$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/4323deba-a529-3d72-a497-da826cd7d95c.roa File: 4323deba-a529-3d72-a497-da826cd7d95c.roa (raw, json) Hash identifier: UPdDXDge5oROf6rxVBQ1nFkeTDoRnm7YbakYraOzMvA= Subject key identifier: 60:6B:A2:A3:83:28:37:2F:9C:12:E9:9A:0D:F1:AC:EE:4C:C1:72:3B Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584A43DB010EE41D62B4F7937CC0 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/4323deba-a529-3d72-a497-da826cd7d95c.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 198949 IP address blocks: 2607:cc80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:01:0e:e4:1d:62:b4:f7:93:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=b9c10e70-e9fd-4b6d-b079-a999542a2f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ce:99:db:f5:ed:db:04:5b:bd:51:2b:e7:0c: ef:22:1e:37:4f:76:8d:07:81:79:70:63:86:21:7c: 78:b8:55:cc:e2:8a:be:4c:21:7a:53:bc:78:4b:bd: e1:14:d6:fb:c0:43:20:6f:3e:29:eb:80:f4:1c:72: d5:51:fb:29:a0:40:0c:f2:a8:a6:61:ed:87:58:b5: b4:10:c6:cb:80:46:3a:8a:6c:16:25:52:02:77:0f: 46:f2:bc:40:e8:29:78:52:97:35:71:a9:a4:f6:50: c8:cb:f9:be:44:55:dc:92:79:92:17:80:39:b1:13: 1d:de:9e:d2:1b:1e:ef:d9:f8:28:6e:f6:b9:3d:aa: 18:75:a7:13:6e:7c:76:17:42:7c:d5:a8:cf:1f:19: d3:6f:09:8f:0f:68:1d:c2:03:4f:34:fb:41:a0:4f: 1d:85:64:ae:9f:0a:e0:b2:85:4d:95:56:df:33:da: ec:02:4d:a1:43:0d:a5:51:ed:b7:d6:5d:d4:d9:d4: 84:ed:76:46:b3:84:ef:96:69:80:8d:24:0b:c1:35: 03:da:c5:97:42:74:38:02:c6:6b:44:12:bf:e1:c3: 01:5e:6d:c2:87:07:8d:5d:8b:9d:11:78:3f:2c:6c: 7b:0f:9c:98:8c:be:5e:c8:1d:05:75:41:a5:dc:72: f4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6B:A2:A3:83:28:37:2F:9C:12:E9:9A:0D:F1:AC:EE:4C:C1:72:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/4323deba-a529-3d72-a497-da826cd7d95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:88:bf:9e:47:f1:24:3d:77:eb:5e:4d:ff:13:3b:e7:8b:5a: d1:43:b9:9c:b6:5b:02:24:31:2b:67:e4:6b:29:bd:58:f1:a9: 50:74:32:33:4d:f3:cc:13:9e:e0:27:cc:65:73:80:86:fb:52: 61:3d:24:af:c0:c0:88:86:26:98:4f:cc:8d:b7:4c:f9:aa:af: fd:c9:21:64:e5:48:02:b7:c1:c0:36:a8:b5:02:c2:2c:30:a0: d8:4d:6c:b8:e0:9e:f0:59:92:89:8f:a2:ed:c2:52:0f:e9:25: fd:03:c1:0e:a8:89:43:48:38:27:f6:36:90:76:9e:a4:3d:54: 06:a0:7c:14:56:b4:42:1e:7d:a3:56:38:d3:d5:25:35:69:58: 7e:f1:1e:da:25:05:30:fb:0c:49:bd:8c:1f:9a:4a:23:ac:87: ec:a3:03:54:a8:2b:b4:2e:7e:16:08:5b:89:76:74:e7:56:0b: 2f:d1:6d:63:02:c0:21:87:5b:ad:63:83:89:9d:f7:e7:f8:6f: 85:0c:ad:78:89:72:65:fe:53:b0:dd:bd:9d:2c:25:ad:f3:24: 70:f2:a9:6e:08:84:64:42:c8:80:13:3b:42:cf:d8:9a:d0:50: 99:dd:0d:2e:3c:d4:2a:2f:93:f6:a9:6a:47:39:16:ac:92:35: d5:59:39:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpD2wEO5B1itPeTfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk YjljMTBlNzAtZTlmZC00YjZkLWIwNzktYTk5OTU0MmEyZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz86Z2/Xt2wRbvVEr5wzvIh43T3aNB4F5cGOG IXx4uFXM4oq+TCF6U7x4S73hFNb7wEMgbz4p64D0HHLVUfspoEAM8qimYe2HWLW0 EMbLgEY6imwWJVICdw9G8rxA6Cl4Upc1camk9lDIy/m+RFXcknmSF4A5sRMd3p7S Gx7v2fgobva5PaoYdacTbnx2F0J81ajPHxnTbwmPD2gdwgNPNPtBoE8dhWSunwrg soVNlVbfM9rsAk2hQw2lUe231l3U2dSE7XZGs4TvlmmAjSQLwTUD2sWXQnQ4AsZr RBK/4cMBXm3ChweNXYudEXg/LGx7D5yYjL5eyB0FdUGl3HL0PQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGBroqODKDcvnBLpmg3xrO5MwXI7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvNDMyM2RlYmEtYTUyOS0z ZDcyLWE0OTctZGE4MjZjZDdkOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFmIv55H8SQ9d+teTf8TO+eLWtFDuZy2WwIkMStn5GspvVjxqVB0 MjNN88wTnuAnzGVzgIb7UmE9JK/AwIiGJphPzI23TPmqr/3JIWTlSAK3wcA2qLUC wiwwoNhNbLjgnvBZkomPou3CUg/pJf0DwQ6oiUNIOCf2NpB2nqQ9VAagfBRWtEIe faNWONPVJTVpWH7xHtolBTD7DEm9jB+aSiOsh+yjA1SoK7QufhYIW4l2dOdWCy/R bWMCwCGHW61jg4md9+f4b4UMrXiJcmX+U7DdvZ0sJa3zJHDyqW4IhGRCyIATO0LP 2JrQUJndDS481Covk/apakc5FqySNdVZOUk= -----END CERTIFICATE-----Generated at Sun Jun 29 15:51:38 2025 by rpki-client