$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/2255066e-9ff0-38c8-9ca9-da39b830dabd.roa File: 2255066e-9ff0-38c8-9ca9-da39b830dabd.roa (raw, json) Hash identifier: O9itb+n51cSWIVdQJ076CvCQfTtOeVnyd4xlknbNNhQ= Subject key identifier: 9A:81:61:99:DA:BA:C2:B0:1F:C8:88:92:F2:8C:C9:7A:53:81:64:E0 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584A050A75E961FFD6FD2FE01D20 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/2255066e-9ff0-38c8-9ca9-da39b830dabd.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 21766 IP address blocks: 2605:6600::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:75:e9:61:ff:d6:fd:2f:e0:1d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=e14f342d-fcda-42b0-855a-4aeeefecfa01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:20:ec:49:42:b3:f8:94:90:45:ec:3f:36:65: 91:7d:52:db:ee:3d:df:41:01:d4:2e:6e:20:e9:f5: 6c:66:f0:28:bf:3f:f0:1c:4b:fc:07:e6:b6:6b:17: 84:92:52:9f:71:a2:22:63:b3:61:a0:30:96:02:c6: 0b:67:27:69:a4:8f:22:07:c0:45:9f:49:88:73:21: 21:df:c6:97:c8:ff:10:99:40:11:12:fb:a1:e5:fe: 20:37:3d:39:a5:b5:72:4e:07:6f:ec:83:12:ff:52: 69:99:85:a1:ca:0b:f5:6b:a2:0d:20:4a:e3:09:30: ac:08:e8:bd:2b:47:e6:f9:d6:19:f4:2b:e5:02:96: ca:b3:be:0d:b7:d4:22:23:01:e2:9e:08:d4:94:60: 62:59:0a:75:5c:80:b2:a0:2c:dd:c1:7d:58:b1:f5: df:99:95:dd:39:d9:8c:77:47:f8:35:df:73:9d:71: 78:f5:c1:b9:bb:39:9b:48:9b:d2:19:e7:12:5c:19: 44:5c:d2:ae:4d:74:36:a8:08:c3:18:eb:62:05:83: 3b:0b:21:b4:37:10:9d:9b:71:99:3a:1e:8a:d9:2c: 34:1a:fc:fa:71:ce:c2:ec:e4:a8:c4:85:e1:67:a9: 59:2b:b9:3b:81:b1:e5:c0:d7:f3:ed:15:57:0b:81: 80:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:81:61:99:DA:BA:C2:B0:1F:C8:88:92:F2:8C:C9:7A:53:81:64:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/2255066e-9ff0-38c8-9ca9-da39b830dabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv6: 2605:6600::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:22:98:d9:db:5a:85:c8:dc:a1:73:49:94:3b:c0:bf:e9:36: 81:6f:43:ea:e6:b2:90:0f:03:b2:57:ee:41:46:8e:d5:2e:d7: d9:72:63:bc:9f:91:bd:19:9c:6a:6f:f2:ac:f5:a3:99:fa:dc: e8:20:5e:59:2c:5c:55:76:a3:1e:53:b3:c1:a4:61:6e:04:c2: b7:0b:d3:76:c0:b9:c1:98:7e:7e:d9:1c:75:21:78:da:d2:bb: 0b:73:86:2f:bf:64:8d:af:7f:c4:fa:57:c4:b3:5b:f5:b0:c7: 32:51:81:14:79:45:fa:09:c2:43:ee:fd:0c:b7:f1:c3:63:e1: d0:05:00:05:12:cb:f3:58:85:6f:ec:be:72:de:1f:77:81:6e: 7e:99:f8:4c:c1:70:38:2e:7d:59:8b:fd:3a:72:f7:d8:6f:ba: 79:f3:ad:cf:1a:eb:00:2c:06:a4:51:91:92:d3:98:cd:6a:b7: ba:17:4c:f2:ed:b7:f2:d8:13:63:e3:53:de:8c:0b:7a:71:67: ff:69:3e:60:42:cc:6d:a0:e0:b4:08:36:15:bc:7e:e5:e3:8f: bf:66:69:b0:8e:18:78:6e:86:3a:c6:b9:14:75:96:b2:77:cb: d5:b0:0f:2c:3c:0e:5a:fe:fb:23:5e:9e:51:ae:ae:9d:e3:71: af:fd:09:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoFCnXpYf/W/S/gHSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk ZTE0ZjM0MmQtZmNkYS00MmIwLTg1NWEtNGFlZWVmZWNmYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSDsSUKz+JSQRew/NmWRfVLb7j3fQQHULm4g 6fVsZvAovz/wHEv8B+a2axeEklKfcaIiY7NhoDCWAsYLZydppI8iB8BFn0mIcyEh 38aXyP8QmUAREvuh5f4gNz05pbVyTgdv7IMS/1JpmYWhygv1a6INIErjCTCsCOi9 K0fm+dYZ9CvlApbKs74Nt9QiIwHingjUlGBiWQp1XICyoCzdwX1YsfXfmZXdOdmM d0f4Nd9znXF49cG5uzmbSJvSGecSXBlEXNKuTXQ2qAjDGOtiBYM7CyG0NxCdm3GZ Oh6K2Sw0Gvz6cc7C7OSoxIXhZ6lZK7k7gbHlwNfz7RVXC4GAVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJqBYZnausKwH8iIkvKMyXpTgWTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMjI1NTA2NmUtOWZmMC0z OGM4LTljYTktZGEzOWI4MzBkYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgVmADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARIpjZ21qFyNyhc0mUO8C/6TaBb0Pq5rKQDwOyV+5BRo7VLtfZcmO8 n5G9GZxqb/Ks9aOZ+tzoIF5ZLFxVdqMeU7PBpGFuBMK3C9N2wLnBmH5+2Rx1IXja 0rsLc4Yvv2SNr3/E+lfEs1v1sMcyUYEUeUX6CcJD7v0Mt/HDY+HQBQAFEsvzWIVv 7L5y3h93gW5+mfhMwXA4Ln1Zi/06cvfYb7p5863PGusALAakUZGS05jNare6F0zy 7bfy2BNj41PejAt6cWf/aT5gQsxtoOC0CDYVvH7l44+/Zmmwjhh4boY6xrkUdZay d8vVsA8sPA5a/vsjXp5Rrq6d43Gv/Qny -----END CERTIFICATE-----Generated at Mon Jun 30 03:58:35 2025 by rpki-client