$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa File: dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa (raw, json) Hash identifier: kqQTI23JVJ1+ornTw9RWbzuPRG6P1ksFjq6yJzyQmUY= Subject key identifier: D8:EC:B6:1F:61:09:8A:B4:68:51:93:30:85:E1:71:94:DB:C3:F8:AE Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F43285849FF751592DA6DCBB844A88D80 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 400702 IP address blocks: 2604:6580::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:15:92:da:6d:cb:b8:44:a8:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=c56f29b3-2163-4929-9b43-20696ceaca5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:69:79:cd:ef:72:ed:44:2d:87:aa:0b:a6:2f: 10:57:d9:fe:72:f7:95:0a:94:a3:66:fc:bb:14:a1: a9:e3:f2:f9:01:0d:72:b8:80:88:d9:b0:bb:7f:e3: 51:db:62:6a:c1:6b:98:42:16:16:49:05:c5:5d:80: ed:f8:3b:34:2f:19:2a:62:b5:ec:20:ed:88:df:9c: bc:21:9c:23:2c:71:21:55:c3:6f:08:25:ee:2e:20: b8:04:c6:4c:93:ef:2e:b4:f9:d9:09:63:ed:db:a1: ac:31:80:6e:a9:77:40:9d:18:d0:18:ba:2b:8d:9a: 1c:4a:62:b5:3a:e5:e6:95:46:54:56:5f:5a:b0:2b: df:cc:81:db:75:fd:03:c9:e9:9f:03:fe:35:2a:08: b0:da:86:74:fc:1c:f2:80:50:57:f0:c1:1a:2e:c2: cb:0a:4b:28:03:d4:06:e8:c0:95:ac:0d:b6:5c:5b: 76:02:f0:08:f4:67:56:17:bd:d3:2c:ee:e7:b9:1c: 0b:20:9b:c5:ba:0f:06:53:13:b6:b9:98:45:17:89: b7:b3:f4:68:3d:87:2d:12:8c:0c:fe:b8:18:1a:27: ea:05:5f:3e:c3:9f:ce:03:42:2e:d3:aa:93:82:a0: a5:e6:93:00:52:08:e3:bc:99:b4:05:95:fd:40:73: f0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EC:B6:1F:61:09:8A:B4:68:51:93:30:85:E1:71:94:DB:C3:F8:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv6: 2604:6580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f1:ad:4e:92:79:97:41:20:3c:3d:f5:15:50:03:14:1f:3a: bb:4b:ea:fa:88:f8:29:19:4e:ba:70:1d:89:54:13:8a:e1:09: b6:38:e1:7f:e7:20:3d:15:8a:4b:97:d6:49:15:d3:dc:04:77: a1:7f:60:60:07:94:e2:29:58:cc:a4:84:f7:0e:ac:b7:31:f2: bd:25:07:2b:dd:8b:67:36:90:0c:bc:b1:ba:6d:f3:03:d3:0b: c8:34:85:9f:c9:71:0e:a1:e5:21:b2:a0:2c:4b:f8:f2:92:49: ec:3e:cc:0f:33:a7:cf:49:d4:ec:fd:a6:b6:4d:d4:07:ea:9a: 70:26:fe:87:9d:f3:1f:6d:25:ce:e2:21:46:83:78:fd:83:49: a8:86:83:1c:71:77:33:b5:dc:ec:82:71:b5:55:46:9f:dc:91: 09:49:c7:80:74:8c:6f:d7:97:a5:97:5d:7e:c7:93:6d:92:b8: 5f:d5:1c:67:a3:ec:0d:dd:94:00:35:ee:9e:2b:62:28:cf:90: 2d:bf:53:ea:1a:42:12:a8:66:07:3f:fe:dc:c9:d9:0d:b5:7e: f4:b7:85:e5:d3:4e:0d:96:2f:c0:2c:e1:e8:0d:09:e4:68:d9: b5:6d:3d:2c:b7:f7:8c:9d:42:2c:64:8f:1e:ed:0e:43:6b:f2: 69:59:5a:25 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn/dRWS2m3LuESojYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk YzU2ZjI5YjMtMjE2My00OTI5LTliNDMtMjA2OTZjZWFjYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2l5ze9y7UQth6oLpi8QV9n+cveVCpSjZvy7 FKGp4/L5AQ1yuICI2bC7f+NR22JqwWuYQhYWSQXFXYDt+Ds0LxkqYrXsIO2I35y8 IZwjLHEhVcNvCCXuLiC4BMZMk+8utPnZCWPt26GsMYBuqXdAnRjQGLorjZocSmK1 OuXmlUZUVl9asCvfzIHbdf0DyemfA/41Kgiw2oZ0/BzygFBX8MEaLsLLCksoA9QG 6MCVrA22XFt2AvAI9GdWF73TLO7nuRwLIJvFug8GUxO2uZhFF4m3s/RoPYctEowM /rgYGifqBV8+w5/OA0Iu06qTgqCl5pMAUgjjvJm0BZX9QHPwcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNjsth9hCYq0aFGTMIXhcZTbw/iuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvZGQ2ZWJjNjUtNjM3NS0z ZjNkLWE0ZDQtN2U3OWIxNjYyZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRlgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBs8a1OknmXQSA8PfUVUAMUHzq7S+r6iPgpGU66cB2JVBOK4Qm2OOF/ 5yA9FYpLl9ZJFdPcBHehf2BgB5TiKVjMpIT3Dqy3MfK9JQcr3YtnNpAMvLG6bfMD 0wvINIWfyXEOoeUhsqAsS/jykknsPswPM6fPSdTs/aa2TdQH6ppwJv6HnfMfbSXO 4iFGg3j9g0mohoMccXcztdzsgnG1VUaf3JEJSceAdIxv15ell11+x5Ntkrhf1Rxn o+wN3ZQANe6eK2Ioz5Atv1PqGkISqGYHP/7cydkNtX70t4Xl004Nli/ALOHoDQnk aNm1bT0st/eMnUIsZI8e7Q5Da/JpWVol -----END CERTIFICATE-----Generated at Sun Jun 29 16:19:40 2025 by rpki-client