$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa File: 2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa (raw, json) Hash identifier: XcXYvE5Sb5h4BNYYBkEZoO1QSp80PCna0aCLawPIEFQ= Subject key identifier: 44:7B:1F:DB:4B:05:0A:AF:D1:52:39:CC:74:22:94:B4:37:B8:0E:E5 Certificate issuer: /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0 Certificate serial: 010D0C9F4328584A4C3B0E53D61A9A3FC0D51240 Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 394840 IP address blocks: 2607:bd80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:0e:53:d6:1a:9a:3f:c0:d5:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=651cdbab-6385-491f-acc1-0cedf784ac6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:82:82:6c:96:10:d9:c2:76:90:98:f1:d2: 5e:f5:1a:b0:e3:48:7e:96:a2:d3:7b:3d:5a:52:d4: 14:73:fc:88:ab:76:12:f0:56:4b:53:54:b9:b7:fb: e1:f6:fd:d3:1f:c0:e2:51:7d:64:d3:16:60:b8:7a: f1:aa:42:d5:41:fd:aa:c8:73:2e:48:49:a9:ce:d8: 62:88:5e:c0:3c:f6:65:2b:b4:4c:2d:6f:cb:6f:73: 21:03:e4:7c:ab:af:87:5c:72:44:41:d7:c2:10:3e: 1e:5d:b2:25:5f:d5:27:d9:4d:81:e9:9e:bf:2f:99: c3:e3:c3:09:51:f8:59:3c:1a:2f:76:08:81:55:67: 66:f2:fb:e2:a5:19:f3:e3:20:24:29:2e:15:2f:19: 68:7a:3a:d3:ee:e1:53:65:19:7c:d0:95:8a:de:8c: 7a:15:e3:1b:84:2c:17:34:7b:98:16:ee:e5:58:10: 08:68:f1:10:11:76:10:41:13:a4:6a:1d:41:20:b6: 78:17:5b:57:e9:31:4b:bd:d4:82:27:cc:8d:9a:93: 9c:3d:14:d3:c5:fc:f1:4b:64:2d:91:ca:94:28:2b: df:dc:38:e0:89:42:24:a4:f5:56:6a:54:66:3d:fb: ee:29:91:e6:00:00:c3:8f:85:05:34:fd:b9:6a:4e: 86:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7B:1F:DB:4B:05:0A:AF:D1:52:39:CC:74:22:94:B4:37:B8:0E:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl X509v3 Authority Key Identifier: keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer sbgp-ipAddrBlock: critical IPv6: 2607:bd80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:25:eb:b4:d1:95:9d:a2:78:1d:bd:27:c4:97:3b:29:fd:78: 17:b0:54:08:ee:08:80:0b:bc:2b:77:78:e1:9a:09:cb:7c:2b: 80:75:f3:a9:1f:df:91:eb:38:d4:75:fd:d9:63:51:5f:08:26: 44:c5:b9:60:02:06:33:a3:59:1d:ad:2a:9f:72:41:9b:f7:f4: 80:6a:d8:e5:33:15:f1:92:e7:20:e5:3f:f0:f6:e9:3c:67:ba: 2f:87:64:d1:57:eb:f3:c7:cd:86:ff:22:55:b2:7f:a8:4f:c5: 40:71:66:c2:13:ee:3f:17:37:2a:d5:95:f5:da:35:1c:76:f8: ea:5d:e3:36:92:d2:42:7b:c3:e0:b7:32:84:05:54:72:89:97: f3:19:46:0b:d8:ab:40:24:0a:bb:b8:88:78:4e:ea:58:03:b1: 50:b1:42:71:86:9e:cb:5e:8b:36:47:19:f3:c7:cb:db:95:4b: 9d:41:e9:20:87:61:24:64:64:1a:42:41:fe:6d:95:06:fa:03: a2:7b:b2:69:7c:68:6e:91:71:9c:a1:1d:18:b2:5f:61:ec:2f: 8a:7f:de:8d:a0:8b:80:d7:b0:96:bd:38:b9:71:3d:45:12:3a: 7a:38:4f:77:40:48:a5:7a:ad:cf:ed:d7:3c:76:0d:86:24:99: 0f:76:6c:cf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpMOw5T1hqaP8DVEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYwNDk2YTgtMGNhOS00NWVjLTgyMGYtOGU4OGMzNmU1 OGIwMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NjUxY2RiYWItNjM4NS00OTFmLWFjYzEtMGNlZGY3ODRhYzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm2CgmyWENnCdpCY8dJe9Rqw40h+lqLTez1a UtQUc/yIq3YS8FZLU1S5t/vh9v3TH8DiUX1k0xZguHrxqkLVQf2qyHMuSEmpzthi iF7APPZlK7RMLW/Lb3MhA+R8q6+HXHJEQdfCED4eXbIlX9Un2U2B6Z6/L5nD48MJ UfhZPBovdgiBVWdm8vvipRnz4yAkKS4VLxloejrT7uFTZRl80JWK3ox6FeMbhCwX NHuYFu7lWBAIaPEQEXYQQROkah1BILZ4F1tX6TFLvdSCJ8yNmpOcPRTTxfzxS2Qt kcqUKCvf3DjgiUIkpPVWalRmPfvuKZHmAADDj4UFNP25ak6G5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFER7H9tLBQqv0VI5zHQilLQ3uA7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0 OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4YzM2ZTU4YjAvMmJjN2ZmMDctOWFhZi0z ZTVlLTgwYWEtMjEyNmEwZGRhNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWYwNDk2YTgtMGNhOS00NWVjLTgy MGYtOGU4OGMzNmU1OGIwLzFmMDQ5NmE4LTBjYTktNDVlYy04MjBmLThlODhjMzZl NThiMC5jcmwwHwYDVR0jBBgwFoAUBdmyloInvfkN9+9ROqjQq8Wh1YwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4 YzM2ZTU4YjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge9gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmJeu00ZWdongdvSfElzsp/XgXsFQI7giAC7wrd3jhmgnLfCuAdfOp H9+R6zjUdf3ZY1FfCCZExblgAgYzo1kdrSqfckGb9/SAatjlMxXxkucg5T/w9uk8 Z7ovh2TRV+vzx82G/yJVsn+oT8VAcWbCE+4/Fzcq1ZX12jUcdvjqXeM2ktJCe8Pg tzKEBVRyiZfzGUYL2KtAJAq7uIh4TupYA7FQsUJxhp7LXos2Rxnzx8vblUudQekg h2EkZGQaQkH+bZUG+gOie7JpfGhukXGcoR0Ysl9h7C+Kf96NoIuA17CWvTi5cT1F Ejp6OE93QEileq3P7dc8dg2GJJkPdmzP -----END CERTIFICATE-----Generated at Mon Jun 30 07:27:23 2025 by rpki-client