$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/297d9ec4-5733-38f2-8685-313d37d499f0.roa File: 297d9ec4-5733-38f2-8685-313d37d499f0.roa (raw, json) Hash identifier: QCMd1CwSILD1pk/KIZIV4ndRkaS6c2Se/2nPrvF3Noo= Subject key identifier: 4D:18:FD:46:98:DA:CB:4C:13:BF:59:BF:7E:EE:FE:F6:71:05:F3:A9 Certificate issuer: /CN=29c52fab-59b0-46f8-851d-6644aaf1eaa7 Certificate serial: 010D0C9F43285849F2E52EA85E900D827448EC80 Authority key identifier: 16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/297d9ec4-5733-38f2-8685-313d37d499f0.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 25593 IP address blocks: 2604:9880::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:2e:a8:5e:90:0d:82:74:48:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c52fab-59b0-46f8-851d-6644aaf1eaa7 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=6bdc0730-b172-49c4-905d-8254b8b22c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:30:af:d1:c0:5a:eb:f4:87:01:e1:ec:05:62: 10:4e:8e:df:f1:00:60:3f:8e:61:77:35:43:88:da: 53:b5:cf:9c:3e:1d:9e:45:1b:d3:cf:15:1b:7a:c4: c5:cb:04:75:ce:1f:b8:45:6c:d9:c8:be:49:40:91: 60:32:f0:11:63:99:79:59:31:9d:a0:8f:2c:6e:41: e1:ac:d1:98:4e:57:f0:4a:78:e9:96:84:d8:d1:31: ef:01:95:8b:cb:bf:d6:10:c5:12:08:a5:a0:71:14: 18:e2:59:86:5f:48:1b:8a:d6:e0:50:c7:1c:06:56: e7:11:bd:6a:f4:04:3b:de:be:f4:85:c2:0b:a1:76: 50:d4:12:a7:e6:db:f6:1d:94:94:e9:a6:1f:44:70: 3e:c5:d3:6e:ec:94:d1:d2:6c:68:c3:f5:ca:d8:fb: 7d:05:e0:ed:e8:6d:f5:ec:0d:46:d8:ce:6c:19:aa: f7:8a:a5:36:7f:04:f7:74:b0:21:ae:80:64:cf:59: 1e:2a:37:8f:ed:bf:33:a1:77:e9:11:c4:fc:28:ab: d5:56:28:94:75:ac:1a:9d:53:17:0a:08:f8:51:c1: 92:4f:7c:5c:f0:cf:b9:f6:3c:4c:ec:6d:8a:f1:74: 9e:4d:3a:dd:b5:81:cf:de:21:ea:5f:ce:6c:d8:04: 7c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:18:FD:46:98:DA:CB:4C:13:BF:59:BF:7E:EE:FE:F6:71:05:F3:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/297d9ec4-5733-38f2-8685-313d37d499f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.crl X509v3 Authority Key Identifier: keyid:16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer sbgp-ipAddrBlock: critical IPv6: 2604:9880::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:09:c5:e5:b5:94:14:41:d7:bc:45:8a:09:2b:2d:18:bb:0a: b4:a3:df:28:c6:ab:38:8c:31:13:ea:17:12:fd:4a:a9:a5:82: a8:d1:4f:c7:e0:78:d9:06:a4:ac:b2:97:be:cd:84:11:5f:7b: ca:a7:54:23:5a:30:40:59:ef:b2:6b:d3:17:bd:e7:8c:86:ca: 4e:9d:5a:b1:2a:62:f2:bb:82:d3:60:d4:91:ab:2f:d7:76:f6: e9:d5:3b:32:2b:e7:66:bc:b0:55:c8:9d:71:8e:79:ba:72:f1: ad:7b:d9:b2:74:c7:1a:69:51:ac:47:2f:a9:69:05:b7:9d:a4: a5:0e:33:1d:83:4b:b1:f0:52:a2:02:04:b5:8c:7d:3f:bd:0d: 06:6b:39:59:dc:8f:43:6d:40:0c:c7:8a:57:eb:65:cc:fc:35: 81:74:78:c0:14:42:6b:b6:5e:68:e6:2c:11:c1:9b:5d:f9:28: 8f:32:11:3b:42:35:f8:0c:c4:6f:cf:f4:75:8e:c4:d4:17:f7: d4:6a:88:d2:a4:f2:68:34:26:cb:a8:a4:3b:53:11:6b:35:8c: 81:b7:b0:fc:70:ee:a3:cf:f0:95:5c:38:64:1f:6c:24:c5:bb: 83:6c:e9:67:56:eb:ac:a2:eb:90:6c:48:d8:d2:08:7c:09:54: 50:33:1a:03 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEny5S6oXpANgnRI7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljNTJmYWItNTliMC00NmY4LTg1MWQtNjY0NGFhZjFl YWE3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NmJkYzA3MzAtYjE3Mi00OWM0LTkwNWQtODI1NGI4YjIyYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzCv0cBa6/SHAeHsBWIQTo7f8QBgP45hdzVD iNpTtc+cPh2eRRvTzxUbesTFywR1zh+4RWzZyL5JQJFgMvARY5l5WTGdoI8sbkHh rNGYTlfwSnjploTY0THvAZWLy7/WEMUSCKWgcRQY4lmGX0gbitbgUMccBlbnEb1q 9AQ73r70hcILoXZQ1BKn5tv2HZSU6aYfRHA+xdNu7JTR0mxow/XK2Pt9BeDt6G31 7A1G2M5sGar3iqU2fwT3dLAhroBkz1keKjeP7b8zoXfpEcT8KKvVViiUdawanVMX Cgj4UcGST3xc8M+59jxM7G2K8XSeTTrdtYHP3iHqX85s2AR8vQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFE0Y/UaY2stME79Zv37u/vZxBfOpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yOWM1 MmZhYi01OWIwLTQ2ZjgtODUxZC02NjQ0YWFmMWVhYTcvMjk3ZDllYzQtNTczMy0z OGYyLTg2ODUtMzEzZDM3ZDQ5OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjljNTJmYWItNTliMC00NmY4LTg1 MWQtNjY0NGFhZjFlYWE3LzI5YzUyZmFiLTU5YjAtNDZmOC04NTFkLTY2NDRhYWYx ZWFhNy5jcmwwHwYDVR0jBBgwFoAUFpHzdeIouJ10XDVbqRIusocl/vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yOWM1MmZhYi01OWIwLTQ2ZjgtODUxZC02NjQ0 YWFmMWVhYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgSYgAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFAnF5bWUFEHXvEWKCSstGLsKtKPfKMarOIwxE+oXEv1KqaWCqNFP x+B42QakrLKXvs2EEV97yqdUI1owQFnvsmvTF73njIbKTp1asSpi8ruC02DUkasv 13b26dU7MivnZrywVcidcY55unLxrXvZsnTHGmlRrEcvqWkFt52kpQ4zHYNLsfBS ogIEtYx9P70NBms5WdyPQ21ADMeKV+tlzPw1gXR4wBRCa7ZeaOYsEcGbXfkojzIR O0I1+AzEb8/0dY7E1Bf31GqI0qTyaDQmy6ikO1MRazWMgbew/HDuo8/wlVw4ZB9s JMW7g2zpZ1brrKLrkGxI2NIIfAlUUDMaAw== -----END CERTIFICATE-----Generated at Thu Jun 12 11:28:28 2025 by rpki-client