$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa File: 1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa (raw, json) Hash identifier: UaN6Bz2GyZjM2amnIaVdxEtKqk87Iix+avq6AL0BsTI= Subject key identifier: 44:EF:63:DB:65:B7:4F:E4:3C:86:A6:35:8E:CF:EC:39:6C:33:BF:48 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584A2C200CFE64E091F5C3494D00 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 21947 IP address blocks: 2001:1940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:0c:fe:64:e0:91:f5:c3:49:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=54324092-a759-4f51-ad4b-045dea91a6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:be:4b:7a:86:7c:71:a6:48:7a:62:e6:53: c3:ea:47:28:9c:d8:5a:93:c5:ce:69:b1:51:d7:e0: 9c:54:98:7f:97:65:13:1e:0b:30:44:6e:7e:74:1c: df:06:2e:a9:14:e8:6d:fe:aa:cd:54:ed:b6:27:e5: ed:b5:f2:33:13:f0:1e:bd:9c:06:c1:73:7e:a8:6b: 42:54:c0:15:32:11:aa:06:64:8f:58:8f:b9:f5:d8: d5:62:c1:95:f1:48:ee:30:d2:1e:bc:6d:e6:cb:9a: 08:4e:e4:9a:84:7a:6b:95:ea:4e:58:b8:3d:78:96: dc:f5:70:97:79:88:b0:e9:dd:38:7d:39:06:14:36: 43:30:16:20:a3:0c:36:86:14:ee:9b:d2:c8:b0:92: e1:32:11:48:f7:6e:c3:4d:2b:f5:ca:70:56:45:17: f8:8a:0b:20:0f:19:04:fa:69:b5:ed:f0:83:22:c6: 00:57:e5:99:06:ce:4e:e4:f3:ef:a4:94:0c:e0:cb: f9:7f:f4:94:20:d1:28:f9:be:0f:1a:9e:59:f7:3d: e1:7e:15:bd:a5:75:69:f4:95:43:9d:0d:35:de:0b: 8f:37:a8:6d:fc:a1:d1:38:1b:bf:e1:0d:64:06:94: 4e:0b:b1:f1:0c:df:c8:8e:44:07:7e:0b:60:42:08: d7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EF:63:DB:65:B7:4F:E4:3C:86:A6:35:8E:CF:EC:39:6C:33:BF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv6: 2001:1940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:aa:e6:ff:e6:72:5e:a3:80:4e:75:e0:9d:d3:a8:d0:f4:87: 66:c1:3f:d5:a8:89:aa:f6:64:8f:1e:9e:ce:3c:0e:10:f8:85: c0:39:c8:cb:5e:d9:cb:ff:d0:21:36:ad:5d:3b:ff:60:71:c7: c0:55:01:91:89:6f:58:f2:cc:09:72:d4:67:34:68:11:0f:d4: 27:b3:ff:be:18:c0:fa:3e:55:80:98:44:09:a7:61:ab:dc:08: 93:a8:5b:2d:d2:83:be:1d:89:34:eb:c9:e5:33:72:a5:72:8d: 1a:00:a4:a1:e0:8b:8c:c4:56:2b:d0:01:89:6e:34:e0:54:63: db:c3:ea:1d:51:8f:7e:ad:aa:b1:d4:de:db:cb:8a:c6:7a:66: 0d:49:31:81:5b:50:08:23:66:e2:ae:28:c4:f9:7c:f8:2c:05: 96:02:89:a6:a6:99:11:be:8d:76:5a:a6:f2:72:68:85:e9:55: 8f:04:4d:ad:bc:45:e1:d6:60:bc:73:3b:c9:60:a6:cd:fa:62: fb:5e:b5:77:77:87:32:40:f2:36:8f:8d:1a:bf:e1:cc:52:df: e9:21:2d:23:37:f6:00:22:0b:ca:cd:2e:4d:3a:b1:43:d2:ef: 47:19:cd:b8:53:68:0e:45:ac:51:e5:34:40:a3:27:14:91:f1: 61:21:61:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEosIAz+ZOCR9cNJTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk NTQzMjQwOTItYTc1OS00ZjUxLWFkNGItMDQ1ZGVhOTFhNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/G+S3qGfHGmSHpi5lPD6kconNhak8XOabFR 1+CcVJh/l2UTHgswRG5+dBzfBi6pFOht/qrNVO22J+XttfIzE/AevZwGwXN+qGtC VMAVMhGqBmSPWI+59djVYsGV8UjuMNIevG3my5oITuSahHprlepOWLg9eJbc9XCX eYiw6d04fTkGFDZDMBYgoww2hhTum9LIsJLhMhFI927DTSv1ynBWRRf4igsgDxkE +mm17fCDIsYAV+WZBs5O5PPvpJQM4Mv5f/SUINEo+b4PGp5Z9z3hfhW9pXVp9JVD nQ013guPN6ht/KHROBu/4Q1kBpROC7HxDN/IjkQHfgtgQgjXlwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFETvY9tlt0/kPIamNY7P7DlsM79IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvMWFjYjQ1ZTYtYTIwYy0z YzhiLTk3ZDItOTE5MGQwYmQ3NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAOqub/5nJeo4BOdeCd06jQ9IdmwT/VqImq9mSPHp7OPA4Q+IXAOcjL XtnL/9AhNq1dO/9gccfAVQGRiW9Y8swJctRnNGgRD9Qns/++GMD6PlWAmEQJp2Gr 3AiTqFst0oO+HYk068nlM3Klco0aAKSh4IuMxFYr0AGJbjTgVGPbw+odUY9+raqx 1N7by4rGemYNSTGBW1AII2birijE+Xz4LAWWAommppkRvo12WqbycmiF6VWPBE2t vEXh1mC8czvJYKbN+mL7XrV3d4cyQPI2j40av+HMUt/pIS0jN/YAIgvKzS5NOrFD 0u9HGc24U2gORaxR5TRAoycUkfFhIWH/ -----END CERTIFICATE-----Generated at Tue Jul 1 01:46:06 2025 by rpki-client