$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/d28c0219-5798-341b-a3bf-be4ed586f980.roa File: d28c0219-5798-341b-a3bf-be4ed586f980.roa (raw, json) Hash identifier: i8stFyN91L7yxuRhN/GsDlzNg7YV/iv1l7TrXLCNspU= Subject key identifier: 38:77:4F:23:C8:EB:EE:6F:66:7E:15:DC:CE:66:7C:C3:B9:BD:3E:ED Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584A7085F4F9D00E56223CB58200 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/d28c0219-5798-341b-a3bf-be4ed586f980.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 32771 IP address blocks: 2620:111:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:f4:f9:d0:0e:56:22:3c:b5:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=326fbef3-e78e-4d0d-89f8-ad157c4f2570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:2f:43:b6:a7:2c:85:43:56:37:68:5e:82: 36:07:e1:cf:33:2f:4b:b8:2f:6a:d1:4b:e4:22:71: fd:e4:e0:eb:00:0d:1d:cf:a2:a2:8e:53:bf:ef:86: f9:64:b6:d9:b3:f0:b2:c3:cc:4b:8c:76:72:b3:ca: 75:e7:3a:bb:84:37:8f:b6:4a:d9:3b:93:e9:31:15: eb:a7:ed:48:fb:4f:57:c1:09:8b:6f:40:14:2b:df: c9:44:65:24:4d:38:bc:6b:c1:d3:ea:c8:9e:ad:5e: c1:ce:a7:3f:8f:ed:28:bc:a9:f8:79:e3:2d:5b:40: df:29:fd:22:97:8f:6a:10:56:2e:a9:b4:22:28:a4: 32:fc:4f:9f:8a:30:0c:4e:27:e7:b9:bc:15:0b:07: c1:10:17:eb:be:3a:a2:c0:c4:23:88:17:37:fe:b3: 6a:b2:90:f1:c3:ea:c6:4f:4f:cc:c9:fc:52:18:95: 9a:39:5a:4f:bf:63:57:b2:80:aa:dd:91:3c:51:ba: 4c:ac:28:33:0d:cd:68:2c:e1:e8:f9:11:c4:c5:7f: 1c:1f:22:2d:2a:c3:35:ae:74:8d:0d:3b:85:91:2c: 49:2a:b4:e2:4b:45:f4:fa:96:d7:3e:24:6f:91:b9: 18:77:6b:27:0a:7b:94:19:54:85:ca:c0:55:81:4b: 28:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:77:4F:23:C8:EB:EE:6F:66:7E:15:DC:CE:66:7C:C3:B9:BD:3E:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/d28c0219-5798-341b-a3bf-be4ed586f980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:8002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:08:53:2f:1a:5f:c3:86:4f:79:46:31:19:65:80:85:73:ae: 15:d5:cd:82:b1:f2:cc:9d:61:35:5b:40:27:74:c4:82:14:38: b2:d0:c5:14:2d:5f:8f:6b:29:12:c9:c7:46:2c:1e:19:ff:05: 7f:ac:cc:b1:87:98:79:7f:cb:85:c7:dc:7a:ba:a0:bb:72:0e: d9:18:d4:4c:fb:61:91:50:e7:72:38:f2:48:fc:65:fe:ff:ab: 65:ab:5a:b0:66:8d:5e:5e:cd:b9:7b:df:0c:02:8f:2f:86:cc: 6d:c5:f9:b6:1c:de:e4:3b:cd:00:ce:9c:69:a2:05:7a:03:df: 2e:5c:76:26:44:e7:0c:65:8e:85:3f:4a:59:e4:55:e6:a0:54: 38:18:43:f2:08:bc:fd:bd:86:b5:eb:c2:ff:c3:99:0b:2d:01: fc:1b:c1:63:2e:0c:c1:32:e1:c9:b3:47:b1:9a:1a:83:1b:79: 0a:7b:6f:66:c6:b6:89:61:c2:2a:d6:65:29:c3:8f:dd:1f:6a: 19:2e:63:ef:ca:62:8b:0a:66:63:dd:01:0f:ec:9a:33:10:19: ad:0e:3b:30:03:95:cf:df:9d:13:ef:07:c4:68:1e:12:e7:c8: 6d:d3:b9:71:f0:c3:3c:e1:43:49:aa:05:17:2f:8d:a2:5e:09: 41:be:42:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpwhfT50A5WIjy1ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk MzI2ZmJlZjMtZTc4ZS00ZDBkLTg5ZjgtYWQxNTdjNGYyNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfkvQ7anLIVDVjdoXoI2B+HPMy9LuC9q0Uvk InH95ODrAA0dz6KijlO/74b5ZLbZs/Cyw8xLjHZys8p15zq7hDePtkrZO5PpMRXr p+1I+09XwQmLb0AUK9/JRGUkTTi8a8HT6sierV7Bzqc/j+0ovKn4eeMtW0DfKf0i l49qEFYuqbQiKKQy/E+fijAMTifnubwVCwfBEBfrvjqiwMQjiBc3/rNqspDxw+rG T0/MyfxSGJWaOVpPv2NXsoCq3ZE8UbpMrCgzDc1oLOHo+RHExX8cHyItKsM1rnSN DTuFkSxJKrTiS0X0+pbXPiRvkbkYd2snCnuUGVSFysBVgUsorQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDh3TyPI6+5vZn4V3M5mfMO5vT7tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvZDI4YzAyMTktNTc5OC0z NDFiLWEzYmYtYmU0ZWQ1ODZmOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA4IUy8aX8OGT3lGMRllgIVzrhXVzYKx8sydYTVbQCd0xIIUOLLQ xRQtX49rKRLJx0YsHhn/BX+szLGHmHl/y4XH3Hq6oLtyDtkY1Ez7YZFQ53I48kj8 Zf7/q2WrWrBmjV5ezbl73wwCjy+GzG3F+bYc3uQ7zQDOnGmiBXoD3y5cdiZE5wxl joU/SlnkVeagVDgYQ/IIvP29hrXrwv/DmQstAfwbwWMuDMEy4cmzR7GaGoMbeQp7 b2bGtolhwirWZSnDj90fahkuY+/KYosKZmPdAQ/smjMQGa0OOzADlc/fnRPvB8Ro HhLnyG3TuXHwwzzhQ0mqBRcvjaJeCUG+QkY= -----END CERTIFICATE-----Generated at Wed Jul 9 16:33:39 2025 by rpki-client