$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/39fc107a-067e-33f3-b40f-4050eee42228.roa File: 39fc107a-067e-33f3-b40f-4050eee42228.roa (raw, json) Hash identifier: xGH3mYE+u5Fi5DvPe7bRrFMMwUH6TDYs0vDXPUtiK7M= Subject key identifier: 65:DD:35:D7:77:4C:66:2A:35:0F:04:3B:3B:2A:04:17:FD:D6:C4:15 Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Certificate serial: 010D0C9F4328584A8410DBE456F4AF2AC96A9E00 Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/39fc107a-067e-33f3-b40f-4050eee42228.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 393732 IP address blocks: 2620:11d:500f::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:db:e4:56:f4:af:2a:c9:6a:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a9344ac3-299d-487f-924e-bee03e2ee33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2b:5e:84:89:47:0f:8b:43:40:2f:d4:16:11: 9c:ff:6a:04:d4:f8:d1:20:67:67:af:1d:0f:1d:f9: 3f:09:fa:1d:7f:23:e4:9e:85:d4:59:81:4d:72:f1: 2d:05:69:7f:96:54:fe:ca:b2:ab:de:b9:ec:66:68: 04:60:5f:02:35:1b:6c:01:7a:39:e6:dd:27:8c:42: 90:c6:f2:5c:66:27:3f:83:92:ef:63:bc:84:9a:fe: e0:dd:5b:0f:df:54:e3:f3:6b:47:39:85:ce:b6:83: 63:f4:f9:83:a7:c3:99:86:02:11:4b:73:8e:b3:d9: 0d:f3:f5:64:1c:33:63:21:34:8d:28:e1:1a:18:e9: 1c:fe:1e:cf:ec:e0:50:c1:c8:5d:68:86:c8:85:d2: 87:d8:42:ef:a0:26:c2:e7:01:a7:fd:b8:ab:1b:52: be:8c:c8:04:48:87:10:eb:b1:f6:0c:3e:c5:37:c8: 2c:0d:76:e0:01:ac:68:a3:a0:11:b3:cb:17:99:f4: 37:0a:93:cb:70:a6:8a:0f:65:91:4b:7f:b0:ed:17: da:9e:8f:72:0d:13:17:99:b2:11:a8:21:fe:57:39: 95:59:a8:d6:02:59:30:bd:6a:83:cc:01:f8:5f:0c: 92:22:50:18:bf:27:55:c8:65:2f:93:8c:a4:00:24: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DD:35:D7:77:4C:66:2A:35:0F:04:3B:3B:2A:04:17:FD:D6:C4:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/39fc107a-067e-33f3-b40f-4050eee42228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl X509v3 Authority Key Identifier: keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer sbgp-ipAddrBlock: critical IPv6: 2620:11d:500f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:98:67:f2:4e:4a:4d:ae:59:78:c7:5a:0e:8d:d4:4e:3e:62: 7c:69:ea:0b:0b:ed:3a:6d:19:b6:9e:d9:09:57:1c:94:1a:e3: 99:d3:fb:cd:35:01:c8:10:0a:2a:85:86:c3:d6:57:93:45:46: 6b:21:bd:d4:98:e6:1f:0f:20:9c:a4:a2:02:55:dc:12:eb:d8: b3:e3:23:52:27:77:2c:80:6d:81:07:4e:64:44:05:24:ca:99: cd:95:c0:81:30:2a:7a:86:14:a9:a1:5b:1e:52:7f:22:c7:24: f1:02:80:56:8d:97:95:8b:4b:9c:07:e5:6f:c1:bb:ab:4e:bc: e2:37:e7:d7:d7:02:a3:3d:30:71:3e:f0:40:74:b7:21:6d:05: af:f9:b1:c4:f8:0b:c9:df:d1:23:8f:f8:26:10:1e:85:27:b0: 95:29:00:ce:0e:f3:92:0d:50:1e:bc:62:68:08:cc:ca:22:e0: 7e:48:99:cc:a5:29:3a:a3:8c:9b:68:e5:a7:61:08:f5:52:62: 66:17:eb:41:b6:b3:61:50:23:68:93:0c:50:9f:f1:9c:2b:f3: 85:9c:fa:d0:4c:9f:5f:52:55:93:4b:59:6f:ed:dd:8e:a3:a9: 0e:5c:b0:19:27:61:81:6f:97:66:f4:17:2f:06:c4:67:b0:c6: 19:e4:78:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEENvkVvSvKslqngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3 MzA2MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTkzNDRhYzMtMjk5ZC00ODdmLTkyNGUtYmVlMDNlMmVlMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhitehIlHD4tDQC/UFhGc/2oE1PjRIGdnrx0P Hfk/CfodfyPknoXUWYFNcvEtBWl/llT+yrKr3rnsZmgEYF8CNRtsAXo55t0njEKQ xvJcZic/g5LvY7yEmv7g3VsP31Tj82tHOYXOtoNj9PmDp8OZhgIRS3OOs9kN8/Vk HDNjITSNKOEaGOkc/h7P7OBQwchdaIbIhdKH2ELvoCbC5wGn/birG1K+jMgESIcQ 67H2DD7FN8gsDXbgAaxoo6ARs8sXmfQ3CpPLcKaKD2WRS3+w7Rfano9yDRMXmbIR qCH+VzmVWajWAlkwvWqDzAH4XwySIlAYvydVyGUvk4ykACS2zwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGXdNdd3TGYqNQ8EOzsqBBf91sQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvMzlmYzEwN2EtMDY3ZS0z M2YzLWI0MGYtNDA1MGVlZTQyMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABHVAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADqYZ/JOSk2uWXjHWg6N1E4+Ynxp6gsL7TptGbae2QlXHJQa45nT +801AcgQCiqFhsPWV5NFRmshvdSY5h8PIJykogJV3BLr2LPjI1IndyyAbYEHTmRE BSTKmc2VwIEwKnqGFKmhWx5SfyLHJPECgFaNl5WLS5wH5W/Bu6tOvOI359fXAqM9 MHE+8EB0tyFtBa/5scT4C8nf0SOP+CYQHoUnsJUpAM4O85INUB68YmgIzMoi4H5I mcylKTqjjJto5adhCPVSYmYX60G2s2FQI2iTDFCf8Zwr84Wc+tBMn19SVZNLWW/t 3Y6jqQ5csBknYYFvl2b0Fy8GxGewxhnkeAk= -----END CERTIFICATE-----Generated at Wed Aug 6 10:59:25 2025 by rpki-client