$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/936b2aa5-beb7-33e5-8227-bafa65bda840.roa File: 936b2aa5-beb7-33e5-8227-bafa65bda840.roa (raw, json) Hash identifier: PRKXMMWu9BFff8b6ZItw0V+xrH6L/vNihemv2dlQ1kY= Subject key identifier: 23:66:46:FA:EE:FE:5B:AC:E0:65:F3:DC:42:AD:A5:04:C7:47:E1:37 Certificate issuer: /CN=618a40c8-2175-4e55-926e-6516ce21ec74 Certificate serial: 010D0C9F4328584A6C55EE327D5137069F853280 Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/936b2aa5-beb7-33e5-8227-bafa65bda840.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 2620:1d8::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:ee:32:7d:51:37:06:9f:85:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=6bd75786-5261-4ddc-8373-3419be16e1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a7:ae:f5:03:a6:a3:cc:1e:49:68:88:97:83: 71:44:9a:6e:57:fd:5a:7f:9b:9e:93:32:50:52:96: ce:c6:7d:51:c1:33:e3:4f:5b:ae:e0:5a:de:d1:6f: 96:7e:a4:b0:fb:08:51:bc:25:08:3c:72:74:92:7b: 87:e1:91:9c:24:d2:7f:4a:85:d3:a6:c0:9e:9e:29: 5a:29:3e:21:2e:f3:29:e8:74:f6:30:96:3c:dc:c3: 55:7f:4b:a7:4a:f5:ba:ad:49:e6:fe:b4:95:68:9f: 00:b1:89:7a:4c:42:71:8f:08:f3:2d:36:1c:1f:bb: 48:15:ba:c2:0d:80:4f:15:fa:59:3e:c8:cd:58:ef: 49:05:cd:aa:62:80:29:af:91:70:5d:36:f4:55:d7: 1c:a0:07:8a:0a:e0:1b:5e:a2:c3:88:47:aa:96:54: 10:91:42:3c:b5:7f:73:54:4c:24:80:bf:eb:74:4d: 5b:f7:cc:39:a0:2e:08:dc:b3:4e:10:17:68:04:63: bb:0e:5a:75:eb:cf:73:59:34:ec:80:f6:7a:9f:df: 34:95:04:b0:1f:ca:85:60:0c:cd:3d:af:b1:d9:93: 90:8b:20:b9:95:e5:a0:4d:54:a8:36:c1:fa:64:dd: d8:d0:ef:5f:cf:54:65:0c:98:c5:f9:24:60:9b:18: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:66:46:FA:EE:FE:5B:AC:E0:65:F3:DC:42:AD:A5:04:C7:47:E1:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/936b2aa5-beb7-33e5-8227-bafa65bda840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl X509v3 Authority Key Identifier: keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer sbgp-ipAddrBlock: critical IPv6: 2620:1d8::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:5f:ac:ca:be:dc:fe:39:1d:1f:8c:22:32:ba:52:22:ec:b0: 8f:84:ce:26:69:bf:56:5b:c5:f0:8a:7a:cd:dc:a2:18:11:3a: e6:21:b2:43:82:d8:98:23:7e:fc:b7:b6:d7:d8:d4:2b:68:24: 95:e7:f8:c0:a1:bc:dc:26:b8:b2:8c:b4:e5:08:18:4d:57:85: c4:00:a3:5a:24:23:ce:ce:0a:49:e7:91:05:cc:67:58:f3:59: b4:91:d7:d0:43:0f:74:1e:8e:41:8a:48:65:78:3d:7e:3e:2d: 30:7c:19:49:78:72:ef:81:c0:0d:93:b1:b1:6e:c7:ae:b0:52: 02:83:bf:71:13:23:bb:8d:df:35:8e:a8:a4:b2:c1:96:0b:1e: 33:9c:e3:7a:c2:d8:83:bf:4c:a9:fc:38:02:a7:ab:03:98:40: 18:2d:de:f0:04:ba:fd:60:e0:16:5f:61:f0:83:c6:db:6b:68: 8e:b3:4f:15:0b:7d:57:e7:34:06:73:5e:79:e9:17:2e:d2:bd: 02:de:ff:f4:f9:43:f3:d2:e0:d7:ae:0e:91:08:18:84:85:d2: 81:ba:e7:71:5c:0e:fd:c1:0a:d9:3c:b8:2e:26:e0:27:56:4a: ac:1a:7a:ee:7d:98:ef:36:98:97:85:9a:2f:82:3c:98:ef:92: 02:80:71:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpsVe4yfVE3Bp+FMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE4YTQwYzgtMjE3NS00ZTU1LTkyNmUtNjUxNmNlMjFl Yzc0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk NmJkNzU3ODYtNTI2MS00ZGRjLTgzNzMtMzQxOWJlMTZlMWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Keu9QOmo8weSWiIl4NxRJpuV/1af5uekzJQ UpbOxn1RwTPjT1uu4Fre0W+WfqSw+whRvCUIPHJ0knuH4ZGcJNJ/SoXTpsCenila KT4hLvMp6HT2MJY83MNVf0unSvW6rUnm/rSVaJ8AsYl6TEJxjwjzLTYcH7tIFbrC DYBPFfpZPsjNWO9JBc2qYoApr5FwXTb0VdccoAeKCuAbXqLDiEeqllQQkUI8tX9z VEwkgL/rdE1b98w5oC4I3LNOEBdoBGO7Dlp1689zWTTsgPZ6n980lQSwH8qFYAzN Pa+x2ZOQiyC5leWgTVSoNsH6ZN3Y0O9fz1RlDJjF+SRgmxghjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCNmRvru/lus4GXz3EKtpQTHR+E3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MThh NDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2Y2UyMWVjNzQvOTM2YjJhYTUtYmViNy0z M2U1LTgyMjctYmFmYTY1YmRhODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjE4YTQwYzgtMjE3NS00ZTU1LTky NmUtNjUxNmNlMjFlYzc0LzYxOGE0MGM4LTIxNzUtNGU1NS05MjZlLTY1MTZjZTIx ZWM3NC5jcmwwHwYDVR0jBBgwFoAUYr8kTZ9LKuH4yy1kQwZdByzzTIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MThhNDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2 Y2UyMWVjNzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJiAB2AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAJfrMq+3P45HR+MIjK6UiLssI+EziZpv1ZbxfCKes3cohgROuYh skOC2Jgjfvy3ttfY1CtoJJXn+MChvNwmuLKMtOUIGE1XhcQAo1okI87OCknnkQXM Z1jzWbSR19BDD3QejkGKSGV4PX4+LTB8GUl4cu+BwA2TsbFux66wUgKDv3ETI7uN 3zWOqKSywZYLHjOc43rC2IO/TKn8OAKnqwOYQBgt3vAEuv1g4BZfYfCDxttraI6z TxULfVfnNAZzXnnpFy7SvQLe//T5Q/PS4NeuDpEIGISF0oG653FcDv3BCtk8uC4m 4CdWSqwaeu59mO82mJeFmi+CPJjvkgKAcfk= -----END CERTIFICATE-----Generated at Wed Jul 9 16:08:09 2025 by rpki-client