$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa File: 67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa (raw, json) Hash identifier: Kq5q5kvGXGkR0xUnw9+dULpbGZetocCLZwrviaS9AFE= Subject key identifier: 73:C9:FB:CF:B8:9C:6C:52:91:A8:02:39:F3:B1:47:A5:CC:B8:FE:28 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F43285849BDDA2278410648AC8B537400 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 32058 IP address blocks: 2607:4640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:22:78:41:06:48:ac:8b:53:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=75baee7a-18d4-4cf1-8a8c-dbd3038e9950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b0:c9:66:fd:54:ac:01:aa:d2:c7:6a:f4:bb: e1:4c:ef:a1:5f:fd:3a:92:5b:f5:61:ce:e5:9a:f1: 67:85:92:cf:b9:b1:44:6f:2f:99:48:f9:b2:28:02: 09:88:16:51:85:fe:5f:6a:3f:ac:e3:c4:5d:4f:60: c5:03:5b:72:33:fc:1d:e6:13:1b:29:5a:5c:d9:0e: 20:6a:92:44:35:22:5c:17:8e:19:4b:3f:88:e3:d9: c8:55:fa:d6:d7:b6:25:90:85:77:fa:03:8e:28:c5: 52:b7:5a:ef:00:cb:16:97:d7:03:e4:0b:90:ea:59: 98:9f:9f:b5:1b:20:74:e8:c6:d3:6b:9e:e9:36:bf: 56:75:b8:59:e8:23:d3:67:9b:86:8c:5f:b4:fc:2a: f4:f6:50:34:de:32:d6:f4:ea:07:ff:56:45:da:4d: d9:e9:4b:15:31:1d:98:5c:1e:4f:5f:da:32:b8:fe: 16:72:88:69:97:5e:32:3d:29:af:09:e3:3c:01:ae: 41:cb:69:23:6e:02:82:70:d5:97:8f:1f:2a:33:0a: 0e:21:18:c2:d2:09:a0:f4:a3:e5:9c:36:65:94:74: 11:b8:c8:59:2c:99:90:55:25:39:62:22:c9:b8:b9: c9:28:53:5b:e4:2d:0a:c3:5b:4e:4f:9f:8e:d8:86: 40:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C9:FB:CF:B8:9C:6C:52:91:A8:02:39:F3:B1:47:A5:CC:B8:FE:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:99:04:2b:77:be:d6:13:c1:48:be:14:a9:fb:a8:01:d1:4f: a7:77:d8:1b:25:40:1a:6e:6c:98:cd:86:bc:ab:89:63:0d:a6: f8:93:e5:9a:bc:57:ad:18:d3:24:12:9f:04:46:d0:06:80:e0: a9:fa:ad:26:87:7a:d6:1c:b1:f1:07:db:0f:1d:37:8f:0b:ed: 71:40:f0:b6:8f:c4:1b:41:21:81:50:9e:0c:26:4b:38:cf:b6: 1b:24:c9:a4:bf:e7:1e:00:7b:9b:a3:c6:09:a8:8d:bc:1f:86: d1:23:e5:61:11:76:0f:44:45:02:ac:66:e2:99:c5:90:fa:97: 6d:f6:86:4e:95:b8:45:e6:a7:33:51:51:fb:e9:0f:77:4c:37: b5:23:0d:ae:57:ae:1d:53:2d:02:f9:0d:f0:d7:97:29:9c:b9: bf:24:55:ed:7b:cf:14:1d:1e:02:74:7f:ae:30:5f:bb:bf:47: 81:18:78:0e:3e:f6:89:77:f5:a7:96:c4:36:2e:c0:33:68:54: 2d:e0:ce:26:68:fa:89:41:44:a2:ab:7a:ee:8d:eb:0a:57:42: ac:cd:37:9d:ce:d3:70:c1:96:81:70:7e:1d:ae:e5:35:19:dc: f4:05:9a:12:78:d7:4f:e1:9f:bc:ef:a2:00:f3:2f:47:b0:d3: cd:14:e8:c5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm92iJ4QQZIrItTdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NzViYWVlN2EtMThkNC00Y2YxLThhOGMtZGJkMzAzOGU5OTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrDJZv1UrAGq0sdq9LvhTO+hX/06klv1Yc7l mvFnhZLPubFEby+ZSPmyKAIJiBZRhf5faj+s48RdT2DFA1tyM/wd5hMbKVpc2Q4g apJENSJcF44ZSz+I49nIVfrW17YlkIV3+gOOKMVSt1rvAMsWl9cD5AuQ6lmYn5+1 GyB06MbTa57pNr9WdbhZ6CPTZ5uGjF+0/Cr09lA03jLW9OoH/1ZF2k3Z6UsVMR2Y XB5PX9oyuP4Wcohpl14yPSmvCeM8Aa5By2kjbgKCcNWXjx8qMwoOIRjC0gmg9KPl nDZllHQRuMhZLJmQVSU5YiLJuLnJKFNb5C0Kw1tOT5+O2IZAlwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHPJ+8+4nGxSkagCOfOxR6XMuP4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvNjdiYmEzZDQtYTUxZi0z YWFkLWEwZDgtOTY4YjE5MzllMmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdGQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQACmQQrd77WE8FIvhSp+6gB0U+nd9gbJUAabmyYzYa8q4ljDab4k+Wa vFetGNMkEp8ERtAGgOCp+q0mh3rWHLHxB9sPHTePC+1xQPC2j8QbQSGBUJ4MJks4 z7YbJMmkv+ceAHubo8YJqI28H4bRI+VhEXYPREUCrGbimcWQ+pdt9oZOlbhF5qcz UVH76Q93TDe1Iw2uV64dUy0C+Q3w15cpnLm/JFXte88UHR4CdH+uMF+7v0eBGHgO PvaJd/WnlsQ2LsAzaFQt4M4maPqJQUSiq3rujesKV0KszTedztNwwZaBcH4druU1 Gdz0BZoSeNdP4Z+876IA8y9HsNPNFOjF -----END CERTIFICATE-----Generated at Wed Jul 23 01:28:50 2025 by rpki-client