$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/21ca7c72-d1f5-3559-bbea-9464473a6882.roa File: 21ca7c72-d1f5-3559-bbea-9464473a6882.roa (raw, json) Hash identifier: Sk6PFfjE8oa8bDYYFkrCQb1hNKtF4hgqhEHyOnXKwqg= Subject key identifier: 99:14:2A:AF:6B:F3:FF:51:72:4B:46:3D:24:B1:00:73:F1:91:44:57 Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584A454036D63A66EB0D8B8EB500 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/21ca7c72-d1f5-3559-bbea-9464473a6882.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 198949 IP address blocks: 2607:cc80:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:36:d6:3a:66:eb:0d:8b:8e:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=9efc58a6-2480-4087-beda-69f8720791b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:44:a5:59:d1:c8:97:e0:14:47:80:dc:63:6a: a4:d2:f1:3a:fd:a4:61:71:2e:37:2a:ea:ce:4a:06: a5:0c:a1:8d:f0:6e:3f:13:84:9a:81:80:6f:5f:27: 32:10:b7:0b:d9:e0:3b:fb:ef:a4:b6:8e:54:b1:57: 74:68:61:b8:96:a4:fa:70:68:0d:07:49:3f:11:f6: 42:0a:ed:17:af:9a:20:b3:4d:99:63:1e:b1:a9:72: b8:be:61:98:3c:34:8c:39:f1:e5:00:e3:0a:4f:74: db:d0:97:5f:a0:ee:bb:7a:a5:46:21:b3:cf:a5:34: 67:88:59:55:9d:c8:1b:58:be:47:5d:ff:e4:a5:c7: 85:63:0e:84:65:49:52:2a:12:1f:c4:92:4a:da:33: 51:67:f9:a2:e2:59:12:fc:61:38:05:d2:bc:17:d7: df:27:a1:44:38:bf:fb:33:77:02:ff:8c:b8:b9:59: ef:8a:9b:d6:61:17:95:5c:1a:57:56:86:a0:e0:36: 82:72:fa:f7:9a:66:1c:50:a9:a5:5c:2c:48:ac:51: 5d:cb:33:48:58:00:d6:2c:f7:59:8e:79:35:f1:db: be:da:f9:f4:ef:24:f1:9c:9e:c2:a8:59:3b:cb:f0: e6:8c:f6:bb:7e:8d:9c:b4:6b:a4:14:ad:0b:2b:44: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:14:2A:AF:6B:F3:FF:51:72:4B:46:3D:24:B1:00:73:F1:91:44:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/21ca7c72-d1f5-3559-bbea-9464473a6882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:14:b9:62:d7:0c:16:16:20:7a:ec:5d:7b:f3:7b:3a:69:bb: db:40:3e:49:6f:0a:d0:6c:46:d7:c5:fd:72:d3:dc:f8:ce:d3: 1d:5a:73:ba:1e:f5:f7:d5:72:06:30:62:d2:91:d6:59:e4:34: a8:18:4a:90:e5:00:b9:dd:e5:3c:00:63:7f:08:7f:f1:8b:ac: fb:40:f0:9d:8c:5c:74:6b:45:8e:f5:e8:e0:49:18:d4:63:60: c3:50:d9:91:1f:b9:e1:b0:19:3a:4e:9d:55:1c:7d:63:73:d0: 45:3e:e9:ae:f0:c2:fa:bb:19:7d:a9:d3:2d:54:41:2f:e4:57: 2c:29:b9:a6:a5:60:1d:79:22:67:42:a0:c8:d6:2f:00:af:05: e6:d3:c1:ef:9f:3e:f3:23:9c:2f:9d:95:be:08:4c:b4:1d:ad: be:1f:58:ef:d7:82:e2:56:a2:9d:9e:df:9c:ed:50:b3:d9:de: d7:6b:2d:38:f6:ce:aa:65:e6:90:35:b9:6b:a5:3c:23:05:0a: 24:58:f1:e2:06:87:76:d3:a6:72:fc:62:41:a6:81:10:c5:5e: 4d:18:eb:5d:a2:c3:72:0c:84:10:ab:95:82:73:a3:f9:77:0a: 32:e9:50:3e:59:c0:eb:6a:73:85:0b:50:95:ac:6b:14:2d:9c: e4:59:22:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpFQDbWOmbrDYuOtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk OWVmYzU4YTYtMjQ4MC00MDg3LWJlZGEtNjlmODcyMDc5MWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUSlWdHIl+AUR4DcY2qk0vE6/aRhcS43KurO SgalDKGN8G4/E4SagYBvXycyELcL2eA7+++kto5UsVd0aGG4lqT6cGgNB0k/EfZC Cu0Xr5ogs02ZYx6xqXK4vmGYPDSMOfHlAOMKT3Tb0JdfoO67eqVGIbPPpTRniFlV ncgbWL5HXf/kpceFYw6EZUlSKhIfxJJK2jNRZ/mi4lkS/GE4BdK8F9ffJ6FEOL/7 M3cC/4y4uVnvipvWYReVXBpXVoag4DaCcvr3mmYcUKmlXCxIrFFdyzNIWADWLPdZ jnk18du+2vn07yTxnJ7CqFk7y/DmjPa7fo2ctGukFK0LK0TM1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJkUKq9r8/9RcktGPSSxAHPxkURXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvMjFjYTdjNzItZDFmNS0z NTU5LWJiZWEtOTQ2NDQ3M2E2ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG0UuWLXDBYWIHrsXXvzezppu9tAPklvCtBsRtfF/XLT3PjO0x1a c7oe9ffVcgYwYtKR1lnkNKgYSpDlALnd5TwAY38If/GLrPtA8J2MXHRrRY716OBJ GNRjYMNQ2ZEfueGwGTpOnVUcfWNz0EU+6a7wwvq7GX2p0y1UQS/kVywpuaalYB15 ImdCoMjWLwCvBebTwe+fPvMjnC+dlb4ITLQdrb4fWO/XguJWop2e35ztULPZ3tdr LTj2zqpl5pA1uWulPCMFCiRY8eIGh3bTpnL8YkGmgRDFXk0Y612iw3IMhBCrlYJz o/l3CjLpUD5ZwOtqc4ULUJWsaxQtnORZIkI= -----END CERTIFICATE-----Generated at Sun Jun 29 16:08:20 2025 by rpki-client