$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa File: 04e7a50e-fdc0-3566-ac52-d12172993b6b.roa (raw, json) Hash identifier: c+j2NMzugb6Lz1e2yuX6KrLXeZF6NJXIVLx+0uRfF4s= Subject key identifier: 82:EC:04:59:47:AD:B8:BF:8C:79:70:B8:4A:80:DA:99:8A:9E:4E:B3 Certificate issuer: /CN=5e6c5242-5ff7-40a8-b144-1f151915227e Certificate serial: 010D0C9F43285849FE0FEA23B1545D3A9121FC00 Authority key identifier: BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 8987 IP address blocks: 2602:fd3a:228::/45 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:ea:23:b1:54:5d:3a:91:21:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6c5242-5ff7-40a8-b144-1f151915227e Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=5988a9ea-2058-41cb-810a-3f184a6f7831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e7:1d:8c:f6:3e:8e:af:da:31:60:6e:3c:d4: a6:08:e2:e4:95:35:28:64:01:d2:46:56:da:37:e1: 0f:79:9e:44:cc:d0:46:4a:67:c9:17:16:a5:72:01: 6f:b7:42:4b:bc:67:b2:d1:f9:23:fb:8a:7d:f0:12: b6:69:2e:1c:e8:99:c0:30:e7:eb:3e:bc:60:fc:a6: 06:3e:31:dd:3e:29:2a:17:63:67:7a:c5:4f:a5:94: 1c:6e:30:4f:ff:76:8d:02:ae:ed:9f:85:34:ae:47: 30:4b:95:5a:ff:0e:9a:b6:c5:ea:3a:df:59:6c:1e: 1a:69:b2:5d:e5:2f:4a:58:67:09:6b:14:d3:0c:39: 14:9c:7b:72:38:e8:c3:87:92:1d:6a:0a:3e:6e:ed: 89:a5:19:30:90:00:d7:30:3f:47:1d:35:84:cf:53: ab:52:c5:7c:56:f1:e7:ab:6b:06:1e:2e:a5:22:45: 12:cc:2c:69:f8:96:f2:e2:43:bc:47:3b:e5:f9:96: 16:2e:d2:25:9a:6b:77:ec:20:f4:58:ed:26:18:0d: ca:84:00:ff:99:7a:1e:e3:e6:0c:6c:39:04:5b:4f: 2a:f7:2f:6d:35:8a:82:2b:47:71:12:0f:82:2e:1c: d1:c6:88:9d:7e:bd:ef:e0:0a:ed:28:83:6a:3c:c1: 8d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EC:04:59:47:AD:B8:BF:8C:79:70:B8:4A:80:DA:99:8A:9E:4E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl X509v3 Authority Key Identifier: keyid:BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd3a:228::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f5:bb:d2:98:49:f5:05:58:12:a4:ec:48:a6:33:43:40:bb: b9:4f:04:57:32:eb:08:c4:ff:7c:cb:61:bc:ac:1d:c5:b8:ac: 34:cc:3d:07:f2:e4:c8:da:33:bc:e6:ee:8c:0d:73:79:71:b5: f8:5d:1c:24:a0:ff:2e:b2:66:79:44:4b:2c:d2:b3:f1:63:91: 25:21:30:76:f3:61:04:1c:b7:1a:12:ea:fa:23:62:56:1c:5c: 11:97:46:1d:ae:ca:e0:e1:f1:41:7c:1e:79:f0:0c:de:b4:d3: 0c:35:9e:4a:a6:a2:65:59:6d:0c:46:ee:62:d5:92:31:e4:0a: 97:de:b2:7f:9a:6e:83:b7:91:47:9e:a2:3a:cf:61:2f:71:aa: 42:ea:73:b1:14:bb:c0:14:82:73:a8:af:eb:1d:88:79:23:1a: ef:b3:3e:c3:b7:cc:ca:58:3f:39:13:92:f9:75:8e:a5:56:49: 1d:84:18:fe:24:90:0f:34:83:c0:30:8d:50:dc:92:81:a0:3a: bf:63:0a:7f:05:33:4a:89:bd:71:fc:72:c7:39:a0:88:68:74: 3b:79:99:31:c2:d9:26:ba:17:f0:d5:c1:1f:ff:11:90:67:1a: af:f8:26:e4:b5:fe:04:ae:36:86:b9:b8:51:bb:2d:63:16:30: 48:9c:3e:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn+D+ojsVRdOpEh/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU2YzUyNDItNWZmNy00MGE4LWIxNDQtMWYxNTE5MTUy MjdlMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NTk4OGE5ZWEtMjA1OC00MWNiLTgxMGEtM2YxODRhNmY3ODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOcdjPY+jq/aMWBuPNSmCOLklTUoZAHSRlba N+EPeZ5EzNBGSmfJFxalcgFvt0JLvGey0fkj+4p98BK2aS4c6JnAMOfrPrxg/KYG PjHdPikqF2NnesVPpZQcbjBP/3aNAq7tn4U0rkcwS5Va/w6atsXqOt9ZbB4aabJd 5S9KWGcJaxTTDDkUnHtyOOjDh5Idago+bu2JpRkwkADXMD9HHTWEz1OrUsV8VvHn q2sGHi6lIkUSzCxp+Jby4kO8Rzvl+ZYWLtIlmmt37CD0WO0mGA3KhAD/mXoe4+YM bDkEW08q9y9tNYqCK0dxEg+CLhzRxoidfr3v4ArtKINqPMGNOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFILsBFlHrbi/jHlwuEqA2pmKnk6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZj NTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1MTkxNTIyN2UvMDRlN2E1MGUtZmRjMC0z NTY2LWFjNTItZDEyMTcyOTkzYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWU2YzUyNDItNWZmNy00MGE4LWIx NDQtMWYxNTE5MTUyMjdlLzVlNmM1MjQyLTVmZjctNDBhOC1iMTQ0LTFmMTUxOTE1 MjI3ZS5jcmwwHwYDVR0jBBgwFoAUv34LCNAcIvjgxdR+Y9c7VtW41+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZjNTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1 MTkxNTIyN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgL9OgIo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACL1u9KYSfUFWBKk7EimM0NAu7lPBFcy6wjE/3zLYbysHcW4rDTM PQfy5MjaM7zm7owNc3lxtfhdHCSg/y6yZnlESyzSs/FjkSUhMHbzYQQctxoS6voj YlYcXBGXRh2uyuDh8UF8HnnwDN600ww1nkqmomVZbQxG7mLVkjHkCpfesn+aboO3 kUeeojrPYS9xqkLqc7EUu8AUgnOor+sdiHkjGu+zPsO3zMpYPzkTkvl1jqVWSR2E GP4kkA80g8AwjVDckoGgOr9jCn8FM0qJvXH8csc5oIhodDt5mTHC2Sa6F/DVwR// EZBnGq/4JuS1/gSuNoa5uFG7LWMWMEicPoQ= -----END CERTIFICATE-----Generated at Tue Jul 1 16:06:42 2025 by rpki-client