$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa File: 3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa (raw, json) Hash identifier: zTHluQmCWmrDskgKBk6pJJjO3itpdvMCDmg7Ri94UDs= Subject key identifier: 31:33:C6:3F:64:1C:54:94:2B:39:C2:1B:DF:12:B8:D8:16:4A:83:B2 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584A90A0C02B5F37C3AC171AE600 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 32771 IP address blocks: 2620:111:8003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c0:2b:5f:37:c3:ac:17:1a:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=c4858124-8352-4497-8ed5-0e51b39021aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:e1:ae:c9:a6:7c:9d:2e:d3:dd:a9:02:d8: 85:8e:ce:cd:52:ff:f7:f9:24:27:ea:77:ba:43:4f: 18:4d:1f:eb:59:3b:38:49:03:14:87:16:07:8c:5c: 22:aa:1e:d1:94:62:b9:44:18:20:af:10:e2:43:a4: 84:59:83:26:cf:46:86:5e:ec:93:38:d3:fb:7b:da: 0d:2d:2d:36:42:bd:b5:91:77:18:95:63:47:bf:c5: 88:b8:df:fd:6c:ff:cf:f4:89:a2:87:b0:3e:3e:72: 8d:65:c1:de:0d:0f:a6:29:45:30:fe:2d:13:e0:6d: 47:25:61:3c:4d:53:52:fa:72:ac:b3:f7:2f:51:72: d7:a1:0f:8b:10:5d:98:1f:81:c4:19:a9:c7:f5:5d: e2:7d:48:f0:3d:f6:76:f2:66:a8:ee:82:21:b9:ec: 3e:66:ad:bc:be:c0:a1:92:30:fa:21:54:25:94:44: 27:cd:c6:00:cf:37:f1:ea:4f:ed:01:35:f3:c5:a7: 28:0b:8e:f0:23:08:6f:1d:bb:29:bc:24:d0:bc:33: 41:ee:bf:a0:3c:15:fc:0b:22:75:8f:3a:25:35:38: d8:19:29:f5:96:70:d8:72:fc:87:2f:08:d2:e8:1b: ba:bb:8c:da:cc:c5:7a:60:33:8e:5f:4e:4f:e8:51: f7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:33:C6:3F:64:1C:54:94:2B:39:C2:1B:DF:12:B8:D8:16:4A:83:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:8003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6f:11:74:fb:dd:4a:89:e8:8b:a0:aa:dc:32:db:5b:64:85: c1:0f:84:6d:e8:98:61:03:ab:b8:33:24:1c:99:e6:0d:8d:53: ac:db:62:b2:99:11:af:22:cb:8a:f2:a5:08:b3:80:54:07:2d: fe:45:05:c7:d0:24:07:64:7a:86:76:03:5d:aa:34:26:f6:96: 0e:d2:21:7a:3f:c0:b4:88:cb:42:8c:c8:94:58:ee:76:cd:3a: 53:8f:0d:e0:92:04:69:13:a1:7b:24:96:50:82:b9:ce:33:3b: 79:ea:50:bc:da:5e:eb:64:eb:d2:7d:be:bf:16:df:6e:a9:bc: 31:57:4e:50:2f:8d:7d:eb:7c:ea:4e:e5:91:55:ae:73:dc:fc: dd:20:ef:1b:60:a8:a1:82:eb:29:06:c2:d0:a9:48:83:57:43: 51:ce:46:dc:0f:31:63:33:90:56:2e:e7:3b:af:29:51:be:40: 36:d3:ac:09:7b:fc:2c:c0:52:c4:eb:af:20:8e:57:20:64:80: 9d:a4:b7:5b:a3:c0:6e:d0:b0:6a:d8:69:25:e9:bb:b0:75:fd: 93:6c:a0:d5:e7:47:31:c9:b1:29:81:08:72:1f:cc:5e:af:43: db:2e:d0:a5:db:d4:23:75:da:41:af:44:51:37:dc:9f:cd:65: 18:d1:71:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoMArXzfDrBca5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YzQ4NTgxMjQtODM1Mi00NDk3LThlZDUtMGU1MWIzOTAyMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/LhrsmmfJ0u092pAtiFjs7NUv/3+SQn6ne6 Q08YTR/rWTs4SQMUhxYHjFwiqh7RlGK5RBggrxDiQ6SEWYMmz0aGXuyTONP7e9oN LS02Qr21kXcYlWNHv8WIuN/9bP/P9Imih7A+PnKNZcHeDQ+mKUUw/i0T4G1HJWE8 TVNS+nKss/cvUXLXoQ+LEF2YH4HEGanH9V3ifUjwPfZ28mao7oIhuew+Zq28vsCh kjD6IVQllEQnzcYAzzfx6k/tATXzxacoC47wIwhvHbspvCTQvDNB7r+gPBX8CyJ1 jzolNTjYGSn1lnDYcvyHLwjS6Bu6u4zazMV6YDOOX05P6FH3QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDEzxj9kHFSUKznCG98SuNgWSoOyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvMzY4MmM4NTctYTFlOS0z M2QyLWJkMGYtYTRkOTVkZjg4ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB9vEXT73UqJ6Iugqtwy21tkhcEPhG3omGEDq7gzJByZ5g2NU6zb YrKZEa8iy4rypQizgFQHLf5FBcfQJAdkeoZ2A12qNCb2lg7SIXo/wLSIy0KMyJRY 7nbNOlOPDeCSBGkToXskllCCuc4zO3nqULzaXutk69J9vr8W326pvDFXTlAvjX3r fOpO5ZFVrnPc/N0g7xtgqKGC6ykGwtCpSINXQ1HORtwPMWMzkFYu5zuvKVG+QDbT rAl7/CzAUsTrryCOVyBkgJ2kt1ujwG7QsGrYaSXpu7B1/ZNsoNXnRzHJsSmBCHIf zF6vQ9su0KXb1CN12kGvRFE33J/NZRjRcSU= -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:26 2025 by rpki-client