$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa File: 970b7e04-01f1-3927-90a0-79d7a904fce7.roa (raw, json) Hash identifier: rZiH3eg/UOIW9Pp/cGYDyCVuxOiO8Ic4TjGt+J1Ez+A= Subject key identifier: 7B:5C:9B:11:97:09:31:15:03:22:43:DE:9B:CF:EF:7E:B8:D7:F4:52 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584A89A61828BD8BD824A4CA4F00 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 10390 IP address blocks: 2620:10f:400e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:18:28:bd:8b:d8:24:a4:ca:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=a95afb09-9126-4d0b-b418-6f6023da95a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fe:a0:71:2a:c4:94:87:25:34:d1:3c:13:89: 41:b9:c2:e5:1c:20:55:3a:b3:8e:70:c7:e2:b5:b4: f5:5c:06:d0:87:33:7a:c3:2f:68:19:c7:20:33:e5: a7:80:a8:9b:37:56:c4:28:9a:f9:8c:72:db:d8:cc: 18:2a:8a:08:e1:10:88:d8:bc:83:41:08:bf:62:69: df:80:27:86:7b:c4:60:35:eb:5e:75:ef:73:a8:6d: 9b:22:85:d9:4a:f2:b9:5c:24:09:f1:55:5d:b4:48: 15:e7:32:90:e4:d3:4f:21:23:10:af:0a:6f:5d:5b: de:dd:62:85:99:3c:02:65:d6:8b:c2:5a:fd:30:b4: 1c:2f:8b:88:36:16:16:2b:a4:0b:66:13:91:59:21: d3:fa:10:35:9e:cb:82:f4:c3:68:94:91:77:8b:2b: 39:88:01:d1:0a:54:52:06:e0:c6:0a:8b:d3:26:9b: f4:19:39:dc:cb:db:1c:06:bb:27:fc:1e:51:06:0e: 61:94:81:d3:5a:27:27:0d:a5:a9:16:59:73:05:a5: d3:5f:da:d3:c8:c9:63:35:1e:1b:51:ff:86:92:27: db:a8:a3:25:34:7b:85:fe:4f:02:c2:07:00:5f:05: 6a:9d:88:e5:22:9c:a1:ab:a1:94:05:de:98:14:1d: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5C:9B:11:97:09:31:15:03:22:43:DE:9B:CF:EF:7E:B8:D7:F4:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv6: 2620:10f:400e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2b:09:eb:ac:df:d0:24:a8:64:c9:09:24:ee:1d:14:25:ef: e7:d0:4e:d4:bf:69:44:8f:81:84:55:f9:85:34:61:d7:8d:47: ea:2e:40:5c:27:90:60:8a:69:ee:0f:6f:46:05:c0:ed:38:49: 10:64:04:b0:fb:12:b5:77:b1:cb:0d:07:31:4f:0e:23:a8:e1: a3:e8:ba:45:81:eb:fd:33:4b:02:7e:8a:92:8c:bd:eb:d4:1c: 37:99:f2:3f:0c:1c:47:e5:94:11:fb:5e:1b:50:67:46:d4:c8: 81:ec:b3:65:9c:60:92:99:ac:0a:ae:55:a6:34:f2:55:92:dc: ac:2d:5d:08:40:dc:93:44:be:c0:d5:96:03:48:53:1b:94:c4: 8e:aa:9f:cf:b2:cf:4a:b3:9d:68:ee:48:02:18:32:aa:08:64: 75:17:4e:f0:90:42:d5:4e:fd:30:81:14:32:b3:f7:16:7e:c5: 93:53:7a:b9:a7:08:57:fd:af:01:40:37:8b:1b:c4:69:ca:99: a0:51:49:0d:8d:19:a1:92:e5:d1:b4:3c:02:e4:74:98:27:32: 58:d7:34:44:3d:2d:d9:93:9e:5a:7e:df:f6:a2:90:af:2c:0c: fd:d0:59:18:80:4d:31:e5:04:10:74:c2:3c:bf:cc:d0:4f:ce: c7:8a:8c:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqJphgovYvYJKTKTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk YTk1YWZiMDktOTEyNi00ZDBiLWI0MTgtNmY2MDIzZGE5NWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P6gcSrElIclNNE8E4lBucLlHCBVOrOOcMfi tbT1XAbQhzN6wy9oGccgM+WngKibN1bEKJr5jHLb2MwYKooI4RCI2LyDQQi/Ymnf gCeGe8RgNetede9zqG2bIoXZSvK5XCQJ8VVdtEgV5zKQ5NNPISMQrwpvXVve3WKF mTwCZdaLwlr9MLQcL4uINhYWK6QLZhORWSHT+hA1nsuC9MNolJF3iys5iAHRClRS BuDGCovTJpv0GTncy9scBrsn/B5RBg5hlIHTWicnDaWpFllzBaXTX9rTyMljNR4b Uf+GkifbqKMlNHuF/k8CwgcAXwVqnYjlIpyhq6GUBd6YFB3akQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHtcmxGXCTEVAyJD3pvP73641/RSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvOTcwYjdlMDQtMDFmMS0z OTI3LTkwYTAtNzlkN2E5MDRmY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABD0AO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC0rCeus39AkqGTJCSTuHRQl7+fQTtS/aUSPgYRV+YU0YdeNR+ou QFwnkGCKae4Pb0YFwO04SRBkBLD7ErV3scsNBzFPDiOo4aPoukWB6/0zSwJ+ipKM vevUHDeZ8j8MHEfllBH7XhtQZ0bUyIHss2WcYJKZrAquVaY08lWS3KwtXQhA3JNE vsDVlgNIUxuUxI6qn8+yz0qznWjuSAIYMqoIZHUXTvCQQtVO/TCBFDKz9xZ+xZNT ermnCFf9rwFAN4sbxGnKmaBRSQ2NGaGS5dG0PALkdJgnMljXNEQ9LdmTnlp+3/ai kK8sDP3QWRiATTHlBBB0wjy/zNBPzseKjNg= -----END CERTIFICATE-----Generated at Tue Aug 5 16:40:18 2025 by rpki-client