$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/445d51d9-a7a8-39de-9cb2-afdccb8c7240.roa File: 445d51d9-a7a8-39de-9cb2-afdccb8c7240.roa (raw, json) Hash identifier: 9+jYhZuY5N3PiY0uRL+hzPpyJO7IMCHhplYuNZIExf0= Subject key identifier: 21:9E:8C:90:2F:04:47:A8:E1:0A:B3:9A:B5:BE:3F:A1:96:A7:9D:47 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584A0D6A953D5CE922372463A8E0 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/445d51d9-a7a8-39de-9cb2-afdccb8c7240.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 13984 IP address blocks: 2604:2ec0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:95:3d:5c:e9:22:37:24:63:a8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=3d05cf52-d151-4aaa-8cdd-e399b5336646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:9e:62:eb:1a:2d:51:e1:7a:59:92:e3:bb: df:bf:84:50:31:be:e7:ac:1f:43:be:2f:3f:f0:92: 6e:12:ae:ea:25:61:76:23:c9:17:b6:3e:66:45:59: 7d:bb:54:c3:1f:b1:c2:1d:33:7f:c8:09:65:ba:06: 58:d0:4d:4d:90:02:0c:04:3c:d0:75:f6:72:50:99: ae:9f:3f:19:2a:53:b0:2c:9d:94:b1:cc:5b:63:1a: 14:92:77:88:a0:f9:22:e4:9d:ad:92:e0:49:88:d0: e0:cc:4a:66:a7:5a:bd:c1:58:33:fd:ce:05:04:72: 04:cf:f7:51:b5:76:6c:a6:ac:aa:69:bc:3f:9f:40: 31:ad:96:f5:6a:af:12:c7:54:66:ae:72:5b:02:2c: 52:c4:6a:09:f4:89:11:2c:cd:0f:3c:b2:58:80:ed: 9d:bf:16:d5:60:4e:54:3f:21:ac:db:55:32:86:40: 8a:b2:56:18:fd:b3:1e:88:17:50:75:0d:0e:fa:33: 3f:0b:90:b7:f5:52:0e:3f:98:0c:bb:ae:9a:6a:2d: 6a:4c:77:f5:cc:52:75:bd:b5:42:d2:b1:78:3c:01: ca:34:f8:07:af:a0:e8:b9:6a:ba:de:82:89:52:b3: ca:ec:83:7a:8c:e4:df:9f:a8:ce:46:e2:1c:a5:d7: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9E:8C:90:2F:04:47:A8:E1:0A:B3:9A:B5:BE:3F:A1:96:A7:9D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/445d51d9-a7a8-39de-9cb2-afdccb8c7240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv6: 2604:2ec0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ae:45:c4:cf:a2:5b:f4:6e:44:b8:a0:e7:e7:77:f5:b2:9f: 03:eb:14:5f:c3:77:0e:08:20:55:8b:38:53:84:7a:0a:82:de: 30:c1:6f:0b:2d:c0:5e:d4:c9:b8:f0:f6:21:b5:94:cd:b8:4d: 20:92:f7:ad:59:e9:9a:4b:c5:1f:f8:ff:e4:67:c8:18:d8:7d: 5f:53:87:c3:f2:af:16:09:0c:aa:d0:d0:09:ed:de:cc:db:16: 22:ae:c8:19:6c:0c:0c:94:4c:47:dd:93:c5:aa:27:d1:b6:ab: 3a:2b:c8:3c:9c:e8:84:ed:10:4e:f2:73:84:d1:ad:cd:51:dc: 30:2a:b7:ea:cd:cc:6d:15:92:ce:cb:a3:2b:a5:ce:dc:67:62: 24:57:b2:2b:bd:70:89:22:35:dc:68:a1:50:ec:3d:19:ae:35: 87:e0:1d:b0:1f:ee:f0:c3:ad:49:0e:7d:9b:00:24:2e:39:6a: 0a:98:84:90:ab:34:39:14:3b:f7:f3:a8:27:3d:fb:b5:c8:16: 9a:17:b2:08:b9:ac:fd:9f:cf:31:e9:ea:77:66:1c:2f:79:f1: 36:05:52:ba:2e:0b:42:07:c9:3b:d1:bb:dd:81:96:7c:3a:98: 33:86:41:b7:da:9a:cf:cf:db:bd:35:1d:b1:47:89:a1:77:ef: 9a:84:8d:08 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoNapU9XOkiNyRjqOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk M2QwNWNmNTItZDE1MS00YWFhLThjZGQtZTM5OWI1MzM2NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7yeYusaLVHhelmS47vfv4RQMb7nrB9Dvi8/ 8JJuEq7qJWF2I8kXtj5mRVl9u1TDH7HCHTN/yAllugZY0E1NkAIMBDzQdfZyUJmu nz8ZKlOwLJ2UscxbYxoUkneIoPki5J2tkuBJiNDgzEpmp1q9wVgz/c4FBHIEz/dR tXZspqyqabw/n0AxrZb1aq8Sx1RmrnJbAixSxGoJ9IkRLM0PPLJYgO2dvxbVYE5U PyGs21UyhkCKslYY/bMeiBdQdQ0O+jM/C5C39VIOP5gMu66aai1qTHf1zFJ1vbVC 0rF4PAHKNPgHr6DouWq63oKJUrPK7IN6jOTfn6jORuIcpdciFQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCGejJAvBEeo4QqzmrW+P6GWp51HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvNDQ1ZDUxZDktYTdhOC0z OWRlLTljYjItYWZkY2NiOGM3MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgQuwAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATq5FxM+iW/RuRLig5+d39bKfA+sUX8N3DgggVYs4U4R6CoLeMMFv Cy3AXtTJuPD2IbWUzbhNIJL3rVnpmkvFH/j/5GfIGNh9X1OHw/KvFgkMqtDQCe3e zNsWIq7IGWwMDJRMR92Txaon0barOivIPJzohO0QTvJzhNGtzVHcMCq36s3MbRWS zsujK6XO3GdiJFeyK71wiSI13GihUOw9Ga41h+AdsB/u8MOtSQ59mwAkLjlqCpiE kKs0ORQ79/OoJz37tcgWmheyCLms/Z/PMenqd2YcL3nxNgVSui4LQgfJO9G73YGW fDqYM4ZBt9qaz8/bvTUdsUeJoXfvmoSNCA== -----END CERTIFICATE-----Generated at Sun Jun 8 09:10:27 2025 by rpki-client