$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa File: dba30138-3d5e-38b5-91a7-e87672ea0f44.roa (raw, json) Hash identifier: PPwEoNCrkyJ2Wuvye5Xaye+MASDyLx8eTZ1aKMLCSZs= Subject key identifier: A3:0A:DE:BF:3A:9F:96:15:4A:0D:4C:76:D0:7F:79:A0:01:02:47:B0 Certificate issuer: /CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963 Certificate serial: 010D0C9F4328584AC2E0F59FF5A8858E6793D500 Authority key identifier: 9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 33194 IP address blocks: 2620:10:a000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:f5:9f:f5:a8:85:8e:67:93:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=7626dd7a-cb70-44c4-b18d-af4b472fcd6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6b:d6:95:8f:85:3e:0d:27:a3:8f:c6:35:f9: fc:17:e4:45:4f:ee:1b:28:e7:fc:2c:f1:de:67:3a: 05:52:74:35:80:82:07:ad:6b:c2:f0:6c:4a:46:79: ae:79:bd:2b:ed:7a:6f:79:c3:28:01:9c:a2:7e:0b: bc:e6:b3:5f:d8:84:4e:bc:2c:8d:bf:71:2e:92:89: 37:51:fe:33:f3:07:c9:14:fa:91:14:24:cc:46:c3: bd:93:4b:7b:30:98:f1:5f:45:f3:cc:70:35:b0:24: 83:3d:dd:d3:3a:66:aa:69:16:cc:d8:c3:f9:a7:41: 0c:cd:74:0f:52:b6:0c:2f:d3:66:cf:d8:e0:dd:4c: e0:9b:0b:33:af:6f:07:06:69:c7:e1:6a:7e:37:42: d7:80:52:58:4c:68:a9:82:5f:ad:cc:91:0c:c5:dc: 5a:be:ce:8e:c2:4a:4c:10:8e:b3:86:6c:2b:d6:cd: 02:e4:56:5b:a7:9f:7f:73:02:7d:58:e1:78:4e:e0: a5:44:b8:19:a1:21:22:bc:58:6d:ad:94:f8:d9:9e: c7:7a:e3:fa:9a:17:bb:4d:1d:0a:b9:1c:a7:06:84: ec:2c:3a:18:b7:33:53:96:7a:01:9b:6e:a2:e5:4d: 08:46:0d:4d:8a:44:d8:bb:7d:17:a9:8c:f9:b1:e9: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0A:DE:BF:3A:9F:96:15:4A:0D:4C:76:D0:7F:79:A0:01:02:47:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.crl X509v3 Authority Key Identifier: keyid:9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer sbgp-ipAddrBlock: critical IPv6: 2620:10:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:18:7e:73:da:8a:03:1b:0a:74:05:98:ce:25:02:e4:95:d9: 67:e9:85:e3:8c:7d:d4:9a:58:30:16:bc:e8:cd:ee:6a:b5:60: 25:de:3c:27:65:56:0e:80:2d:56:d1:30:9b:ea:15:1f:6f:14: af:42:63:7a:50:6c:81:54:d5:2f:7e:a3:c1:99:c1:19:5d:c4: 2d:ef:e5:b5:75:28:8e:39:2a:13:55:37:0d:4f:f0:4f:00:13: 37:aa:d3:36:aa:54:d7:be:87:92:18:37:16:e9:5d:3e:76:52: db:17:8b:4e:3c:95:43:cd:1f:ad:97:2a:24:63:7d:3c:40:0a: 11:21:2d:46:59:b4:ec:ac:77:41:cf:2c:92:c0:ac:51:e7:65: 58:97:fd:57:77:e6:3b:83:75:96:01:ca:05:08:b2:b7:67:1e: 86:11:2e:f5:af:24:a5:74:74:48:92:2a:c0:a9:1f:bb:72:d4: 0e:3d:77:83:77:ea:14:68:33:a7:38:b2:7e:10:7e:26:d2:f1: 06:95:d3:80:94:b2:38:1c:aa:0f:b9:4a:79:95:99:e7:f9:be: 38:8e:79:6c:fc:1c:aa:46:99:c6:f2:b2:de:a1:dc:c6:07:ff: 06:96:2c:d7:50:29:71:06:b2:a0:11:08:16:0b:ab:57:db:bf: 22:40:48:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4PWf9aiFjmeT1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZiNDk1ZmEtYjViMi00ZDQ3LWFhYjAtYmI0NzZjYTYx OTYzMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NzYyNmRkN2EtY2I3MC00NGM0LWIxOGQtYWY0YjQ3MmZjZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2vWlY+FPg0no4/GNfn8F+RFT+4bKOf8LPHe ZzoFUnQ1gIIHrWvC8GxKRnmueb0r7XpvecMoAZyifgu85rNf2IROvCyNv3Eukok3 Uf4z8wfJFPqRFCTMRsO9k0t7MJjxX0XzzHA1sCSDPd3TOmaqaRbM2MP5p0EMzXQP UrYML9Nmz9jg3Uzgmwszr28HBmnH4Wp+N0LXgFJYTGipgl+tzJEMxdxavs6OwkpM EI6zhmwr1s0C5FZbp59/cwJ9WOF4TuClRLgZoSEivFhtrZT42Z7HeuP6mhe7TR0K uRynBoTsLDoYtzNTlnoBm26i5U0IRg1NikTYu30XqYz5selE+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKMK3r86n5YVSg1MdtB/eaABAkewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZmI0 OTVmYS1iNWIyLTRkNDctYWFiMC1iYjQ3NmNhNjE5NjMvZGJhMzAxMzgtM2Q1ZS0z OGI1LTkxYTctZTg3NjcyZWEwZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmZiNDk1ZmEtYjViMi00ZDQ3LWFh YjAtYmI0NzZjYTYxOTYzLzJmYjQ5NWZhLWI1YjItNGQ0Ny1hYWIwLWJiNDc2Y2E2 MTk2My5jcmwwHwYDVR0jBBgwFoAUnCdChVjU1qp998WLkmw2naSFf5QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZmI0OTVmYS1iNWIyLTRkNDctYWFiMC1iYjQ3 NmNhNjE5NjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAEKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL8YfnPaigMbCnQFmM4lAuSV2WfpheOMfdSaWDAWvOjN7mq1YCXe PCdlVg6ALVbRMJvqFR9vFK9CY3pQbIFU1S9+o8GZwRldxC3v5bV1KI45KhNVNw1P 8E8AEzeq0zaqVNe+h5IYNxbpXT52UtsXi048lUPNH62XKiRjfTxAChEhLUZZtOys d0HPLJLArFHnZViX/Vd35juDdZYBygUIsrdnHoYRLvWvJKV0dEiSKsCpH7ty1A49 d4N36hRoM6c4sn4QfibS8QaV04CUsjgcqg+5SnmVmef5vjiOeWz8HKpGmcbyst6h 3MYH/waWLNdQKXEGsqARCBYLq1fbvyJASFo= -----END CERTIFICATE-----Generated at Sat Aug 9 20:45:18 2025 by rpki-client