$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/4be56ccf-d25c-3c4a-aec2-152c14188073.roa File: 4be56ccf-d25c-3c4a-aec2-152c14188073.roa (raw, json) Hash identifier: KF1wD9KkfVok+ladcEAMcxhXUJ/QzUf7b5ju1tkKf3Q= Subject key identifier: 9A:79:93:6B:A1:B0:86:93:73:38:5A:67:2B:D1:BB:85:98:09:18:FC Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584A295567454F10FC994D8225C0 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/4be56ccf-d25c-3c4a-aec2-152c14188073.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 393885 IP address blocks: 2604:4a00:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:67:45:4f:10:fc:99:4d:82:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=49dc9261-4cb1-4bf9-b15c-8e9d4dcae5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:73:fd:88:12:0a:1f:35:dd:48:5f:71:31: 0a:e5:d4:5a:8b:1d:c6:4c:3a:84:ba:9d:a8:10:4a: 33:6a:08:ce:75:a1:e7:46:c4:7c:1b:44:81:4b:68: 74:d7:95:07:df:a7:3f:ea:f1:ca:9b:5e:31:97:85: bd:a3:15:8c:93:77:59:52:30:8a:1d:e5:a5:ec:df: 56:58:2e:0e:bd:a7:e3:7b:a7:47:72:95:21:98:10: 89:e8:43:d0:71:27:2d:db:e9:63:2b:a7:c4:38:31: 9a:b9:b3:9d:81:7a:1b:72:da:8c:77:ea:4f:ad:7b: 0f:fc:c3:b0:df:7f:74:55:14:ed:12:2d:6c:71:9f: 5e:84:9b:ec:29:23:91:01:ab:41:c4:3b:4b:d8:3d: 23:e9:72:09:eb:60:d7:5e:af:06:49:e0:c5:ca:e8: e2:dd:2d:05:5f:a5:5d:8b:77:bc:94:7a:7e:7b:cd: 2f:0a:a9:e6:2a:0a:9c:43:c0:3f:24:9b:05:c1:e4: c8:7e:8c:84:37:96:c7:46:21:93:c4:4a:90:4d:a1: c1:c9:07:fe:58:b8:af:0f:24:3d:3b:39:76:f2:c4: b5:f9:c5:a2:0c:01:25:22:29:2f:7a:1a:75:8e:1d: 19:93:06:45:e2:5f:fe:a7:71:c1:c4:a0:5a:e6:47: 77:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:79:93:6B:A1:B0:86:93:73:38:5A:67:2B:D1:BB:85:98:09:18:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/4be56ccf-d25c-3c4a-aec2-152c14188073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a00:5000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:64:61:c9:cb:54:52:f7:11:3b:c4:14:fc:af:ba:83:96:fd: cd:f6:c7:6b:f4:b0:23:d6:15:a2:de:2c:31:c5:a4:a5:33:b9: 05:af:c2:19:56:fd:68:42:7e:2c:9d:ae:87:f5:8d:96:8a:7e: 95:85:21:ce:41:84:23:dc:9a:3f:1b:77:36:51:44:92:25:9e: 4d:36:04:22:1a:c8:5a:cf:51:68:30:bc:79:cc:6e:44:88:cd: 40:63:38:2d:ea:48:a6:92:e4:29:a3:9e:3c:75:90:6d:66:d5: fd:99:ae:91:b8:b7:23:be:81:bf:38:d2:4f:b3:f6:34:ac:d8: 6a:ba:33:97:d1:ca:1e:8d:19:a1:fa:25:ec:3c:f9:1c:5d:24: c1:20:10:50:bc:ee:4c:41:69:e8:db:7b:62:4e:17:f5:36:44: 97:33:f3:50:10:43:2d:bf:1b:c0:c8:49:e9:e2:5b:d6:29:72: 0d:79:bd:05:d3:43:1d:2f:a2:3a:25:27:63:ee:fd:b7:0a:2f: d2:62:5f:02:38:26:4b:1c:ee:ae:ba:2a:d8:f5:b7:03:6a:e6: d6:0f:7f:e2:36:f6:9d:4b:4a:fa:79:b6:1a:28:3b:52:4d:ed: 60:cd:24:91:ee:3c:c4:be:c4:f3:2a:64:a0:19:01:67:2d:2c: ab:f5:65:97 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEopVWdFTxD8mU2CJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk NDlkYzkyNjEtNGNiMS00YmY5LWIxNWMtOGU5ZDRkY2FlNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaBz/YgSCh813UhfcTEK5dRaix3GTDqEup2o EEozagjOdaHnRsR8G0SBS2h015UH36c/6vHKm14xl4W9oxWMk3dZUjCKHeWl7N9W WC4Ovafje6dHcpUhmBCJ6EPQcSct2+ljK6fEODGaubOdgXobctqMd+pPrXsP/MOw 3390VRTtEi1scZ9ehJvsKSORAatBxDtL2D0j6XIJ62DXXq8GSeDFyuji3S0FX6Vd i3e8lHp+e80vCqnmKgqcQ8A/JJsFweTIfoyEN5bHRiGTxEqQTaHByQf+WLivDyQ9 Ozl28sS1+cWiDAElIikvehp1jh0ZkwZF4l/+p3HBxKBa5kd3+wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJp5k2uhsIaTczhaZyvRu4WYCRj8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvNGJlNTZjY2YtZDI1Yy0z YzRhLWFlYzItMTUyYzE0MTg4MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKAFAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHWRhyctUUvcRO8QU/K+6g5b9zfbHa/SwI9YVot4sMcWkpTO5Ba/C GVb9aEJ+LJ2uh/WNlop+lYUhzkGEI9yaPxt3NlFEkiWeTTYEIhrIWs9RaDC8ecxu RIjNQGM4LepIppLkKaOePHWQbWbV/Zmukbi3I76BvzjST7P2NKzYarozl9HKHo0Z ofol7Dz5HF0kwSAQULzuTEFp6Nt7Yk4X9TZElzPzUBBDLb8bwMhJ6eJb1ilyDXm9 BdNDHS+iOiUnY+79twov0mJfAjgmSxzurroq2PW3A2rm1g9/4jb2nUtK+nm2Gig7 Uk3tYM0kke48xL7E8ypkoBkBZy0sq/Vllw== -----END CERTIFICATE-----Generated at Mon Jun 30 00:31:35 2025 by rpki-client