$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/90cf92a7-0ca3-39d9-91f7-85169227c240.roa File: 90cf92a7-0ca3-39d9-91f7-85169227c240.roa (raw, json) Hash identifier: 1MBuMXIc3qjSBQhwdyLTr3VVlrT3F3Bnf0R18xQZ/f8= Subject key identifier: A0:CE:D3:AD:15:D7:B0:4C:D1:F6:28:52:58:FE:12:97:E8:54:BE:5B Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584A0C054604B20DB463246DECC0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/90cf92a7-0ca3-39d9-91f7-85169227c240.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 54994 IP address blocks: 2607:3f40:ff24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:46:04:b2:0d:b4:63:24:6d:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=b40f6910-5ce1-40cb-9fe6-44e2234b8c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:37:cb:54:7c:d9:d4:19:46:0d:aa:30:ec: 65:61:b8:f2:c3:0c:16:9a:92:61:e5:55:9b:17:31: b3:7f:1a:49:15:f2:99:77:59:30:34:56:7a:b2:4f: 34:83:57:65:1a:24:41:f5:26:43:37:d5:16:fb:f7: 26:10:29:26:24:0e:23:8b:4f:2c:a1:9a:c3:eb:c4: 1f:f9:ae:b0:f5:7e:76:40:95:00:3d:39:16:e0:78: 88:7e:1b:17:a6:d8:d8:0b:c6:02:c7:30:4f:49:55: e9:58:a1:71:19:fc:26:30:86:01:12:0b:98:d0:d3: 3b:f7:ff:83:0c:45:30:24:7b:95:c6:fc:5a:79:46: c8:ae:b2:07:ed:e9:9d:86:e2:67:0b:4d:b0:38:ad: d5:8a:c5:ed:1f:c1:3d:48:99:ed:62:61:93:66:9c: 0b:9b:e9:37:eb:02:3f:eb:8e:7d:d0:18:e1:ed:cf: 0b:cb:aa:7b:b9:44:cb:e7:ed:21:1f:a9:a2:d7:58: c4:b3:d7:36:5d:11:ce:c3:10:76:7e:e3:4d:26:ff: b0:90:8e:4b:f7:c3:0d:48:96:a1:c4:48:e8:35:8f: 01:fd:9e:f6:9d:7f:a0:4d:bd:27:26:12:a2:be:ed: 78:9e:0a:18:b7:2b:00:6d:e5:a5:8e:27:03:52:5b: 17:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CE:D3:AD:15:D7:B0:4C:D1:F6:28:52:58:FE:12:97:E8:54:BE:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/90cf92a7-0ca3-39d9-91f7-85169227c240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff24::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:4b:49:d9:02:8c:81:02:e9:4f:1f:64:a0:00:af:c6:4c:58: 52:c5:df:1d:2e:3a:29:69:dd:06:11:46:4a:16:3b:1e:11:0a: 70:d6:29:9e:1b:ab:59:7f:fa:1c:73:39:f7:29:f9:e6:a5:53: 9d:c3:2a:01:27:7d:7f:64:42:6f:ea:b4:7f:98:cd:9e:d7:e4: 3b:cd:a0:9f:97:72:19:f9:4f:f8:33:6d:99:37:10:10:63:61: 37:e5:05:ec:06:88:d7:d8:e3:18:1e:a7:95:b0:30:33:bb:4f: b2:a9:fa:73:b8:81:e7:ff:90:ab:11:8e:33:fc:4e:39:ff:31: 15:ee:dc:a6:6f:67:f1:7a:d8:73:43:18:63:0f:72:71:1d:cd: 53:f1:83:ef:49:aa:eb:08:b1:93:17:89:ab:07:94:88:70:f0: 39:4f:18:b4:ac:e8:83:2e:42:2d:b9:99:f1:ad:0d:d5:b7:86: a6:8a:c4:ff:30:04:fa:95:4d:43:31:12:a0:93:c4:51:0b:01: 30:ca:8d:7b:78:43:b0:f5:02:04:b8:35:d2:99:70:3d:b2:04: 4c:b1:7a:36:fe:f0:83:88:ac:04:ae:56:88:eb:3b:61:ad:88: de:0e:8d:84:57:8c:17:32:25:ed:27:a8:25:7b:cf:a0:23:7a: 0d:dd:bc:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoMBUYEsg20YyRt7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YjQwZjY5MTAtNWNlMS00MGNiLTlmZTYtNDRlMjIzNGI4YzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8w3y1R82dQZRg2qMOxlYbjywwwWmpJh5VWb FzGzfxpJFfKZd1kwNFZ6sk80g1dlGiRB9SZDN9UW+/cmECkmJA4ji08soZrD68Qf +a6w9X52QJUAPTkW4HiIfhsXptjYC8YCxzBPSVXpWKFxGfwmMIYBEguY0NM79/+D DEUwJHuVxvxaeUbIrrIH7emdhuJnC02wOK3VisXtH8E9SJntYmGTZpwLm+k36wI/ 64590Bjh7c8Ly6p7uUTL5+0hH6mi11jEs9c2XRHOwxB2fuNNJv+wkI5L98MNSJah xEjoNY8B/Z72nX+gTb0nJhKivu14ngoYtysAbeWljicDUlsXLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKDO060V17BM0fYoUlj+EpfoVL5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOTBjZjkyYTctMGNhMy0z OWQ5LTkxZjctODUxNjkyMjdjMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8k MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9LSdkCjIEC6U8fZKAAr8ZMWFLF3x0uOilp3QYRRkoWOx4RCnDW KZ4bq1l/+hxzOfcp+ealU53DKgEnfX9kQm/qtH+YzZ7X5DvNoJ+Xchn5T/gzbZk3 EBBjYTflBewGiNfY4xgep5WwMDO7T7Kp+nO4gef/kKsRjjP8Tjn/MRXu3KZvZ/F6 2HNDGGMPcnEdzVPxg+9JqusIsZMXiasHlIhw8DlPGLSs6IMuQi25mfGtDdW3hqaK xP8wBPqVTUMxEqCTxFELATDKjXt4Q7D1AgS4NdKZcD2yBEyxejb+8IOIrASuVojr O2GtiN4OjYRXjBcyJe0nqCV7z6Ajeg3dvHs= -----END CERTIFICATE-----Generated at Sun Jun 29 13:57:28 2025 by rpki-client