$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/d08ce755-af65-3768-957e-3d777b184fec.roa File: d08ce755-af65-3768-957e-3d777b184fec.roa (raw, json) Hash identifier: n2o4WuA+DvY2Tg6Cjgnqm306IdIQXtTyhx7NS5ffltc= Subject key identifier: 40:C8:6E:7D:FB:88:98:9F:D1:D9:80:89:9F:04:45:1D:DC:1C:2F:59 Certificate issuer: /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Certificate serial: 010D0C9F4328584A51D06A23E7BC00D2005BA1F0 Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/d08ce755-af65-3768-957e-3d777b184fec.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 2620:135:7020::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:6a:23:e7:bc:00:d2:00:5b:a1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=4bb80a0a-2a81-4ea2-9e24-58b6519a3f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:67:fe:09:ae:3e:19:eb:5c:53:5b:f3:93: 94:dc:6c:61:95:3d:ed:6b:d0:e3:1d:9b:32:a5:32: 8a:44:0e:4a:4a:0b:1b:01:ba:eb:c4:23:5b:24:c0: d6:3c:8f:d2:99:b3:92:8a:ae:11:c4:33:c1:2b:ba: 76:95:6f:3d:a9:7f:ed:aa:6f:8f:e9:3e:44:78:80: 7a:fa:a1:91:e9:ec:3b:3a:be:9d:c1:f4:72:29:92: bf:e2:a2:43:01:5a:4f:58:30:53:56:8c:a5:b9:fc: a8:15:7a:d1:30:e8:93:29:a8:20:d3:12:27:60:e7: cc:5e:86:5b:ed:db:97:04:a8:b4:5a:3f:51:67:25: 24:87:07:38:f6:b4:3f:53:85:d7:ca:d0:6a:38:ea: 47:a8:5a:b9:e1:c5:67:69:01:e6:c7:0a:bf:3e:20: 88:3d:c0:06:cd:6f:98:31:f5:d2:69:d9:16:db:ef: 5f:d7:6b:de:1f:c2:d1:f2:ce:84:6a:15:f4:f6:1e: 2f:1b:c3:0c:af:81:7f:6e:99:e3:5f:de:6f:fc:0a: cc:61:73:a6:e9:fc:27:93:6b:7a:33:1a:c3:1d:cf: bf:e1:75:c7:79:3a:9f:0c:db:c2:32:53:aa:4d:df: 38:69:be:4a:f3:9b:fe:66:43:ed:0d:0b:6c:fb:ca: 18:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C8:6E:7D:FB:88:98:9F:D1:D9:80:89:9F:04:45:1D:DC:1C:2F:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/d08ce755-af65-3768-957e-3d777b184fec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl X509v3 Authority Key Identifier: keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:7020::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c9:f3:7e:ad:34:0b:b8:36:a2:01:75:03:7e:5b:0d:89:bc: 29:18:5b:30:85:bd:94:26:e6:db:e8:e0:4f:34:38:f7:b0:47: 8f:ec:39:1b:b7:32:45:a9:53:81:6f:87:e7:d5:13:48:40:85: 24:fb:a6:4f:20:9a:6d:ff:73:e8:a2:02:b4:0e:35:f8:dc:e1: 5c:7c:f2:97:00:0b:70:fc:4e:7e:dd:7b:31:08:3f:5a:22:1d: 5d:e4:6c:03:68:b4:62:38:5b:28:33:03:88:dc:cb:7c:df:aa: 56:02:fd:f1:50:22:2b:3b:00:ea:70:96:80:63:7d:2f:e5:0e: 7a:95:01:58:ec:94:5c:31:18:c0:6c:9f:dc:a1:20:8e:53:e4: f9:28:4d:6c:74:7f:1a:2e:0c:20:f4:75:89:be:51:b0:9e:a0: 15:a4:6f:94:47:ee:b7:27:a3:21:6e:7e:61:d2:6c:f0:68:70: 87:97:35:df:18:35:c7:28:c0:9a:4a:8e:f3:0f:51:d7:e5:5d: bb:bc:f5:7e:44:f2:2b:c2:a8:3a:3c:2a:45:78:bf:9e:b9:40: 04:82:fd:ac:30:11:6b:a0:78:a8:7a:eb:e1:ce:2c:be:9f:a1: 18:84:3b:da:fa:66:0e:9d:6a:8c:51:48:76:4c:61:00:ed:0b: e8:22:c3:e2 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEpR0Goj57wA0gBbofAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQxODJhMGQtZDc0NC00NDFiLWE4NTAtZTNmODVhYTNh YWZiMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk NGJiODBhMGEtMmE4MS00ZWEyLTllMjQtNThiNjUxOWEzZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaBn/gmuPhnrXFNb85OU3GxhlT3ta9DjHZsy pTKKRA5KSgsbAbrrxCNbJMDWPI/SmbOSiq4RxDPBK7p2lW89qX/tqm+P6T5EeIB6 +qGR6ew7Or6dwfRyKZK/4qJDAVpPWDBTVoylufyoFXrRMOiTKagg0xInYOfMXoZb 7duXBKi0Wj9RZyUkhwc49rQ/U4XXytBqOOpHqFq54cVnaQHmxwq/PiCIPcAGzW+Y MfXSadkW2+9f12veH8LR8s6EahX09h4vG8MMr4F/bpnjX95v/ArMYXOm6fwnk2t6 MxrDHc+/4XXHeTqfDNvCMlOqTd84ab5K85v+ZkPtDQts+8oYJwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFEDIbn37iJif0dmAiZ8ERR3cHC9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4 MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4NWFhM2FhZmIvZDA4Y2U3NTUtYWY2NS0z NzY4LTk1N2UtM2Q3NzdiMTg0ZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQxODJhMGQtZDc0NC00NDFiLWE4 NTAtZTNmODVhYTNhYWZiL2M0MTgyYTBkLWQ3NDQtNDQxYi1hODUwLWUzZjg1YWEz YWFmYi5jcmwwHwYDVR0jBBgwFoAUK7GR1bTMw7yKfS/LGMgJ/OaZwCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4 NWFhM2FhZmIuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAJiABNXAg ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAPyfN+rTQLuDaiAXUDflsNibwpGFswhb2UJubb6OBPNDj3sEeP 7DkbtzJFqVOBb4fn1RNIQIUk+6ZPIJpt/3PoogK0DjX43OFcfPKXAAtw/E5+3Xsx CD9aIh1d5GwDaLRiOFsoMwOI3Mt836pWAv3xUCIrOwDqcJaAY30v5Q56lQFY7JRc MRjAbJ/coSCOU+T5KE1sdH8aLgwg9HWJvlGwnqAVpG+UR+63J6Mhbn5h0mzwaHCH lzXfGDXHKMCaSo7zD1HX5V27vPV+RPIrwqg6PCpFeL+euUAEgv2sMBFroHioeuvh ziy+n6EYhDva+mYOnWqMUUh2TGEA7QvoIsPi -----END CERTIFICATE-----Generated at Mon Jun 30 19:54:13 2025 by rpki-client