$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/8adc4655-3460-3e0a-8189-0755d0475618.roa File: 8adc4655-3460-3e0a-8189-0755d0475618.roa (raw, json) Hash identifier: Ca1Ut1VEQ9J5Q0rhSr5cF0TiLelvBbT1aMfBTmKd7ek= Subject key identifier: 91:FB:3A:AE:7E:E2:E7:48:21:75:3D:20:E6:2C:66:EA:0B:91:4F:8C Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584A1035366BA59A6631C6275418 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/8adc4655-3460-3e0a-8189-0755d0475618.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 12213 IP address blocks: 2600:cc00::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:36:6b:a5:9a:66:31:c6:27:54:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=388e4609-658e-4718-9572-2f5110db3c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:45:74:44:ac:a2:4d:58:c7:51:35:d2:fd: f4:1d:30:b7:fd:1d:19:ba:55:dd:f7:03:c0:22:86: 08:36:76:a1:7b:a5:4b:ce:fc:d7:91:38:fe:10:06: e3:9e:fc:74:15:dc:ba:dd:60:7e:ca:8b:03:c1:d1: bc:6b:5a:cb:b3:6c:68:7a:45:a0:b3:bb:02:7e:b7: 88:6f:19:b1:2b:65:f1:7e:9d:d4:ab:34:5d:85:da: c0:92:ae:95:08:54:c2:d7:02:ec:ee:d1:12:a1:0b: b5:df:22:aa:1e:23:68:50:eb:32:77:f2:1d:2e:32: aa:db:cc:11:7e:f5:f2:d5:ce:06:72:09:92:20:fd: b3:00:f3:8e:a6:3f:e5:07:5a:55:7d:02:df:87:19: 33:32:a5:4a:f1:cd:9e:9e:62:5f:82:7c:3d:3f:6a: 65:69:e3:c8:fa:94:22:91:4b:95:4f:0c:a3:05:24: b7:69:28:c6:aa:65:95:f0:73:90:08:ba:17:c6:20: 09:00:70:f8:4d:73:fe:90:1b:fa:2e:05:67:6a:87: 01:5c:7e:4f:63:d1:87:7f:23:1d:84:67:a8:ae:ac: b1:c7:e4:9a:68:ba:33:e9:26:51:f2:6c:7f:8e:90: 73:3c:69:1f:07:33:ed:3d:9d:65:d0:df:56:07:93: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FB:3A:AE:7E:E2:E7:48:21:75:3D:20:E6:2C:66:EA:0B:91:4F:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/8adc4655-3460-3e0a-8189-0755d0475618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv6: 2600:cc00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b4:38:88:5c:16:c6:14:c2:93:fb:04:f3:1d:35:51:2f:6f: 1a:9f:84:3d:51:a3:b1:65:ea:3b:39:c5:22:3f:43:53:62:1e: e1:3c:76:dd:09:b2:09:db:12:3e:c3:32:25:e5:4b:55:b4:3a: df:fb:ff:ce:bc:a3:e6:81:dd:08:f2:8e:98:67:75:a1:c4:fb: 24:f5:87:a4:84:c5:3c:69:d8:67:f9:fa:0a:ca:73:c5:9c:01: ed:aa:6d:32:67:a5:22:70:30:d2:22:a1:d7:cc:bb:2a:b6:d0: f9:2b:01:a0:89:ca:e4:51:7b:a4:75:66:d9:bb:b2:a7:af:44: de:09:97:fa:36:2a:32:f6:0a:fe:8a:e3:67:24:6f:99:ea:9f: 84:2b:c6:fc:ee:90:18:ab:3c:fa:01:10:6a:30:a1:de:21:ba: 70:31:e0:2f:cb:0a:b1:b7:e5:16:ce:76:ca:bf:e6:32:e1:5e: 71:d8:f9:e3:bc:b6:60:ea:56:b6:2f:46:ac:88:3b:3a:f7:05: 4d:99:3e:f1:61:4d:0a:06:8d:60:e3:81:0c:3d:f3:02:a8:a6: a5:68:36:98:58:cc:f9:8f:21:64:c5:02:27:8b:c2:8e:f1:a5: 85:0b:94:22:76:7d:81:c1:c4:01:67:6f:40:07:e2:b5:59:23: 60:80:29:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoQNTZrpZpmMcYnVBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk Mzg4ZTQ2MDktNjU4ZS00NzE4LTk1NzItMmY1MTEwZGIzYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+1FdESsok1Yx1E10v30HTC3/R0ZulXd9wPA IoYINnahe6VLzvzXkTj+EAbjnvx0Fdy63WB+yosDwdG8a1rLs2xoekWgs7sCfreI bxmxK2Xxfp3UqzRdhdrAkq6VCFTC1wLs7tESoQu13yKqHiNoUOsyd/IdLjKq28wR fvXy1c4GcgmSIP2zAPOOpj/lB1pVfQLfhxkzMqVK8c2enmJfgnw9P2plaePI+pQi kUuVTwyjBSS3aSjGqmWV8HOQCLoXxiAJAHD4TXP+kBv6LgVnaocBXH5PY9GHfyMd hGeorqyxx+SaaLoz6SZR8mx/jpBzPGkfBzPtPZ1l0N9WB5OopQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJH7Oq5+4udIIXU9IOYsZuoLkU+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvOGFkYzQ2NTUtMzQ2MC0z ZTBhLTgxODktMDc1NWQwNDc1NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgDMADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCtDiIXBbGFMKT+wTzHTVRL28an4Q9UaOxZeo7OcUiP0NTYh7hPHbd CbIJ2xI+wzIl5UtVtDrf+//OvKPmgd0I8o6YZ3WhxPsk9YekhMU8adhn+foKynPF nAHtqm0yZ6UicDDSIqHXzLsqttD5KwGgicrkUXukdWbZu7Knr0TeCZf6Nioy9gr+ iuNnJG+Z6p+EK8b87pAYqzz6ARBqMKHeIbpwMeAvywqxt+UWznbKv+Yy4V5x2Pnj vLZg6la2L0asiDs69wVNmT7xYU0KBo1g44EMPfMCqKalaDaYWMz5jyFkxQIni8KO 8aWFC5Qidn2BwcQBZ29AB+K1WSNggCkL -----END CERTIFICATE-----Generated at Sun Jun 8 13:51:17 2025 by rpki-client