$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa File: a68416c0-1952-319d-8981-4f1a935dc45c.roa (raw, json) Hash identifier: MAQ5Ac2zdk/A8MiA+Urrcjc7f1U1nl4YSfSwImr58Io= Subject key identifier: C2:48:F3:80:BF:66:69:2B:BC:E0:F0:B0:E4:16:94:DC:87:B3:85:72 Certificate issuer: /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83 Certificate serial: 010D0C9F4328584AB650E316BF8AFA9B820EBA80 Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 0 IP address blocks: 2001:504:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:e3:16:bf:8a:fa:9b:82:0e:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=2cee405b-fe78-458c-897f-8b3c19e19d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:60:13:78:48:3d:db:11:1e:3c:36:c4:15:89: a4:83:66:3d:9f:37:3b:e3:04:dd:e0:c9:c6:5a:1e: b0:a2:71:e4:fe:88:c5:a1:e9:af:85:b9:ba:42:9a: d3:4b:57:12:ec:f3:f6:89:7e:0b:75:2f:d5:b4:fd: 9a:63:c2:9f:35:6f:26:c7:0d:eb:07:d5:01:8f:c5: 36:af:52:3e:8d:56:c9:82:88:72:7b:3a:c1:25:66: f7:41:c0:ea:1a:b1:59:aa:32:dd:5b:94:21:41:c5: d5:29:7c:2c:50:89:f4:18:ad:f5:3b:f0:cc:60:2f: 5c:42:84:4f:ea:a3:fd:09:1a:9c:00:c7:6f:3a:20: ed:b8:69:09:6d:b1:08:29:4b:27:29:d8:15:f2:30: e7:8a:0a:ee:0a:7d:6f:5c:1b:45:ea:02:26:a5:fe: b1:bb:cf:45:be:97:e9:17:9f:a7:c5:48:a1:92:25: 6e:c1:eb:3b:94:6d:a1:da:87:6c:50:68:f8:74:1a: b9:63:b9:af:1c:e7:ad:45:55:6e:9b:ff:0d:d8:f4: c9:43:33:c5:6f:4b:1d:1f:79:91:32:2f:13:f6:59: 4a:61:8e:64:f5:41:6e:05:33:c5:29:29:95:6c:98: 52:9d:4d:7c:b1:2a:73:f3:8a:e9:ad:03:0d:03:fa: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:48:F3:80:BF:66:69:2B:BC:E0:F0:B0:E4:16:94:DC:87:B3:85:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl X509v3 Authority Key Identifier: keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:3f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b1:fa:e3:9e:0a:38:4f:57:88:67:e5:84:c3:28:e9:66:9a: 97:8f:44:f7:90:55:48:5b:af:eb:0f:a5:5d:b2:6f:35:34:18: 75:05:3d:f8:ef:8d:e7:cd:a1:4d:d2:a0:81:58:20:13:03:2e: 52:97:9f:82:c5:4b:1f:5c:c6:2c:c4:b1:21:f1:24:ee:b6:7e: b3:f2:97:95:13:73:42:2a:2b:e4:bf:f3:40:c4:27:a9:c2:b8: ca:bd:b2:3f:25:75:c3:06:b7:b1:cd:ee:ec:4f:0c:4c:e1:2e: 28:0f:cc:77:36:76:88:8f:71:43:96:f3:eb:43:d7:70:f6:70: 80:41:40:b9:d9:ca:ff:66:dc:8e:28:7e:ca:74:5d:c1:f7:3f: 16:f2:b4:8e:c9:83:28:81:f6:81:88:df:05:cd:7f:74:2b:50: f9:b4:02:eb:bd:2e:6d:e4:c1:28:47:04:b1:87:4c:e7:95:04: b7:ad:ea:c0:8d:fb:4f:a8:0a:45:13:93:85:9a:9c:99:35:ba: 5c:e0:98:94:26:c5:a7:c5:0b:3c:85:00:be:61:58:9c:f9:34: 65:cd:f8:c1:3c:a7:9e:92:41:f0:a7:49:d8:cc:dd:63:d3:2b: 65:1d:a5:b3:f5:31:22:61:44:c1:eb:1e:ad:37:77:52:54:e1: 14:35:15:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq2UOMWv4r6m4IOuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg5YjQ0YjAtYTE1MS00OWYyLWI0YTYtZDkxN2UzYzk1 ZTgzMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MmNlZTQwNWItZmU3OC00NThjLTg5N2YtOGIzYzE5ZTE5ZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWATeEg92xEePDbEFYmkg2Y9nzc74wTd4MnG Wh6wonHk/ojFoemvhbm6QprTS1cS7PP2iX4LdS/VtP2aY8KfNW8mxw3rB9UBj8U2 r1I+jVbJgohyezrBJWb3QcDqGrFZqjLdW5QhQcXVKXwsUIn0GK31O/DMYC9cQoRP 6qP9CRqcAMdvOiDtuGkJbbEIKUsnKdgV8jDnigruCn1vXBtF6gImpf6xu89Fvpfp F5+nxUihkiVuwes7lG2h2odsUGj4dBq5Y7mvHOetRVVum/8N2PTJQzPFb0sdH3mR Mi8T9llKYY5k9UFuBTPFKSmVbJhSnU18sSpz84rprQMNA/qrcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMJI84C/ZmkrvODwsOQWlNyHs4VyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODli NDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3ZTNjOTVlODMvYTY4NDE2YzAtMTk1Mi0z MTlkLTg5ODEtNGYxYTkzNWRjNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTg5YjQ0YjAtYTE1MS00OWYyLWI0 YTYtZDkxN2UzYzk1ZTgzL2U4OWI0NGIwLWExNTEtNDlmMi1iNGE2LWQ5MTdlM2M5 NWU4My5jcmwwHwYDVR0jBBgwFoAUZd44RuaJlKIRj1Iv9uTdJEimBGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODliNDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3 ZTNjOTVlODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIax+uOeCjhPV4hn5YTDKOlmmpePRPeQVUhbr+sPpV2ybzU0GHUF PfjvjefNoU3SoIFYIBMDLlKXn4LFSx9cxizEsSHxJO62frPyl5UTc0IqK+S/80DE J6nCuMq9sj8ldcMGt7HN7uxPDEzhLigPzHc2doiPcUOW8+tD13D2cIBBQLnZyv9m 3I4ofsp0XcH3PxbytI7JgyiB9oGI3wXNf3QrUPm0Auu9Lm3kwShHBLGHTOeVBLet 6sCN+0+oCkUTk4WanJk1ulzgmJQmxafFCzyFAL5hWJz5NGXN+ME8p56SQfCnSdjM 3WPTK2UdpbP1MSJhRMHrHq03d1JU4RQ1FWw= -----END CERTIFICATE-----Generated at Mon Aug 4 16:13:48 2025 by rpki-client