$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/2123b838-49c4-3858-b38c-bc8e324cca24.roa File: 2123b838-49c4-3858-b38c-bc8e324cca24.roa (raw, json) Hash identifier: sANupRSSf2JX2dRixob/iFoiYGCoT5Sbtu9QfCipD6k= Subject key identifier: 72:40:AE:70:4E:BB:51:41:4A:94:AC:33:66:FD:D1:21:64:0C:12:02 Certificate issuer: /CN=15b30dd1-216d-4b82-87ee-44becb2d20c7 Certificate serial: 010D0C9F4328584A7085F521E580307656443E24 Authority key identifier: 4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/2123b838-49c4-3858-b38c-bc8e324cca24.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 32852 IP address blocks: 2607:5540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:f5:21:e5:80:30:76:56:44:3e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15b30dd1-216d-4b82-87ee-44becb2d20c7 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=e14dbd8d-06a0-46a6-821b-e2102392aade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:52:e7:e9:18:1e:cf:a2:af:50:d0:5b:20: e5:2a:8f:8b:1f:50:ee:03:67:f1:de:9c:d0:02:df: e3:28:e3:2c:2c:31:84:99:44:0f:8e:1f:2a:af:00: 57:bf:62:50:ee:0e:02:e2:99:c2:15:3c:82:10:f6: b7:6a:71:4a:be:64:ed:cf:95:4f:93:32:a5:a8:7b: 84:80:ec:c7:61:d6:82:14:c2:c7:22:82:32:bd:3f: b4:17:8c:6f:70:15:1a:f8:5c:5b:64:bd:25:86:f5: cb:81:50:2c:20:37:4f:69:b4:ad:9c:e5:bb:d8:f4: 56:f5:13:f1:ca:55:f0:f5:9d:0f:36:30:92:40:7d: 68:fb:83:26:a7:f1:69:da:48:bd:4e:3a:9a:19:b9: df:78:f9:06:00:0c:85:12:e5:6e:e7:1a:34:22:e7: 27:7a:17:71:54:be:7b:17:67:ad:83:94:d7:76:cf: 93:d3:d8:65:a9:77:94:ac:a9:ab:65:ff:d0:2b:a7: 7c:a4:c4:c2:8c:c8:53:fc:65:3e:c8:75:9b:42:35: 29:3a:30:be:e8:21:3c:42:17:9a:49:4c:ad:d7:1f: b0:78:33:94:54:20:9f:eb:9a:11:c9:e8:99:f8:01: 64:cb:bb:be:27:3a:6a:42:d7:43:74:b7:dd:f2:70: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:40:AE:70:4E:BB:51:41:4A:94:AC:33:66:FD:D1:21:64:0C:12:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/2123b838-49c4-3858-b38c-bc8e324cca24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl X509v3 Authority Key Identifier: keyid:4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer sbgp-ipAddrBlock: critical IPv6: 2607:5540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:dc:9c:6b:a8:d8:8d:eb:05:91:be:f0:86:0d:06:99:fd:6c: 74:b0:78:e4:78:aa:27:2b:54:e9:cd:a8:34:d3:b6:34:10:27: 37:de:a5:81:f4:b0:2d:4d:c5:a1:93:ce:e0:4e:52:62:32:da: aa:f9:62:c8:5d:b9:91:13:db:5d:90:08:bb:8f:a6:e5:ad:c1: dd:28:f7:6f:a1:3b:c6:ce:84:10:48:b0:41:b0:16:a3:2c:b0: 7e:c8:b7:95:a2:1d:d3:d0:15:e3:15:a0:f1:9a:de:95:3c:c2: d5:3d:74:f7:c7:e9:61:e5:8d:25:22:c9:10:a6:57:4d:22:26: b9:79:a9:35:d9:42:d4:a9:f4:26:f2:dc:4f:f8:de:8d:1d:03: 81:ff:56:53:ab:5d:ea:6a:01:2f:81:a4:30:55:5f:0f:37:4e: 49:9d:e9:7c:2d:fa:8a:26:8c:b2:71:61:df:4b:6d:8d:5c:f5: 99:2d:ef:da:30:3d:d8:50:65:c3:66:99:50:dc:1d:6e:e5:3b: 93:da:97:fc:35:98:72:a6:da:8c:08:12:8d:91:4e:92:1d:09: 97:7a:33:8f:d8:f8:9c:c1:83:02:42:55:d8:08:19:ab:d8:4b: 66:5a:f8:f3:2c:ea:e0:87:5a:0a:33:4c:9a:45:d2:7c:0e:66: a6:89:b3:3a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpwhfUh5YAwdlZEPiQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTViMzBkZDEtMjE2ZC00YjgyLTg3ZWUtNDRiZWNiMmQy MGM3MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk ZTE0ZGJkOGQtMDZhMC00NmE2LTgyMWItZTIxMDIzOTJhYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1BS5+kYHs+ir1DQWyDlKo+LH1DuA2fx3pzQ At/jKOMsLDGEmUQPjh8qrwBXv2JQ7g4C4pnCFTyCEPa3anFKvmTtz5VPkzKlqHuE gOzHYdaCFMLHIoIyvT+0F4xvcBUa+FxbZL0lhvXLgVAsIDdPabStnOW72PRW9RPx ylXw9Z0PNjCSQH1o+4Mmp/Fp2ki9TjqaGbnfePkGAAyFEuVu5xo0IucnehdxVL57 F2etg5TXds+T09hlqXeUrKmrZf/QK6d8pMTCjMhT/GU+yHWbQjUpOjC+6CE8Qhea SUyt1x+weDOUVCCf65oRyeiZ+AFky7u+JzpqQtdDdLfd8nAcAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHJArnBOu1FBSpSsM2b90SFkDBICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWIz MGRkMS0yMTZkLTRiODItODdlZS00NGJlY2IyZDIwYzcvMjEyM2I4MzgtNDljNC0z ODU4LWIzOGMtYmM4ZTMyNGNjYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTViMzBkZDEtMjE2ZC00YjgyLTg3 ZWUtNDRiZWNiMmQyMGM3LzE1YjMwZGQxLTIxNmQtNGI4Mi04N2VlLTQ0YmVjYjJk MjBjNy5jcmwwHwYDVR0jBBgwFoAUTjhQMD+vrYkvte6IsNsBPCDDV/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWIzMGRkMS0yMTZkLTRiODItODdlZS00NGJl Y2IyZDIwYzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdVQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAr3JxrqNiN6wWRvvCGDQaZ/Wx0sHjkeKonK1Tpzag007Y0ECc33qWB 9LAtTcWhk87gTlJiMtqq+WLIXbmRE9tdkAi7j6blrcHdKPdvoTvGzoQQSLBBsBaj LLB+yLeVoh3T0BXjFaDxmt6VPMLVPXT3x+lh5Y0lIskQpldNIia5eak12ULUqfQm 8txP+N6NHQOB/1ZTq13qagEvgaQwVV8PN05Jnel8LfqKJoyycWHfS22NXPWZLe/a MD3YUGXDZplQ3B1u5TuT2pf8NZhyptqMCBKNkU6SHQmXejOP2PicwYMCQlXYCBmr 2EtmWvjzLOrgh1oKM0yaRdJ8DmamibM6 -----END CERTIFICATE-----Generated at Wed Jul 9 20:40:28 2025 by rpki-client