$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa File: aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa (raw, json) Hash identifier: Tv7M0tRukLsBl/FQ4g5ul0FPPF1SDR03CWEj1ZuL2ko= Subject key identifier: 1B:E1:7E:5E:7E:9D:F3:E2:DB:3B:F3:26:D0:F4:7B:B5:17:3D:04:99 Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584A43DB07EB4FC37ACD39981C80 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 25664 IP address blocks: 2607:cc80:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:07:eb:4f:c3:7a:cd:39:98:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=1a50d074-1c0e-4131-9273-4e79f27325ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:e0:37:47:cb:f7:4f:de:5d:65:c3:d9:0c: e7:8e:f8:8e:a2:58:bf:b6:4d:a2:fa:2d:d3:22:54: cc:a1:91:e9:ff:6d:9a:4a:21:c4:34:55:e0:dc:eb: 74:0a:9a:f7:2e:60:01:fb:10:45:59:b7:ac:65:e1: 4f:4f:22:8c:a8:fb:a7:f1:a0:97:d0:9c:30:13:00: 70:13:20:da:7d:6e:cf:ac:60:3d:15:35:83:88:2b: 86:63:82:b0:23:26:43:7f:66:8a:e2:95:c6:06:ec: 5c:e2:ce:b8:81:b4:0c:a4:7e:4c:f8:0d:b0:72:27: 12:f0:a8:81:bc:47:17:f3:10:6f:78:31:08:cc:af: dc:a4:e4:08:b4:25:ad:76:8a:35:3d:df:34:c7:b3: 0d:60:1f:3a:7e:88:d0:0d:3c:3b:86:40:9c:92:39: 50:7e:2d:a9:0a:3a:07:7f:23:bc:14:8e:2c:1f:6a: 2a:90:ce:46:6e:97:29:33:d0:13:28:42:d3:23:42: 37:5f:db:76:04:f8:e0:f0:4a:ab:62:f1:8f:ba:5c: b6:ad:8b:04:ab:0b:5a:fb:9a:cf:3c:40:2f:3b:85: 5e:77:51:a5:1f:f4:66:d1:28:0a:ff:05:57:c6:15: 62:ea:b8:01:a3:2f:54:d3:1f:cc:e3:04:d4:59:35: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E1:7E:5E:7E:9D:F3:E2:DB:3B:F3:26:D0:F4:7B:B5:17:3D:04:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80:7000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:cb:99:8b:31:c7:46:db:70:8a:6b:61:51:6b:28:6c:59:81: a5:24:4b:76:6d:51:2d:e8:c8:e4:af:a5:9a:5e:d7:b4:e7:84: 67:5a:d3:c5:a9:ad:53:c6:c6:9b:78:7e:0a:91:82:e5:5d:f8: 2e:41:47:d7:32:f2:52:3c:84:12:f3:ed:2a:00:8a:3b:0b:75: d0:46:dd:1a:5d:95:45:12:13:9a:a1:80:5f:1a:10:44:2c:bc: bc:f2:35:d5:0c:33:08:78:5c:89:ef:93:52:9c:cf:52:c3:0e: e3:97:f5:a3:bc:9a:fa:a3:03:4f:a5:49:0d:b0:18:c7:52:84: 25:48:7a:13:8b:ae:20:97:01:d3:90:07:64:e8:7a:5d:e2:be: 88:c4:03:e0:33:64:a9:37:0c:06:8f:b0:d2:84:43:2b:71:c7: d9:84:6e:ed:8a:39:82:3b:c1:64:8b:5d:86:93:5e:67:66:76: fb:00:5e:f5:0d:f5:c5:e5:c2:0a:80:02:a6:8d:6f:5a:d4:4a: 24:40:23:74:32:59:4d:57:59:ee:28:16:c1:0b:d7:31:97:98: 96:67:0f:af:44:84:af:f9:9a:67:e9:76:44:98:a7:53:2b:79: 0b:cd:5b:78:59:14:0f:00:e9:a5:ad:6b:17:30:f6:23:1a:7d: 04:fc:1a:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpD2wfrT8N6zTmYHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk MWE1MGQwNzQtMWMwZS00MTMxLTkyNzMtNGU3OWYyNzMyNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjPgN0fL90/eXWXD2QznjviOoli/tk2i+i3T IlTMoZHp/22aSiHENFXg3Ot0Cpr3LmAB+xBFWbesZeFPTyKMqPun8aCX0JwwEwBw EyDafW7PrGA9FTWDiCuGY4KwIyZDf2aK4pXGBuxc4s64gbQMpH5M+A2wcicS8KiB vEcX8xBveDEIzK/cpOQItCWtdoo1Pd80x7MNYB86fojQDTw7hkCckjlQfi2pCjoH fyO8FI4sH2oqkM5GbpcpM9ATKELTI0I3X9t2BPjg8EqrYvGPuly2rYsEqwta+5rP PEAvO4Ved1GlH/Rm0SgK/wVXxhVi6rgBoy9U0x/M4wTUWTXSxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBvhfl5+nfPi2zvzJtD0e7UXPQSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvYWVmYTA1YWItZDU2Mi0z ZmIwLWFhYjQtYTM2OWQxYThmYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgHAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJHLmYsxx0bbcIprYVFrKGxZgaUkS3ZtUS3oyOSvpZpe17TnhGda 08WprVPGxpt4fgqRguVd+C5BR9cy8lI8hBLz7SoAijsLddBG3RpdlUUSE5qhgF8a EEQsvLzyNdUMMwh4XInvk1Kcz1LDDuOX9aO8mvqjA0+lSQ2wGMdShCVIehOLriCX AdOQB2Toel3ivojEA+AzZKk3DAaPsNKEQytxx9mEbu2KOYI7wWSLXYaTXmdmdvsA XvUN9cXlwgqAAqaNb1rUSiRAI3QyWU1XWe4oFsEL1zGXmJZnD69EhK/5mmfpdkSY p1MreQvNW3hZFA8A6aWtaxcw9iMafQT8Gg8= -----END CERTIFICATE-----Generated at Mon Jun 30 00:39:19 2025 by rpki-client