$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24950ded-55a1-39d0-a8db-cbae4f113310.roa File: 24950ded-55a1-39d0-a8db-cbae4f113310.roa (raw, json) Hash identifier: NGxzLqZqY1548p2G9Dplzezjg4ZkgeG3K8rNRatbLLI= Subject key identifier: E3:31:2E:D1:8F:9E:51:F1:05:B4:BB:7C:8E:DD:85:C7:CF:F2:35:40 Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F4328584A89A61C55BB98F3A0C61ACE40 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24950ded-55a1-39d0-a8db-cbae4f113310.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 9009 IP address blocks: 2607:6b80:27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:1c:55:bb:98:f3:a0:c6:1a:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=dbe62b2d-7342-45c7-b7ef-d02525a09383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:98:f5:51:85:38:a9:82:05:97:f8:41:02:b4: f2:7f:75:be:27:d1:8a:ff:ac:05:7c:6c:93:2d:00: 1e:66:d7:13:ec:a5:fc:1a:39:e5:d1:6b:15:00:96: 78:e4:84:ff:43:12:ac:43:b3:9a:b4:0d:18:fb:e4: c7:d0:50:a8:b4:87:29:36:21:ae:f3:7d:ee:14:52: fe:8e:3a:31:c9:50:ae:11:25:1b:9e:4f:52:c9:7f: 6e:f7:73:1d:e6:2d:a7:7e:fd:fb:76:58:b1:51:43: 75:43:a6:f4:38:28:75:df:6c:eb:e7:6e:83:27:60: e7:86:72:67:85:b5:ae:47:88:66:2d:a6:1a:0d:db: c4:0c:be:42:d6:37:a8:28:8d:84:bb:d5:04:db:44: 09:81:4b:ef:65:22:b8:d7:ed:93:c0:ca:d9:60:8b: 09:a7:a5:1f:08:5b:bf:4e:bc:ed:3e:c2:68:6d:19: 06:9e:f8:b2:a2:85:42:d1:49:a6:b6:eb:9f:3e:99: a0:78:88:29:d7:7a:7e:65:bf:36:55:01:0d:2f:42: 27:ca:de:09:33:80:e4:b7:74:07:04:8f:fe:78:f1: 7a:d0:0a:44:57:7e:37:3e:73:2d:df:c6:2a:a2:f3: 75:c4:27:76:74:f5:83:50:dc:2a:03:68:e7:63:30: 63:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:31:2E:D1:8F:9E:51:F1:05:B4:BB:7C:8E:DD:85:C7:CF:F2:35:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24950ded-55a1-39d0-a8db-cbae4f113310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv6: 2607:6b80:27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d0:89:6b:ae:dd:09:c6:46:64:f3:41:2f:61:dd:8a:b1:5c: af:8f:d8:6a:f7:53:da:13:3a:26:77:4b:eb:44:9c:5d:e7:1d: ea:4a:c3:13:ff:93:20:e1:7e:30:fd:ef:bb:b2:44:2b:75:9e: 6e:6d:57:4c:78:c5:91:84:b6:59:25:7a:da:5e:16:b8:fc:ef: 0e:e1:ee:04:65:da:24:c8:5e:1c:d2:7c:39:27:e1:aa:5a:02: cb:fc:92:bd:47:0a:3f:73:16:77:92:b4:6a:53:f8:64:cc:d7: 73:ee:33:59:c0:65:56:20:0c:f4:c9:18:1b:a3:76:c6:1b:88: e3:93:99:60:a8:da:2d:3f:20:6a:fc:f9:66:c0:32:f1:72:ba: 0a:1b:8b:3e:97:0e:74:1c:c4:b0:a6:4f:84:14:16:42:00:8b: fa:ba:59:b8:95:55:5e:1d:15:17:28:2f:b1:82:d3:97:0f:9e: 0a:95:31:89:8e:6c:4d:48:82:fa:e0:e3:ef:1b:8e:b7:8e:3c: ab:4a:eb:1b:2f:6b:f9:89:12:02:e0:27:fb:23:bf:1b:8f:8f: e9:de:18:cf:5e:aa:a4:d7:26:34:3c:a4:ef:9f:be:59:11:27: 28:e2:9d:e8:b6:53:41:1f:1c:7c:e0:18:14:ee:05:57:93:e8: 6b:23:de:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqJphxVu5jzoMYazkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk ZGJlNjJiMmQtNzM0Mi00NWM3LWI3ZWYtZDAyNTI1YTA5MzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5j1UYU4qYIFl/hBArTyf3W+J9GK/6wFfGyT LQAeZtcT7KX8Gjnl0WsVAJZ45IT/QxKsQ7OatA0Y++TH0FCotIcpNiGu833uFFL+ jjoxyVCuESUbnk9SyX9u93Md5i2nfv37dlixUUN1Q6b0OCh132zr526DJ2DnhnJn hbWuR4hmLaYaDdvEDL5C1jeoKI2Eu9UE20QJgUvvZSK41+2TwMrZYIsJp6UfCFu/ TrztPsJobRkGnviyooVC0UmmtuufPpmgeIgp13p+Zb82VQENL0Inyt4JM4Dkt3QH BI/+ePF60ApEV343PnMt38YqovN1xCd2dPWDUNwqA2jnYzBjFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOMxLtGPnlHxBbS7fI7dhcfP8jVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvMjQ5NTBkZWQtNTVhMS0z OWQwLWE4ZGItY2JhZTRmMTEzMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdrgAAn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFLQiWuu3QnGRmTzQS9h3YqxXK+P2Gr3U9oTOiZ3S+tEnF3nHepK wxP/kyDhfjD977uyRCt1nm5tV0x4xZGEtlkletpeFrj87w7h7gRl2iTIXhzSfDkn 4apaAsv8kr1HCj9zFneStGpT+GTM13PuM1nAZVYgDPTJGBujdsYbiOOTmWCo2i0/ IGr8+WbAMvFyugobiz6XDnQcxLCmT4QUFkIAi/q6WbiVVV4dFRcoL7GC05cPngqV MYmObE1Igvrg4+8bjreOPKtK6xsva/mJEgLgJ/sjvxuPj+neGM9eqqTXJjQ8pO+f vlkRJyjinei2U0EfHHzgGBTuBVeT6Gsj3hk= -----END CERTIFICATE-----Generated at Sun Jul 20 11:10:11 2025 by rpki-client