$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa File: 2e7fedc6-4231-3453-9c5a-bd24e5304959.roa (raw, json) Hash identifier: HBNBfeaoV1e4js998bPhnmFxhmrlcWWhGj5utgScpbc= Subject key identifier: CD:51:5C:B2:0B:9D:B6:D6:3A:6E:87:B4:DB:A8:32:75:ED:FA:CA:BD Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F43285849E91FA31856FD043D9FA90780 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 64269 IP address blocks: 2604:28c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a3:18:56:fd:04:3d:9f:a9:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=bb204d9e-9f19-4b10-9d8b-e1fc7a0e4ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:96:69:f4:b1:2f:1d:1b:b5:f2:51:94:28: 1c:a3:e2:fe:b8:4f:79:c7:72:f9:7f:62:f3:7f:b2: 9f:31:13:d5:13:85:43:f2:c9:07:ee:6e:9c:b4:ed: 51:bb:7d:cc:06:4c:8e:34:ff:1f:a1:dd:66:a0:18: 2d:af:0b:de:da:a4:bd:06:c1:45:98:04:bf:e6:e0: f3:8a:8f:94:14:c2:f2:0d:6a:95:38:a7:a9:91:52: f4:1c:05:45:33:a5:8e:7a:72:35:8f:ce:e6:42:8f: 01:75:ed:98:11:40:a5:6a:ce:1a:16:52:4e:69:00: 46:50:c9:05:8b:f6:bb:2b:f9:e9:2d:ed:50:ac:61: a1:15:41:b1:16:f7:37:0b:5f:25:4a:f0:05:91:da: 8f:35:93:15:8b:a6:c4:f9:96:e0:ae:43:e9:0c:34: 36:8c:18:25:26:fd:4e:62:b0:af:48:d9:bb:43:f7: 55:b9:2c:29:54:72:c8:3b:d7:42:6b:90:78:18:f3: db:97:fa:5c:43:48:1c:2a:0a:c3:67:6c:f8:19:43: 54:a4:3b:16:0b:76:13:1f:e2:47:5a:83:90:e5:40: a0:57:97:43:bf:b2:b9:e4:10:5d:45:cd:b5:f8:38: 30:45:89:8f:15:c1:f2:89:60:89:2f:c2:67:44:62: 48:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:51:5C:B2:0B:9D:B6:D6:3A:6E:87:B4:DB:A8:32:75:ED:FA:CA:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv6: 2604:28c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:52:ea:a4:1a:2b:8b:6a:be:31:84:a9:e8:10:55:d2:b7:41: a7:85:58:ab:90:d1:70:68:a1:d4:d5:0e:71:6f:d5:41:80:10: 7c:ba:02:d4:8d:10:5d:b2:88:81:83:33:58:a7:03:92:18:6a: 38:09:6c:35:41:63:ca:d3:bf:02:4f:93:53:d8:89:96:89:59: c1:d1:4a:f2:3b:eb:b1:b5:21:4b:52:dd:c3:1b:4b:44:eb:e9: 39:4c:73:5d:ad:ac:30:2c:a7:1a:c1:b5:a2:af:6c:7e:e4:5b: 7b:ec:04:4b:6a:a9:cf:ae:e9:68:dd:98:ee:6c:28:5f:68:11: 58:cc:96:90:fd:80:19:f6:d4:31:a4:14:d5:40:db:36:52:00: da:c6:f3:76:52:2d:fb:1a:18:66:6f:92:b0:77:b3:29:66:79: 10:3c:0e:6e:b5:d5:8c:0f:cd:19:d1:fb:7f:16:a6:86:41:9b: 95:d1:14:bf:8a:53:39:c3:3f:d5:59:9e:01:e2:85:da:2e:06: 92:c7:36:a8:04:cd:0f:b8:9b:f8:b5:54:a8:9e:b5:80:ce:65: d5:53:ce:8d:3b:d8:79:e7:33:e0:32:59:04:3c:de:83:78:15: 3a:12:36:2b:59:5b:91:c0:4c:73:7b:5f:e3:05:a5:3c:be:ef: de:a8:46:8d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnpH6MYVv0EPZ+pB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk YmIyMDRkOWUtOWYxOS00YjEwLTlkOGItZTFmYzdhMGU0ZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaqWafSxLx0btfJRlCgco+L+uE95x3L5f2Lz f7KfMRPVE4VD8skH7m6ctO1Ru33MBkyONP8fod1moBgtrwve2qS9BsFFmAS/5uDz io+UFMLyDWqVOKepkVL0HAVFM6WOenI1j87mQo8Bde2YEUClas4aFlJOaQBGUMkF i/a7K/npLe1QrGGhFUGxFvc3C18lSvAFkdqPNZMVi6bE+ZbgrkPpDDQ2jBglJv1O YrCvSNm7Q/dVuSwpVHLIO9dCa5B4GPPbl/pcQ0gcKgrDZ2z4GUNUpDsWC3YTH+JH WoOQ5UCgV5dDv7K55BBdRc21+DgwRYmPFcHyiWCJL8JnRGJIVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM1RXLILnbbWOm6HtNuoMnXt+sq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvMmU3ZmVkYzYtNDIzMS0z NDUzLTljNWEtYmQyNGU1MzA0OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAAUuqkGiuLar4xhKnoEFXSt0GnhVirkNFwaKHU1Q5xb9VBgBB8ugLU jRBdsoiBgzNYpwOSGGo4CWw1QWPK078CT5NT2ImWiVnB0UryO+uxtSFLUt3DG0tE 6+k5THNdrawwLKcawbWir2x+5Ft77ARLaqnPrulo3ZjubChfaBFYzJaQ/YAZ9tQx pBTVQNs2UgDaxvN2Ui37Ghhmb5Kwd7MpZnkQPA5utdWMD80Z0ft/FqaGQZuV0RS/ ilM5wz/VWZ4B4oXaLgaSxzaoBM0PuJv4tVSonrWAzmXVU86NO9h55zPgMlkEPN6D eBU6EjYrWVuRwExze1/jBaU8vu/eqEaN -----END CERTIFICATE-----Generated at Thu Jul 3 23:10:18 2025 by rpki-client