$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/1c6a78b9-c377-3b7a-833d-0306da95276c.roa File: 1c6a78b9-c377-3b7a-833d-0306da95276c.roa (raw, json) Hash identifier: CFdAk97A6rQDFCj7LJJiJAUCdzr4JupiOLECfwu7n+c= Subject key identifier: D4:FA:07:95:F5:87:16:A8:72:A9:FF:61:E9:8A:D1:35:A6:5D:72:D3 Certificate issuer: /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Certificate serial: 010D0C9F4328584A1B5FFB476E44DEF42A474E80 Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/1c6a78b9-c377-3b7a-833d-0306da95276c.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 30176 IP address blocks: 2607:f698::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:fb:47:6e:44:de:f4:2a:47:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=fc3625b1-7eed-48ea-a6df-7306b07c6f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:fd:29:45:e4:cd:87:61:de:85:15:a5:b8: fa:9f:c8:50:9f:82:1b:43:31:1f:ff:c5:b7:90:e5: 78:7c:6f:17:40:d0:12:80:8b:a9:85:c7:96:5b:2e: 77:28:7c:6b:66:7e:cf:39:4e:30:c2:0a:7e:59:e4: 3d:15:2a:5c:50:c7:5f:31:f6:39:fe:e7:4d:6f:14: 8b:5d:84:b9:3f:09:88:8c:78:61:54:33:23:a3:b2: 1d:7b:57:51:9d:70:46:65:03:12:1d:2c:90:0d:c1: 1c:a6:5a:76:4b:4d:9b:fb:09:d8:51:47:f6:f8:1d: d4:5e:b3:e8:fb:4d:86:96:9b:5f:fd:d0:56:00:92: 50:12:60:b5:06:c6:8c:34:59:10:8b:03:db:d1:c6: cf:38:0c:82:cc:13:94:d8:2a:08:c5:f0:24:43:7e: 3c:65:47:2a:14:a2:95:f2:b2:ca:08:14:2c:cf:c3: cf:6c:05:35:7d:d6:57:37:3b:2d:b8:31:93:2c:96: 73:74:69:d6:f6:63:e8:8a:5b:67:33:da:54:78:ff: dd:57:04:db:07:e1:63:f4:98:e1:92:45:a9:e3:cd: 1a:8d:b8:7d:26:d7:90:f9:db:64:da:a7:25:1b:fb: 39:39:af:26:02:19:5f:72:73:2d:69:35:53:f3:23: 29:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FA:07:95:F5:87:16:A8:72:A9:FF:61:E9:8A:D1:35:A6:5D:72:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/1c6a78b9-c377-3b7a-833d-0306da95276c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl X509v3 Authority Key Identifier: keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f698::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:14:5c:8c:fa:46:ad:e5:f8:e1:7c:26:1d:d6:ca:9a:c5:b7: e7:59:e8:58:54:95:0f:be:bb:d6:c8:56:f8:25:bc:df:6b:6d: 1d:6a:47:8b:3a:3b:51:70:9e:8d:8c:a8:17:6a:6f:7e:ec:70: d5:6d:69:64:98:71:f3:60:85:bd:4f:fc:a5:c8:30:f2:44:14: c7:be:a7:19:47:b4:40:43:bf:11:6a:3b:2c:b0:a1:08:67:8e: 25:b5:64:1d:ab:41:e5:b4:f7:25:2a:22:c9:bb:4a:10:81:97: fd:50:29:83:0e:9a:ad:8a:ae:d8:54:9a:4c:0c:2f:56:9d:0e: 3c:dd:83:16:ee:00:52:ee:6c:48:da:6b:54:64:24:f9:d7:80: f0:76:c6:fe:e1:a1:89:f6:56:57:b4:d6:65:bf:d8:6c:e2:c7: ef:03:af:96:b6:f1:10:03:08:66:60:b1:43:72:0f:0a:13:57: 1a:1c:32:24:d7:5b:3e:57:7c:06:79:e6:1d:70:7c:94:9f:96: c0:9d:15:8f:89:80:f8:21:4f:ea:20:80:b2:46:a9:ef:b2:dc: b0:e8:b1:99:36:f8:37:72:90:f6:3b:dc:15:b3:4b:b6:3f:1a: e1:dd:b5:36:1d:b3:a8:5f:85:c8:98:f8:67:05:aa:a8:48:38: ff:8b:bd:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEobX/tHbkTe9CpHToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyOTU4MjAtMDNiYy00YTRlLTgwNzItN2NiZjc0OGY0 YzZkMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ZmMzNjI1YjEtN2VlZC00OGVhLWE2ZGYtNzMwNmIwN2M2ZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaD9KUXkzYdh3oUVpbj6n8hQn4IbQzEf/8W3 kOV4fG8XQNASgIuphceWWy53KHxrZn7POU4wwgp+WeQ9FSpcUMdfMfY5/udNbxSL XYS5PwmIjHhhVDMjo7Ide1dRnXBGZQMSHSyQDcEcplp2S02b+wnYUUf2+B3UXrPo +02Glptf/dBWAJJQEmC1BsaMNFkQiwPb0cbPOAyCzBOU2CoIxfAkQ348ZUcqFKKV 8rLKCBQsz8PPbAU1fdZXNzstuDGTLJZzdGnW9mPoiltnM9pUeP/dVwTbB+Fj9Jjh kkWp480ajbh9JteQ+dtk2qclG/s5Oa8mAhlfcnMtaTVT8yMpmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNT6B5X1hxaocqn/YemK0TWmXXLTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5 NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2JmNzQ4ZjRjNmQvMWM2YTc4YjktYzM3Ny0z YjdhLTgzM2QtMDMwNmRhOTUyNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTgyOTU4MjAtMDNiYy00YTRlLTgw NzItN2NiZjc0OGY0YzZkL2U4Mjk1ODIwLTAzYmMtNGE0ZS04MDcyLTdjYmY3NDhm NGM2ZC5jcmwwHwYDVR0jBBgwFoAUGt9TWH5SbG/MuhYDvE0QNRjo5qQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2Jm NzQ4ZjRjNmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf2mDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrFFyM+kat5fjhfCYd1sqaxbfnWehYVJUPvrvWyFb4Jbzfa20dakeL OjtRcJ6NjKgXam9+7HDVbWlkmHHzYIW9T/ylyDDyRBTHvqcZR7RAQ78RajsssKEI Z44ltWQdq0HltPclKiLJu0oQgZf9UCmDDpqtiq7YVJpMDC9WnQ483YMW7gBS7mxI 2mtUZCT514Dwdsb+4aGJ9lZXtNZlv9hs4sfvA6+WtvEQAwhmYLFDcg8KE1caHDIk 11s+V3wGeeYdcHyUn5bAnRWPiYD4IU/qIICyRqnvstyw6LGZNvg3cpD2O9wVs0u2 Pxrh3bU2HbOoX4XImPhnBaqoSDj/i71L -----END CERTIFICATE-----Generated at Sun Jun 8 12:35:23 2025 by rpki-client