$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/38861c4d-cbc7-3a88-9aa3-7d1c8ae585cc.roa File: 38861c4d-cbc7-3a88-9aa3-7d1c8ae585cc.roa (raw, json) Hash identifier: v4ojAMA8pb3bRYbgkqKGzHfb921R7U8OPPGyTSCYfHs= Subject key identifier: DA:49:E1:98:E2:7A:C4:64:3C:B9:A6:88:59:7F:2B:D1:8F:A8:94:01 Certificate issuer: /CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Certificate serial: 010D0C9F4328584A0C057338F25F7B782C1ACEC0 Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/38861c4d-cbc7-3a88-9aa3-7d1c8ae585cc.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 396982 IP address blocks: 2605:a7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:73:38:f2:5f:7b:78:2c:1a:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=677c2f2d-f485-4999-ab45-682e7c5a5f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:52:ae:ec:23:c5:b2:61:30:3b:a3:05:29: 30:e1:fa:52:a5:d5:41:6c:c3:0e:4c:69:bb:32:66: 6d:52:4d:c7:f3:ee:ac:42:dc:15:8e:31:1b:ad:10: 62:d5:c3:cb:08:a0:9e:a0:f3:53:49:26:08:bd:71: b9:53:e5:99:70:37:59:9e:d8:c4:c8:19:de:dd:73: 6d:b8:17:13:d8:0f:55:f1:25:69:d7:7d:82:1a:1a: 09:36:27:c0:b6:22:5b:cf:c9:46:48:76:d4:f0:ad: 89:93:d5:a6:76:42:f4:c4:e8:92:53:dc:93:0f:22: 86:77:57:5f:9d:26:40:3f:82:18:fb:51:80:3a:8a: 57:cf:b7:20:b7:51:87:66:c6:63:66:4d:46:44:ab: 97:1e:dd:8e:fe:0f:e9:54:b1:eb:c1:13:34:7b:15: a6:cb:92:b7:eb:36:ed:0f:3e:14:f8:5d:67:87:79: 47:0f:3c:41:92:64:6b:82:85:11:bb:77:45:06:5e: 4e:23:8b:e2:c3:8c:9c:f8:ae:ae:8b:f4:ca:ba:2e: da:4c:ff:c5:a4:4d:43:73:20:a2:08:41:be:3b:36: be:44:5e:b4:c5:d4:8b:28:93:64:77:89:3c:7f:fb: 43:0c:65:8e:42:ad:f5:2b:cc:71:a7:23:4a:70:1c: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:49:E1:98:E2:7A:C4:64:3C:B9:A6:88:59:7F:2B:D1:8F:A8:94:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/38861c4d-cbc7-3a88-9aa3-7d1c8ae585cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl X509v3 Authority Key Identifier: keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer sbgp-ipAddrBlock: critical IPv6: 2605:a7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:8f:ca:48:23:88:c5:33:24:84:08:6e:ae:63:a6:4b:f3:d8: cb:38:e0:81:75:ca:94:c5:5f:0a:3c:83:7b:31:2a:ef:cd:a5: 49:f6:d9:56:dd:79:ac:7e:02:5e:5a:c5:f0:c0:9e:be:36:14: 93:ac:d6:a8:b5:d2:e0:42:bc:e6:34:35:e0:79:dd:ec:09:d1: 8b:94:55:6e:ac:a2:99:79:8e:50:59:d5:2d:9f:44:9d:f8:d1: 2f:2a:3a:43:d2:6a:f2:d2:1b:3d:fe:5d:70:64:18:3b:f4:ad: 42:90:bb:b2:8c:2c:3c:34:ec:e1:bf:e4:e6:70:ae:69:94:91: dd:0e:c0:41:b2:dd:6f:c8:d1:69:c3:b3:4d:ed:df:71:5a:c9: f6:56:e8:b5:28:b8:1c:db:97:ca:6b:69:54:dc:93:3d:f4:3c: 06:e0:57:4d:4d:b3:b4:22:9f:52:fa:d8:9f:a4:dd:1e:d0:e8: 58:a9:6d:46:ec:ba:8c:1a:30:89:46:85:f1:fb:a2:b5:d1:1a: 1f:7a:1d:ff:f3:e6:0f:f4:6f:98:96:ec:9a:53:a8:67:06:a9: 25:eb:08:9d:61:8b:25:16:46:6b:12:58:9f:b3:93:bd:f2:f0: 23:af:b5:56:a9:ac:87:d2:86:92:4d:c2:8c:d5:89:72:0d:d3: ae:9a:b2:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoMBXM48l97eCwazsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli Njc2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk Njc3YzJmMmQtZjQ4NS00OTk5LWFiNDUtNjgyZTdjNWE1ZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqglSruwjxbJhMDujBSkw4fpSpdVBbMMOTGm7 MmZtUk3H8+6sQtwVjjEbrRBi1cPLCKCeoPNTSSYIvXG5U+WZcDdZntjEyBne3XNt uBcT2A9V8SVp132CGhoJNifAtiJbz8lGSHbU8K2Jk9WmdkL0xOiSU9yTDyKGd1df nSZAP4IY+1GAOopXz7cgt1GHZsZjZk1GRKuXHt2O/g/pVLHrwRM0exWmy5K36zbt Dz4U+F1nh3lHDzxBkmRrgoURu3dFBl5OI4viw4yc+K6ui/TKui7aTP/FpE1DcyCi CEG+Oza+RF60xdSLKJNkd4k8f/tDDGWOQq31K8xxpyNKcBzDhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNpJ4ZjiesRkPLmmiFl/K9GPqJQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5 MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvMzg4NjFjNGQtY2JjNy0z YTg4LTlhYTMtN2QxYzhhZTU4NWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3 ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5 YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy Y2ZjOWI2NzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWnwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYj8pII4jFMySECG6uY6ZL89jLOOCBdcqUxV8KPIN7MSrvzaVJ9tlW 3XmsfgJeWsXwwJ6+NhSTrNaotdLgQrzmNDXged3sCdGLlFVurKKZeY5QWdUtn0Sd +NEvKjpD0mry0hs9/l1wZBg79K1CkLuyjCw8NOzhv+TmcK5plJHdDsBBst1vyNFp w7NN7d9xWsn2Vui1KLgc25fKa2lU3JM99DwG4FdNTbO0Ip9S+tifpN0e0OhYqW1G 7LqMGjCJRoXx+6K10Rofeh3/8+YP9G+YluyaU6hnBqkl6widYYslFkZrElifs5O9 8vAjr7VWqayH0oaSTcKM1YlyDdOumrIp -----END CERTIFICATE-----Generated at Tue Jul 1 12:29:49 2025 by rpki-client