$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa File: de150f3e-630a-34f4-a9f4-8aae30296160.roa (raw, json) Hash identifier: Su4VMjkqPLGbOJkRjdAJ1xX9meucUAHzzVBeI7tcb8A= Subject key identifier: 47:8B:FC:5E:13:C7:27:8B:51:42:6B:F1:F2:E2:4B:A5:62:B4:A0:77 Certificate issuer: /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Certificate serial: 010D0C9F4328584A4C3B1C5E7D34DA2F4F6C18C0 Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 14618 IP address blocks: 2620:197:de0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1c:5e:7d:34:da:2f:4f:6c:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=b783bf50-c5a9-42ac-93d1-609cc7d62c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:60:12:16:ad:c1:c9:c4:6e:75:22:ef:8b: 9a:3e:29:33:27:01:ed:f3:3e:05:b3:81:ab:3d:df: 05:04:05:b6:db:ab:a5:b3:22:d2:5d:1e:f9:66:f3: 2b:c2:f9:0f:71:8c:83:52:d2:0a:75:df:04:61:09: 68:00:a9:06:f2:65:69:a7:77:98:ec:13:d0:68:34: e4:cf:14:5b:3b:12:d8:99:25:d9:0a:70:ed:2f:04: 8d:22:72:f3:0b:d3:79:46:c1:86:9c:e5:8c:bc:bb: 0e:fb:ea:8f:5f:5e:08:70:43:93:3a:47:69:02:3c: e9:27:5d:f6:45:ec:16:18:81:8b:a4:1c:a0:b3:bc: 80:68:dc:c8:29:0d:72:2b:44:e8:44:10:9b:17:43: c1:02:05:ff:a4:ba:19:78:ba:99:fd:17:66:f2:11: 0c:e7:e7:41:ed:80:74:5c:30:e4:fd:38:dd:e5:08: fe:d6:3a:73:8d:fe:53:30:74:d5:8f:45:3a:65:c5: 28:6c:6a:f9:f7:89:fc:7a:ef:19:f5:aa:a7:9a:5c: 62:cf:2e:53:b3:06:29:8c:19:53:29:0f:98:eb:b0: ad:4a:68:de:08:68:a7:0b:78:a2:f7:ce:22:5f:05: e2:a8:90:8a:2d:16:d1:ee:7f:a9:05:0c:8c:49:b6: de:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8B:FC:5E:13:C7:27:8B:51:42:6B:F1:F2:E2:4B:A5:62:B4:A0:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl X509v3 Authority Key Identifier: keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer sbgp-ipAddrBlock: critical IPv6: 2620:197:de0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:dc:cd:e6:4a:02:ff:31:cc:c8:c4:d0:88:82:70:b2:07:e1: b2:fe:ba:c1:56:99:63:be:c0:2e:14:bf:44:c6:cf:d0:49:58: 93:65:49:a4:35:df:60:15:9c:3b:8a:4a:b2:3c:13:c5:2e:01: e8:04:84:94:85:49:83:16:92:b8:aa:71:75:95:5c:86:b2:21: a0:d2:87:55:15:3d:a0:47:4d:f7:cb:5c:30:c0:f7:90:88:6f: 69:9e:c5:0e:6a:39:c6:47:cb:e9:1e:b7:a0:05:65:ea:2d:06: 91:78:0e:14:93:19:eb:6e:88:23:dc:fa:c4:22:0c:5d:e9:99: e0:a6:6a:5b:34:8e:26:bc:77:03:02:2a:8a:36:e3:ab:c3:e0: ef:1d:d6:8f:9a:02:a9:9f:e1:ec:dd:e9:60:50:89:61:18:2e: a0:ab:59:d1:fb:13:e3:f3:bc:3d:3e:42:9d:2c:5a:71:01:18: ab:a1:97:e4:ba:96:08:23:03:9a:e7:9f:1d:61:e8:f5:8a:fa: 71:01:95:2e:9c:61:1f:9c:d9:72:98:4a:a8:6b:85:1a:a2:81: 4b:2e:d8:b9:4e:36:f7:28:53:2d:ee:de:45:55:4e:55:d3:19: 20:a2:a8:1b:09:b0:0d:cc:48:a6:18:37:d9:a4:c8:ff:42:24: c9:c9:47:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpMOxxefTTaL09sGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4 ZGMzMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk Yjc4M2JmNTAtYzVhOS00MmFjLTkzZDEtNjA5Y2M3ZDYyYzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp25gEhatwcnEbnUi74uaPikzJwHt8z4Fs4Gr Pd8FBAW226ulsyLSXR75ZvMrwvkPcYyDUtIKdd8EYQloAKkG8mVpp3eY7BPQaDTk zxRbOxLYmSXZCnDtLwSNInLzC9N5RsGGnOWMvLsO++qPX14IcEOTOkdpAjzpJ132 RewWGIGLpBygs7yAaNzIKQ1yK0ToRBCbF0PBAgX/pLoZeLqZ/Rdm8hEM5+dB7YB0 XDDk/Tjd5Qj+1jpzjf5TMHTVj0U6ZcUobGr594n8eu8Z9aqnmlxizy5TswYpjBlT KQ+Y67CtSmjeCGinC3ii984iXwXiqJCKLRbR7n+pBQyMSbbeOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEeL/F4TxyeLUUJr8fLiS6VitKB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4 ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvZGUxNTBmM2UtNjMwYS0z NGY0LWE5ZjQtOGFhZTMwMjk2MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0 OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw3g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEjczeZKAv8xzMjE0IiCcLIH4bL+usFWmWO+wC4Uv0TGz9BJWJNl SaQ132AVnDuKSrI8E8UuAegEhJSFSYMWkriqcXWVXIayIaDSh1UVPaBHTffLXDDA 95CIb2mexQ5qOcZHy+ket6AFZeotBpF4DhSTGetuiCPc+sQiDF3pmeCmals0jia8 dwMCKoo246vD4O8d1o+aAqmf4ezd6WBQiWEYLqCrWdH7E+PzvD0+Qp0sWnEBGKuh l+S6lggjA5rnnx1h6PWK+nEBlS6cYR+c2XKYSqhrhRqigUsu2LlONvcoUy3u3kVV TlXTGSCiqBsJsA3MSKYYN9mkyP9CJMnJRzI= -----END CERTIFICATE-----Generated at Sun Jun 29 01:18:46 2025 by rpki-client