$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/535f2120-15e6-3cda-998e-66dc0177d5a5.roa File: 535f2120-15e6-3cda-998e-66dc0177d5a5.roa (raw, json) Hash identifier: rjToFeEav0tF9NeK1xKQFLhGX/YAT9epNljjplUbrxM= Subject key identifier: A6:BC:54:8E:F0:9C:E9:D8:CE:CB:42:A0:03:55:37:05:C8:F8:0B:1B Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A14656391DE177D4DC2C546C0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/535f2120-15e6-3cda-998e-66dc0177d5a5.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 14618 IP address blocks: 2606:7bc0:1081::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:63:91:de:17:7d:4d:c2:c5:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=4e02da98-469f-470a-9e93-3cc8dda83db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c3:b9:8a:37:5e:97:b1:df:cc:6e:f3:ba:fd: 00:4f:e6:6f:5f:60:b0:8b:89:ad:25:cc:a4:08:1e: 15:a6:95:c7:8e:46:72:61:48:85:2a:47:ea:63:e1: d5:99:9d:a4:23:b0:aa:3a:16:cb:54:dd:e9:7a:58: 12:63:21:18:52:c2:68:7b:c7:b4:2c:9d:e1:82:26: af:a5:97:4f:ca:2a:69:a2:01:8a:00:02:ea:55:07: c5:91:e6:46:d0:8e:a0:79:71:16:81:06:4e:7f:1f: c9:85:40:16:19:54:c5:78:46:ff:14:ba:54:2c:10: 03:f4:ea:d5:68:93:f1:dc:b2:66:3f:ff:98:71:f1: c6:35:fd:ce:4d:04:fe:44:96:3a:75:7d:b0:62:c9: 8f:80:d7:c7:76:74:42:91:1f:1f:65:7c:0e:d5:04: a8:83:55:63:e3:a2:4a:56:e2:f5:6c:07:92:95:32: ad:b3:e9:a3:a8:de:32:b8:2f:73:e3:7b:8b:58:17: ae:19:1d:9f:81:c1:91:d2:00:ba:3f:57:35:4e:11: e5:a1:1b:01:aa:19:06:d2:e4:fb:cc:1b:52:9e:59: 9a:aa:35:39:a0:ee:1e:19:a4:98:a5:42:6c:23:da: ba:a0:69:7a:6f:a1:5c:80:af:f5:9a:1e:36:6f:32: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BC:54:8E:F0:9C:E9:D8:CE:CB:42:A0:03:55:37:05:C8:F8:0B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/535f2120-15e6-3cda-998e-66dc0177d5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1081::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f6:4b:7a:f8:a3:43:1c:61:40:d3:60:4e:69:19:e7:ee:d1: 17:a1:83:f6:14:0c:d5:34:98:07:d2:28:9c:6f:a1:19:c9:db: 6b:f0:26:3d:27:35:48:82:9e:c9:9d:d9:33:e7:85:38:39:64: a7:50:41:4b:fc:c9:5d:2b:e6:07:36:4c:2d:e4:6c:76:ee:96: 72:e2:ae:f4:59:98:e5:8c:b5:87:23:8b:4f:65:4c:99:e1:bd: 8f:48:11:e6:b7:cf:17:51:e9:01:b6:c6:22:50:a0:a2:f7:e1: 6c:90:f9:ff:b2:1f:af:d3:ce:33:ac:86:47:03:45:8b:7b:52: 1e:57:78:23:dd:52:a0:d8:a4:71:80:56:5c:57:1e:63:af:34: 5d:69:34:9b:11:a4:74:05:07:91:84:8a:1a:f9:e0:9f:ca:fc: 9e:5a:eb:bd:e9:4d:38:ac:5a:c1:0d:33:72:b1:f9:fa:6f:d3: dd:25:6d:8e:b8:66:0c:60:75:e8:6c:13:0e:c8:5c:92:82:76: f8:e1:39:22:81:ab:1e:c7:c3:59:7b:3d:5d:8a:8d:bf:ab:33: e7:96:06:47:2d:fb:68:d9:c6:21:ed:53:c6:7b:bd:30:30:e5: 9c:b8:c2:d5:00:0e:df:94:1d:4c:d7:a3:80:8f:63:d4:ef:b4: ea:ad:79:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZWOR3hd9TcLFRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NGUwMmRhOTgtNDY5Zi00NzBhLTllOTMtM2NjOGRkYTgzZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcO5ijdel7HfzG7zuv0AT+ZvX2Cwi4mtJcyk CB4VppXHjkZyYUiFKkfqY+HVmZ2kI7CqOhbLVN3pelgSYyEYUsJoe8e0LJ3hgiav pZdPyippogGKAALqVQfFkeZG0I6geXEWgQZOfx/JhUAWGVTFeEb/FLpULBAD9OrV aJPx3LJmP/+YcfHGNf3OTQT+RJY6dX2wYsmPgNfHdnRCkR8fZXwO1QSog1Vj46JK VuL1bAeSlTKts+mjqN4yuC9z43uLWBeuGR2fgcGR0gC6P1c1ThHloRsBqhkG0uT7 zBtSnlmaqjU5oO4eGaSYpUJsI9q6oGl6b6FcgK/1mh42bzL2cwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKa8VI7wnOnYzstCoANVNwXI+AsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNTM1ZjIxMjAtMTVlNi0z Y2RhLTk5OGUtNjZkYzAxNzdkNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBCB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA72S3r4o0McYUDTYE5pGefu0Rehg/YUDNU0mAfSKJxvoRnJ22vw Jj0nNUiCnsmd2TPnhTg5ZKdQQUv8yV0r5gc2TC3kbHbulnLirvRZmOWMtYcji09l TJnhvY9IEea3zxdR6QG2xiJQoKL34WyQ+f+yH6/TzjOshkcDRYt7Uh5XeCPdUqDY pHGAVlxXHmOvNF1pNJsRpHQFB5GEihr54J/K/J5a673pTTisWsENM3Kx+fpv090l bY64ZgxgdehsEw7IXJKCdvjhOSKBqx7Hw1l7PV2Kjb+rM+eWBkct+2jZxiHtU8Z7 vTAw5Zy4wtUADt+UHUzXo4CPY9TvtOqtedE= -----END CERTIFICATE-----Generated at Tue Jul 1 16:09:02 2025 by rpki-client