$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa File: 1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa (raw, json) Hash identifier: Rjj74Y1QrGIO3I8ULVqYJccl2y2eY92G7ixKgiFF2Qw= Subject key identifier: 9D:9C:59:95:2E:F4:1B:2A:5B:39:8A:F6:96:6C:CC:60:AC:B1:D4:72 Certificate issuer: /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Certificate serial: 010D0C9F4328584A45403A305AE4409AE772E640 Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 395388 IP address blocks: 2620:c2:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3a:30:5a:e4:40:9a:e7:72:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=129ddcd3-cce8-4434-954f-ca4ac3e9ad67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4e:df:9b:cd:f1:3f:1d:a8:84:e6:db:97:f8: ba:04:44:2d:cd:2a:db:9a:c5:c6:04:ed:f4:85:e1: 99:01:f3:3d:ac:13:27:57:15:67:87:24:9b:ab:dd: 88:ac:dc:64:af:a1:ae:85:c1:0b:41:72:8b:9a:c3: b6:d8:2d:73:82:47:2e:d8:e0:c4:ba:b5:ab:8a:ad: 69:b8:2b:8c:82:71:c9:3d:46:13:67:92:5b:2f:da: 9b:3b:a3:b5:47:b0:84:f3:b2:45:88:08:63:27:67: 8c:80:74:07:0e:ef:81:96:bb:1e:4e:96:2c:63:f0: a1:4c:0c:3b:af:57:ed:e5:be:f5:72:1b:40:79:3e: 0f:7e:7a:51:06:fc:2e:92:b6:1d:7a:ba:f4:fe:8a: 34:09:a7:39:b9:be:64:85:99:6f:c3:4f:88:47:f5: 8c:e7:7b:9f:b9:43:5a:60:e7:54:89:e4:3f:26:f2: dd:59:d5:1a:71:c5:94:d0:37:b8:f4:09:51:06:5f: af:da:d4:33:62:ff:e0:99:c1:93:f6:a0:40:d2:d8: b7:d9:c1:39:f5:b4:c4:94:49:99:f3:03:3b:be:9e: 73:c8:b6:01:dd:d9:38:5b:b1:68:b3:55:fd:15:14: af:0a:0b:5c:65:e8:fa:bd:82:48:2e:47:ba:c4:fe: 9e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9C:59:95:2E:F4:1B:2A:5B:39:8A:F6:96:6C:CC:60:AC:B1:D4:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl X509v3 Authority Key Identifier: keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer sbgp-ipAddrBlock: critical IPv6: 2620:c2:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:64:79:34:a0:41:90:48:f2:6b:7b:58:ed:78:ea:c7:1c:69: 6b:a0:5d:ce:93:f8:f7:83:70:c8:9f:7e:6c:2f:be:02:7e:b7: 8b:a1:fb:37:da:c5:6a:6e:20:61:56:5f:c3:14:46:88:24:0f: ba:70:0b:c3:ce:47:fb:ea:0f:27:5e:41:b4:8e:cb:26:a9:7b: dd:4d:1b:e6:55:2c:76:ca:8c:1d:de:6f:9a:c1:2a:9d:d5:2d: 6c:57:72:c9:40:8f:3c:4d:38:4e:53:53:5a:b5:b8:68:81:df: 2a:64:68:68:09:35:a3:d4:d3:c2:61:f3:0f:46:2b:a1:db:18: bf:4b:80:62:ec:7f:25:91:38:c5:25:df:33:7b:b5:d5:1f:d5: 43:ed:79:31:0d:6c:62:a9:a8:02:ba:35:b2:fc:91:e1:ed:3f: c0:0d:78:4e:8e:a2:a7:f8:c9:e0:76:30:f1:eb:25:8c:6d:11: e7:fc:0f:87:bf:c1:27:6a:ac:c2:de:9f:42:d6:a5:37:a3:6f: 63:03:15:a6:be:09:6f:67:5e:04:00:ce:77:b5:3a:0f:50:2f: 34:ff:49:73:82:7c:5b:43:37:76:f0:d2:6a:18:da:37:d3:4a: 57:25:e9:9b:3c:85:3f:3a:17:67:da:bf:71:dd:ff:46:b3:65: 1e:a9:51:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpFQDowWuRAmudy5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxYmFlYmYtMWE3ZC00MGU1LTkwYzktMzcwYzA4OGVi YzcxMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk MTI5ZGRjZDMtY2NlOC00NDM0LTk1NGYtY2E0YWMzZTlhZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU7fm83xPx2ohObbl/i6BEQtzSrbmsXGBO30 heGZAfM9rBMnVxVnhySbq92IrNxkr6GuhcELQXKLmsO22C1zgkcu2ODEurWriq1p uCuMgnHJPUYTZ5JbL9qbO6O1R7CE87JFiAhjJ2eMgHQHDu+BlrseTpYsY/ChTAw7 r1ft5b71chtAeT4PfnpRBvwukrYderr0/oo0Cac5ub5khZlvw0+IR/WM53ufuUNa YOdUieQ/JvLdWdUaccWU0De49AlRBl+v2tQzYv/gmcGT9qBA0ti32cE59bTElEmZ 8wM7vp5zyLYB3dk4W7Fos1X9FRSvCgtcZej6vYJILke6xP6eaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ2cWZUu9BsqWzmK9pZszGCssdRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFi YWViZi0xYTdkLTQwZTUtOTBjOS0zNzBjMDg4ZWJjNzEvMWNkYzA4ZjktOWE1OC0z ZjdhLWFlYTItNzEzYzI5NGI0MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjcxYmFlYmYtMWE3ZC00MGU1LTkw YzktMzcwYzA4OGViYzcxL2I3MWJhZWJmLTFhN2QtNDBlNS05MGM5LTM3MGMwODhl YmM3MS5jcmwwHwYDVR0jBBgwFoAUqx/esynKT9RyxZYo3wfX3L3BEScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFiYWViZi0xYTdkLTQwZTUtOTBjOS0zNzBj MDg4ZWJjNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAwiAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJNkeTSgQZBI8mt7WO146sccaWugXc6T+PeDcMiffmwvvgJ+t4uh +zfaxWpuIGFWX8MURogkD7pwC8POR/vqDydeQbSOyyape91NG+ZVLHbKjB3eb5rB Kp3VLWxXcslAjzxNOE5TU1q1uGiB3ypkaGgJNaPU08Jh8w9GK6HbGL9LgGLsfyWR OMUl3zN7tdUf1UPteTENbGKpqAK6NbL8keHtP8ANeE6Ooqf4yeB2MPHrJYxtEef8 D4e/wSdqrMLen0LWpTejb2MDFaa+CW9nXgQAzne1Og9QLzT/SXOCfFtDN3bw0moY 2jfTSlcl6Zs8hT86F2fav3Hd/0azZR6pUdo= -----END CERTIFICATE-----Generated at Mon Jun 30 14:19:49 2025 by rpki-client