$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ddb106cb-5166-390c-ae06-ee99129ea34e.roa File: ddb106cb-5166-390c-ae06-ee99129ea34e.roa (raw, json) Hash identifier: 5WscXE+McfRfOtiQyVbQJB+Z3yE1Vgb3MLQtV0/cHTg= Subject key identifier: 42:C3:F5:9C:B4:1A:C9:B1:31:AD:2F:48:AB:F1:66:D9:4A:29:50:37 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F4328584A0C0556373D2FFBF91C300FC0 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ddb106cb-5166-390c-ae06-ee99129ea34e.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 394354 IP address blocks: 2620:10a:801f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:56:37:3d:2f:fb:f9:1c:30:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=b4245ced-8f36-417d-8869-260646d9781d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cd:d9:c9:c5:f9:df:e5:2e:99:7e:3a:ba:c0: e7:7b:81:e6:77:c7:99:a5:e4:d1:06:92:53:c3:09: 08:8b:77:e4:d4:0f:0e:8a:02:2e:d0:84:23:75:6b: 4f:42:55:6e:5f:23:e7:b3:27:72:86:7d:2e:2f:6e: 03:08:5c:c2:e9:45:fa:2d:e6:be:b4:7c:60:8d:0a: 3e:10:54:63:4d:a6:c1:16:bb:f7:48:94:03:09:14: 9f:98:cb:ea:db:ec:cd:cd:b1:b4:06:7f:79:6c:e1: 2f:0b:3b:92:b1:09:3e:b4:d2:1b:27:a8:ad:26:d9: c0:46:c3:d1:d8:2d:1e:4b:95:f5:96:10:e5:9d:39: e7:1c:3e:3f:ee:b0:aa:eb:09:2b:be:09:77:ba:d8: 24:3b:06:e4:11:c6:69:3c:e8:9b:2f:58:d0:b2:6b: 51:a2:12:16:51:93:c0:2c:a9:ab:9d:81:7a:1c:8d: 3e:9d:31:5f:be:eb:d6:bd:41:07:f8:14:e0:b0:cd: 81:36:bd:89:7a:db:c9:6f:8e:5d:eb:47:e5:1c:c2: 28:d1:4c:7f:79:b2:a5:11:b7:cd:4b:5e:e7:97:dc: d0:67:ab:31:6c:36:a8:85:f2:25:96:03:c5:5a:82: 65:e2:11:0d:ed:ae:63:48:61:ae:10:9f:92:b9:e0: 7a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C3:F5:9C:B4:1A:C9:B1:31:AD:2F:48:AB:F1:66:D9:4A:29:50:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ddb106cb-5166-390c-ae06-ee99129ea34e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:10a:801f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:38:fe:2b:a6:04:59:27:04:11:f1:36:67:9f:2e:79:77:85: c2:51:de:72:fb:7c:98:77:8c:24:04:73:77:8e:10:00:83:4a: bb:8a:25:f0:66:1f:38:da:44:1c:16:55:2e:8c:92:42:1c:e7: 18:32:be:c5:d3:ac:72:1b:45:68:8b:a2:9f:c7:80:c1:9a:73: a1:f6:e1:f4:58:6c:c6:01:0f:0c:1c:5c:4d:7c:c2:a3:40:de: c4:72:6a:53:a1:14:d2:50:ae:a6:46:44:ce:b0:2d:37:6e:b3: 92:f8:47:8c:38:cf:5a:76:6e:cd:0e:e6:07:cb:6d:e6:1f:d1: 87:3f:4b:77:04:94:62:37:d5:dd:ad:86:47:7e:42:d5:58:be: 2b:ca:a6:a7:ce:d7:b6:41:fc:2a:1b:65:29:62:53:3d:49:50: 21:1d:4b:a3:6b:25:7f:2a:22:35:45:46:52:e6:50:f2:27:be: 31:e8:1a:53:bf:61:6e:b8:a1:79:0d:84:ab:82:7a:af:4c:0c: 46:5f:f2:ef:c3:fe:eb:be:3c:b9:e6:43:82:31:3f:32:6d:3f: d8:7c:f8:94:61:06:f2:bd:30:b2:a4:21:0d:18:a5:1c:8c:25: 57:cd:2b:b5:45:a0:ba:b5:dc:dd:d4:a6:d3:5f:1a:d4:c7:04: 3a:f0:09:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoMBVY3PS/7+RwwD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YjQyNDVjZWQtOGYzNi00MTdkLTg4NjktMjYwNjQ2ZDk3ODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc3ZycX53+UumX46usDne4Hmd8eZpeTRBpJT wwkIi3fk1A8OigIu0IQjdWtPQlVuXyPnsydyhn0uL24DCFzC6UX6Lea+tHxgjQo+ EFRjTabBFrv3SJQDCRSfmMvq2+zNzbG0Bn95bOEvCzuSsQk+tNIbJ6itJtnARsPR 2C0eS5X1lhDlnTnnHD4/7rCq6wkrvgl3utgkOwbkEcZpPOibL1jQsmtRohIWUZPA LKmrnYF6HI0+nTFfvuvWvUEH+BTgsM2BNr2JetvJb45d60flHMIo0Ux/ebKlEbfN S17nl9zQZ6sxbDaohfIllgPFWoJl4hEN7a5jSGGuEJ+SueB6OwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFELD9Zy0GsmxMa0vSKvxZtlKKVA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvZGRiMTA2Y2ItNTE2Ni0z OTBjLWFlMDYtZWU5OTEyOWVhMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKU4/iumBFknBBHxNmefLnl3hcJR3nL7fJh3jCQEc3eOEACDSruK JfBmHzjaRBwWVS6MkkIc5xgyvsXTrHIbRWiLop/HgMGac6H24fRYbMYBDwwcXE18 wqNA3sRyalOhFNJQrqZGRM6wLTdus5L4R4w4z1p2bs0O5gfLbeYf0Yc/S3cElGI3 1d2thkd+QtVYvivKpqfO17ZB/CobZSliUz1JUCEdS6NrJX8qIjVFRlLmUPInvjHo GlO/YW64oXkNhKuCeq9MDEZf8u/D/uu+PLnmQ4IxPzJtP9h8+JRhBvK9MLKkIQ0Y pRyMJVfNK7VFoLq13N3UptNfGtTHBDrwCXo= -----END CERTIFICATE-----Generated at Sun Jun 8 18:25:26 2025 by rpki-client