$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/995c235b-de27-3657-94ec-783f0203cea2.roa File: 995c235b-de27-3657-94ec-783f0203cea2.roa (raw, json) Hash identifier: mC6kU2bSr15PpTSsGR3Am0H72Ua+cP1fb4lqfZfHXH0= Subject key identifier: E3:C7:89:72:CA:50:52:F5:EB:15:EC:B7:A6:62:07:1B:25:00:B4:3A Certificate issuer: /CN=f375140c-52cc-401f-b3a0-476ffa367076 Certificate serial: 010D0C9F4328584A14656D67624D1F80B061CB40 Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/995c235b-de27-3657-94ec-783f0203cea2.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 399976 IP address blocks: 2602:80c:20c1::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:6d:67:62:4d:1f:80:b0:61:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=f79f030c-b843-4a97-b0da-44013a20c61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:42:7b:79:af:c9:5b:b7:eb:f6:12:b1:ec:f3: f2:14:97:98:37:71:55:d1:64:eb:f3:2c:79:f2:32: 37:d5:60:a7:b4:bf:87:e2:f5:71:22:0a:9d:65:5b: 71:fa:78:aa:13:e7:63:52:8a:af:d4:d8:c0:c4:49: cf:0d:40:cf:11:ff:3a:cc:08:76:ea:78:7b:1f:05: 29:18:46:2d:c6:39:b3:ef:d4:89:fa:72:c4:1d:44: fd:c5:bf:02:e5:27:f2:b0:10:5b:26:e1:40:c6:9c: 27:63:1e:4c:f8:46:35:c5:56:1a:7b:b2:68:88:7a: 57:13:a1:0c:19:34:32:0d:a0:65:0a:7c:71:c3:a4: 64:98:cd:ab:39:cc:ca:33:4a:f1:11:f3:bf:a2:f3: 76:e2:d0:73:28:7b:3f:eb:6d:2b:5c:92:d4:25:a0: 01:62:1c:3c:82:43:30:85:d3:fd:d6:85:db:fa:86: 9d:c6:4e:b9:c3:54:1d:fd:ff:4c:3c:17:6c:20:01: 28:1e:20:43:64:a9:f9:a3:70:b3:67:ea:54:e9:ff: d5:ad:d0:a8:18:8a:fd:99:4a:4f:6e:4f:7e:9d:45: 93:4f:18:a9:c2:7e:12:a1:67:3a:dd:fc:6a:1a:6d: 5f:41:6a:cd:57:fd:2a:f0:05:4f:c7:fe:1c:01:29: 67:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C7:89:72:CA:50:52:F5:EB:15:EC:B7:A6:62:07:1B:25:00:B4:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/995c235b-de27-3657-94ec-783f0203cea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl X509v3 Authority Key Identifier: keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer sbgp-ipAddrBlock: critical IPv6: 2602:80c:20c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:13:f2:f2:58:3c:d9:3e:e0:a1:b9:18:7d:1a:d9:fd:19:36: 22:43:7c:c7:cd:79:ec:07:3b:d5:a4:1e:b7:c0:34:1a:13:7a: d1:05:84:10:57:31:f9:88:ac:16:2d:aa:89:81:15:12:2b:bc: 50:68:6d:fb:b4:cc:22:40:bd:54:d8:e2:85:90:09:04:c8:74: 3f:cb:be:90:58:6d:d9:ef:56:58:7c:61:25:af:4f:d4:72:04: 63:1b:da:4d:0c:c8:25:9c:4c:ea:88:b9:30:ec:83:76:20:38: 51:05:da:8b:bd:1f:84:7a:b9:db:d4:80:71:48:73:36:73:c8: df:62:0c:00:dd:4f:45:5b:dc:ec:40:c3:df:5b:82:2e:d8:e3: 48:7a:53:4e:28:f4:57:a6:87:76:bc:44:b3:7d:e1:c0:d4:2d: 70:f6:db:a8:e8:04:ef:35:fd:50:85:e0:04:9e:ed:7e:02:4e: fb:66:b1:39:9c:41:ff:b2:aa:61:ac:3c:0c:d0:33:e0:8d:fd: 33:3c:f8:42:28:69:db:cb:a5:59:73:00:4f:fa:c7:4c:c6:f2: 64:c9:21:b9:c1:1f:37:65:9e:12:29:6d:36:f3:62:e5:46:84: 4f:34:19:10:41:16:93:67:27:c9:0d:43:84:f7:9e:ed:2b:28: d8:7c:6f:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZW1nYk0fgLBhy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3 MDc2MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk Zjc5ZjAzMGMtYjg0My00YTk3LWIwZGEtNDQwMTNhMjBjNjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkJ7ea/JW7fr9hKx7PPyFJeYN3FV0WTr8yx5 8jI31WCntL+H4vVxIgqdZVtx+niqE+djUoqv1NjAxEnPDUDPEf86zAh26nh7HwUp GEYtxjmz79SJ+nLEHUT9xb8C5SfysBBbJuFAxpwnYx5M+EY1xVYae7JoiHpXE6EM GTQyDaBlCnxxw6RkmM2rOczKM0rxEfO/ovN24tBzKHs/620rXJLUJaABYhw8gkMw hdP91oXb+oadxk65w1Qd/f9MPBdsIAEoHiBDZKn5o3CzZ+pU6f/VrdCoGIr9mUpP bk9+nUWTTxipwn4SoWc63fxqGm1fQWrNV/0q8AVPx/4cASlnqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOPHiXLKUFL16xXst6ZiBxslALQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1 MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvOTk1YzIzNWItZGUyNy0z NjU3LTk0ZWMtNzgzZjAyMDNjZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2 NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCDB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACwT8vJYPNk+4KG5GH0a2f0ZNiJDfMfNeewHO9WkHrfANBoTetEF hBBXMfmIrBYtqomBFRIrvFBobfu0zCJAvVTY4oWQCQTIdD/LvpBYbdnvVlh8YSWv T9RyBGMb2k0MyCWcTOqIuTDsg3YgOFEF2ou9H4R6udvUgHFIczZzyN9iDADdT0Vb 3OxAw99bgi7Y40h6U04o9Femh3a8RLN94cDULXD226joBO81/VCF4ASe7X4CTvtm sTmcQf+yqmGsPAzQM+CN/TM8+EIoadvLpVlzAE/6x0zG8mTJIbnBHzdlnhIpbTbz YuVGhE80GRBBFpNnJ8kNQ4T3nu0rKNh8bwc= -----END CERTIFICATE-----Generated at Tue Jun 10 05:06:06 2025 by rpki-client