$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/af058194-e76e-39db-a314-4e56257d2b78.roa File: af058194-e76e-39db-a314-4e56257d2b78.roa (raw, json) Hash identifier: SSCQF0lxGzHv/HKCty3g51999X0vKFj+E+KcZEMCCrY= Subject key identifier: 08:39:F2:67:2E:CE:4D:D3:6C:C9:E0:1D:C6:07:1F:48:30:05:CF:B9 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584A2ABAFF8FB5607D20BE44B380 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/af058194-e76e-39db-a314-4e56257d2b78.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11232 IP address blocks: 2604:7a00:d800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:ff:8f:b5:60:7d:20:be:44:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=fcd5822c-9ed3-48d3-be3c-bf7273dcc830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:cb:40:b0:2a:bb:4f:8f:e6:41:7c:0b:6d: b5:fe:f3:e2:63:4f:69:c8:49:cd:bb:43:62:bc:b6: c4:85:c6:21:84:59:7a:d3:0f:fc:60:df:99:04:78: 10:e6:da:66:e2:55:7c:df:66:ef:21:ad:ce:64:a7: 44:9a:ff:d5:99:0c:5d:15:86:6f:61:f4:d6:9d:48: 78:53:3b:22:cf:f6:9f:9a:49:00:c1:08:23:2f:6f: 57:d0:80:77:28:78:35:77:d1:22:41:db:9d:33:fe: 75:2e:e2:0b:c2:0c:fb:e8:18:2e:bf:b1:55:e5:89: 90:e8:af:83:a0:12:b6:53:e7:e4:18:43:dd:ab:8c: 32:57:63:35:3e:f3:d8:91:55:d4:00:de:e6:41:f3: 6a:b0:da:ad:9d:1e:a7:f0:16:ed:18:ec:99:af:be: e0:c8:41:42:55:f1:00:35:b7:99:25:9f:7e:87:ad: 7a:8c:2e:b8:c4:e6:2b:39:7f:8a:c0:3c:6c:4a:66: b0:e0:e0:bf:ad:77:62:cd:d6:b3:3f:2b:93:37:ea: 60:c1:d6:26:fa:9c:35:66:3e:33:1e:a8:d3:44:d1: b7:37:b5:81:dc:98:e8:ea:64:32:fd:40:6d:ba:41: 7c:ac:97:6d:b2:e3:c8:18:25:f6:39:ca:b8:d9:42: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:39:F2:67:2E:CE:4D:D3:6C:C9:E0:1D:C6:07:1F:48:30:05:CF:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/af058194-e76e-39db-a314-4e56257d2b78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv6: 2604:7a00:d800::/37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f3:ff:aa:d1:05:9d:59:97:4c:da:7a:81:c5:a1:a0:e4:82: 29:83:b2:d0:7c:e3:d3:5e:0a:34:ef:2e:b3:03:79:c2:e0:de: 4a:08:6e:aa:76:5a:85:29:61:ae:63:8e:55:4e:2f:26:80:02: f9:e3:35:20:eb:ff:46:d7:c5:9b:6b:9e:3f:eb:9e:95:44:8c: f0:04:25:0b:73:0d:c1:6d:60:02:66:54:61:59:13:9c:14:64: f8:76:78:9f:6b:02:c8:24:29:79:0e:0a:9f:b3:35:90:6b:20: e4:65:44:cb:0c:cd:df:73:a4:a1:d3:9f:89:5f:1b:ba:a2:10: 87:3c:74:3d:fa:6f:a3:9d:eb:ea:0f:0f:07:26:61:28:6d:b6: 79:7e:4a:72:36:b7:70:02:25:f4:80:47:20:da:4f:c4:28:64: 93:15:ce:6d:51:d8:3d:a5:ac:17:5c:63:04:f5:ae:6f:eb:de: aa:12:20:6f:da:53:84:5a:ba:9c:b3:3e:7c:85:21:1b:00:ae: db:2a:df:5c:f2:fb:ac:28:41:ca:14:f9:fd:2d:b7:7a:88:a9: 68:90:cb:81:1b:fc:aa:5d:ca:a0:f1:09:80:c7:dd:27:0e:26: ac:46:a6:ca:48:be:be:e0:77:0b:8f:8f:44:ae:4d:d3:14:3a: 82:6f:cb:01 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoquv+PtWB9IL5Es4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZmNkNTgyMmMtOWVkMy00OGQzLWJlM2MtYmY3MjczZGNjODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojvLQLAqu0+P5kF8C221/vPiY09pyEnNu0Ni vLbEhcYhhFl60w/8YN+ZBHgQ5tpm4lV832bvIa3OZKdEmv/VmQxdFYZvYfTWnUh4 Uzsiz/afmkkAwQgjL29X0IB3KHg1d9EiQdudM/51LuILwgz76Bguv7FV5YmQ6K+D oBK2U+fkGEPdq4wyV2M1PvPYkVXUAN7mQfNqsNqtnR6n8BbtGOyZr77gyEFCVfEA NbeZJZ9+h616jC64xOYrOX+KwDxsSmaw4OC/rXdizdazPyuTN+pgwdYm+pw1Zj4z HqjTRNG3N7WB3Jjo6mQy/UBtukF8rJdtsuPIGCX2Ocq42UIk9wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAg58mcuzk3TbMngHcYHH0gwBc+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYWYwNTgxOTQtZTc2ZS0z OWRiLWEzMTQtNGU1NjI1N2QyYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgR6ANgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUfP/qtEFnVmXTNp6gcWhoOSCKYOy0Hzj014KNO8uswN5wuDeSghu qnZahSlhrmOOVU4vJoAC+eM1IOv/RtfFm2ueP+uelUSM8AQlC3MNwW1gAmZUYVkT nBRk+HZ4n2sCyCQpeQ4Kn7M1kGsg5GVEywzN33OkodOfiV8buqIQhzx0Pfpvo53r 6g8PByZhKG22eX5Kcja3cAIl9IBHINpPxChkkxXObVHYPaWsF1xjBPWub+veqhIg b9pThFq6nLM+fIUhGwCu2yrfXPL7rChByhT5/S23eoipaJDLgRv8ql3KoPEJgMfd Jw4mrEamyki+vuB3C4+PRK5N0xQ6gm/LAQ== -----END CERTIFICATE-----Generated at Sun Jun 15 16:36:20 2025 by rpki-client