$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa File: 9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa (raw, json) Hash identifier: 4PHtay0xmx8OXHy43Fth+vRMxuIvlhl3rjOfJwdACsI= Subject key identifier: D3:84:0A:02:D1:95:64:AD:A8:50:E6:18:5E:0B:BB:02:57:80:5E:8B Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584A331AF4E0F3E126CE017B5780 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 11290 IP address blocks: 2604:4d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:f4:e0:f3:e1:26:ce:01:7b:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=3593ec17-1f0b-4a07-a9a0-225868888656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:09:a4:d0:87:98:95:64:53:8d:4c:fa:6d:4e: 63:7b:14:fa:8d:39:88:f6:17:a3:56:c5:7c:76:57: 31:5f:45:ab:75:87:3a:1a:e1:45:c0:b0:a1:cf:42: 3d:85:ec:fc:5c:2a:86:c1:d9:8c:7b:26:0b:03:98: 89:36:39:89:d8:98:ce:31:91:60:92:6e:90:bd:fe: 99:86:19:13:59:91:8c:ba:f0:0e:ec:44:ce:d0:3c: 33:c6:64:9b:66:d1:a0:dc:57:d7:ef:18:cb:e2:40: 9c:66:08:8d:12:71:34:77:0d:dd:81:cf:e9:ce:1f: 58:3c:91:75:35:d9:1b:4d:b0:60:d6:25:3b:c9:22: bf:bf:f6:58:23:53:7d:90:8b:e5:8c:34:41:0c:88: a2:ed:2a:0f:32:5b:7d:6c:1e:32:cc:5e:5e:9a:dd: 86:d9:d6:1a:fc:23:2b:8c:20:ad:83:06:48:36:ae: b1:44:be:9f:20:40:ce:02:a2:7c:23:4b:19:8e:f1: 1d:bd:cf:95:9e:e8:80:50:73:aa:22:f3:ab:bf:48: 2c:1a:92:c0:22:6b:fa:04:96:1e:a0:5f:e8:b5:57: 56:f1:b0:71:cb:08:65:d5:e2:c9:a4:be:30:0c:f5: 0b:38:65:fd:08:78:80:6a:5f:29:78:94:9c:6c:fc: b0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:84:0A:02:D1:95:64:AD:A8:50:E6:18:5E:0B:BB:02:57:80:5E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv6: 2604:4d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:0a:65:b2:b1:48:12:91:88:fe:a6:67:53:0a:86:af:17:52: cc:73:2c:4c:f8:db:67:a7:8f:c8:79:68:3b:46:a5:ae:c4:8a: ee:a0:12:46:bb:3c:dd:b6:97:fa:8b:84:46:f8:dc:6f:5a:35: fb:85:aa:3d:d7:75:f5:3c:c8:3b:9f:f9:97:97:94:e4:06:9f: 24:5b:64:e5:c6:21:31:89:91:ad:44:64:b9:0c:f9:2c:5b:e4: 93:1f:52:16:f9:a6:6e:2a:d2:b7:b5:1b:4d:3d:ff:5b:54:d6: 78:d8:be:e8:dc:08:d3:5f:8c:5a:94:f9:65:f8:eb:2a:d2:b1: cb:33:0b:fc:4e:5f:0e:f3:46:2a:9d:07:82:99:86:45:58:10: 7b:72:ab:c0:86:4c:09:40:8a:d0:b1:7a:73:37:3e:16:75:1a: 6a:de:55:95:18:0a:55:e2:38:84:1c:07:c6:65:e5:c8:fd:58: c4:8f:25:cd:58:aa:fc:e9:c5:82:33:a6:10:20:9b:8a:7b:19: 25:bf:06:05:dc:96:5f:f9:82:fa:f5:3d:86:f6:1f:30:8d:b7: 63:fd:4a:9c:d0:bc:61:08:7e:c8:d2:a7:0d:9c:62:74:f5:8d: 24:55:c4:e4:a0:58:1c:6f:97:e4:df:53:65:83:f7:bd:5b:24: ec:58:4d:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEozGvTg8+EmzgF7V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk MzU5M2VjMTctMWYwYi00YTA3LWE5YTAtMjI1ODY4ODg4NjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwmk0IeYlWRTjUz6bU5jexT6jTmI9hejVsV8 dlcxX0WrdYc6GuFFwLChz0I9hez8XCqGwdmMeyYLA5iJNjmJ2JjOMZFgkm6Qvf6Z hhkTWZGMuvAO7ETO0DwzxmSbZtGg3FfX7xjL4kCcZgiNEnE0dw3dgc/pzh9YPJF1 NdkbTbBg1iU7ySK/v/ZYI1N9kIvljDRBDIii7SoPMlt9bB4yzF5emt2G2dYa/CMr jCCtgwZINq6xRL6fIEDOAqJ8I0sZjvEdvc+VnuiAUHOqIvOrv0gsGpLAImv6BJYe oF/otVdW8bBxywhl1eLJpL4wDPULOGX9CHiAal8peJScbPyw+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNOECgLRlWStqFDmGF4LuwJXgF6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvOTc5NGZmOGQtMWVmYS0z NzY1LTlkNjktOGMzMWFlNmEyZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRNgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnCmWysUgSkYj+pmdTCoavF1LMcyxM+Ntnp4/IeWg7RqWuxIruoBJG uzzdtpf6i4RG+NxvWjX7hao913X1PMg7n/mXl5TkBp8kW2TlxiExiZGtRGS5DPks W+STH1IW+aZuKtK3tRtNPf9bVNZ42L7o3AjTX4xalPll+Osq0rHLMwv8Tl8O80Yq nQeCmYZFWBB7cqvAhkwJQIrQsXpzNz4WdRpq3lWVGApV4jiEHAfGZeXI/VjEjyXN WKr86cWCM6YQIJuKexklvwYF3JZf+YL69T2G9h8wjbdj/Uqc0LxhCH7I0qcNnGJ0 9Y0kVcTkoFgcb5fk31Nlg/e9WyTsWE1K -----END CERTIFICATE-----Generated at Mon Jun 30 00:53:50 2025 by rpki-client