$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/155f4b9b-4ca3-3b31-bf72-238f854d820f.roa File: 155f4b9b-4ca3-3b31-bf72-238f854d820f.roa (raw, json) Hash identifier: rlTyTsSN/C08aMwOTMJs3YYCPCsgsw+LjpSu67CTWJs= Subject key identifier: C7:D6:C1:3A:07:B7:47:9F:45:B8:40:09:31:EB:91:90:1B:54:5E:F0 Certificate issuer: /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Certificate serial: 010D0C9F4328584A103543AA8579911203D1F700 Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/155f4b9b-4ca3-3b31-bf72-238f854d820f.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 64236 IP address blocks: 2604:abc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:43:aa:85:79:91:12:03:d1:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=e9067a26-29f8-4d1f-b646-e5f2c03be019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6b:40:02:27:3e:b7:eb:92:30:f1:96:06:79: ad:f9:9a:da:9d:40:ff:d7:c7:66:5d:6c:4d:13:ec: 60:58:85:a1:0c:02:16:e6:a9:db:8d:0b:22:c6:e5: c2:d0:d2:cd:1f:95:ef:10:07:69:d5:e5:55:7b:b4: 87:a2:a2:87:4d:8d:8a:25:c3:0d:af:fe:09:ae:8a: 33:26:c3:c1:35:c8:0b:89:c4:f8:c3:08:81:db:d4: 67:be:f2:65:c2:db:e9:17:f7:a3:53:fb:f5:ec:98: d2:02:00:ef:32:aa:dc:0b:05:65:a8:30:4c:62:f0: 30:d8:40:78:2a:09:f3:5d:f1:53:97:9d:e8:d9:5d: 12:a1:b3:bd:d7:de:84:a9:c7:f3:2e:fc:ca:3a:51: 0c:48:eb:a9:a8:32:1b:d2:1d:ef:64:1d:20:43:eb: 19:6c:55:18:c6:e5:5d:ce:a9:13:e5:2e:8a:71:4a: 3d:06:68:fd:52:77:52:6d:b1:1b:1b:f7:96:bf:5d: f3:f4:3f:c6:a9:0f:0f:92:94:1f:b1:e5:39:1b:c3: 3c:55:8b:58:68:6d:0a:ec:2f:89:73:2f:00:8d:4d: 9e:11:f8:b9:5b:30:f7:04:d2:0b:dc:4e:0d:d7:88: 82:d4:8a:b1:27:2c:da:73:6a:b7:61:aa:7d:91:0e: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D6:C1:3A:07:B7:47:9F:45:B8:40:09:31:EB:91:90:1B:54:5E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/155f4b9b-4ca3-3b31-bf72-238f854d820f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl X509v3 Authority Key Identifier: keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer sbgp-ipAddrBlock: critical IPv6: 2604:abc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:bd:ca:27:c2:df:30:12:2b:0c:bd:22:56:d9:80:c9:03:e8: 55:64:d9:5a:31:09:06:2c:cd:fa:62:69:6a:8d:1a:ed:d1:7e: 88:c8:66:0f:9d:8b:23:84:d0:3a:25:00:a0:ce:25:d7:53:3f: 0d:87:31:8b:49:81:89:4f:b7:a5:24:3a:fd:19:a3:1f:5b:ac: b3:0c:35:c8:32:c7:ce:a1:18:ed:49:ee:48:92:ca:c7:4f:7f: 1e:02:6e:f4:d8:8c:db:88:b1:56:95:3b:1b:f6:17:7a:5b:d7: 6b:74:9e:f3:51:25:40:88:09:ca:0b:a7:f7:a2:79:66:db:cf: 8c:27:fd:c5:b1:03:56:b7:9e:2d:d8:a6:d3:08:1f:6b:6f:d7: 25:e6:d0:f9:d7:2f:9e:58:b3:05:75:45:b8:b0:ab:fe:66:63: 25:87:ef:7e:2d:82:90:63:3f:49:b7:85:5f:a3:2c:1f:51:30: ad:a9:a9:a4:40:90:21:db:ca:24:7e:f4:12:7f:6d:fc:fe:d3: cf:35:6b:14:bd:49:3d:1d:a5:e0:65:49:f6:90:98:9a:2a:46: 18:7c:98:69:49:a9:8b:ac:56:e5:9b:d3:b5:0e:1b:72:37:7b: 1d:bb:97:5e:21:79:80:76:1a:ad:a7:38:94:39:ef:e2:ad:50: 0b:af:9e:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoQNUOqhXmREgPR9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUw MmEyMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ZTkwNjdhMjYtMjlmOC00ZDFmLWI2NDYtZTVmMmMwM2JlMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2tAAic+t+uSMPGWBnmt+ZranUD/18dmXWxN E+xgWIWhDAIW5qnbjQsixuXC0NLNH5XvEAdp1eVVe7SHoqKHTY2KJcMNr/4Jrooz JsPBNcgLicT4wwiB29RnvvJlwtvpF/ejU/v17JjSAgDvMqrcCwVlqDBMYvAw2EB4 KgnzXfFTl53o2V0SobO9196EqcfzLvzKOlEMSOupqDIb0h3vZB0gQ+sZbFUYxuVd zqkT5S6KcUo9Bmj9UndSbbEbG/eWv13z9D/GqQ8PkpQfseU5G8M8VYtYaG0K7C+J cy8AjU2eEfi5WzD3BNIL3E4N14iC1IqxJyzac2q3Yap9kQ77vQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMfWwToHt0efRbhACTHrkZAbVF7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4 NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAyYTIvMTU1ZjRiOWItNGNhMy0z YjMxLWJmNzItMjM4Zjg1NGQ4MjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5NGYtMWQzZi00YTQ1LThh NzQtYmRlNDFjMjUwMmEyL2RmMjg0OTRmLTFkM2YtNGE0NS04YTc0LWJkZTQxYzI1 MDJhMi5jcmwwHwYDVR0jBBgwFoAUqKBljbCvNzrfdrtQvaDMJLEVS5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0 MWMyNTAyYTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAHvconwt8wEisMvSJW2YDJA+hVZNlaMQkGLM36YmlqjRrt0X6IyGYP nYsjhNA6JQCgziXXUz8NhzGLSYGJT7elJDr9GaMfW6yzDDXIMsfOoRjtSe5IksrH T38eAm702IzbiLFWlTsb9hd6W9drdJ7zUSVAiAnKC6f3onlm28+MJ/3FsQNWt54t 2KbTCB9rb9cl5tD51y+eWLMFdUW4sKv+ZmMlh+9+LYKQYz9Jt4VfoywfUTCtqamk QJAh28okfvQSf238/tPPNWsUvUk9HaXgZUn2kJiaKkYYfJhpSamLrFblm9O1Dhty N3sdu5deIXmAdhqtpziUOe/irVALr54B -----END CERTIFICATE-----Generated at Sun Jun 8 08:34:26 2025 by rpki-client