$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9217c218-c43e-3e60-b0d1-ebf5a015639c.roa File: 9217c218-c43e-3e60-b0d1-ebf5a015639c.roa (raw, json) Hash identifier: whF+fCedZH+UXj+Mh/5jOIT/mSKKcCy26EyUCYKY1Rg= Subject key identifier: 67:EF:0B:B3:7C:44:49:D0:3F:33:8D:D1:8F:23:D7:C7:4C:46:4C:3B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E11BB2663580B8118857C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9217c218-c43e-3e60-b0d1-ebf5a015639c.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2e80:809::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1b:b2:66:35:80:b8:11:88:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=0a983587-2a9d-45f5-9fd2-9118680ae2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:77:a7:e7:fc:7d:11:0d:07:8c:be:13:e3: df:e6:56:ec:00:4e:93:17:8b:aa:60:2b:25:72:16: 2f:8a:51:4c:3f:33:c3:cc:03:95:e5:97:5d:ed:3e: c0:03:8d:c1:79:03:dd:a7:9d:7b:7e:05:9d:30:a9: f5:b9:40:8e:c6:50:2f:ad:37:39:d9:9e:42:a7:0b: d7:dd:e2:55:43:7f:35:fb:3e:3a:15:4c:f0:68:c5: 10:64:2b:0e:87:b7:1e:76:eb:ac:03:93:e2:17:d8: 71:83:62:e6:e6:c0:8c:f3:b2:02:38:d1:cb:78:7c: c2:a5:e8:b4:f9:15:16:12:69:8b:81:56:0a:d7:e1: 0a:2d:c1:67:bb:30:eb:6d:ec:a4:12:73:dd:55:5b: e0:8b:0d:0d:45:66:a5:22:fb:df:64:eb:ef:1b:87: 3b:4a:95:60:da:d6:70:2a:3d:34:0a:87:8b:b0:23: 31:aa:21:1d:14:9d:a0:9b:ed:54:ae:5f:ae:ce:00: 99:71:ee:88:31:d2:22:71:ab:05:1d:27:2b:76:0e: cf:31:a4:db:e6:3a:27:fb:78:fe:91:ac:23:b9:67: 47:b7:98:7e:98:11:a7:74:73:4e:37:56:78:4b:1c: 1e:bc:5e:08:c4:6e:c3:36:de:1a:98:1b:f4:c4:80: 84:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EF:0B:B3:7C:44:49:D0:3F:33:8D:D1:8F:23:D7:C7:4C:46:4C:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9217c218-c43e-3e60-b0d1-ebf5a015639c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e80:809::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a2:50:d2:f4:c2:5f:c9:9d:8c:00:d4:27:bc:83:98:73:90: ad:b2:63:ae:95:bb:c4:fe:37:ac:72:eb:ef:1c:0a:e1:42:72: 22:18:ac:6b:9e:f7:7f:6d:0a:b4:a5:73:e4:db:00:ae:e2:fb: 60:36:cf:4d:61:a9:83:1b:76:37:ac:af:1a:04:51:1f:d0:4e: fe:31:12:cf:b3:1b:90:de:98:e3:5c:ac:28:63:dc:32:2a:c9: 5c:b3:6a:23:1d:83:82:73:1c:b3:df:c5:45:fd:56:46:43:18: 51:c2:1d:af:1c:f4:60:0b:a2:3b:ea:97:5c:4c:39:42:14:74: f2:0b:9b:b0:a4:bb:db:f2:9e:14:44:16:4a:73:a8:c9:dc:ab: 92:d1:49:b7:53:68:a0:56:04:67:8b:c1:02:99:49:f5:93:14: 7a:83:77:6e:3a:bc:41:82:ce:41:88:63:14:e7:01:b8:fc:95: 59:0b:39:e2:0f:0f:1b:c1:ab:65:25:a5:81:8b:ab:ef:e5:34: 25:40:40:84:2a:f4:af:3e:a1:11:a5:88:80:d1:2f:f4:f4:bb: c0:48:73:d8:44:45:7b:a3:2f:26:92:d8:c8:61:68:64:54:f5: 81:9e:ab:e2:29:06:68:90:c9:f3:44:ad:87:c6:d5:cc:b1:7e: f9:ab:99:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4RuyZjWAuBGIV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MGE5ODM1ODctMmE5ZC00NWY1LTlmZDItOTExODY4MGFlMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEV3p+f8fRENB4y+E+Pf5lbsAE6TF4uqYCsl chYvilFMPzPDzAOV5Zdd7T7AA43BeQPdp517fgWdMKn1uUCOxlAvrTc52Z5CpwvX 3eJVQ381+z46FUzwaMUQZCsOh7ceduusA5PiF9hxg2Lm5sCM87ICONHLeHzCpei0 +RUWEmmLgVYK1+EKLcFnuzDrbeykEnPdVVvgiw0NRWalIvvfZOvvG4c7SpVg2tZw Kj00CoeLsCMxqiEdFJ2gm+1Url+uzgCZce6IMdIicasFHScrdg7PMaTb5jon+3j+ kawjuWdHt5h+mBGndHNON1Z4SxwevF4IxG7DNt4amBv0xICE9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGfvC7N8REnQPzON0Y8j18dMRkw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTIxN2MyMTgtYzQzZS0z ZTYwLWIwZDEtZWJmNWEwMTU2MzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQugAgJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADyiUNL0wl/JnYwA1Ce8g5hzkK2yY66Vu8T+N6xy6+8cCuFCciIY rGue939tCrSlc+TbAK7i+2A2z01hqYMbdjesrxoEUR/QTv4xEs+zG5DemONcrChj 3DIqyVyzaiMdg4JzHLPfxUX9VkZDGFHCHa8c9GALojvql1xMOUIUdPILm7Cku9vy nhREFkpzqMncq5LRSbdTaKBWBGeLwQKZSfWTFHqDd246vEGCzkGIYxTnAbj8lVkL OeIPDxvBq2UlpYGLq+/lNCVAQIQq9K8+oRGliIDRL/T0u8BIc9hERXujLyaS2Mhh aGRU9YGeq+IpBmiQyfNErYfG1cyxfvmrmQ8= -----END CERTIFICATE-----Generated at Thu Aug 7 03:25:20 2025 by rpki-client