$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/23ce2350-f7e2-38cd-a579-e1e03ed380c4.roa File: 23ce2350-f7e2-38cd-a579-e1e03ed380c4.roa (raw, json) Hash identifier: Utf8E95EjLcsu3BubK+kaMdIVafMbpigeYHXEa+shlE= Subject key identifier: 1C:25:8D:42:FC:4B:3C:71:05:1C:B3:69:CD:1F:96:41:40:46:EF:0E Certificate issuer: /CN=f7b341cf-abc9-42c3-a0bb-31f569a1ae02 Certificate serial: 010D0C9F43285849DF5A77AF90C65D45A470CC80 Authority key identifier: 1C:C0:E5:FB:79:04:3F:EA:4D:3D:1F:AA:35:AC:85:4A:99:A6:D4:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/23ce2350-f7e2-38cd-a579-e1e03ed380c4.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 14532 IP address blocks: 2607:abc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:77:af:90:c6:5d:45:a4:70:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b341cf-abc9-42c3-a0bb-31f569a1ae02 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=77c9591b-cc0f-40a6-aaf1-ca64f7f8d7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9a:f1:e4:23:31:6b:8e:f9:0a:27:5e:ba:92: 5a:70:be:c5:9c:88:ab:6b:26:00:d9:64:85:25:35: e2:a1:c1:6b:ca:a9:00:11:14:1a:7b:70:9c:26:8e: 63:3c:ae:34:8a:8e:29:f7:e5:21:eb:15:6a:2e:5a: 8f:b7:da:f9:df:4d:85:df:73:20:15:53:3c:f6:c4: ba:ed:52:f9:ee:31:16:fa:7b:11:73:1d:06:01:fe: 9f:9e:cf:ba:15:1c:e6:6e:33:46:08:78:97:3c:c9: 6f:7c:56:82:8d:ad:ef:b0:f9:84:63:a9:76:94:91: b6:f3:3b:7e:63:7e:3e:f8:bc:6d:ae:94:84:a3:78: 90:6b:3c:9f:70:b0:1d:45:15:ba:05:69:d1:1d:e2: 33:ff:0e:31:89:cd:97:66:ce:49:c8:26:58:20:7b: 8c:4b:c9:1a:58:a7:62:52:cd:b7:f1:17:23:06:a3: 71:79:78:eb:a7:20:5e:ff:25:a9:e2:b7:2b:3c:02: 30:96:b8:ed:c2:16:2f:09:f0:fe:42:1f:f5:61:34: ea:7c:fe:48:af:a1:27:08:f9:f9:4d:01:cc:58:e4: fe:ce:0b:bf:15:d7:cf:b2:91:4d:e7:da:58:53:d8: 5f:18:2d:ba:5b:a5:29:db:9f:f5:6d:44:39:b4:0c: af:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:25:8D:42:FC:4B:3C:71:05:1C:B3:69:CD:1F:96:41:40:46:EF:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/23ce2350-f7e2-38cd-a579-e1e03ed380c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.crl X509v3 Authority Key Identifier: keyid:1C:C0:E5:FB:79:04:3F:EA:4D:3D:1F:AA:35:AC:85:4A:99:A6:D4:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer sbgp-ipAddrBlock: critical IPv6: 2607:abc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e7:5b:23:b7:26:37:6f:94:df:fe:8a:dd:d2:33:2c:9d:9d: a7:b1:f5:84:65:41:e1:fa:0d:01:26:56:5a:a3:13:52:61:c5: 0c:f2:bb:e8:a7:92:49:fe:bc:15:3f:05:92:1e:92:5d:1f:87: dd:3b:fe:cc:09:87:4b:cf:76:35:65:76:96:8a:61:3e:0a:11: 88:cf:3f:59:c2:80:08:07:24:86:10:ed:e8:df:cb:27:39:dd: 54:1d:ea:97:39:0b:d5:2b:38:12:9b:c6:63:c8:ff:0d:a7:3d: dd:af:81:84:82:f6:5b:d2:bb:a6:54:2a:bb:6c:b7:0c:ee:01: 22:90:e7:39:c9:32:ce:40:69:b3:d6:f1:09:68:38:19:c1:7a: a9:49:c1:f6:6e:33:9a:63:f0:85:c9:c8:0e:75:57:a5:77:fc: 87:f7:2b:85:d9:ba:8a:e1:b5:d7:ce:92:06:f7:60:68:b2:e2: 94:d7:5b:99:e7:8f:42:e9:ce:51:5a:b9:fd:87:43:54:48:6a: 0f:1b:3a:bb:e8:63:b8:e5:8e:bc:d5:08:f2:c9:85:d8:e4:65: 53:74:3a:32:5e:ce:8a:17:4b:04:92:c0:55:31:40:4a:c3:bf: 7f:57:75:45:a0:8a:64:0d:b5:48:cf:59:55:38:db:6e:27:7c: 7a:ce:a1:47 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnfWnevkMZdRaRwzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdiMzQxY2YtYWJjOS00MmMzLWEwYmItMzFmNTY5YTFh ZTAyMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NzdjOTU5MWItY2MwZi00MGE2LWFhZjEtY2E2NGY3ZjhkN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZrx5CMxa475CideupJacL7FnIirayYA2WSF JTXiocFryqkAERQae3CcJo5jPK40io4p9+Uh6xVqLlqPt9r5302F33MgFVM89sS6 7VL57jEW+nsRcx0GAf6fns+6FRzmbjNGCHiXPMlvfFaCja3vsPmEY6l2lJG28zt+ Y34++LxtrpSEo3iQazyfcLAdRRW6BWnRHeIz/w4xic2XZs5JyCZYIHuMS8kaWKdi Us238RcjBqNxeXjrpyBe/yWp4rcrPAIwlrjtwhYvCfD+Qh/1YTTqfP5Ir6EnCPn5 TQHMWOT+zgu/FdfPspFN59pYU9hfGC26W6Up25/1bUQ5tAyvLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBwljUL8SzxxBRyzac0flkFARu8OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mN2Iz NDFjZi1hYmM5LTQyYzMtYTBiYi0zMWY1NjlhMWFlMDIvMjNjZTIzNTAtZjdlMi0z OGNkLWE1NzktZTFlMDNlZDM4MGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjdiMzQxY2YtYWJjOS00MmMzLWEw YmItMzFmNTY5YTFhZTAyL2Y3YjM0MWNmLWFiYzktNDJjMy1hMGJiLTMxZjU2OWEx YWUwMi5jcmwwHwYDVR0jBBgwFoAUHMDl+3kEP+pNPR+qNayFSpmm1K0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mN2IzNDFjZi1hYmM5LTQyYzMtYTBiYi0zMWY1 NjlhMWFlMDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgerwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBM51sjtyY3b5Tf/ord0jMsnZ2nsfWEZUHh+g0BJlZaoxNSYcUM8rvo p5JJ/rwVPwWSHpJdH4fdO/7MCYdLz3Y1ZXaWimE+ChGIzz9ZwoAIBySGEO3o38sn Od1UHeqXOQvVKzgSm8ZjyP8Npz3dr4GEgvZb0rumVCq7bLcM7gEikOc5yTLOQGmz 1vEJaDgZwXqpScH2bjOaY/CFycgOdVeld/yH9yuF2bqK4bXXzpIG92BosuKU11uZ 549C6c5RWrn9h0NUSGoPGzq76GO45Y681QjyyYXY5GVTdDoyXs6KF0sEksBVMUBK w79/V3VFoIpkDbVIz1lVONtuJ3x6zqFH -----END CERTIFICATE-----Generated at Tue Jul 1 13:11:56 2025 by rpki-client