$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/bc3f5013-698c-36d5-83ea-4f564daf88b5.roa File: bc3f5013-698c-36d5-83ea-4f564daf88b5.roa (raw, json) Hash identifier: ZhPmmJa8zObsC8dCRt1Pu2i3Y7QxWUvYOIzkLSH7fC4= Subject key identifier: 62:8B:2C:42:E6:E3:C2:19:3F:43:E9:70:B3:FB:A4:FA:4B:70:E5:09 Certificate issuer: /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Certificate serial: 010D0C9F43285849D594D7F1E27FFF6F8E3FB700 Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/bc3f5013-698c-36d5-83ea-4f564daf88b5.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 15128 IP address blocks: 2604:fb80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:d7:f1:e2:7f:ff:6f:8e:3f:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=97652118-d5bd-4db7-b86a-0fda78e727ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:bb:98:29:71:46:d0:0f:8f:e1:96:cc:00: b9:31:c1:91:ab:62:f7:83:b8:4c:73:a8:ac:c6:ea: 69:64:85:fe:a6:30:e9:27:66:4f:1d:04:0b:e1:ea: f3:3f:e1:6f:15:df:6d:36:df:15:32:dd:c1:02:81: a6:b8:c7:49:80:da:9d:96:27:ab:0c:cb:2e:1d:24: 93:07:52:01:ce:10:2e:86:88:be:d3:c4:37:24:95: f9:e2:79:12:70:00:78:36:23:6e:53:38:ae:58:80: 4b:c0:23:0b:e1:84:4b:d9:ac:29:f4:cb:1c:88:cd: 8a:67:c7:e7:9a:50:15:54:b0:d8:c5:88:73:41:37: 58:6d:39:57:8d:3e:56:ad:fa:24:e4:35:42:0e:7c: 15:4f:a7:33:14:db:5e:eb:62:ce:84:d0:71:93:c8: d7:44:23:3d:d8:5e:bb:fd:95:72:dd:a3:d9:35:57: c9:06:9c:ef:27:c6:24:f2:de:3c:6f:88:2d:59:90: 8f:89:e3:ec:52:ba:af:23:e1:38:b0:d3:d6:75:82: ca:41:81:02:32:5a:15:a2:70:8e:d5:6e:96:e4:a9: 65:d2:cd:7d:cf:11:08:e0:79:f3:65:93:07:b4:2d: 11:6e:0b:fa:bc:4c:38:bf:00:bf:9c:0c:ab:e1:08: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8B:2C:42:E6:E3:C2:19:3F:43:E9:70:B3:FB:A4:FA:4B:70:E5:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/bc3f5013-698c-36d5-83ea-4f564daf88b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl X509v3 Authority Key Identifier: keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer sbgp-ipAddrBlock: critical IPv6: 2604:fb80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:87:32:59:89:00:92:cd:d8:6f:f1:bf:6a:4c:2a:69:c9:bc: eb:44:9d:98:c5:0a:3d:1c:dc:f3:cd:75:dc:db:fa:43:19:09: d5:b4:9a:79:b0:93:fe:d1:5e:22:9a:77:0c:86:97:28:e8:93: 56:f9:c9:3e:64:88:b6:83:34:27:a2:ea:22:da:63:c9:ae:e0: 05:d4:99:96:f4:15:44:20:e3:4e:09:70:e1:ec:73:96:f0:63: 55:f1:48:6d:5c:74:05:f9:c0:1f:a9:02:8f:d9:c0:75:ed:3d: 74:ac:aa:e4:77:e3:3c:77:1b:1b:9c:9f:cb:b8:17:5b:d8:1a: 2e:d4:8e:7e:d9:e6:69:dd:f5:d3:fd:46:34:ee:2a:45:0f:80: 7e:e6:4b:89:4c:b5:86:de:38:39:14:63:3e:fa:a3:21:27:02: f4:ba:cc:0d:43:b6:e6:c9:5b:39:60:b3:7e:17:24:b7:d8:32: 04:d6:e9:e1:3c:aa:03:af:eb:89:56:d0:06:79:01:22:e5:db: 9d:4f:db:51:62:4b:c0:bd:9f:ac:0a:ed:b7:e2:e8:3f:36:1b: 58:c3:7d:06:b4:85:8d:67:fc:8c:72:80:e8:68:3d:4c:77:b2: 8c:be:5f:c3:1e:7a:28:5f:cf:84:6e:5d:aa:3d:ae:98:d5:17: 75:6d:5e:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnVlNfx4n//b44/twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU2NTNmMzctNGIyMi00MGEzLWE4YmQtZTcwZjIwOGMw ZWZiMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk OTc2NTIxMTgtZDViZC00ZGI3LWI4NmEtMGZkYTc4ZTcyN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApey7mClxRtAPj+GWzAC5McGRq2L3g7hMc6is xuppZIX+pjDpJ2ZPHQQL4erzP+FvFd9tNt8VMt3BAoGmuMdJgNqdlierDMsuHSST B1IBzhAuhoi+08Q3JJX54nkScAB4NiNuUziuWIBLwCML4YRL2awp9MsciM2KZ8fn mlAVVLDYxYhzQTdYbTlXjT5Wrfok5DVCDnwVT6czFNte62LOhNBxk8jXRCM92F67 /ZVy3aPZNVfJBpzvJ8Yk8t48b4gtWZCPiePsUrqvI+E4sNPWdYLKQYECMloVonCO 1W6W5Kll0s19zxEI4HnzZZMHtC0Rbgv6vEw4vwC/nAyr4QhNBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGKLLELm48IZP0PpcLP7pPpLcOUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1 M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4YzBlZmIvYmMzZjUwMTMtNjk4Yy0z NmQ1LTgzZWEtNGY1NjRkYWY4OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGU2NTNmMzctNGIyMi00MGEzLWE4 YmQtZTcwZjIwOGMwZWZiLzRlNjUzZjM3LTRiMjItNDBhMy1hOGJkLWU3MGYyMDhj MGVmYi5jcmwwHwYDVR0jBBgwFoAUIiOW/w0X1WDrC+ORelaadJKAwRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBm MjA4YzBlZmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT7gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCwhzJZiQCSzdhv8b9qTCppybzrRJ2YxQo9HNzzzXXc2/pDGQnVtJp5 sJP+0V4imncMhpco6JNW+ck+ZIi2gzQnouoi2mPJruAF1JmW9BVEIONOCXDh7HOW 8GNV8UhtXHQF+cAfqQKP2cB17T10rKrkd+M8dxsbnJ/LuBdb2Bou1I5+2eZp3fXT /UY07ipFD4B+5kuJTLWG3jg5FGM++qMhJwL0uswNQ7bmyVs5YLN+FyS32DIE1unh PKoDr+uJVtAGeQEi5dudT9tRYkvAvZ+sCu234ug/NhtYw30GtIWNZ/yMcoDoaD1M d7KMvl/DHnooX8+Ebl2qPa6Y1Rd1bV45 -----END CERTIFICATE-----Generated at Sat Jun 7 22:25:02 2025 by rpki-client