$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa File: bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa (raw, json) Hash identifier: 4ztwoWVca0y4GS0XhQw9ncsrJcePe1dTZpP7m9ktvRs= Subject key identifier: 5D:63:6A:97:F4:B9:C7:CD:71:81:F7:4C:00:B7:C0:28:1C:9F:60:09 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584A411049B5DE551AF731973680 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 64249 IP address blocks: 2001:4830:c900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:49:b5:de:55:1a:f7:31:97:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=6a661f80-67de-49e2-a6f1-1c142c4dac05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:7a:e0:a5:80:f3:f3:41:40:f9:07:b8:cc: 52:1c:ab:1d:f7:b5:56:b7:31:88:6c:0f:05:df:24: 69:12:65:bf:c2:57:5e:1e:fb:16:e0:4e:56:0d:3f: d4:dc:9a:d7:eb:4d:fe:19:b9:e6:fd:c1:e7:4f:6e: f5:f9:be:bc:5d:d5:e2:ba:f1:bc:51:45:77:bb:38: e5:eb:9c:55:32:a8:25:c3:3c:0e:5e:cd:e5:35:75: db:37:00:4c:84:f5:4f:8b:6a:39:1d:cb:51:50:31: 12:bc:8e:4d:71:6c:d6:d7:c5:65:8f:49:9b:2b:0f: 34:be:cf:d1:07:fe:3d:6c:20:c7:c2:89:78:44:89: 55:13:98:e3:55:d8:58:3c:f4:70:40:19:bf:47:90: 0d:8a:c9:3c:1a:27:99:90:b8:61:e2:6f:9c:99:74: 7a:3d:22:05:04:29:df:60:d1:48:f5:2f:a0:8d:bb: 65:74:df:02:f6:76:97:6b:af:9c:5a:f6:cc:ee:ed: 91:a4:36:e9:2c:b2:ce:4b:b7:39:9b:3d:71:49:db: 8e:d4:7e:48:c8:64:3a:63:d8:5c:1b:71:75:83:39: 88:cf:43:0e:8b:6d:c1:b7:e9:3c:fc:bf:13:ee:98: 55:5f:a8:2d:5f:5d:4e:ac:63:d5:3b:80:c0:4f:52: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:63:6A:97:F4:B9:C7:CD:71:81:F7:4C:00:B7:C0:28:1C:9F:60:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv6: 2001:4830:c900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:28:37:44:e1:ad:aa:fa:a5:e1:07:a0:1f:d8:65:85:9e:1e: 49:14:58:e9:6a:b6:80:4c:aa:bb:e0:32:63:38:fe:37:3b:de: af:13:2d:8d:77:74:c2:e8:3d:52:32:ed:5e:2b:61:0d:36:07: 2c:a3:98:c7:75:42:9d:04:09:7a:f7:f8:77:59:e0:ea:5c:a0: 1b:56:63:77:17:be:e7:c6:66:85:a5:56:df:47:4c:d6:38:d5: 82:13:c0:62:0b:df:fa:5a:52:83:b6:ce:48:f3:d6:83:97:74: b5:55:99:4f:3a:c7:80:87:e3:a0:85:1d:1e:8f:bd:bf:d0:90: f6:7b:05:33:7c:db:d0:67:cb:73:e6:a5:bc:e8:93:87:33:5c: 26:42:8a:b7:c5:c4:5e:be:f3:d3:7d:c5:9f:fa:da:8e:55:4d: f1:4a:7e:71:1c:ef:2e:33:92:a8:3a:89:d1:c9:f9:00:81:db: f7:c4:38:41:9d:23:f3:6e:ad:1e:3a:9b:44:8d:c0:70:6b:dd: 2a:1b:85:a6:e0:d2:50:eb:ce:9d:cc:a6:fb:d1:a1:db:02:fb: 13:7a:00:db:12:83:f5:9d:a6:1a:47:e7:ae:6d:37:e6:77:6a: b9:a7:06:e5:47:0f:8a:26:dc:c0:fe:10:ec:cf:15:e1:c7:94: 44:4e:4b:be -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpBEEm13lUa9zGXNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk NmE2NjFmODAtNjdkZS00OWUyLWE2ZjEtMWMxNDJjNGRhYzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthF64KWA8/NBQPkHuMxSHKsd97VWtzGIbA8F 3yRpEmW/wldeHvsW4E5WDT/U3JrX603+Gbnm/cHnT271+b68XdXiuvG8UUV3uzjl 65xVMqglwzwOXs3lNXXbNwBMhPVPi2o5HctRUDESvI5NcWzW18Vlj0mbKw80vs/R B/49bCDHwol4RIlVE5jjVdhYPPRwQBm/R5ANisk8GieZkLhh4m+cmXR6PSIFBCnf YNFI9S+gjbtldN8C9naXa6+cWvbM7u2RpDbpLLLOS7c5mz1xSduO1H5IyGQ6Y9hc G3F1gzmIz0MOi23Bt+k8/L8T7phVX6gtX11OrGPVO4DAT1IKtwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF1japf0ucfNcYH3TAC3wCgcn2AJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvYmNiNjJkOTEtMWFhMy0z OGYwLWFhY2UtNzIxMDcwZTlmOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAFIMMkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYCg3ROGtqvql4QegH9hlhZ4eSRRY6Wq2gEyqu+AyYzj+NzverxMt jXd0wug9UjLtXithDTYHLKOYx3VCnQQJevf4d1ng6lygG1Zjdxe+58ZmhaVW30dM 1jjVghPAYgvf+lpSg7bOSPPWg5d0tVWZTzrHgIfjoIUdHo+9v9CQ9nsFM3zb0GfL c+alvOiThzNcJkKKt8XEXr7z033Fn/rajlVN8Up+cRzvLjOSqDqJ0cn5AIHb98Q4 QZ0j826tHjqbRI3AcGvdKhuFpuDSUOvOncym+9Gh2wL7E3oA2xKD9Z2mGkfnrm03 5ndquacG5UcPiibcwP4Q7M8V4ceURE5Lvg== -----END CERTIFICATE-----Generated at Mon Jun 30 02:18:55 2025 by rpki-client