$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa File: 67ad4caf-49f0-33da-b621-fa3822cdc420.roa (raw, json) Hash identifier: TcaSTwl3A3IcdhAMprr2ekPxaA5TKG8s9S+jeiBzeXc= Subject key identifier: 7E:77:6F:94:21:4C:26:15:7A:8E:88:33:DC:31:0C:92:04:C7:70:DC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A71EB3D8C4A021ABDD6B5F680 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 2001:568:203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:3d:8c:4a:02:1a:bd:d6:b5:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=59044150-94ff-4026-8ec1-89f39b214be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b3:5d:e6:2c:6f:f5:e2:92:2b:41:59:b6:7a: a6:4b:8b:76:17:b8:11:dc:59:69:f6:cf:a7:7b:66: f4:c2:c8:02:28:2e:31:e8:72:44:64:82:b0:b4:d9: 85:0a:63:08:05:c6:2c:cd:c5:d4:65:b4:c2:7e:4b: a5:1a:85:a2:81:a3:bd:1d:5d:10:de:dc:33:70:29: 40:a2:f6:a0:01:9b:a7:68:49:7b:6a:f0:ee:2d:b8: df:6a:bf:8b:61:41:fc:f4:6e:7c:48:c9:d6:fc:73: c0:07:46:27:a7:99:96:da:67:75:23:a9:c2:12:c6: d1:26:a8:96:55:37:4b:ec:e9:ef:01:91:f1:10:10: 33:72:49:69:a8:61:93:38:42:a2:9f:08:fd:75:d7: 94:21:63:73:06:ef:d6:2a:9c:ef:4c:45:d8:f7:1d: 39:9a:0f:db:bf:35:7c:31:98:44:03:6e:23:99:d9: 96:ff:79:96:61:73:52:8e:96:c5:c6:2e:a7:ae:9d: eb:40:5c:25:78:19:36:f0:d1:30:b8:e6:23:d0:d7: 9c:f8:23:34:f9:22:2d:2e:e9:fd:6b:8c:c1:56:61: d8:f4:60:44:06:dd:74:8f:3c:e6:b9:e8:2b:cc:80: 84:23:18:6c:65:c6:44:14:c9:d5:3e:73:d8:90:bc: 74:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:77:6F:94:21:4C:26:15:7A:8E:88:33:DC:31:0C:92:04:C7:70:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:568:203::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:d3:22:be:72:1e:0d:bd:66:6d:ad:d6:69:be:de:2a:e0:f2: 7e:e5:2c:21:8b:c8:75:95:98:5c:ef:1c:3a:3c:63:b2:14:0e: 5f:ce:85:be:55:6d:96:80:49:62:29:5a:89:e0:dd:56:ae:5c: 95:ec:e1:9c:c9:c6:a1:8f:6b:9a:73:7c:26:f9:f6:d7:b3:c4: 3b:95:cb:16:f0:0c:5c:af:24:06:72:44:b4:22:a2:f6:e5:0f: e7:36:50:e1:6c:23:3e:0b:07:0a:c2:43:d6:4a:f1:94:93:50: 32:16:6a:97:bd:51:2c:ab:1d:14:c2:73:67:5e:75:61:b7:28: 6b:63:88:85:50:63:a0:2d:a2:b3:c9:45:08:fe:14:7f:b1:b3: 1f:b3:5c:6c:28:a7:99:ef:31:8f:03:22:c4:52:97:1e:46:75: d4:4d:76:4e:d2:3b:1e:d7:38:0f:7b:46:53:ce:aa:02:d3:53: 3c:ac:46:d4:78:c7:42:fa:a1:8a:bb:b0:3e:8a:7f:ed:bf:24: 2e:7c:a8:72:ed:8c:1c:5c:03:b2:42:b8:24:29:8f:ac:1d:57: f9:ac:18:ec:e3:96:c4:8b:49:bc:76:27:f6:1f:7a:60:5a:8e: 56:d2:28:75:6f:a2:23:2c:47:f6:4c:bf:1b:fe:7e:2a:48:22: c5:90:2f:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpx6z2MSgIavda19oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk NTkwNDQxNTAtOTRmZi00MDI2LThlYzEtODlmMzliMjE0YmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7Nd5ixv9eKSK0FZtnqmS4t2F7gR3Flp9s+n e2b0wsgCKC4x6HJEZIKwtNmFCmMIBcYszcXUZbTCfkulGoWigaO9HV0Q3twzcClA ovagAZunaEl7avDuLbjfar+LYUH89G58SMnW/HPAB0Ynp5mW2md1I6nCEsbRJqiW VTdL7OnvAZHxEBAzcklpqGGTOEKinwj9ddeUIWNzBu/WKpzvTEXY9x05mg/bvzV8 MZhEA24jmdmW/3mWYXNSjpbFxi6nrp3rQFwleBk28NEwuOYj0Nec+CM0+SItLun9 a4zBVmHY9GBEBt10jzzmuegrzICEIxhsZcZEFMnVPnPYkLx0vwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH53b5QhTCYVeo6IM9wxDJIEx3DcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjdhZDRjYWYtNDlmMC0z M2RhLWI2MjEtZmEzODIyY2RjNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaAID MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAM/TIr5yHg29Zm2t1mm+3irg8n7lLCGLyHWVmFzvHDo8Y7IUDl/O hb5VbZaASWIpWong3VauXJXs4ZzJxqGPa5pzfCb59tezxDuVyxbwDFyvJAZyRLQi ovblD+c2UOFsIz4LBwrCQ9ZK8ZSTUDIWape9USyrHRTCc2dedWG3KGtjiIVQY6At orPJRQj+FH+xsx+zXGwop5nvMY8DIsRSlx5GddRNdk7SOx7XOA97RlPOqgLTUzys RtR4x0L6oYq7sD6Kf+2/JC58qHLtjBxcA7JCuCQpj6wdV/msGOzjlsSLSbx2J/Yf emBajlbSKHVvoiMsR/ZMvxv+fipIIsWQLxc= -----END CERTIFICATE-----Generated at Fri Jul 25 19:39:01 2025 by rpki-client