$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa File: 30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa (raw, json) Hash identifier: AWGNl6i0EPfj5uPIIbeMn6zvLIAobZ5Y1JNzWOZ2NDc= Subject key identifier: 0C:1B:C5:30:FE:CF:29:64:04:AB:0E:A4:04:F7:30:EE:8E:65:62:67 Certificate issuer: /CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Certificate serial: 010D0C9F4328584981D456F01FA017A3FE2CF180 Authority key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 33501 IP address blocks: 2607:19c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:56:f0:1f:a0:17:a3:fe:2c:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=6f6d13f9-e843-4cf0-a006-f51ca92cf992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1a:c2:9d:82:9a:ce:d4:29:76:28:ad:fe:ff: 93:1c:2e:50:a3:bd:5f:5a:8f:cb:eb:9c:fe:c2:da: fb:09:c7:11:05:96:a3:ff:46:b2:e2:19:ea:3d:91: 26:d1:a2:c5:47:c6:20:59:2e:e4:36:da:12:d9:94: 97:d8:2f:1e:7b:df:17:ae:2d:e0:ba:86:4c:f0:97: 7f:9e:7c:c6:2f:ce:39:7b:5f:65:69:a3:6f:a8:14: 8b:cf:2c:f4:ea:53:16:1a:3a:d7:5f:d3:49:ac:d8: 84:d9:fb:d3:1c:08:16:b5:1f:f4:df:90:a8:7d:89: 8e:f1:44:03:8f:81:ee:9c:76:c2:90:30:a3:ab:42: 30:d4:f3:4e:77:14:78:5f:cd:c9:f3:db:5d:9b:60: a4:b7:1f:17:ff:d5:fe:4a:39:19:37:1e:29:f5:bb: 9e:19:14:31:60:08:b1:67:28:eb:d4:b8:e6:a4:b1: 45:6a:35:91:07:19:34:46:bb:ff:de:2b:e7:0e:b9: 8e:c5:b1:1c:3a:68:65:6c:3c:42:26:06:f3:4c:4a: eb:b2:e4:b7:e3:75:fa:56:4e:7e:dc:3a:d8:17:2c: d9:35:c4:87:6b:a3:dd:89:47:86:e1:61:01:09:26: 1b:07:4f:28:63:68:c7:d2:9c:33:c7:d6:8e:ad:67: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1B:C5:30:FE:CF:29:64:04:AB:0E:A4:04:F7:30:EE:8E:65:62:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl X509v3 Authority Key Identifier: keyid:04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer sbgp-ipAddrBlock: critical IPv6: 2607:19c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:02:7f:66:05:80:46:9d:e0:28:46:31:3c:08:fe:5e:40:39: 70:9c:6b:dc:aa:87:9b:08:6e:87:e0:52:29:a5:ab:a0:a4:fb: 73:91:d6:4c:99:c9:9c:eb:30:bd:26:d3:aa:29:ed:d9:73:f0: f6:49:fc:9a:6e:e6:cb:81:00:e6:ba:da:d8:17:2c:0f:d0:5b: 88:1b:79:d7:e8:a1:c8:7d:5b:e9:7c:7c:e5:60:e3:99:49:ab: d0:3d:92:8c:20:97:2e:38:84:64:7e:a7:77:a4:3d:e5:d3:3a: e1:d8:a0:e2:f6:9c:ab:a0:d9:d2:3b:33:31:94:49:73:5b:fe: a0:c9:15:93:a9:fc:f9:4b:56:9f:6f:df:3b:72:72:07:cc:fd: 9f:cc:b3:9a:29:3f:1a:80:a3:7c:10:c8:66:8e:70:61:1f:bd: 3d:04:c3:05:4f:98:a0:59:40:17:4e:f2:d7:52:5b:f4:4c:4f: e1:9a:bd:ae:f4:c2:9b:9c:a9:9f:b9:78:36:86:36:df:75:7e: 4f:94:87:82:50:13:21:03:fd:78:4f:ff:16:8e:c3:47:77:ec: d3:6e:e4:fe:e4:4c:6e:d4:93:cd:7b:a7:56:b6:2c:2a:f3:a4: f4:d2:72:93:70:16:b9:db:d3:aa:41:1e:50:98:85:43:d9:04: fe:54:d1:40 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmB1FbwH6AXo/4s8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkzYmY3NzItYjFjMi00ZjJmLTk3NmMtNTI4YjZmMWQ4 ZTE2MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk NmY2ZDEzZjktZTg0My00Y2YwLWEwMDYtZjUxY2E5MmNmOTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhrCnYKaztQpdiit/v+THC5Qo71fWo/L65z+ wtr7CccRBZaj/0ay4hnqPZEm0aLFR8YgWS7kNtoS2ZSX2C8ee98Xri3guoZM8Jd/ nnzGL845e19laaNvqBSLzyz06lMWGjrXX9NJrNiE2fvTHAgWtR/035CofYmO8UQD j4HunHbCkDCjq0Iw1PNOdxR4X83J89tdm2Cktx8X/9X+SjkZNx4p9bueGRQxYAix Zyjr1LjmpLFFajWRBxk0Rrv/3ivnDrmOxbEcOmhlbDxCJgbzTErrsuS343X6Vk5+ 3DrYFyzZNcSHa6PdiUeG4WEBCSYbB08oY2jH0pwzx9aOrWdbsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAwbxTD+zylkBKsOpAT3MO6OZWJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OTNi Zjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYxZDhlMTYvMzBhNGEzYWYtMGQ3Yy0z MTk2LThjMmItMWZmNmU4ZmU4MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjkzYmY3NzItYjFjMi00ZjJmLTk3 NmMtNTI4YjZmMWQ4ZTE2LzY5M2JmNzcyLWIxYzItNGYyZi05NzZjLTUyOGI2ZjFk OGUxNi5jcmwwHwYDVR0jBBgwFoAUBDuRJkNa5T25ITW/GMY20NqdQacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01Mjhi NmYxZDhlMTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcZwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDAn9mBYBGneAoRjE8CP5eQDlwnGvcqoebCG6H4FIppaugpPtzkdZM mcmc6zC9JtOqKe3Zc/D2SfyabubLgQDmutrYFywP0FuIG3nX6KHIfVvpfHzlYOOZ SavQPZKMIJcuOIRkfqd3pD3l0zrh2KDi9pyroNnSOzMxlElzW/6gyRWTqfz5S1af b987cnIHzP2fzLOaKT8agKN8EMhmjnBhH709BMMFT5igWUAXTvLXUlv0TE/hmr2u 9MKbnKmfuXg2hjbfdX5PlIeCUBMhA/14T/8WjsNHd+zTbuT+5Exu1JPNe6dWtiwq 86T00nKTcBa529OqQR5QmIVD2QT+VNFA -----END CERTIFICATE-----Generated at Sat May 10 08:28:22 2025 by rpki-client