$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5bf846a-0fe7-33e7-ade9-34a0a387811e.roa File: c5bf846a-0fe7-33e7-ade9-34a0a387811e.roa (raw, json) Hash identifier: YiQBu71a2ZfXMPpAp5seAUnMahDBVaC5N0IPL5k9pbk= Subject key identifier: 7A:78:E7:7C:D4:A8:AC:CE:8B:90:D4:BF:C1:53:1C:E6:67:20:34:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EDA39D0D492EFA92F7ED80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5bf846a-0fe7-33e7-ade9-34a0a387811e.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7015 IP address blocks: 2603:3005:2d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:a3:9d:0d:49:2e:fa:92:f7:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=d5e5e507-6a2a-4c69-93de-e22b15857632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:43:08:1d:54:b6:8e:7e:c8:5f:6a:74:67:f8: 10:a5:2f:31:09:09:44:14:43:07:6c:a6:ca:9a:d0: f9:80:ab:2f:1b:9d:89:ce:65:1a:6b:28:df:e5:7e: dd:d9:57:ee:cf:64:66:78:15:da:6b:4a:68:8c:a3: df:df:0a:5d:5e:fc:67:a7:9d:45:ce:21:aa:74:ad: eb:80:31:ba:6a:5b:95:77:9d:09:83:f9:ba:16:32: 5c:10:46:36:80:84:f9:20:11:a5:1a:d2:f2:84:18: 98:bc:61:29:11:53:a9:34:be:72:cb:fe:8a:6b:6e: dc:79:b4:ff:07:5f:0f:e0:80:8b:c7:7c:61:e7:c3: fa:3b:4a:d1:9b:c9:09:13:96:f7:69:74:d3:0b:b5: d5:aa:5a:98:45:89:cd:52:13:01:01:27:ce:0f:01: 87:ec:ff:c8:8f:2e:76:2d:fc:00:e9:db:d6:3d:ed: 87:54:51:da:d8:89:86:e7:d2:11:48:85:fd:d6:d2: 5e:1a:6c:27:ac:e7:10:82:ff:98:b4:0d:31:96:23: 4c:87:bf:99:94:8e:e3:02:d2:f9:e7:36:b2:6c:7e: 7c:41:16:07:53:88:cf:1e:1b:b1:d3:66:ec:b2:a0: 0d:5b:47:05:0f:cd:9f:0a:04:20:c7:b4:ba:3b:91: 50:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:78:E7:7C:D4:A8:AC:CE:8B:90:D4:BF:C1:53:1C:E6:67:20:34:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5bf846a-0fe7-33e7-ade9-34a0a387811e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3005:2d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5b:7b:d0:c2:ca:24:7b:46:63:7d:b7:e4:ac:1e:af:85:5f: 2a:95:f2:58:c2:47:10:f4:6a:25:b9:47:52:00:56:72:8c:49: a3:bb:8a:57:aa:f0:b1:c0:25:fc:4c:4f:01:f3:4b:a8:3f:fd: 8c:4d:a1:30:82:a1:b3:ad:ae:be:34:0e:b9:e6:b4:2b:bb:33: a8:ab:58:47:92:0b:8a:10:83:2a:92:fd:62:ee:7c:18:c5:dd: ac:f3:52:9b:4c:c7:c0:41:85:8e:d3:75:da:ab:c7:dd:7e:66: d5:e8:e5:17:5d:4c:ec:2c:f2:6e:9f:2a:7e:c9:8d:87:5b:12: ea:58:0e:ef:d8:86:39:16:12:44:27:2e:cd:33:93:70:68:79: a6:20:d9:02:af:9b:fd:21:e8:fc:fd:a0:4a:ba:a2:7d:5f:c0: 00:72:52:10:ba:d3:f9:13:60:ae:c3:b0:9a:f8:80:33:05:6a: c2:e9:09:22:93:03:98:2d:c1:0b:df:fe:1b:22:53:fa:f8:be: f2:89:bc:51:a5:68:24:1e:3c:62:b4:24:66:2f:66:e1:61:78: 44:95:20:9a:91:15:48:8d:cd:03:f7:f2:d9:58:14:c3:35:09: 66:ad:e3:55:ff:24:e9:25:eb:38:a0:56:55:55:02:6c:12:27: 3d:6f:d1:08 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq07aOdDUku+pL37YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDVlNWU1MDctNmEyYS00YzY5LTkzZGUtZTIyYjE1ODU3NjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEMIHVS2jn7IX2p0Z/gQpS8xCQlEFEMHbKbK mtD5gKsvG52JzmUaayjf5X7d2Vfuz2RmeBXaa0pojKPf3wpdXvxnp51FziGqdK3r gDG6aluVd50Jg/m6FjJcEEY2gIT5IBGlGtLyhBiYvGEpEVOpNL5yy/6Ka27cebT/ B18P4ICLx3xh58P6O0rRm8kJE5b3aXTTC7XVqlqYRYnNUhMBASfODwGH7P/Ijy52 LfwA6dvWPe2HVFHa2ImG59IRSIX91tJeGmwnrOcQgv+YtA0xliNMh7+ZlI7jAtL5 5zaybH58QRYHU4jPHhux02bssqANW0cFD82fCgQgx7S6O5FQOQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHp453zUqKzOi5DUv8FTHOZnIDSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzViZjg0NmEtMGZlNy0z M2U3LWFkZTktMzRhMGEzODc4MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBS0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAllt70MLKJHtGY3235Kwer4VfKpXyWMJHEPRqJblHUgBWcoxJo7uK V6rwscAl/ExPAfNLqD/9jE2hMIKhs62uvjQOuea0K7szqKtYR5ILihCDKpL9Yu58 GMXdrPNSm0zHwEGFjtN12qvH3X5m1ejlF11M7Czybp8qfsmNh1sS6lgO79iGORYS RCcuzTOTcGh5piDZAq+b/SHo/P2gSrqifV/AAHJSELrT+RNgrsOwmviAMwVqwukJ IpMDmC3BC9/+GyJT+vi+8om8UaVoJB48YrQkZi9m4WF4RJUgmpEVSI3NA/fy2VgU wzUJZq3jVf8k6SXrOKBWVVUCbBInPW/RCA== -----END CERTIFICATE-----Generated at Mon Aug 4 22:19:38 2025 by rpki-client