$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ae0ccfe5-813a-30c6-ad89-44f55329642c.roa File: ae0ccfe5-813a-30c6-ad89-44f55329642c.roa (raw, json) Hash identifier: LYZSTHNImVtDSALsOTmwual0rF6Iz/9SS4eMDOxDa84= Subject key identifier: FF:56:EB:44:1B:50:6B:20:59:36:3F:DF:3C:B4:7B:2B:43:44:A2:DF Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39 Certificate serial: 010D0C9F43285849F87A95286B46C745A7186C00 Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ae0ccfe5-813a-30c6-ad89-44f55329642c.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 25820 IP address blocks: 2607:8700::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:95:28:6b:46:c7:45:a7:18:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=3a9263fa-48f1-42a3-8098-8c4048f767c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:28:12:72:53:ea:90:71:b9:d8:48:16:3d:18: 50:cc:0f:28:f4:a8:a7:6c:ac:3f:29:ff:b9:57:61: bb:3e:6c:e0:da:74:63:7b:15:74:29:39:ac:3b:30: e0:48:52:ef:12:42:56:0a:01:90:d0:a8:a4:4c:2e: da:92:e6:0f:c1:ea:57:77:e4:6b:6d:7b:28:9c:3e: 34:63:2a:98:de:fa:47:0e:22:49:99:4e:ca:86:de: c1:44:0d:65:7f:a7:99:24:b2:a5:6a:71:0a:cf:5b: 71:42:1e:01:8d:21:bc:c5:eb:49:f5:e5:32:f7:e3: 4c:f9:76:4c:d1:76:5c:00:cf:74:c6:9b:cc:fa:67: 9e:be:3e:12:7a:bb:2f:7e:d3:e9:3b:58:50:37:53: 36:a8:49:62:5a:6b:eb:ab:cc:5d:52:a4:93:04:88: 5d:d7:bd:76:f5:26:46:7b:01:5d:79:73:01:4b:91: 41:c9:75:c1:a0:2e:2c:05:25:59:e2:e5:73:00:3f: 45:cd:e5:61:ae:d0:fc:d2:58:41:58:28:f1:a4:88: bf:66:fd:5c:f1:28:e5:b0:74:3b:8a:40:1f:46:9b: 86:10:e5:1d:48:03:ad:73:0f:b5:81:b7:5f:70:f1: 19:a0:06:3c:66:84:41:ad:12:62:70:7c:63:b1:df: 53:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:56:EB:44:1B:50:6B:20:59:36:3F:DF:3C:B4:7B:2B:43:44:A2:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ae0ccfe5-813a-30c6-ad89-44f55329642c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl X509v3 Authority Key Identifier: keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer sbgp-ipAddrBlock: critical IPv6: 2607:8700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:74:4c:e2:dd:34:4d:9c:9c:23:44:8d:5d:27:71:36:f9:b6: 47:8d:d6:5f:06:cf:9a:2b:f2:96:c8:da:30:e7:d4:c5:b5:d7: 74:09:13:d4:42:c7:37:22:24:ed:e1:fe:4f:4b:7a:58:9b:08: ce:f3:5b:38:64:40:c1:3f:48:ff:6d:52:c1:74:b1:fc:4a:e4: 3b:5d:20:17:dc:5e:6a:d7:5a:57:23:1b:3b:82:ab:d7:06:66: fa:ee:b3:4c:36:ca:14:a2:ad:40:b5:0c:45:da:e2:09:ab:07: 94:21:77:a4:d9:22:48:0c:f1:6d:5c:4a:3c:5d:0d:88:ca:64: 3d:d5:d7:bb:9c:db:55:a6:23:2b:9d:08:d5:35:59:15:4c:c3: 42:41:c1:ca:da:2c:ac:b1:fe:de:9b:4c:d8:93:68:97:5d:10: 41:79:a5:ed:ca:f7:33:ec:6c:88:3e:d3:cc:ae:bb:07:47:74: 6b:45:fd:e1:aa:b4:3a:2c:1e:94:8c:67:67:ad:66:77:e3:41: 54:a8:0d:9b:af:3f:4d:37:0e:1e:a2:0c:66:6f:e8:e6:61:2a: 2d:4e:8b:b4:0c:85:a2:f4:cf:85:6a:0b:1e:d6:b0:ba:ac:76: 5d:a4:eb:13:43:09:97:e0:33:50:31:3d:8a:69:7a:ba:9d:17: 6e:e0:ad:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn4epUoa0bHRacYbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1 ZTM5MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk M2E5MjYzZmEtNDhmMS00MmEzLTgwOTgtOGM0MDQ4Zjc2N2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCgSclPqkHG52EgWPRhQzA8o9KinbKw/Kf+5 V2G7Pmzg2nRjexV0KTmsOzDgSFLvEkJWCgGQ0KikTC7akuYPwepXd+RrbXsonD40 YyqY3vpHDiJJmU7Kht7BRA1lf6eZJLKlanEKz1txQh4BjSG8xetJ9eUy9+NM+XZM 0XZcAM90xpvM+meevj4SersvftPpO1hQN1M2qEliWmvrq8xdUqSTBIhd17129SZG ewFdeXMBS5FByXXBoC4sBSVZ4uVzAD9FzeVhrtD80lhBWCjxpIi/Zv1c8SjlsHQ7 ikAfRpuGEOUdSAOtcw+1gbdfcPEZoAY8ZoRBrRJicHxjsd9TWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP9W60QbUGsgWTY/3zy0eytDRKLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvYWUwY2NmZTUtODEzYS0z MGM2LWFkODktNDRmNTUzMjk2NDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1 NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky OTE2NTVlMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAedEzi3TRNnJwjRI1dJ3E2+bZHjdZfBs+aK/KWyNow59TFtdd0CRPU Qsc3IiTt4f5PS3pYmwjO81s4ZEDBP0j/bVLBdLH8SuQ7XSAX3F5q11pXIxs7gqvX Bmb67rNMNsoUoq1AtQxF2uIJqweUIXek2SJIDPFtXEo8XQ2IymQ91de7nNtVpiMr nQjVNVkVTMNCQcHK2iyssf7em0zYk2iXXRBBeaXtyvcz7GyIPtPMrrsHR3RrRf3h qrQ6LB6UjGdnrWZ340FUqA2brz9NNw4eogxmb+jmYSotTou0DIWi9M+Fagse1rC6 rHZdpOsTQwmX4DNQMT2KaXq6nRdu4K2X -----END CERTIFICATE-----Generated at Sun Jun 8 12:39:09 2025 by rpki-client