$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa File: c006e98f-3ece-3757-bd45-4b1d0796733d.roa (raw, json) Hash identifier: t2SxlerjcSBvc0GPouMKb5P583bQwGlqd8o+OEQeCPM= Subject key identifier: 02:D2:F0:8A:65:58:2F:29:DD:B1:2F:1A:D5:2A:31:83:DE:ED:15:06 Certificate issuer: /CN=c0ae1cff-309c-40d1-9760-3a89a481e998 Certificate serial: 010D0C9F4328584AAB26505CA710242DE845BA2D Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 14907 IP address blocks: 2620:0:860::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:50:5c:a7:10:24:2d:e8:45:ba:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=423db53a-4d96-4ebb-9c47-3a509d30cbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f1:cc:2e:0d:59:65:e2:a8:c1:c2:e1:b0:c2: 0d:05:ad:94:2e:8b:5c:34:22:2f:5e:9b:22:5a:1a: 68:05:60:16:a4:ba:75:ec:db:12:90:9b:9f:17:ff: 39:b8:c6:c2:97:e8:11:e2:c8:b5:f9:f6:ff:4f:15: d3:ff:1d:62:94:bd:0c:47:36:73:30:d5:0a:21:a0: 35:b4:c6:53:92:7e:1b:35:2b:e6:da:0f:1f:8c:76: 37:bf:bb:34:23:16:51:40:a9:9e:b4:02:c0:82:07: 47:d3:b8:eb:ee:7b:10:88:1a:de:91:4f:02:5b:94: 6a:64:1f:e5:6b:b6:03:51:1d:ed:0c:a1:0d:6a:0c: dd:2d:2e:28:c4:7b:a4:d8:0f:d2:0a:92:8e:9a:d1: f9:5e:45:6c:e6:e8:37:e0:71:f8:73:f0:a7:a6:97: bb:c0:ff:b8:57:0f:2a:65:00:f0:8e:e4:6d:42:a0: cc:45:98:45:95:a5:1b:99:b9:d6:57:74:c6:45:b4: 93:85:e5:a0:4f:d1:ae:c9:2e:35:8e:fe:68:8c:34: 51:a0:a7:08:47:3c:60:e6:30:e0:0b:08:8b:df:02: 9c:40:26:c9:0a:4a:5a:fc:90:46:de:df:a9:da:38: 40:1b:49:a0:4c:6e:6b:b3:78:05:0d:24:ab:b2:5a: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D2:F0:8A:65:58:2F:29:DD:B1:2F:1A:D5:2A:31:83:DE:ED:15:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl X509v3 Authority Key Identifier: keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:860::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:13:f2:bc:56:5b:e4:e8:70:52:6f:01:a1:34:e3:8e:14:0f: ca:7e:f8:6c:a8:83:f5:37:46:0f:be:d3:87:4e:02:ab:5e:6f: e9:af:94:60:7f:a7:8c:a9:ee:5c:f0:b5:de:13:3d:4f:18:2c: 7a:7f:40:23:d0:ef:7d:e3:66:50:96:a1:4e:88:ac:cd:da:4c: d6:2a:13:29:0a:13:20:fa:e6:1a:f5:1d:ec:7b:ec:29:75:b6: e3:28:50:21:a1:7a:55:12:4e:90:9b:50:fd:20:db:3d:24:9d: a8:9f:1c:16:23:71:25:1a:2e:0c:7a:fb:5f:08:81:5f:3b:2b: f3:fc:f4:fd:1d:f5:6d:45:cb:05:08:16:48:11:3c:bb:19:17: af:da:ed:f8:c4:a6:0f:a1:f9:0b:aa:92:9f:d0:a5:2a:de:73: dd:26:33:3c:24:f1:31:f0:af:64:6d:b1:3b:73:de:41:aa:45: a0:e3:05:d9:07:34:d4:17:9c:c2:26:25:c9:42:cb:9a:a6:54: 98:80:ac:d8:23:3c:01:e1:e4:4e:1c:55:6c:5a:e7:7e:0b:d7: 31:c6:92:54:bc:cb:57:bb:84:58:bf:fb:4c:0c:87:78:7d:2f: 41:9d:5f:4d:a3:e3:63:58:78:60:c2:42:7a:7d:20:97:35:99: c8:21:bf:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqrJlBcpxAkLehFui0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBhZTFjZmYtMzA5Yy00MGQxLTk3NjAtM2E4OWE0ODFl OTk4MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NDIzZGI1M2EtNGQ5Ni00ZWJiLTljNDctM2E1MDlkMzBjYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPHMLg1ZZeKowcLhsMINBa2ULotcNCIvXpsi WhpoBWAWpLp17NsSkJufF/85uMbCl+gR4si1+fb/TxXT/x1ilL0MRzZzMNUKIaA1 tMZTkn4bNSvm2g8fjHY3v7s0IxZRQKmetALAggdH07jr7nsQiBrekU8CW5RqZB/l a7YDUR3tDKENagzdLS4oxHuk2A/SCpKOmtH5XkVs5ug34HH4c/Cnppe7wP+4Vw8q ZQDwjuRtQqDMRZhFlaUbmbnWV3TGRbSTheWgT9GuyS41jv5ojDRRoKcIRzxg5jDg CwiL3wKcQCbJCkpa/JBG3t+p2jhAG0mgTG5rs3gFDSSrslrc2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFALS8IplWC8p3bEvGtUqMYPe7RUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFl MWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5YTQ4MWU5OTgvYzAwNmU5OGYtM2VjZS0z NzU3LWJkNDUtNGIxZDA3OTY3MzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzBhZTFjZmYtMzA5Yy00MGQxLTk3 NjAtM2E4OWE0ODFlOTk4L2MwYWUxY2ZmLTMwOWMtNDBkMS05NzYwLTNhODlhNDgx ZTk5OC5jcmwwHwYDVR0jBBgwFoAUPVzJ0t/g8RJOCVm/vnWnyTm7EwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFlMWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5 YTQ4MWU5OTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAhg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ4T8rxWW+TocFJvAaE0444UD8p++Gyog/U3Rg++04dOAqteb+mv lGB/p4yp7lzwtd4TPU8YLHp/QCPQ733jZlCWoU6IrM3aTNYqEykKEyD65hr1Hex7 7Cl1tuMoUCGhelUSTpCbUP0g2z0knaifHBYjcSUaLgx6+18IgV87K/P89P0d9W1F ywUIFkgRPLsZF6/a7fjEpg+h+Quqkp/QpSrec90mMzwk8THwr2RtsTtz3kGqRaDj BdkHNNQXnMImJclCy5qmVJiArNgjPAHh5E4cVWxa534L1zHGklS8y1e7hFi/+0wM h3h9L0GdX02j42NYeGDCQnp9IJc1mcghv+w= -----END CERTIFICATE-----Generated at Wed Aug 6 18:43:35 2025 by rpki-client