$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/dcaf58ee-6eb7-3de9-b353-3f111c591d5b.roa File: dcaf58ee-6eb7-3de9-b353-3f111c591d5b.roa (raw, json) Hash identifier: WiF1uykWXX13sDoyb5fgiRqbOQ5YvyynDgq4rNik4Fw= Subject key identifier: 12:7C:9A:AD:B6:6F:A7:78:A9:1F:11:5E:70:C6:9F:DD:A4:73:41:F0 Certificate issuer: /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d Certificate serial: 010D0C9F4328584AA6F62602911A59DC66D8DC00 Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/dcaf58ee-6eb7-3de9-b353-3f111c591d5b.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 31898 IP address blocks: 2603:5000:1040::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:26:02:91:1a:59:dc:66:d8:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=67ffe8cc-4348-4894-b039-f08b16402a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:2a:3a:6b:12:cc:04:97:ea:78:0e:ef:6e: 9e:69:03:69:3b:35:1c:30:b0:a1:46:05:78:5d:97: a1:c0:65:ab:35:4a:cb:64:b2:fb:ed:79:3f:aa:a0: 87:25:c7:c2:a8:9b:20:79:ad:5d:e4:79:ec:69:4c: ca:2f:9c:62:8e:f3:aa:38:e6:63:a1:96:a2:14:43: 5a:af:9b:78:f1:92:0b:e3:28:5c:fc:bb:40:c9:87: 38:10:36:e0:c5:2e:40:f2:8a:f1:54:82:04:c8:86: 54:ea:8b:e1:ea:9f:4c:73:d0:df:39:5e:8e:69:c6: 14:03:9c:2f:73:50:ce:1a:08:f5:f9:f9:95:29:f2: 21:33:0a:bf:09:cf:a1:5d:92:59:ca:9a:46:e8:c7: 1f:e2:26:d9:11:99:08:13:95:8b:64:ed:de:d5:8a: 60:dc:19:d7:ce:ff:63:e2:bb:f1:c8:0c:73:de:ad: 47:c2:72:bb:35:44:80:8f:45:42:68:24:a8:9d:15: 19:fe:52:67:56:25:17:ae:a6:ca:fa:f6:c3:07:83: 3b:d1:0f:f2:e5:30:b2:60:be:91:18:24:a1:a7:e8: af:e2:f7:88:ee:f4:5a:8c:72:38:20:f8:37:b1:39: df:e7:15:37:19:16:d9:56:fe:c4:b2:2a:b5:04:43: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7C:9A:AD:B6:6F:A7:78:A9:1F:11:5E:70:C6:9F:DD:A4:73:41:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/dcaf58ee-6eb7-3de9-b353-3f111c591d5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl X509v3 Authority Key Identifier: keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer sbgp-ipAddrBlock: critical IPv6: 2603:5000:1040::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:25:e8:21:8d:48:4b:c4:38:4d:97:6d:a6:a1:12:15:43:2d: 8c:18:b1:84:07:a6:50:1b:3f:cb:e9:24:0c:91:89:42:52:12: 7e:eb:e2:c7:b4:80:9e:0b:4c:85:fa:ad:a2:d3:44:ad:40:85: 83:26:d1:e9:a0:a1:cd:bb:6e:8b:88:f9:a6:c1:1b:8d:91:2a: 09:ee:28:5a:da:f3:6d:8a:69:47:7a:13:1b:30:98:f5:55:78: 92:09:ca:d5:a9:b4:40:c4:35:cf:2f:32:d3:e1:23:1c:4c:6a: 24:1a:a7:0b:e2:90:40:de:2c:a2:d5:87:f2:c9:dd:05:d2:61: 98:42:30:62:fa:5a:83:6e:8c:1a:99:0b:ca:7f:72:01:ee:1b: 9d:a1:4f:ba:99:72:87:40:8f:d5:0f:99:f1:9b:b4:62:38:cf: 6e:35:5f:e4:36:09:4d:b5:49:e5:8b:21:48:b9:39:72:ee:c2: 3c:ed:52:29:31:79:8a:17:23:05:a8:ee:b5:5e:20:17:87:53: a5:14:f4:52:48:a5:1a:ec:7a:77:66:01:63:ad:69:e6:f3:c0: a1:89:ad:ea:32:70:d4:e6:0c:64:b9:76:3c:1c:45:c8:3a:3c: a0:8e:15:55:73:dc:92:b5:6e:60:26:b1:9e:48:aa:13:6b:85: 86:ef:a4:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqm9iYCkRpZ3GbY3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc1ZDIwZjYtMWNmYS00ODNlLWJlMGYtZDE1ZWI1NDhm NjZkMB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NjdmZmU4Y2MtNDM0OC00ODk0LWIwMzktZjA4YjE2NDAyYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ0qOmsSzASX6ngO726eaQNpOzUcMLChRgV4 XZehwGWrNUrLZLL77Xk/qqCHJcfCqJsgea1d5HnsaUzKL5xijvOqOOZjoZaiFENa r5t48ZIL4yhc/LtAyYc4EDbgxS5A8orxVIIEyIZU6ovh6p9Mc9DfOV6OacYUA5wv c1DOGgj1+fmVKfIhMwq/Cc+hXZJZyppG6Mcf4ibZEZkIE5WLZO3e1Ypg3BnXzv9j 4rvxyAxz3q1HwnK7NUSAj0VCaCSonRUZ/lJnViUXrqbK+vbDB4M70Q/y5TCyYL6R GCShp+iv4veI7vRajHI4IPg3sTnf5xU3GRbZVv7Esiq1BEMOBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBJ8mq22b6d4qR8RXnDGn92kc0HwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NzVk MjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVlYjU0OGY2NmQvZGNhZjU4ZWUtNmViNy0z ZGU5LWIzNTMtM2YxMTFjNTkxZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc1ZDIwZjYtMWNmYS00ODNlLWJl MGYtZDE1ZWI1NDhmNjZkLzc3NWQyMGY2LTFjZmEtNDgzZS1iZTBmLWQxNWViNTQ4 ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUGy2qCGYWpuHYP/G3Oy3sdH8TIz4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83NzVkMjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVl YjU0OGY2NmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgNQABBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIkl6CGNSEvEOE2XbaahEhVDLYwYsYQHplAbP8vpJAyRiUJSEn7r 4se0gJ4LTIX6raLTRK1AhYMm0emgoc27bouI+abBG42RKgnuKFra822KaUd6Exsw mPVVeJIJytWptEDENc8vMtPhIxxMaiQapwvikEDeLKLVh/LJ3QXSYZhCMGL6WoNu jBqZC8p/cgHuG52hT7qZcodAj9UPmfGbtGI4z241X+Q2CU21SeWLIUi5OXLuwjzt UikxeYoXIwWo7rVeIBeHU6UU9FJIpRrsendmAWOtaebzwKGJreoycNTmDGS5djwc Rcg6PKCOFVVz3JK1bmAmsZ5IqhNrhYbvpHc= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:16 2025 by rpki-client