$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa File: a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa (raw, json) Hash identifier: eFRXjgbHy0KhsIqXLCAkHlfJ1ZRz/RFkuuWrnJEY3Kc= Subject key identifier: 3A:C1:52:B7:95:B0:41:85:48:07:82:09:22:6E:B8:FA:AD:E4:13:D7 Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Certificate serial: 010D0C9F4328584A268AC30AEDFE641AB1BD1600 Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 394056 IP address blocks: 2607:3640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c3:0a:ed:fe:64:1a:b1:bd:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=4389865c-45a1-4ca3-be1a-95bc332cf89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:1f:78:bb:bb:94:60:cc:c1:52:9b:47:ea: 7d:f6:04:e5:f8:be:2f:a9:a0:9f:6f:ff:ad:fa:af: 6b:33:fe:02:38:3d:c2:ea:c1:2f:de:4a:99:97:2c: 77:03:25:17:6d:fe:61:c3:84:ec:a2:eb:1a:96:87: 73:f7:ec:0b:dd:68:e2:60:eb:54:8e:37:26:70:dc: c3:85:a5:bb:1c:db:ff:74:b7:37:45:bc:d4:3c:0d: 99:0b:95:eb:66:66:0f:4e:94:7f:ce:89:91:6d:0d: 73:4b:28:88:96:37:1c:a2:3a:17:85:3e:1a:91:a8: 92:6c:6f:d9:78:fe:2e:b6:ec:f0:c8:11:a8:f2:49: fe:0e:5a:aa:74:61:e3:02:77:cc:fd:53:38:62:4e: 02:34:c0:87:b9:de:27:83:48:8f:01:2d:d2:c1:bb: f9:ac:ee:d1:5f:3b:1d:51:ea:63:1b:db:14:c9:b4: cd:b2:17:29:55:ff:c0:cd:29:93:d6:bf:fc:2e:5f: 9f:cd:91:98:b4:ed:ef:58:d9:d1:95:e1:0c:fc:52: cb:13:05:58:b8:e6:60:65:41:e9:a5:56:7a:2a:85: 39:56:7f:3a:b1:37:dc:1e:d4:a5:32:59:d0:01:f6: bf:b1:65:e0:6e:f3:ab:ce:60:83:14:17:95:91:61: 07:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C1:52:B7:95:B0:41:85:48:07:82:09:22:6E:B8:FA:AD:E4:13:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl X509v3 Authority Key Identifier: keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer sbgp-ipAddrBlock: critical IPv6: 2607:3640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:89:fd:90:42:b6:eb:d5:70:fb:39:ed:40:09:83:23:3b:d3: b2:75:24:dc:0f:3f:30:d3:3d:dc:d2:fb:37:f9:01:44:51:55: fa:18:a1:89:cd:03:fd:18:0f:79:cf:d4:1a:5d:29:84:11:06: 4a:30:80:66:b7:57:5a:96:a3:29:dd:ff:21:67:a7:3a:79:89: c2:81:c6:35:bd:89:c6:7a:31:49:b4:74:10:4c:05:4b:c0:06: cd:ee:83:13:9b:a4:72:c7:45:cf:c0:2b:2c:de:7d:dc:bf:ba: 75:2b:ab:2f:50:8b:35:03:fc:8c:f4:38:9c:30:21:6f:40:ea: dc:e4:00:c8:cd:0b:cd:f4:6c:af:07:46:c5:6a:2a:00:f9:40: 73:17:c0:e0:77:7b:4d:ad:8b:82:3b:80:d4:7d:ac:64:64:c7: 53:df:1c:24:d4:fd:39:3b:ad:1b:b3:d3:67:24:5d:83:83:dd: 41:b8:b1:27:7d:60:41:f9:3d:9a:db:1b:da:fb:f8:1f:6e:54: 51:d9:8e:d4:04:f9:40:2d:12:10:d3:9e:05:e3:93:ff:78:1d: a0:bb:65:a5:46:42:8a:64:f5:1d:9e:f6:97:90:a3:b7:7c:f9: 91:dd:a1:d6:e4:a6:a6:02:87:18:1a:13:16:a7:b0:89:77:81: 21:a3:31:6d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEomisMK7f5kGrG9FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz M2E1MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk NDM4OTg2NWMtNDVhMS00Y2EzLWJlMWEtOTViYzMzMmNmODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo0feLu7lGDMwVKbR+p99gTl+L4vqaCfb/+t +q9rM/4COD3C6sEv3kqZlyx3AyUXbf5hw4Tsousalodz9+wL3WjiYOtUjjcmcNzD haW7HNv/dLc3RbzUPA2ZC5XrZmYPTpR/zomRbQ1zSyiIljccojoXhT4akaiSbG/Z eP4utuzwyBGo8kn+DlqqdGHjAnfM/VM4Yk4CNMCHud4ng0iPAS3Swbv5rO7RXzsd UepjG9sUybTNshcpVf/AzSmT1r/8Ll+fzZGYtO3vWNnRleEM/FLLEwVYuOZgZUHp pVZ6KoU5Vn86sTfcHtSlMlnQAfa/sWXgbvOrzmCDFBeVkWEH8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDrBUreVsEGFSAeCCSJuuPqt5BPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvYTQyODhlZWQtNGY0ZS0z MGZkLWIxZDctYTUxNmIwODVmMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3 OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl ODk0MTMzYTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgc2QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6if2QQrbr1XD7Oe1ACYMjO9OydSTcDz8w0z3c0vs3+QFEUVX6GKGJ zQP9GA95z9QaXSmEEQZKMIBmt1dalqMp3f8hZ6c6eYnCgcY1vYnGejFJtHQQTAVL wAbN7oMTm6Ryx0XPwCss3n3cv7p1K6svUIs1A/yM9DicMCFvQOrc5ADIzQvN9Gyv B0bFaioA+UBzF8Dgd3tNrYuCO4DUfaxkZMdT3xwk1P05O60bs9NnJF2Dg91BuLEn fWBB+T2a2xva+/gfblRR2Y7UBPlALRIQ054F45P/eB2gu2WlRkKKZPUdnvaXkKO3 fPmR3aHW5KamAocYGhMWp7CJd4EhozFt -----END CERTIFICATE-----Generated at Tue Jul 1 05:21:01 2025 by rpki-client