$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa File: 0591e8cc-de15-308a-9274-817e31ffff4e.roa (raw, json) Hash identifier: zxnkO3MyBtlMmQ/TIdQjpFt5abNlI7NyvKKwIPPuwRo= Subject key identifier: 4D:37:AE:49:14:0D:8B:1D:34:10:25:77:4E:D7:DC:A7:60:65:51:66 Certificate issuer: /CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9 Certificate serial: 010D0C9F4328584A7D15F7F187963F3A19A5B800 Authority key identifier: F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 8134 IP address blocks: 2001:4a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f7:f1:87:96:3f:3a:19:a5:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=a969dd63-9c39-46a4-a180-dec155ae7d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6c:4a:04:5d:04:ac:11:1b:49:93:4b:a2:db: 52:4a:43:5b:97:5e:8c:34:f3:7d:fa:47:84:ec:e8: 5b:7a:8e:83:b8:ac:36:bb:53:8b:66:23:cf:5a:fb: ed:17:49:ed:d6:45:62:e6:ae:03:82:c2:bc:40:2f: 44:d0:fb:21:ba:4e:eb:f6:ed:25:48:0f:6a:4e:d7: 34:62:72:1d:a0:55:6e:7f:e9:d0:bf:5c:2c:fc:29: 24:bd:c8:cb:43:2c:42:fa:76:fb:b0:47:5a:8e:0b: 66:63:92:26:b8:b5:ba:a7:39:ef:c2:c2:98:c2:2d: d2:59:17:b9:6b:d4:3e:a4:7a:bd:ce:d0:05:3c:30: 5a:ae:14:69:cb:f0:03:30:dd:52:8d:f1:1d:ff:70: 6e:c6:b8:8c:6f:46:22:55:21:0c:c3:aa:1d:f2:7d: 2f:7c:dd:87:b1:1d:e1:83:aa:f1:69:d8:3d:9b:ab: b1:75:b7:44:95:ad:15:eb:ab:35:60:9a:4c:66:a7: 5d:83:f5:92:b5:03:95:4f:48:bb:37:74:b7:31:e2: ed:b6:09:c0:cd:35:b0:2b:19:a1:6c:bb:8b:37:01: 84:95:50:ab:d6:63:fb:8d:93:d2:0f:bd:05:99:d7: 69:dd:13:03:e9:66:fb:30:48:a3:3e:0a:99:5b:8c: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:37:AE:49:14:0D:8B:1D:34:10:25:77:4E:D7:DC:A7:60:65:51:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl X509v3 Authority Key Identifier: keyid:F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:50:6f:9c:2e:59:d0:49:3c:ff:16:5c:01:10:d7:25:00:78: 54:f8:c2:dc:49:15:ed:21:b7:69:94:d4:ed:e3:80:fc:a9:4f: ca:ce:20:8f:2b:54:57:18:d2:2e:f2:e1:9a:12:4b:8e:73:cb: 62:92:a4:2d:d6:ac:86:ec:f9:d2:05:9b:c1:65:b0:29:7a:a8: 65:e6:26:ea:5c:82:e7:92:98:dc:0d:5d:16:3b:1d:2c:54:ed: c8:80:c0:77:46:28:bd:01:28:d4:69:71:ed:e7:93:4b:b6:48: 2a:2c:32:d5:e6:0a:6e:00:29:76:a8:3b:a3:0f:f3:1b:43:a9: 76:42:a0:2b:1c:b3:b3:1f:d8:00:0c:a8:8f:f7:f6:13:11:55: 57:5a:80:e4:32:be:0c:46:29:32:47:68:44:d8:16:57:2a:46: 8a:6e:cc:a4:df:20:72:a7:30:4c:3b:81:4b:e1:6d:36:bb:7f: 9f:00:16:e2:0e:46:76:4c:62:58:8a:d5:52:70:7a:94:5c:da: 7b:e6:08:fb:72:bb:52:db:4d:28:8e:70:9f:02:94:ee:7d:3e: b8:89:6a:ea:3b:aa:06:6b:fd:71:2e:c1:85:39:4c:2c:5b:f0: f0:8e:d0:76:a1:45:7b:61:d9:f3:17:e4:8e:8b:44:1e:00:b3: 81:7d:1c:72 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp9Fffxh5Y/OhmluAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdhMjZiMTMtYzI5NS00ZjBiLWJlYzUtNDY0NWRkZDFk MGQ5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk YTk2OWRkNjMtOWMzOS00NmE0LWExODAtZGVjMTU1YWU3ZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2xKBF0ErBEbSZNLottSSkNbl16MNPN9+keE 7Ohbeo6DuKw2u1OLZiPPWvvtF0nt1kVi5q4DgsK8QC9E0Pshuk7r9u0lSA9qTtc0 YnIdoFVuf+nQv1ws/CkkvcjLQyxC+nb7sEdajgtmY5ImuLW6pznvwsKYwi3SWRe5 a9Q+pHq9ztAFPDBarhRpy/ADMN1SjfEd/3BuxriMb0YiVSEMw6od8n0vfN2HsR3h g6rxadg9m6uxdbdEla0V66s1YJpMZqddg/WStQOVT0i7N3S3MeLttgnAzTWwKxmh bLuLNwGElVCr1mP7jZPSD70Fmddp3RMD6Wb7MEijPgqZW4y3LQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE03rkkUDYsdNBAld07X3KdgZVFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hN2Ey NmIxMy1jMjk1LTRmMGItYmVjNS00NjQ1ZGRkMWQwZDkvMDU5MWU4Y2MtZGUxNS0z MDhhLTkyNzQtODE3ZTMxZmZmZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTdhMjZiMTMtYzI5NS00ZjBiLWJl YzUtNDY0NWRkZDFkMGQ5L2E3YTI2YjEzLWMyOTUtNGYwYi1iZWM1LTQ2NDVkZGQx ZDBkOS5jcmwwHwYDVR0jBBgwFoAU8kCiwttTySyJz6btiRgTJRGu0l0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hN2EyNmIxMy1jMjk1LTRmMGItYmVjNS00NjQ1 ZGRkMWQwZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEEoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB2UG+cLlnQSTz/FlwBENclAHhU+MLcSRXtIbdplNTt44D8qU/KziCP K1RXGNIu8uGaEkuOc8tikqQt1qyG7PnSBZvBZbApeqhl5ibqXILnkpjcDV0WOx0s VO3IgMB3Rii9ASjUaXHt55NLtkgqLDLV5gpuACl2qDujD/MbQ6l2QqArHLOzH9gA DKiP9/YTEVVXWoDkMr4MRikyR2hE2BZXKkaKbsyk3yBypzBMO4FL4W02u3+fABbi DkZ2TGJYitVScHqUXNp75gj7crtS200ojnCfApTufT64iWrqO6oGa/1xLsGFOUws W/DwjtB2oUV7YdnzF+SOi0QeALOBfRxy -----END CERTIFICATE-----Generated at Wed Aug 6 10:17:21 2025 by rpki-client