$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa File: a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa (raw, json) Hash identifier: jMz0ZbG7h40qzCuD7xFwABod2nYarpceO/otQwWbqaw= Subject key identifier: F0:66:37:00:07:E0:4A:1D:C2:A3:6E:09:2C:81:06:D8:EC:7B:75:E7 Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Certificate serial: 010D0C9F4328584A8410DC067AD0E12E4621CC00 Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 393732 IP address blocks: 2620:11d:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:dc:06:7a:d0:e1:2e:46:21:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=73c795a5-f666-4d6b-be08-624a7d57e56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:9c:4c:c2:e1:36:a3:46:5c:16:c5:4a:c2: e4:4d:46:60:cb:23:ec:82:fb:51:a5:f5:30:0a:f9: 04:5d:28:e3:23:5c:10:6e:7a:17:d1:ce:93:81:cf: a3:10:74:29:ad:6f:24:51:5a:f1:5d:65:d8:77:d0: a1:c8:c4:b4:2c:f7:a3:28:be:8d:c4:71:93:57:8b: 1d:08:5b:ea:c0:cc:13:b5:f5:da:a4:f1:6c:02:62: e5:af:37:f9:1f:24:f7:ce:af:ec:78:0f:61:f2:48: f0:df:6f:b8:1c:ba:17:ec:fa:8c:96:9a:d7:ad:aa: f6:54:e3:fb:f5:d9:fa:f5:fa:73:ba:98:45:0e:d3: 65:f4:f5:44:79:b6:21:dc:ab:aa:0c:11:5e:67:b7: 53:47:c9:97:9a:c8:bb:6c:58:80:0a:b3:32:9b:35: 85:74:fc:dd:cf:90:f2:6b:f9:b4:65:c3:44:60:3b: fe:c0:f0:af:e2:86:23:0a:d9:de:c0:2d:9e:c1:0b: 4d:bb:0c:ef:3e:33:1a:70:f6:a0:df:c7:ae:bf:ff: 4c:73:23:0c:87:cc:aa:4d:0b:24:b5:62:21:25:8a: cd:3c:d7:9b:31:8c:9a:bc:96:31:a7:3a:8e:87:36: aa:2e:f2:e9:67:17:dc:7f:36:ff:2f:f4:cd:d9:79: d0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:66:37:00:07:E0:4A:1D:C2:A3:6E:09:2C:81:06:D8:EC:7B:75:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl X509v3 Authority Key Identifier: keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer sbgp-ipAddrBlock: critical IPv6: 2620:11d:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:4b:a9:70:67:e7:33:d7:fa:03:73:92:21:40:f2:00:07:61: fa:8b:28:93:2d:63:9e:9f:0a:a3:2b:ee:5f:d9:e0:b3:fe:85: 03:00:6f:75:0e:1f:9f:d2:9d:f7:23:10:d1:c6:d5:b9:7d:0e: 74:38:40:9a:22:43:15:d1:e6:26:e4:34:47:38:ee:38:95:85: 10:58:0e:ef:23:59:48:e3:3e:54:d1:f9:ff:0f:38:54:75:a9: 61:d6:00:04:a2:ab:cc:2c:3b:5f:74:95:87:aa:17:19:f0:71: 7c:c4:b7:4a:80:47:1b:0c:27:cb:73:cf:f1:48:3f:9d:51:2b: ed:b3:bb:9a:bf:f7:15:c8:17:3d:fa:3d:fb:63:33:9d:33:06: 02:2a:3b:df:cc:97:bf:db:26:95:d9:31:72:1c:fd:59:9e:ea: af:88:23:cd:ac:28:fc:96:3d:62:7c:c6:2b:d3:bd:db:74:ce: 93:1e:c4:26:48:46:2b:fc:cb:98:5e:69:c8:01:e1:4a:99:45: f0:d7:fb:00:52:d6:83:af:66:11:3d:30:61:e4:df:81:65:35: d1:20:c2:82:fb:74:2d:a9:07:bd:d6:ed:33:3e:c3:06:cd:93: 20:2d:1b:93:dc:8d:1d:29:23:00:45:d8:4f:68:90:f7:80:05: f8:c0:de:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEENwGetDhLkYhzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3 MzA2MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NzNjNzk1YTUtZjY2Ni00ZDZiLWJlMDgtNjI0YTdkNTdlNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3+cTMLhNqNGXBbFSsLkTUZgyyPsgvtRpfUw CvkEXSjjI1wQbnoX0c6Tgc+jEHQprW8kUVrxXWXYd9ChyMS0LPejKL6NxHGTV4sd CFvqwMwTtfXapPFsAmLlrzf5HyT3zq/seA9h8kjw32+4HLoX7PqMlprXrar2VOP7 9dn69fpzuphFDtNl9PVEebYh3KuqDBFeZ7dTR8mXmsi7bFiACrMymzWFdPzdz5Dy a/m0ZcNEYDv+wPCv4oYjCtnewC2ewQtNuwzvPjMacPag38euv/9McyMMh8yqTQsk tWIhJYrNPNebMYyavJYxpzqOhzaqLvLpZxfcfzb/L/TN2XnQdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPBmNwAH4EodwqNuCSyBBtjse3XnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvYTA2OWJhOTgtZWMwZi0z MTM1LWEwYWQtMWU4ZTgxZTljMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABHVAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHVLqXBn5zPX+gNzkiFA8gAHYfqLKJMtY56fCqMr7l/Z4LP+hQMA b3UOH5/SnfcjENHG1bl9DnQ4QJoiQxXR5ibkNEc47jiVhRBYDu8jWUjjPlTR+f8P OFR1qWHWAASiq8wsO190lYeqFxnwcXzEt0qARxsMJ8tzz/FIP51RK+2zu5q/9xXI Fz36PftjM50zBgIqO9/Ml7/bJpXZMXIc/Vme6q+II82sKPyWPWJ8xivTvdt0zpMe xCZIRiv8y5heacgB4UqZRfDX+wBS1oOvZhE9MGHk34FlNdEgwoL7dC2pB73W7TM+ wwbNkyAtG5PcjR0pIwBF2E9okPeABfjA3qU= -----END CERTIFICATE-----Generated at Mon Aug 4 22:15:31 2025 by rpki-client