$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/29a80573-100a-3a8b-bb64-eb056360a689.roa File: 29a80573-100a-3a8b-bb64-eb056360a689.roa (raw, json) Hash identifier: FgLCy1STNsvvfCXKzqPir7lqSMOVwrxtyhDhlxps0hg= Subject key identifier: B8:67:1E:99:D1:9A:F4:97:4D:9D:86:D2:EF:76:9B:9C:FA:19:9A:7B Certificate issuer: /CN=a2235d90-d905-4ef7-9447-870904044658 Certificate serial: 010D0C9F43285849F2E54BB82B684A7CB07B8E80 Authority key identifier: 12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/29a80573-100a-3a8b-bb64-eb056360a689.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 2607:5ac0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:4b:b8:2b:68:4a:7c:b0:7b:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2235d90-d905-4ef7-9447-870904044658 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=635c55e1-b88a-4b43-adf6-d4190827949d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:80:82:4a:79:d4:9a:6f:19:04:0a:fc:2e:c9: 70:1a:b1:de:e7:9f:80:10:15:b0:9a:97:1d:b3:98: 10:0e:8d:3b:5d:ae:da:be:32:ab:c6:1f:a7:68:92: 41:7a:67:3a:e6:0f:5e:fc:a4:0e:e2:23:1d:f9:57: 65:5b:23:b7:fa:30:41:ce:b4:ee:c6:71:e5:de:bd: 88:cc:50:46:fb:5e:d0:2a:d9:0c:b0:97:3a:a8:fd: 7a:ff:ee:76:8d:28:eb:06:13:5b:d9:b7:5a:d4:63: 6f:aa:86:b7:8d:d8:05:1a:ce:c5:6a:b2:f1:bb:94: ed:79:f4:44:d1:91:a6:e5:cd:03:a1:a9:b4:0d:ac: 93:d8:63:1b:6f:23:98:0f:44:7e:3a:74:f2:7b:ee: 96:a5:b6:d9:5c:87:8a:15:11:ed:74:f2:96:67:4e: 37:fd:72:b0:cc:85:d0:79:d4:0a:c2:0e:21:bc:aa: df:19:d6:4e:6f:c4:78:7b:2d:95:df:fc:89:3c:04: a1:70:87:8f:2b:6d:f8:8d:00:c9:a4:6d:1b:bb:f5: 94:8f:eb:4e:aa:0e:d2:79:49:51:07:d2:bc:04:8a: 45:4f:84:41:32:73:96:d2:7c:d7:e8:73:3b:18:ac: 37:37:64:c2:6f:12:93:db:d8:93:08:7e:92:9f:75: da:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:67:1E:99:D1:9A:F4:97:4D:9D:86:D2:EF:76:9B:9C:FA:19:9A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/29a80573-100a-3a8b-bb64-eb056360a689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.crl X509v3 Authority Key Identifier: keyid:12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer sbgp-ipAddrBlock: critical IPv6: 2607:5ac0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:26:98:59:d2:fc:89:95:a3:1c:ee:56:0f:ef:27:d4:d0:ad: 44:26:73:66:ed:57:7a:8c:8f:6b:62:f6:ed:00:95:18:d9:79: 19:97:1b:64:ed:ec:ba:f2:48:7d:8d:58:4e:22:e6:bb:f2:90: 86:f2:68:ec:24:d5:a4:70:66:91:8b:b2:e8:16:b9:3b:6c:05: a4:5c:10:5f:67:e5:b9:d6:7b:9e:b3:23:eb:d7:3d:b4:84:d1: 9a:e0:50:7d:fc:21:c3:d3:b6:c6:01:51:18:de:4a:8f:d7:93: c3:03:56:a2:a7:44:d8:bc:ae:74:88:3a:7c:66:71:4d:82:2e: 80:3d:07:8e:10:c0:21:ad:bc:ee:09:3d:8e:23:07:c1:ce:31: 38:1f:e9:f8:87:0b:ba:53:a8:8c:cb:7d:65:a3:be:75:e1:d7: aa:97:eb:23:69:ee:4b:14:a4:2f:06:32:19:8b:d6:4a:a9:cd: af:0d:09:45:f8:4a:1b:65:cf:ab:2e:82:e3:e6:7f:16:5d:ec: 8e:df:43:1c:1e:9c:07:75:4b:d6:f5:44:e0:7c:fa:27:f0:bb: bf:ae:ca:5d:da:33:f9:0c:b1:2d:ed:26:e6:26:c5:e7:a5:54: 50:0f:aa:ea:df:46:c7:0d:d6:d0:0f:14:99:08:93:44:96:24: db:97:6a:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEny5Uu4K2hKfLB7joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIyMzVkOTAtZDkwNS00ZWY3LTk0NDctODcwOTA0MDQ0 NjU4MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NjM1YzU1ZTEtYjg4YS00YjQzLWFkZjYtZDQxOTA4Mjc5NDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlICCSnnUmm8ZBAr8LslwGrHe55+AEBWwmpcd s5gQDo07Xa7avjKrxh+naJJBemc65g9e/KQO4iMd+VdlWyO3+jBBzrTuxnHl3r2I zFBG+17QKtkMsJc6qP16/+52jSjrBhNb2bda1GNvqoa3jdgFGs7FarLxu5TtefRE 0ZGm5c0Doam0DayT2GMbbyOYD0R+OnTye+6WpbbZXIeKFRHtdPKWZ043/XKwzIXQ edQKwg4hvKrfGdZOb8R4ey2V3/yJPAShcIePK234jQDJpG0bu/WUj+tOqg7SeUlR B9K8BIpFT4RBMnOW0nzX6HM7GKw3N2TCbxKT29iTCH6Sn3XaGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLhnHpnRmvSXTZ2G0u92m5z6GZp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjIz NWQ5MC1kOTA1LTRlZjctOTQ0Ny04NzA5MDQwNDQ2NTgvMjlhODA1NzMtMTAwYS0z YThiLWJiNjQtZWIwNTYzNjBhNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIyMzVkOTAtZDkwNS00ZWY3LTk0 NDctODcwOTA0MDQ0NjU4L2EyMjM1ZDkwLWQ5MDUtNGVmNy05NDQ3LTg3MDkwNDA0 NDY1OC5jcmwwHwYDVR0jBBgwFoAUEp0gghyJrnv+LUXwap7yeIsMGtowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjIzNWQ5MC1kOTA1LTRlZjctOTQ0Ny04NzA5 MDQwNDQ2NTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgdawAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADEmmFnS/ImVoxzuVg/vJ9TQrUQmc2btV3qMj2ti9u0AlRjZeRmX G2Tt7LrySH2NWE4i5rvykIbyaOwk1aRwZpGLsugWuTtsBaRcEF9n5bnWe56zI+vX PbSE0ZrgUH38IcPTtsYBURjeSo/Xk8MDVqKnRNi8rnSIOnxmcU2CLoA9B44QwCGt vO4JPY4jB8HOMTgf6fiHC7pTqIzLfWWjvnXh16qX6yNp7ksUpC8GMhmL1kqpza8N CUX4Shtlz6suguPmfxZd7I7fQxwenAd1S9b1ROB8+ifwu7+uyl3aM/kMsS3tJuYm xeelVFAPqurfRscN1tAPFJkIk0SWJNuXao4= -----END CERTIFICATE-----Generated at Tue Jul 1 06:22:16 2025 by rpki-client