$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ecfa0f99-7baa-3072-8fa5-53106bacf901.roa File: ecfa0f99-7baa-3072-8fa5-53106bacf901.roa (raw, json) Hash identifier: sSytgTCBRmIWSCkYgnPn677i8lh/wSsVyS6T6CzNpo0= Subject key identifier: 80:9E:AE:23:F9:FE:EB:6F:CC:F8:B1:82:0D:A8:6F:06:C5:DB:B5:2B Certificate issuer: /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Certificate serial: 010D0C9F4328584A14655E295C5DAAB987114200 Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ecfa0f99-7baa-3072-8fa5-53106bacf901.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 34553 IP address blocks: 2602:809:3004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:5e:29:5c:5d:aa:b9:87:11:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=f15c3410-d16a-4ae2-813a-10d2f0bf01d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a3:31:e4:ec:02:80:a1:be:8c:eb:84:eb:2d: 4f:eb:90:37:19:50:0e:da:ed:21:27:44:a5:9c:90: be:c7:09:d8:58:8e:99:22:77:ce:d5:c2:7f:15:e6: fe:d9:76:cd:d0:48:a0:e5:0e:53:54:bf:ac:7a:13: a9:b0:30:9c:39:2b:84:47:1f:b3:91:9f:20:94:ad: 4c:60:82:98:18:36:cf:df:42:36:c3:88:0d:be:3c: c2:bb:1a:66:f4:ac:0e:5e:2d:36:d9:49:0d:1c:c5: aa:59:d0:71:cf:47:a1:3d:1b:fd:dc:11:c2:0f:d1: c6:39:64:87:0a:71:6d:b6:f3:c7:7b:f5:13:e4:4f: bb:12:a0:f5:87:b2:d4:65:e2:64:a2:22:4e:03:9e: dd:e7:68:ed:80:f8:a2:68:7d:79:ce:68:6f:50:e9: 0c:74:55:c5:0c:0b:2d:5e:21:1a:59:63:5d:ae:4f: 60:48:01:72:1e:46:2e:cf:de:b8:4d:54:df:d2:fe: 72:d3:7d:e9:9b:8e:8b:43:fa:47:24:eb:a2:81:8d: 9f:8e:fe:63:e3:f1:d1:b2:55:ce:48:88:ab:5f:14: 2a:88:ba:2a:a9:8f:74:19:56:1b:65:ed:6f:be:60: 9d:59:bb:0d:9a:bc:73:35:62:a1:eb:92:58:ed:08: cf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9E:AE:23:F9:FE:EB:6F:CC:F8:B1:82:0D:A8:6F:06:C5:DB:B5:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ecfa0f99-7baa-3072-8fa5-53106bacf901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl X509v3 Authority Key Identifier: keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:809:3004::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a4:f1:93:fd:ab:fb:0a:50:f5:6c:c8:39:18:de:b4:d5:26: 7a:16:ff:96:48:d5:90:07:38:d3:d7:b4:3a:3b:0c:bc:7b:b8: 60:f6:1c:01:3a:68:4b:8a:08:e1:b6:0a:a3:42:be:95:da:44: 1d:f1:b2:14:0d:bc:d8:a2:20:67:71:d9:8f:6a:ec:10:9b:09: a7:71:8e:2c:e6:b6:73:b6:4e:39:4c:b2:40:ef:a0:8f:4a:0c: 82:d7:cd:6b:1e:17:35:f4:a2:ab:2a:9b:ef:d6:de:43:36:87: d6:b4:df:42:6d:80:d1:14:3a:85:88:00:da:01:14:01:da:09: 04:55:3e:7b:c9:2c:a1:5d:70:8a:3c:c9:7a:6c:20:52:e1:a4: 21:ff:4d:d7:5a:b6:54:4f:d1:50:32:57:9a:30:5a:64:86:20: 11:45:ed:8e:a2:3e:f3:8e:5b:2f:11:0a:7d:7d:a1:ce:1b:45: 77:a9:a8:b8:4e:01:ac:e0:35:3f:0f:75:1f:6a:61:ca:fe:4d: ac:8b:e3:6e:ab:f1:e5:3a:c0:5c:28:57:3f:f1:9e:e7:34:aa: 0f:dc:69:0e:cb:7e:52:a4:31:51:e5:e4:80:e3:23:1e:51:e1: c0:ce:8e:7e:db:e5:17:8a:64:b9:c3:f0:e8:d6:e5:da:49:ec: d0:9c:f8:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZV4pXF2quYcRQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3NzJiNGItMTVmYi00YjM4LWI1MDUtZGZlOTE1ZGFl OWNkMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjE1YzM0MTAtZDE2YS00YWUyLTgxM2EtMTBkMmYwYmYwMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKMx5OwCgKG+jOuE6y1P65A3GVAO2u0hJ0Sl nJC+xwnYWI6ZInfO1cJ/Feb+2XbN0Eig5Q5TVL+sehOpsDCcOSuERx+zkZ8glK1M YIKYGDbP30I2w4gNvjzCuxpm9KwOXi022UkNHMWqWdBxz0ehPRv93BHCD9HGOWSH CnFttvPHe/UT5E+7EqD1h7LUZeJkoiJOA57d52jtgPiiaH15zmhvUOkMdFXFDAst XiEaWWNdrk9gSAFyHkYuz964TVTf0v5y033pm46LQ/pHJOuigY2fjv5j4/HRslXO SIirXxQqiLoqqY90GVYbZe1vvmCdWbsNmrxzNWKh65JY7QjPrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFICeriP5/utvzPixgg2obwbF27UrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3 MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5MTVkYWU5Y2QvZWNmYTBmOTktN2JhYS0z MDcyLThmYTUtNTMxMDZiYWNmOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGM3NzJiNGItMTVmYi00YjM4LWI1 MDUtZGZlOTE1ZGFlOWNkLzBjNzcyYjRiLTE1ZmItNGIzOC1iNTA1LWRmZTkxNWRh ZTljZC5jcmwwHwYDVR0jBBgwFoAU8UVSzOYiTilOFS1c5L3dBToItXIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5 MTVkYWU5Y2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIICTAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF6k8ZP9q/sKUPVsyDkY3rTVJnoW/5ZI1ZAHONPXtDo7DLx7uGD2 HAE6aEuKCOG2CqNCvpXaRB3xshQNvNiiIGdx2Y9q7BCbCadxjizmtnO2TjlMskDv oI9KDILXzWseFzX0oqsqm+/W3kM2h9a030JtgNEUOoWIANoBFAHaCQRVPnvJLKFd cIo8yXpsIFLhpCH/TddatlRP0VAyV5owWmSGIBFF7Y6iPvOOWy8RCn19oc4bRXep qLhOAazgNT8PdR9qYcr+TayL426r8eU6wFwoVz/xnuc0qg/caQ7LflKkMVHl5IDj Ix5R4cDOjn7b5ReKZLnD8OjW5dpJ7NCc+M4= -----END CERTIFICATE-----Generated at Sat Jun 7 23:30:42 2025 by rpki-client