$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cde4ef19-0ad5-390d-95c9-95ab139449fd.roa File: cde4ef19-0ad5-390d-95c9-95ab139449fd.roa (raw, json) Hash identifier: RXBXiiuU5s9glTeXQ8sMo/PG/5k/YuzJ7fCIBrH95w4= Subject key identifier: 8C:78:3B:37:FC:9C:6F:69:7D:05:79:46:26:5B:99:D6:CF:73:8D:9D Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A74B5DE89C6E6D16EB5C083C0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cde4ef19-0ad5-390d-95c9-95ab139449fd.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 30238 IP address blocks: 2620:101:2012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:de:89:c6:e6:d1:6e:b5:c0:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=e6ce054f-cb42-4323-b2a9-463668ce5236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:04:72:06:d0:bc:4f:37:7b:fd:8e:9d:63: 20:8d:ee:f0:d6:ee:3e:1c:7c:ea:27:1d:d9:c5:1f: 8e:6d:22:94:b1:4b:17:ba:ee:85:17:08:48:c1:1e: 5c:0a:09:7d:0b:ec:f6:05:e9:0b:f6:63:ff:14:94: 4b:b9:86:cb:c2:1a:a0:9a:d0:b9:6e:d4:a2:6c:69: 30:b0:3c:ed:d5:5f:fa:bf:d8:09:45:fb:57:17:ec: 6f:d7:91:67:d5:c0:4a:bd:75:9e:5c:4a:d8:6a:1d: 71:c9:7d:64:c5:d3:34:f2:e9:d2:c7:37:9e:79:5c: 99:81:5b:33:80:53:74:db:43:42:71:f8:02:2c:2a: e7:6a:b9:3d:6e:84:fb:f2:ed:74:d9:11:32:2f:fc: e9:ba:50:98:f3:11:51:cf:17:67:8a:97:17:39:48: a4:25:e7:8f:99:db:67:e1:57:ed:4d:b8:99:4b:04: 63:c5:8a:46:df:d5:19:df:c0:38:c1:69:0b:83:40: ef:a9:41:67:c9:7d:1b:c9:43:7d:89:d1:ca:e6:aa: a6:01:89:45:5a:1e:f6:a2:ed:75:f4:4f:1b:5c:92: 99:67:c8:bd:74:2a:95:6c:22:53:d0:61:ea:55:d7: fa:67:44:c3:8d:ee:fa:fa:ee:d2:f9:92:c3:ba:28: fc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:78:3B:37:FC:9C:6F:69:7D:05:79:46:26:5B:99:D6:CF:73:8D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cde4ef19-0ad5-390d-95c9-95ab139449fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:2012::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5d:cc:3d:e6:77:20:7c:1f:66:88:da:66:b5:e1:76:bb:b5: 62:fe:77:34:d1:15:48:b8:1e:e5:9a:fc:a1:d2:13:27:84:2c: ff:1b:05:9d:89:c1:e4:36:8e:b1:40:c7:82:5e:58:32:2e:aa: c4:c7:db:fb:96:ad:e2:a3:9f:f9:fe:db:10:9a:57:91:7a:5f: 3e:11:df:ff:65:2c:1e:18:62:61:c6:46:c1:a7:6a:e7:3c:27: ef:b3:83:d7:6f:46:0b:5b:db:92:cc:a7:c9:56:54:17:51:b5: 60:c5:38:31:aa:93:34:e2:22:d5:79:48:ff:3d:40:32:71:b6: 4a:02:df:ce:ec:b3:08:c9:e5:60:22:d0:60:4c:7d:67:bd:f2: 53:42:68:58:a0:90:6f:49:24:00:75:2f:4b:d6:76:05:63:40: 5c:3a:d8:6c:8e:86:ed:c4:89:89:8a:4c:1a:5b:7f:50:85:dd: 22:10:ba:90:6a:7e:b0:43:22:c5:ec:75:fa:d4:09:a4:b8:dc: 6f:98:a0:91:4a:71:34:2f:8d:52:67:9a:3a:d8:25:97:c8:1e: a1:f3:06:66:6e:6d:85:8d:f9:67:5a:35:20:b6:ef:d8:7c:16: 81:0e:28:40:b1:a5:76:8f:26:98:c4:62:0d:9f:d3:d8:03:ce: a1:92:fb:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp0td6JxubRbrXAg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk ZTZjZTA1NGYtY2I0Mi00MzIzLWIyYTktNDYzNjY4Y2U1MjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcIEcgbQvE83e/2OnWMgje7w1u4+HHzqJx3Z xR+ObSKUsUsXuu6FFwhIwR5cCgl9C+z2BekL9mP/FJRLuYbLwhqgmtC5btSibGkw sDzt1V/6v9gJRftXF+xv15Fn1cBKvXWeXErYah1xyX1kxdM08unSxzeeeVyZgVsz gFN020NCcfgCLCrnark9boT78u102REyL/zpulCY8xFRzxdnipcXOUikJeePmdtn 4VftTbiZSwRjxYpG39UZ38A4wWkLg0DvqUFnyX0byUN9idHK5qqmAYlFWh72ou11 9E8bXJKZZ8i9dCqVbCJT0GHqVdf6Z0TDje76+u7S+ZLDuij8FwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIx4Ozf8nG9pfQV5RiZbmdbPc42dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvY2RlNGVmMTktMGFkNS0z OTBkLTk1YzktOTVhYjEzOTQ0OWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEddzD3mdyB8H2aI2ma14Xa7tWL+dzTRFUi4HuWa/KHSEyeELP8b BZ2JweQ2jrFAx4JeWDIuqsTH2/uWreKjn/n+2xCaV5F6Xz4R3/9lLB4YYmHGRsGn auc8J++zg9dvRgtb25LMp8lWVBdRtWDFODGqkzTiItV5SP89QDJxtkoC387sswjJ 5WAi0GBMfWe98lNCaFigkG9JJAB1L0vWdgVjQFw62GyOhu3EiYmKTBpbf1CF3SIQ upBqfrBDIsXsdfrUCaS43G+YoJFKcTQvjVJnmjrYJZfIHqHzBmZubYWN+WdaNSC2 79h8FoEOKECxpXaPJpjEYg2f09gDzqGS+2Y= -----END CERTIFICATE-----Generated at Thu Jul 10 09:19:05 2025 by rpki-client