$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cb396975-c95e-3a31-ba3b-e1d1a955c922.roa File: cb396975-c95e-3a31-ba3b-e1d1a955c922.roa (raw, json) Hash identifier: t4lpL6Nic0GJn+KipjyTzo363RsGFYbTKi8S8G/8d8U= Subject key identifier: 3B:A1:63:EE:3A:A7:E0:DF:BE:0F:66:DE:D9:FB:AF:21:9D:ED:20:15 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584AC0164184E57E8563D6B5CA56 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cb396975-c95e-3a31-ba3b-e1d1a955c922.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 14618 IP address blocks: 2607:a640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:41:84:e5:7e:85:63:d6:b5:ca:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=b0f8e460-d61b-4b7d-ad91-61bf54e766ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:0d:40:56:9b:45:ef:73:c1:d7:fa:ca:81: 21:c8:7f:4a:38:07:77:3f:68:bb:29:77:8f:fb:bd: a7:88:38:b0:0b:41:31:cf:74:01:28:4e:5c:a4:96: 69:ab:59:1c:34:22:2f:ae:35:d8:9c:fa:14:4c:be: e0:69:9b:0c:72:c1:fe:9c:8e:57:b3:4a:54:aa:dd: 10:e7:0d:87:fd:2b:7e:cb:5d:70:2f:3f:85:80:e4: 8e:74:3a:ae:8f:0c:68:d2:e0:03:f3:e5:4d:ec:78: 7b:fc:30:66:a2:ae:3e:e2:ae:6f:f5:e9:68:90:38: 86:da:88:8b:2b:16:af:07:14:c3:b6:19:b2:61:b0: a1:27:fa:0c:5b:99:40:8d:3c:1c:55:68:33:7f:bb: e8:4f:9c:9c:95:9c:61:15:f8:39:7d:84:9c:3f:70: 1a:9b:f6:ec:0f:81:61:ac:ea:0c:42:81:b5:fe:19: 77:37:2e:99:d9:41:69:8b:24:01:5d:2c:a4:19:51: 16:0b:16:b0:96:0d:75:12:fc:b6:6f:ec:30:62:d0: b2:07:b5:c0:9a:cf:41:a3:1e:ce:85:93:73:1f:e9: 93:ab:6e:3e:59:c9:bb:5f:b0:22:aa:0b:8e:1b:f1: 4b:d4:c2:3f:de:a4:7d:43:18:5e:72:8d:e6:ac:74: 74:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A1:63:EE:3A:A7:E0:DF:BE:0F:66:DE:D9:FB:AF:21:9D:ED:20:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cb396975-c95e-3a31-ba3b-e1d1a955c922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:a640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:be:ad:b1:51:99:c6:d2:c8:6f:22:c4:7a:65:6c:63:95:fb: 5c:ea:c7:da:5e:06:5e:c9:6b:9a:d1:c5:39:c9:d6:14:db:43: e4:96:75:e5:93:f2:00:ed:e3:da:ab:ea:a2:7e:1f:e0:1c:a3: 09:aa:cd:44:94:7d:23:73:7c:4a:d9:b9:fa:42:c3:93:2c:75: 4a:69:a8:e0:0f:86:cf:0b:b1:65:91:8e:45:63:9e:b5:b2:23: 2c:8e:4b:0e:97:35:56:ad:1f:8d:3c:91:aa:0e:7e:47:ea:22: bc:1e:71:e9:81:e0:af:0f:46:e3:d5:f7:bd:9f:e6:ef:a6:1b: d6:c0:4c:39:7a:83:31:0d:4e:c1:e9:d5:c5:d8:27:bf:41:ff: f1:8e:dd:51:d2:5d:cf:72:fd:ed:c0:ca:4c:4c:98:43:a9:06: 77:3f:67:14:71:06:9a:fc:c4:7e:e7:d2:bc:98:60:00:43:81: fb:43:5b:7e:81:a1:e6:2a:1c:4c:cd:84:dd:b5:78:6c:50:ca: c7:cb:f4:19:7c:c8:69:5c:95:0d:53:22:85:80:2e:0c:20:ca: 72:8b:89:7b:8c:f6:5c:f6:c4:ad:ae:b9:2e:4e:a2:de:e0:03: 9d:b6:be:91:bb:ab:df:c4:8e:2d:47:52:a0:18:b9:68:b4:60: 34:2d:2d:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErAFkGE5X6FY9a1ylYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YjBmOGU0NjAtZDYxYi00YjdkLWFkOTEtNjFiZjU0ZTc2NmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3MNQFabRe9zwdf6yoEhyH9KOAd3P2i7KXeP +72niDiwC0Exz3QBKE5cpJZpq1kcNCIvrjXYnPoUTL7gaZsMcsH+nI5Xs0pUqt0Q 5w2H/St+y11wLz+FgOSOdDqujwxo0uAD8+VN7Hh7/DBmoq4+4q5v9elokDiG2oiL KxavBxTDthmyYbChJ/oMW5lAjTwcVWgzf7voT5yclZxhFfg5fYScP3Aam/bsD4Fh rOoMQoG1/hl3Ny6Z2UFpiyQBXSykGVEWCxawlg11Evy2b+wwYtCyB7XAms9Box7O hZNzH+mTq24+Wcm7X7AiqguOG/FL1MI/3qR9Qxheco3mrHR04QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDuhY+46p+Dfvg9m3tn7ryGd7SAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvY2IzOTY5NzUtYzk1ZS0z YTMxLWJhM2ItZTFkMWE5NTVjOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgemQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCgvq2xUZnG0shvIsR6ZWxjlftc6sfaXgZeyWua0cU5ydYU20PklnXl k/IA7ePaq+qifh/gHKMJqs1ElH0jc3xK2bn6QsOTLHVKaajgD4bPC7FlkY5FY561 siMsjksOlzVWrR+NPJGqDn5H6iK8HnHpgeCvD0bj1fe9n+bvphvWwEw5eoMxDU7B 6dXF2Ce/Qf/xjt1R0l3Pcv3twMpMTJhDqQZ3P2cUcQaa/MR+59K8mGAAQ4H7Q1t+ gaHmKhxMzYTdtXhsUMrHy/QZfMhpXJUNUyKFgC4MIMpyi4l7jPZc9sStrrkuTqLe 4AOdtr6Ru6vfxI4tR1KgGLlotGA0LS1/ -----END CERTIFICATE-----Generated at Wed Aug 6 09:36:43 2025 by rpki-client