$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa File: cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa (raw, json) Hash identifier: zZJEtn9wBoPLB7Alu2YbGVFMY1StENj99b4g4una2TA= Subject key identifier: B3:EA:52:17:90:A4:38:AF:7A:E3:0C:65:8F:56:21:8A:D7:B5:D6:15 Certificate issuer: /CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7 Certificate serial: 010D0C9F4328584A34801EB6D594772305B5F880 Authority key identifier: 5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 398325 IP address blocks: 2605:e040::/40 maxlen: 40 2605:e040:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:1e:b6:d5:94:77:23:05:b5:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=0ea546d4-12e7-4a5d-b3b8-bdca615f4a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:6a:50:74:c2:ec:c5:68:0e:c5:ee:62:b8: 25:01:ff:9f:f9:62:d9:5e:cc:2f:eb:19:37:83:c5: 97:94:70:80:c6:31:4e:de:07:b8:5d:d4:17:b8:a1: dd:c8:48:e9:8b:98:09:84:fb:b8:64:b9:83:6e:48: 34:57:d1:b2:79:96:be:71:1e:0b:8c:da:f1:2f:ca: 72:be:9a:17:13:d0:d5:27:13:62:79:5d:10:ab:8f: 64:d3:6e:b2:0b:9a:90:60:01:2a:5f:b9:73:61:24: 18:69:f8:ea:22:19:37:cb:e0:91:cb:44:d7:b0:da: 6e:85:4c:b6:9a:f3:65:3a:12:52:74:50:31:df:fb: fa:8e:5d:ef:0f:9b:fd:5b:58:6f:4b:2a:70:30:7c: ff:fd:eb:7f:4b:3f:e9:44:fa:ca:ea:58:86:44:2d: c0:75:30:a3:6a:ab:88:3b:cd:be:ba:29:7c:a9:b7: 8c:a0:d8:52:0d:f1:f6:6c:61:fa:c0:5e:bd:50:bc: 83:d0:b7:3d:a4:76:62:67:1c:2b:22:72:e9:88:e7: 4f:57:fe:e1:fb:7d:df:e8:1c:05:d1:b6:bb:68:0c: 32:e1:f5:43:9e:f7:1b:ce:e2:dc:92:e9:25:ae:b8: 1e:df:54:f1:76:6c:a1:31:53:af:1a:84:fc:0d:a6: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EA:52:17:90:A4:38:AF:7A:E3:0C:65:8F:56:21:8A:D7:B5:D6:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl X509v3 Authority Key Identifier: keyid:5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer sbgp-ipAddrBlock: critical IPv6: 2605:e040::/40 2605:e040:800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c6:8c:18:99:08:06:8f:d7:68:66:c0:3d:c2:2e:fa:c1:3c: 39:15:10:34:e6:52:84:28:84:8f:fe:90:cd:72:02:a4:da:98: 6c:41:c5:9a:c7:f9:5f:07:1f:10:fb:3a:96:74:19:cc:0f:9b: 39:7d:1a:30:db:7a:e7:d3:02:69:3a:c1:26:e8:08:d1:25:45: 51:91:f0:66:44:b6:69:32:2a:b4:e8:61:57:ed:41:02:f1:4a: 69:d0:72:1f:b0:26:e8:36:9b:e9:5e:67:31:08:1c:d6:0a:1a: 76:b2:83:f4:f0:73:30:21:cb:f6:25:2c:2b:c8:e6:24:c1:c6: 46:2e:57:b2:dc:3b:c3:f6:60:45:28:82:f3:d6:ef:ed:3c:55: 98:a4:dd:51:b5:56:93:01:71:35:0a:e7:4c:6d:43:15:97:2c: 32:fa:18:34:92:ff:e5:5e:c2:21:f4:af:ce:4d:40:f9:4f:cd: 79:cb:8a:33:b5:a4:46:b6:ac:80:40:a5:15:16:8c:37:7c:cc: 1c:70:40:ec:6e:0e:6d:0c:92:29:ff:83:45:48:75:30:61:d1: 08:6f:9d:e7:e3:08:92:b7:79:c3:39:45:2b:57:ca:27:f2:d9: c1:d8:55:07:12:d6:ee:91:65:14:b6:89:20:55:a2:3b:10:b0: 5f:6d:83:79 -----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgIUAQ0Mn0MoWEo0gB621ZR3IwW1+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJjMzBjZGEtM2IzZi00ZThlLWE2ODctYjIwZDU0NDhh NGU3MB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk MGVhNTQ2ZDQtMTJlNy00YTVkLWIzYjgtYmRjYTYxNWY0YTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJNqUHTC7MVoDsXuYrglAf+f+WLZXswv6xk3 g8WXlHCAxjFO3ge4XdQXuKHdyEjpi5gJhPu4ZLmDbkg0V9GyeZa+cR4LjNrxL8py vpoXE9DVJxNieV0Qq49k026yC5qQYAEqX7lzYSQYafjqIhk3y+CRy0TXsNpuhUy2 mvNlOhJSdFAx3/v6jl3vD5v9W1hvSypwMHz//et/Sz/pRPrK6liGRC3AdTCjaquI O82+uil8qbeMoNhSDfH2bGH6wF69ULyD0Lc9pHZiZxwrInLpiOdPV/7h+33f6BwF 0ba7aAwy4fVDnvcbzuLckuklrrge31TxdmyhMVOvGoT8DaZWaQIDAQABo4IDXzCC A1swHQYDVR0OBBYEFLPqUheQpDiveuMMZY9WIYrXtdYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYmMz MGNkYS0zYjNmLTRlOGUtYTY4Ny1iMjBkNTQ0OGE0ZTcvY2FkOWVjMGMtZTJmOS0z YjAxLWJmZjItOWVhNTEwZjg3MTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWJjMzBjZGEtM2IzZi00ZThlLWE2 ODctYjIwZDU0NDhhNGU3L2FiYzMwY2RhLTNiM2YtNGU4ZS1hNjg3LWIyMGQ1NDQ4 YTRlNy5jcmwwHwYDVR0jBBgwFoAUWjNUcS2B4/8BBQT5LA5f45A2vMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYmMzMGNkYS0zYjNmLTRlOGUtYTY4Ny1iMjBk NTQ0OGE0ZTcuY2VyMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAJgXgQAAD BgAmBeBACDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAPxowYmQgGj9doZsA9wi76wTw5FRA05lKEKISP/pDN cgKk2phsQcWax/lfBx8Q+zqWdBnMD5s5fRow23rn0wJpOsEm6AjRJUVRkfBmRLZp Miq06GFX7UEC8Upp0HIfsCboNpvpXmcxCBzWChp2soP08HMwIcv2JSwryOYkwcZG Lley3DvD9mBFKILz1u/tPFWYpN1RtVaTAXE1CudMbUMVlywy+hg0kv/lXsIh9K/O TUD5T815y4oztaRGtqyAQKUVFow3fMwccEDsbg5tDJIp/4NFSHUwYdEIb53n4wiS t3nDOUUrV8on8tnB2FUHEtbukWUUtokgVaI7ELBfbYN5 -----END CERTIFICATE-----Generated at Sun Jun 29 23:35:00 2025 by rpki-client