$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/912a4fa3-4f2a-367c-af73-91419fdd464c.roa File: 912a4fa3-4f2a-367c-af73-91419fdd464c.roa (raw, json) Hash identifier: RmrCpYdsrVra7ODmIXBTs8+FyHdUK8zVC933wtgEKJM= Subject key identifier: 58:96:BD:C3:95:81:52:CA:03:BB:DA:7B:19:71:61:02:58:E5:8C:34 Certificate issuer: /CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77 Certificate serial: 010D0C9F4328584AA85BAF4A93B04E83A9F40B40 Authority key identifier: 88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/912a4fa3-4f2a-367c-af73-91419fdd464c.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 41690 IP address blocks: 2620:132:e000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:af:4a:93:b0:4e:83:a9:f4:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=b3a3b1a8-ec06-46ec-8f71-629e906c1c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8d:b6:34:82:9e:31:9a:ce:e4:0e:30:3c:8d: 0b:6f:59:59:b8:a5:21:82:66:58:53:8e:bc:7f:cc: 7e:2d:73:22:70:75:8e:97:8a:66:56:ee:67:3c:78: 32:89:60:51:7e:0e:bc:3b:fb:fb:f8:f4:45:fe:93: 2d:db:51:ae:3f:5c:3e:db:c0:e3:40:54:d3:08:35: 0e:dc:a4:15:75:06:54:cb:49:d1:42:15:13:54:ad: 15:82:c6:d0:5c:2e:2c:bc:02:60:9e:af:74:bf:66: 09:a6:8f:a7:95:37:f1:37:b8:22:6e:d7:1c:df:6b: a5:53:98:bf:b2:25:f4:3a:44:4c:ea:14:3f:7f:41: 5d:d9:93:b2:e8:cf:0d:5f:81:af:a7:85:60:6b:47: 62:8a:ea:3b:5a:4f:a2:76:9a:12:49:5c:f4:02:c8: 0f:7a:51:ee:c3:09:e8:97:d4:ef:bc:cb:7f:b5:f1: d7:39:d5:84:db:40:1b:1d:44:41:1f:b7:fb:55:6d: 29:9b:b8:ba:f9:ee:9d:ac:93:4d:37:fd:28:42:91: 17:65:c1:32:1d:64:78:89:54:4d:57:1f:b0:69:f1: 52:d0:1c:b9:70:da:5e:f3:f5:ff:f2:88:cb:92:19: 38:89:34:4b:c9:48:b4:6c:78:10:80:a0:82:f2:8b: b0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:96:BD:C3:95:81:52:CA:03:BB:DA:7B:19:71:61:02:58:E5:8C:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/912a4fa3-4f2a-367c-af73-91419fdd464c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl X509v3 Authority Key Identifier: keyid:88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer sbgp-ipAddrBlock: critical IPv6: 2620:132:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e2:75:69:ee:14:b1:e4:0a:89:3f:5a:7f:2c:ac:8e:00:0e: 41:c5:40:7e:2a:91:10:22:a8:3e:eb:f2:c0:fd:11:34:d9:2b: ec:d9:d4:73:52:cd:fa:d2:2b:07:bf:14:a5:6d:42:ab:16:ff: a7:5a:cf:3f:70:22:a4:f9:ed:81:f8:d2:bc:f2:de:98:b5:e2: 15:d6:2d:03:5f:ed:fd:8a:ca:1b:b4:ad:b4:b4:a7:8b:6a:5f: 5e:79:91:4d:c3:f8:6a:97:bb:8c:15:37:a2:c3:5d:a8:04:60: ba:6a:e4:98:62:7e:a1:e9:c4:97:68:5f:d7:40:11:8c:76:d6: 5a:54:c9:6a:06:f6:56:a0:d3:f1:d0:d6:a1:0b:b5:0e:56:97: 6a:87:64:e1:cf:5a:cd:d4:6b:f8:c2:49:6c:3b:54:30:4e:2f: 95:d6:01:ab:f4:a2:92:04:65:66:31:40:ed:c7:3a:a2:2a:1c: 2e:62:c1:aa:4b:a8:8d:d8:4b:35:b8:06:1f:19:ed:e7:c3:0e: b6:5b:db:42:0b:5f:44:84:e5:d8:79:c2:4a:74:70:3f:e6:5a: 6f:77:a0:d7:41:eb:61:89:b0:0b:5f:d2:82:c5:a0:1e:66:77: 5c:cf:d2:79:bd:7c:61:d6:5d:7e:da:f6:d8:5a:fa:77:4d:38: 79:dc:f3:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqoW69Kk7BOg6n0C0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJlOWMyNmQtYWRmYS00M2MzLWFhZmQtZDZjMjg2MDY1 Yjc3MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk YjNhM2IxYTgtZWMwNi00NmVjLThmNzEtNjI5ZTkwNmMxYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI22NIKeMZrO5A4wPI0Lb1lZuKUhgmZYU468 f8x+LXMicHWOl4pmVu5nPHgyiWBRfg68O/v7+PRF/pMt21GuP1w+28DjQFTTCDUO 3KQVdQZUy0nRQhUTVK0VgsbQXC4svAJgnq90v2YJpo+nlTfxN7gibtcc32ulU5i/ siX0OkRM6hQ/f0Fd2ZOy6M8NX4Gvp4Vga0diiuo7Wk+idpoSSVz0AsgPelHuwwno l9TvvMt/tfHXOdWE20AbHURBH7f7VW0pm7i6+e6drJNNN/0oQpEXZcEyHWR4iVRN Vx+wafFS0By5cNpe8/X/8ojLkhk4iTRLyUi0bHgQgKCC8ouwywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFiWvcOVgVLKA7vaexlxYQJY5Yw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lYmU5 YzI2ZC1hZGZhLTQzYzMtYWFmZC1kNmMyODYwNjViNzcvOTEyYTRmYTMtNGYyYS0z NjdjLWFmNzMtOTE0MTlmZGQ0NjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWJlOWMyNmQtYWRmYS00M2MzLWFh ZmQtZDZjMjg2MDY1Yjc3L2ViZTljMjZkLWFkZmEtNDNjMy1hYWZkLWQ2YzI4NjA2 NWI3Ny5jcmwwHwYDVR0jBBgwFoAUiF/huxd3ZniYzBASDQoHisgQDHowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lYmU5YzI2ZC1hZGZhLTQzYzMtYWFmZC1kNmMy ODYwNjViNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABMuAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADridWnuFLHkCok/Wn8srI4ADkHFQH4qkRAiqD7r8sD9ETTZK+zZ 1HNSzfrSKwe/FKVtQqsW/6dazz9wIqT57YH40rzy3pi14hXWLQNf7f2Kyhu0rbS0 p4tqX155kU3D+GqXu4wVN6LDXagEYLpq5JhifqHpxJdoX9dAEYx21lpUyWoG9lag 0/HQ1qELtQ5Wl2qHZOHPWs3Ua/jCSWw7VDBOL5XWAav0opIEZWYxQO3HOqIqHC5i wapLqI3YSzW4Bh8Z7efDDrZb20ILX0SE5dh5wkp0cD/mWm93oNdB62GJsAtf0oLF oB5md1zP0nm9fGHWXX7a9tha+ndNOHnc8xM= -----END CERTIFICATE-----Generated at Mon Aug 4 15:26:42 2025 by rpki-client