$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa File: 824e6379-abbf-3ba1-8155-eeab702f1b96.roa (raw, json) Hash identifier: 1ZgW3UCaxC7iCYCse/93L9KBcCgTcI4aIi99A/Nopqk= Subject key identifier: 54:A4:BC:A4:A0:AB:2D:B3:F0:8C:95:93:41:6A:37:AA:F8:A8:55:56 Certificate issuer: /CN=4bc701e5-cff5-4660-9102-08342e5ad35f Certificate serial: 010D0C9F4328584A90A0AC2A1A41CDDB2F685B88 Authority key identifier: 62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 26523 IP address blocks: 2620:0:f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ac:2a:1a:41:cd:db:2f:68:5b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc701e5-cff5-4660-9102-08342e5ad35f Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=8e28ba41-7d19-41c4-8386-a2437fa5d2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a5:0a:6e:37:31:6b:97:cb:fc:da:64:75:82: 72:ad:93:be:96:e5:a4:f7:72:75:8f:d5:b4:19:39: fc:1c:a4:ad:c9:48:f4:c5:02:16:51:8e:b7:56:71: a8:dc:7c:27:67:16:84:c4:2e:b5:f1:f8:db:02:17: d1:ed:02:00:29:08:db:b5:87:b4:a6:10:33:16:1b: b6:80:b9:64:68:1f:07:ea:25:af:33:09:03:61:5b: ec:54:44:7e:99:58:d3:92:04:27:a6:aa:90:d7:a6: 92:8e:f4:ff:be:c0:73:f8:98:30:a9:06:f7:2d:5e: 3c:4e:4c:12:56:a9:8c:ad:1c:b5:c3:8a:31:85:0a: d0:27:b2:5a:f4:ec:47:c9:f1:c2:48:a0:78:9a:1a: 33:df:aa:70:c9:92:1b:b8:3e:16:19:58:40:5f:d7: 10:8f:a8:bb:8f:37:78:ce:49:4e:6e:07:20:03:13: f6:78:04:f0:e6:24:dd:53:11:23:8b:ec:00:f7:2c: 54:3c:1b:a0:a9:20:ff:49:b4:2e:57:d0:f8:6f:8d: f4:1f:70:41:44:34:6d:4a:c9:0f:66:80:15:c2:d3: 9d:8d:2a:7f:18:34:ea:98:f3:36:e0:3f:12:8d:c4: 08:17:45:e2:eb:72:09:36:e9:30:f2:a1:1a:ce:1a: c9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A4:BC:A4:A0:AB:2D:B3:F0:8C:95:93:41:6A:37:AA:F8:A8:55:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.crl X509v3 Authority Key Identifier: keyid:62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f5:fa:46:67:e8:55:ac:dd:da:85:3e:0e:f7:ff:c3:6a:ab: 08:c4:3d:7f:97:d3:8d:80:95:c5:a6:a1:8f:cb:78:cd:7c:d6: d9:b7:f6:4c:a9:41:e9:0c:98:b4:77:bb:15:40:1c:d6:9b:b2: 43:be:e2:ce:ba:ff:0e:41:6f:c5:0f:22:cf:d2:02:fc:92:a4: 9c:ca:45:39:b5:35:ad:58:ed:2f:a8:12:61:81:46:90:fe:25: d2:e2:c7:63:85:53:dd:37:78:8b:f7:b8:66:5b:25:db:08:b3: 43:cf:a9:9d:9c:6b:a9:7d:77:4d:45:3b:8d:0e:e5:1b:24:bf: fd:ee:7a:91:6d:a2:f9:40:fe:ce:0a:db:e3:8d:40:e9:bf:64: 4b:65:ab:8a:a8:03:b9:20:b7:a6:5b:3f:bd:6b:00:f7:48:40: ba:23:69:34:cf:b3:46:4e:1a:ea:bc:a8:ed:31:8a:93:84:1c: 4b:3f:a5:b4:e0:65:3b:9a:25:04:3c:02:32:25:30:66:bf:76: 40:b0:45:a6:ea:af:de:40:dd:f3:ee:74:63:0a:c9:8a:56:c0: 62:0f:ac:13:93:c9:bb:5b:ae:7f:bb:6a:1b:23:99:08:2b:97: ca:dd:31:2b:c1:3a:ec:19:bc:16:35:30:17:bd:50:bc:61:a6: ef:e3:b7:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoKwqGkHN2y9oW4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNzAxZTUtY2ZmNS00NjYwLTkxMDItMDgzNDJlNWFk MzVmMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OGUyOGJhNDEtN2QxOS00MWM0LTgzODYtYTI0MzdmYTVkMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKUKbjcxa5fL/NpkdYJyrZO+luWk93J1j9W0 GTn8HKStyUj0xQIWUY63VnGo3HwnZxaExC618fjbAhfR7QIAKQjbtYe0phAzFhu2 gLlkaB8H6iWvMwkDYVvsVER+mVjTkgQnpqqQ16aSjvT/vsBz+JgwqQb3LV48TkwS VqmMrRy1w4oxhQrQJ7Ja9OxHyfHCSKB4mhoz36pwyZIbuD4WGVhAX9cQj6i7jzd4 zklObgcgAxP2eATw5iTdUxEji+wA9yxUPBugqSD/SbQuV9D4b430H3BBRDRtSskP ZoAVwtOdjSp/GDTqmPM24D8SjcQIF0Xi63IJNukw8qEazhrJLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFSkvKSgqy2z8IyVk0FqN6r4qFVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YmM3 MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0MmU1YWQzNWYvODI0ZTYzNzktYWJiZi0z YmExLTgxNTUtZWVhYjcwMmYxYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGJjNzAxZTUtY2ZmNS00NjYwLTkx MDItMDgzNDJlNWFkMzVmLzRiYzcwMWU1LWNmZjUtNDY2MC05MTAyLTA4MzQyZTVh ZDM1Zi5jcmwwHwYDVR0jBBgwFoAUYmRTfrlWuIlXLETUQaIf+l4Bu7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YmM3MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0 MmU1YWQzNWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAADw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF/1+kZn6FWs3dqFPg73/8NqqwjEPX+X042AlcWmoY/LeM181tm3 9kypQekMmLR3uxVAHNabskO+4s66/w5Bb8UPIs/SAvySpJzKRTm1Na1Y7S+oEmGB RpD+JdLix2OFU903eIv3uGZbJdsIs0PPqZ2ca6l9d01FO40O5Rskv/3uepFtovlA /s4K2+ONQOm/ZEtlq4qoA7kgt6ZbP71rAPdIQLojaTTPs0ZOGuq8qO0xipOEHEs/ pbTgZTuaJQQ8AjIlMGa/dkCwRabqr95A3fPudGMKyYpWwGIPrBOTybtbrn+7ahsj mQgrl8rdMSvBOuwZvBY1MBe9ULxhpu/jt9g= -----END CERTIFICATE-----Generated at Wed Aug 13 19:04:23 2025 by rpki-client