$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e68cb0e8-674e-39a2-8a2f-6e807080e407.roa File: e68cb0e8-674e-39a2-8a2f-6e807080e407.roa (raw, json) Hash identifier: OM/her/RSsoYZungksup3wYT/qipoC2sjl2Ck7UNhJw= Subject key identifier: 4B:82:8F:9D:92:63:7E:ED:93:35:6F:9C:E2:B7:C0:CE:7A:F1:29:2A Certificate issuer: /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Certificate serial: 010D0C9F4328584A1B5FFB3A645305658E29D370 Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e68cb0e8-674e-39a2-8a2f-6e807080e407.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 53999 IP address blocks: 2607:f699::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:fb:3a:64:53:05:65:8e:29:d3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=1145ee94-01a1-4a97-8f45-343a2f8313e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:94:a2:91:e6:08:06:6b:fe:4e:00:a8:ba:28: 2c:42:22:ac:20:8d:ac:b7:ad:5b:5d:3e:af:60:03: df:b9:0b:ec:a2:40:51:31:13:59:59:78:47:4d:11: 6e:8d:81:e7:1d:a4:59:c7:96:48:57:e0:fa:f2:db: ed:d7:13:34:ac:61:ba:aa:18:07:d1:d7:9c:cd:20: 75:d4:f1:a9:68:07:bd:09:57:78:32:3d:4b:8f:ea: 3b:57:96:ff:72:ae:6e:f6:0d:dc:3f:21:d2:4e:25: 95:96:5f:03:9a:d3:7d:7c:1d:17:7b:73:c7:fa:f5: 88:31:e8:4e:92:2b:b8:5e:98:57:65:49:41:09:4f: b0:38:09:09:54:2d:1d:64:b5:53:1e:ab:53:0c:ef: 95:9f:5f:4d:4d:ec:17:bc:e2:59:8b:db:d9:5c:2b: 13:35:40:ab:78:68:f8:49:eb:32:6f:16:5e:54:40: 11:80:93:fd:01:59:71:18:1f:d1:23:07:56:7a:0b: 01:3d:92:93:b5:0a:31:48:5c:ae:4c:7c:97:d6:ed: 04:49:a6:93:91:4c:0a:78:e3:a1:66:29:0c:61:4b: dc:f6:56:f3:0b:70:50:41:8d:28:b9:c2:de:b8:60: 41:92:9a:07:49:fa:fe:7b:b7:8b:ef:cb:9b:8d:79: 21:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:82:8F:9D:92:63:7E:ED:93:35:6F:9C:E2:B7:C0:CE:7A:F1:29:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e68cb0e8-674e-39a2-8a2f-6e807080e407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl X509v3 Authority Key Identifier: keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f699::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:65:f6:d7:9e:34:1a:4e:8a:db:93:47:6a:94:3a:e9:34:48: de:19:87:da:3b:a6:5e:11:35:0c:94:7f:61:fe:b3:94:d7:25: 55:5d:c6:96:45:83:2f:7a:f1:6b:df:a9:88:41:f6:7a:85:f9: 86:7a:34:3f:54:e0:ec:30:a4:af:b4:95:e6:c7:86:82:16:2a: 01:33:b8:19:0e:d4:87:9d:94:3a:5c:4e:af:08:e4:26:73:6a: a2:70:e9:14:ca:dd:0a:5e:b8:c0:f1:6d:fd:c5:c4:a3:14:fc: df:de:29:c0:10:84:10:a8:b2:df:45:89:a5:e5:ec:24:25:d3: 21:c6:a4:3c:06:7d:86:f6:0e:08:0f:79:3c:70:47:03:fe:53: e5:8b:ec:dc:98:14:f8:80:78:74:53:62:be:a3:e9:03:0b:e7: ed:ba:a8:e3:ba:5c:a5:a9:77:32:1e:03:ee:36:68:fc:11:44: d5:72:cb:c2:b3:b7:ca:41:de:9c:2d:46:70:4b:0a:4b:d1:8a: 9c:1b:8e:98:fa:9f:1d:0b:45:5e:1c:d5:49:9c:84:83:e9:ce: e0:8d:3a:8b:19:0b:08:0a:f8:6c:e4:d3:27:38:cb:78:58:c6: 86:0b:b8:ac:23:2a:56:68:49:c9:b3:2c:7d:e8:13:43:a2:a6: 01:26:16:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEobX/s6ZFMFZY4p03AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyOTU4MjAtMDNiYy00YTRlLTgwNzItN2NiZjc0OGY0 YzZkMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk MTE0NWVlOTQtMDFhMS00YTk3LThmNDUtMzQzYTJmODMxM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZSikeYIBmv+TgCouigsQiKsII2st61bXT6v YAPfuQvsokBRMRNZWXhHTRFujYHnHaRZx5ZIV+D68tvt1xM0rGG6qhgH0deczSB1 1PGpaAe9CVd4Mj1Lj+o7V5b/cq5u9g3cPyHSTiWVll8DmtN9fB0Xe3PH+vWIMehO kiu4XphXZUlBCU+wOAkJVC0dZLVTHqtTDO+Vn19NTewXvOJZi9vZXCsTNUCreGj4 SesybxZeVEARgJP9AVlxGB/RIwdWegsBPZKTtQoxSFyuTHyX1u0ESaaTkUwKeOOh ZikMYUvc9lbzC3BQQY0oucLeuGBBkpoHSfr+e7eL78ubjXkhFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEuCj52SY37tkzVvnOK3wM568SkqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5 NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2JmNzQ4ZjRjNmQvZTY4Y2IwZTgtNjc0ZS0z OWEyLThhMmYtNmU4MDcwODBlNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTgyOTU4MjAtMDNiYy00YTRlLTgw NzItN2NiZjc0OGY0YzZkL2U4Mjk1ODIwLTAzYmMtNGE0ZS04MDcyLTdjYmY3NDhm NGM2ZC5jcmwwHwYDVR0jBBgwFoAUGt9TWH5SbG/MuhYDvE0QNRjo5qQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2Jm NzQ4ZjRjNmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf2mTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxZfbXnjQaTorbk0dqlDrpNEjeGYfaO6ZeETUMlH9h/rOU1yVVXcaW RYMvevFr36mIQfZ6hfmGejQ/VODsMKSvtJXmx4aCFioBM7gZDtSHnZQ6XE6vCOQm c2qicOkUyt0KXrjA8W39xcSjFPzf3inAEIQQqLLfRYml5ewkJdMhxqQ8Bn2G9g4I D3k8cEcD/lPli+zcmBT4gHh0U2K+o+kDC+ftuqjjulylqXcyHgPuNmj8EUTVcsvC s7fKQd6cLUZwSwpL0YqcG46Y+p8dC0VeHNVJnISD6c7gjTqLGQsICvhs5NMnOMt4 WMaGC7isIypWaEnJsyx96BNDoqYBJhYq -----END CERTIFICATE-----Generated at Sun Jun 8 12:39:17 2025 by rpki-client