$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/901a0472-6710-3856-abd4-2432486d0fa3.roa File: 901a0472-6710-3856-abd4-2432486d0fa3.roa (raw, json) Hash identifier: wP0CxIPJhJbZrrqO0DZ0Rtm4TaqRegI7yosYZo+8cCA= Subject key identifier: 82:F6:F7:90:F8:F5:FF:08:BC:E1:B3:10:BB:47:71:15:8F:1B:DB:8B Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584ABA80C95B34F45889F7797F80 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/901a0472-6710-3856-abd4-2432486d0fa3.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 14618 IP address blocks: 2605:b040:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:c9:5b:34:f4:58:89:f7:79:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=6ee93e08-e4fa-41d8-acac-2548f223191f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ad:d0:bb:2d:2a:da:92:0f:d2:f6:93:60:72: 65:6b:1d:21:e8:59:53:73:cf:0c:b4:d0:5d:3f:cc: b4:c6:e8:83:46:a2:3b:95:24:3a:8b:e5:22:68:04: 58:84:81:ad:a6:c3:9b:e9:63:87:1e:1f:0a:bc:f3: 87:10:29:bc:a2:38:1c:27:35:07:68:ff:77:3b:cb: 44:74:24:e6:a3:d9:5f:16:f2:46:f8:21:e4:41:10: 51:ed:8d:91:1c:6e:7c:5c:b5:0a:32:85:4f:31:18: 41:34:7f:97:35:38:34:7d:d2:a7:64:3f:e9:37:a1: 73:2c:d8:09:d3:57:c2:af:68:dc:c5:9a:35:a7:6e: 87:dd:90:32:3a:70:61:f3:0e:d7:4f:e7:16:37:a0: 2e:f2:58:fc:22:33:4d:3b:07:b6:a5:41:aa:7a:44: 73:68:92:bc:92:ce:bd:57:8e:ae:bb:39:43:4d:4c: d6:2c:11:c5:09:d8:ac:5f:be:db:a1:01:16:b6:e6: 09:d0:1c:93:a5:2b:2b:ca:16:44:8e:fa:9a:07:ff: 3b:31:fa:da:02:1f:83:0f:df:58:35:3c:bf:87:57: 86:e4:45:e1:77:c9:5f:da:b6:8f:c0:c6:0d:ff:5d: 44:ce:4a:d2:08:5d:8a:09:ee:b3:03:1a:02:37:6c: 62:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F6:F7:90:F8:F5:FF:08:BC:E1:B3:10:BB:47:71:15:8F:1B:DB:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/901a0472-6710-3856-abd4-2432486d0fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2605:b040:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d6:ba:60:59:da:15:4e:f6:13:89:6b:d1:a5:79:ea:7b:ce: e7:de:6a:2d:5f:66:5f:e4:77:cf:7f:4d:a6:d3:05:ad:cc:2b: 8b:38:4d:4a:51:3c:f6:0f:ac:c1:1b:09:11:09:90:ac:ba:24: c3:55:e0:92:d7:f7:3d:90:50:1b:e2:c5:39:32:85:65:05:b2: 94:ae:26:6f:7a:28:02:ec:55:d8:b1:a4:73:75:0b:85:c3:19: fb:81:86:77:2a:74:ec:f1:65:6f:d4:5f:51:54:3a:23:86:eb: 48:88:f6:d1:55:35:19:18:fb:d5:b7:b4:22:04:82:98:b8:c5: 54:5c:0a:ea:e2:06:d6:fb:a8:7b:6c:08:3f:73:86:88:a0:6a: f8:cd:88:0d:16:77:18:49:2c:09:2c:4d:8e:8a:48:1f:72:55: ee:3f:13:0b:4c:82:dc:0b:cc:eb:47:23:b8:e9:8b:67:d7:c3: a6:7e:db:15:f5:ab:c3:7e:2b:09:7f:f1:9d:0d:b2:90:ba:7b: 02:2c:40:70:d1:c8:ac:60:61:a9:b5:da:1d:8e:b4:5c:69:44: c7:81:38:dd:c3:ed:1b:70:7f:46:97:ce:1e:1c:d2:17:2b:73: a4:f6:e2:54:d8:f8:d0:a9:7a:4f:97:d4:cf:1d:78:99:74:9d: bd:57:95:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq6gMlbNPRYifd5f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk NmVlOTNlMDgtZTRmYS00MWQ4LWFjYWMtMjU0OGYyMjMxOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma3Quy0q2pIP0vaTYHJlax0h6FlTc88MtNBd P8y0xuiDRqI7lSQ6i+UiaARYhIGtpsOb6WOHHh8KvPOHECm8ojgcJzUHaP93O8tE dCTmo9lfFvJG+CHkQRBR7Y2RHG58XLUKMoVPMRhBNH+XNTg0fdKnZD/pN6FzLNgJ 01fCr2jcxZo1p26H3ZAyOnBh8w7XT+cWN6Au8lj8IjNNOwe2pUGqekRzaJK8ks69 V46uuzlDTUzWLBHFCdisX77boQEWtuYJ0ByTpSsryhZEjvqaB/87MfraAh+DD99Y NTy/h1eG5EXhd8lf2raPwMYN/11EzkrSCF2KCe6zAxoCN2xi6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIL295D49f8IvOGzELtHcRWPG9uLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvOTAxYTA0NzItNjcxMC0z ODU2LWFiZDQtMjQzMjQ4NmQwZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEPWumBZ2hVO9hOJa9Gleep7zufeai1fZl/kd89/TabTBa3MK4s4 TUpRPPYPrMEbCREJkKy6JMNV4JLX9z2QUBvixTkyhWUFspSuJm96KALsVdixpHN1 C4XDGfuBhncqdOzxZW/UX1FUOiOG60iI9tFVNRkY+9W3tCIEgpi4xVRcCuriBtb7 qHtsCD9zhoigavjNiA0WdxhJLAksTY6KSB9yVe4/EwtMgtwLzOtHI7jpi2fXw6Z+ 2xX1q8N+Kwl/8Z0NspC6ewIsQHDRyKxgYam12h2OtFxpRMeBON3D7Rtwf0aXzh4c 0hcrc6T24lTY+NCpek+X1M8deJl0nb1XleU= -----END CERTIFICATE-----Generated at Wed Aug 6 13:04:00 2025 by rpki-client