:ac: 09:82:bf:40:99:78:eb:50:a0:de:05:9f:ba:a0:a6: c3:4c:17:b6:94:a6:b5:5a:e7:6c:63:6a:9a:57:57: 35:30:38:e7:cb:9b:87:70:1a:1c:8a:a5:ff:fa:46: ba:54:96:b4:93:60:ff:46:36:ea:16:27:97:6e:46: d8:fd:6f:3c:f8:f9:6d:ae:ab:f9:ac:54:c8:1c:15: a0:44:f7:ec:45:0d:d7:6c:eb:44:65:cc:5c:bf:db: 87:b2:d2:64:a2:9a:2a:13:7b:1a:14:e5:a0:b2:cd: 42:c8:63:3a:17:5f:1c:44:12:60:04:72:f7:58:79: 2b:5f:a6:b2:62:eb:87:e2:09:55:bc:39:23:5b:72: 4f:c0:fb:04:d6:c1:11:33:d2:c8:75:9e:8f:99:7e: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AB:D5:76:92:62:A0:C9:89:D7:C9:12:B0:76:9E:A3:9F:17:DA:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/286051fc-f991-3a51-a698-ca99e043f07a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl X509v3 Authority Key Identifier: keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer sbgp-ipAddrBlock: critical IPv6: 2607:9f40:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:59:9a:77:ae:6c:51:fa:c1:c1:f7:44:8f:54:34:16:58:d6: 41:b6:89:82:cd:b5:0d:e6:41:a9:07:05:80:fa:f5:1d:99:96: f6:e6:be:bc:f1:37:9d:84:59:a3:22:2e:40:bf:f1:09:ec:58: 44:2b:d3:b4:c6:89:75:b5:03:50:4c:5c:25:c0:58:d1:2a:28: 07:e3:42:04:29:f3:29:38:47:36:e1:c7:d0:e8:a0:f5:6d:95: 39:5d:c1:86:9b:02:ac:09:c6:9d:59:98:c4:7d:e5:68:03:91: 2a:e6:16:02:d1:47:17:13:2c:17:62:8b:97:e1:53:00:17:94: aa:da:0f:be:e6:c7:5d:53:b6:98:e6:db:76:06:07:68:2e:7a: b4:dc:52:da:72:87:77:60:6e:93:e0:8c:ec:60:49:64:02:fa: dc:0f:bb:de:4d:08:de:0a:97:d6:58:cf:37:73:f6:f8:7b:28: 7e:ae:33:58:b7:c8:12:ed:4d:07:1d:2d:fa:19:b1:03:a6:e1: cf:68:52:14:03:33:fb:07:fb:7e:30:2c:08:85:df:f4:23:ce: be:9c:de:e6:dd:f7:6a:84:b4:f4:0a:0f:d2:3c:44:6a:43:b5: de:87:dc:97:3d:37:b0:cd:85:18:8c:c6:77:f9:38:81:a9:10: 2c:07:ec:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo/JcCE4clPnMB9eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JiZWU5YjEtMWIzMy00OTUxLWE2MTctZWNiODBkOWJh ZDk5MB4XDTI1MDYxOTIwMzI0NVoXDTI1MDkxNzIwMzI0NVowLzEtMCsGA1UEAxMk YWI5YTZkNGYtMTJhZS00Yzk2LTk3YWItMDQ1M2NiNDE5YWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VWFC8szGqNBHVU60c2+AANHLTUVDwPa+Y/R 1l0+67550jtcCMYkNI8cAnxgSj0R1TG1EfGDndYj1T70YYavavOKCksskTMsdfnb Wn52f08TY684ur0172qQW7CgzGh4xQV3aTjXhqwJgr9AmXjrUKDeBZ+6oKbDTBe2 lKa1WudsY2qaV1c1MDjny5uHcBociqX/+ka6VJa0k2D/RjbqFieXbkbY/W88+Plt rqv5rFTIHBWgRPfsRQ3XbOtEZcxcv9uHstJkopoqE3saFOWgss1CyGM6F18cRBJg BHL3WHkrX6ayYuuH4glVvDkjW3JPwPsE1sERM9LIdZ6PmX5lTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCWr1XaSYqDJidfJErB2nqOfF9oBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YmJl ZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4MGQ5YmFkOTkvMjg2MDUxZmMtZjk5MS0z YTUxLWE2OTgtY2E5OWUwNDNmMDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2JiZWU5YjEtMWIzMy00OTUxLWE2 MTctZWNiODBkOWJhZDk5LzdiYmVlOWIxLTFiMzMtNDk1MS1hNjE3LWVjYjgwZDli YWQ5OS5jcmwwHwYDVR0jBBgwFoAUKSL34vJ0kytfzKQDs/xSZeeGwpowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83YmJlZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4 MGQ5YmFkOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgefQAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJZmneubFH6wcH3RI9UNBZY1kG2iYLNtQ3mQakHBYD69R2Zlvbm vrzxN52EWaMiLkC/8QnsWEQr07TGiXW1A1BMXCXAWNEqKAfjQgQp8yk4Rzbhx9Do oPVtlTldwYabAqwJxp1ZmMR95WgDkSrmFgLRRxcTLBdii5fhUwAXlKraD77mx11T tpjm23YGB2guerTcUtpyh3dgbpPgjOxgSWQC+twPu95NCN4Kl9ZYzzdz9vh7KH6u M1i3yBLtTQcdLfoZsQOm4c9oUhQDM/sH+34wLAiF3/Qjzr6c3ubd92qEtPQKD9I8 RGpDtd6H3Jc9N7DNhRiMxnf5OIGpECwH7GE= -----END CERTIFICATE-----Generated at Tue Jul 1 11:44:23 2025 by rpki-client