$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/9442ddc6-bc85-3f53-9784-c37cda394154.roa File: 9442ddc6-bc85-3f53-9784-c37cda394154.roa (raw, json) Hash identifier: IY4U4gy6WtevjmyGoZYICKZhyMcppBC/azdnAX+sDww= Subject key identifier: 59:AF:16:9E:9C:45:5E:5E:BA:29:AE:AE:CB:8A:D2:78:94:35:19:52 Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584A0727C12CD705644DE46FA880 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/9442ddc6-bc85-3f53-9784-c37cda394154.roa Signing time: Fri 30 May 2025 19:11:31 +0000 ROA not before: Fri 30 May 2025 19:11:31 +0000 ROA not after: Thu 28 Aug 2025 19:11:31 +0000 asID: 81 IP address blocks: 2600:2700::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:27:c1:2c:d7:05:64:4d:e4:6f:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: May 30 19:11:31 2025 GMT Not After : Aug 28 19:11:31 2025 GMT Subject: CN=0c4bbf52-9adc-4467-a7a2-997d826fde3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1f:a5:75:1f:83:c2:d1:96:00:ed:5d:6c:57: 44:1c:8d:b0:7f:f0:97:53:98:e4:50:ba:bb:b6:9b: 1a:14:82:39:75:81:34:00:d0:da:19:04:04:74:44: 24:50:09:fc:30:05:94:33:82:79:ca:e2:3b:0e:94: 30:ce:88:0b:77:14:83:b2:61:2c:5b:5c:75:99:a7: 99:37:93:b2:cf:61:49:d5:dc:25:1e:1a:0e:21:25: 6d:e0:36:1e:ca:57:eb:a2:fa:c6:bd:24:48:d6:1b: 9c:cb:ac:6c:43:67:5f:18:96:e6:36:18:42:02:26: 58:a9:b5:ac:cb:55:ac:49:a2:ab:d5:6e:17:98:8e: 5b:ae:c1:26:83:86:ec:45:67:83:4b:26:74:89:ff: ed:39:88:33:43:89:76:5a:ef:c9:36:6b:a6:33:69: b1:12:19:28:77:61:37:b3:13:f4:93:8c:99:84:17: 10:55:8b:45:5f:e0:44:05:ba:18:0a:d8:2a:61:96: c6:fe:59:0a:64:40:54:32:9c:59:f7:d5:74:bd:cc: 75:64:9e:58:dd:78:cc:c2:0f:e6:28:7a:1d:25:4e: 51:0a:85:fa:33:b4:40:22:1f:c2:f1:de:f3:73:28: b7:26:0e:8c:0c:48:c0:a1:42:61:2f:58:fe:c8:30: 4d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AF:16:9E:9C:45:5E:5E:BA:29:AE:AE:CB:8A:D2:78:94:35:19:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/9442ddc6-bc85-3f53-9784-c37cda394154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2600:2700::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fd:af:a2:bb:0b:d2:9d:14:b7:d1:4a:66:ff:d6:2e:7a:a7: 43:b3:04:1d:13:cd:83:45:90:54:fb:7e:49:ad:c7:6d:ef:39: 12:6e:ef:ff:6d:1c:7a:32:96:74:11:9f:10:0b:e8:62:e1:cb: 5c:e0:05:f8:37:a5:08:08:e5:bf:10:29:cd:f0:37:f4:00:e0: a2:40:cf:a3:a9:bb:c9:58:63:3b:20:d2:8b:3f:1b:bd:d2:ee: a6:d8:61:18:ac:3e:22:52:10:d7:0b:c9:fc:aa:a8:a5:c7:ba: 46:6d:35:d4:1c:8f:5a:09:31:a5:8c:f8:9d:49:0e:a0:fa:13: 3d:06:62:4b:1d:fb:b7:ad:4a:07:be:ba:53:1b:1d:97:49:16: 52:f3:3f:7e:5c:af:9a:1c:da:c5:e3:5d:ce:5e:2b:61:77:8a: 08:00:9d:ac:b8:da:c3:22:6e:ad:b5:c9:43:a6:33:5b:ff:ec: 8f:82:e4:b8:27:e6:71:e6:64:5f:b5:2c:8e:94:92:dd:7e:8f: 55:68:90:04:78:10:ac:fd:fb:c6:7c:ca:3f:82:a8:b6:d0:a1: ef:dc:ce:5e:d2:ed:af:9a:39:d7:b7:97:58:7b:d8:25:af:5f: ca:f8:6a:55:a7:78:c7:dd:d8:81:00:f1:8f:76:ad:f8:72:6b: 1f:37:f7:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoHJ8Es1wVkTeRvqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI1MDUzMDE5MTEzMVoXDTI1MDgyODE5MTEzMVowLzEtMCsGA1UEAxMk MGM0YmJmNTItOWFkYy00NDY3LWE3YTItOTk3ZDgyNmZkZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh+ldR+DwtGWAO1dbFdEHI2wf/CXU5jkULq7 tpsaFII5dYE0ANDaGQQEdEQkUAn8MAWUM4J5yuI7DpQwzogLdxSDsmEsW1x1maeZ N5Oyz2FJ1dwlHhoOISVt4DYeylfrovrGvSRI1hucy6xsQ2dfGJbmNhhCAiZYqbWs y1WsSaKr1W4XmI5brsEmg4bsRWeDSyZ0if/tOYgzQ4l2Wu/JNmumM2mxEhkod2E3 sxP0k4yZhBcQVYtFX+BEBboYCtgqYZbG/lkKZEBUMpxZ99V0vcx1ZJ5Y3XjMwg/m KHodJU5RCoX6M7RAIh/C8d7zcyi3Jg6MDEjAoUJhL1j+yDBNCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFmvFp6cRV5euimursuK0niUNRlSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvOTQ0MmRkYzYtYmM4NS0z ZjUzLTk3ODQtYzM3Y2RhMzk0MTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAnADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAc/a+iuwvSnRS30Upm/9YueqdDswQdE82DRZBU+35Jrcdt7zkSbu// bRx6MpZ0EZ8QC+hi4ctc4AX4N6UICOW/ECnN8Df0AOCiQM+jqbvJWGM7INKLPxu9 0u6m2GEYrD4iUhDXC8n8qqilx7pGbTXUHI9aCTGljPidSQ6g+hM9BmJLHfu3rUoH vrpTGx2XSRZS8z9+XK+aHNrF413OXithd4oIAJ2suNrDIm6ttclDpjNb/+yPguS4 J+Zx5mRftSyOlJLdfo9VaJAEeBCs/fvGfMo/gqi20KHv3M5e0u2vmjnXt5dYe9gl r1/K+GpVp3jH3diBAPGPdq34cmsfN/d6 -----END CERTIFICATE-----Generated at Sun Jun 8 06:21:20 2025 by rpki-client