$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa File: 5da813c6-3362-3a15-8c8f-01d933e11263.roa (raw, json) Hash identifier: bRMy3W1mzkfLtGvQXYq5WZ1w+5vzS/d7scyBRPK9070= Subject key identifier: C6:A0:2A:BE:82:17:30:3D:B1:1B:E8:E4:16:44:FD:47:58:5B:9A:95 Certificate issuer: /CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Certificate serial: 010D0C9F4328584A8B0B514FA3BA077DE6199780 Authority key identifier: 6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 16509 IP address blocks: 2620:10b:b008::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:51:4f:a3:ba:07:7d:e6:19:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=68c8a3e1-2e60-49b1-ad43-6a0ee5013e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:9e:ca:c7:d7:9a:22:e7:33:39:96:6b:39: 15:30:6e:77:b3:fa:c2:db:b3:2f:bf:f8:12:28:15: 3b:fa:00:40:b1:8e:8b:82:68:ae:f3:a5:f1:02:b1: df:a6:e9:1b:2a:e4:3d:ee:3b:a6:49:14:fd:df:8a: 37:23:3a:2a:04:a5:56:04:bd:b8:d7:fb:f9:bb:1c: dd:8b:99:5d:fb:d5:72:62:8a:48:40:b6:38:f7:2d: be:4b:e2:7b:a9:87:60:81:95:01:46:06:33:4d:6e: 1e:1c:67:20:54:c6:7b:59:92:09:bb:3e:59:f7:91: c7:63:52:0e:19:1d:8f:db:9f:a1:c3:37:57:68:8d: f8:4e:ea:f0:ab:08:da:4f:ac:92:93:26:2b:7f:d7: cd:4b:ed:94:2c:91:79:02:0c:f0:17:69:20:74:f4: f8:f6:fa:8b:0c:0f:fa:16:70:36:b7:2b:ca:4d:bc: 43:e8:53:af:25:fd:e5:40:b8:91:d8:a3:97:36:ba: 40:d0:db:54:f9:a7:18:a6:4d:ad:11:06:59:0e:81: a9:69:fb:07:0f:e1:a4:28:e7:00:3b:63:dd:eb:a8: 5a:05:d9:1e:41:7a:08:0b:2b:94:70:e4:6d:43:fc: a7:f4:75:82:3e:33:3a:a6:4e:1d:f6:f9:7c:fc:29: 6c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A0:2A:BE:82:17:30:3D:B1:1B:E8:E4:16:44:FD:47:58:5B:9A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl X509v3 Authority Key Identifier: keyid:6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer sbgp-ipAddrBlock: critical IPv6: 2620:10b:b008::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:41:f0:cd:8c:d6:42:5b:69:9d:df:ba:e4:b8:c8:1b:c7:07: 44:be:7d:4a:14:7e:00:5f:f0:63:68:35:e4:d4:9e:a6:b1:26: bb:3b:f9:ea:16:5d:0c:e3:5b:65:bd:17:c4:b1:0a:aa:be:04: b6:8c:a7:60:f9:78:b6:d7:78:54:61:c5:21:17:30:03:2e:87: af:29:a5:f2:8a:e5:01:e8:64:06:62:9d:93:04:a3:97:da:47: 0e:94:48:f0:0c:55:c6:a9:55:02:7e:09:65:5f:78:b5:58:f1: ab:e9:9d:0f:a4:9d:0b:12:19:00:34:09:37:08:36:e3:da:3c: 37:06:26:31:fa:7d:4a:0d:71:b9:1f:26:24:1d:62:ea:95:df: 6d:98:0d:25:ec:b1:c8:3c:48:78:9a:25:cc:65:fb:69:58:b3: c4:77:94:9a:7a:81:3d:53:8e:1e:d4:9a:17:1d:a6:b9:be:f4: 13:52:3b:09:ec:2a:f9:3d:8e:f4:9f:1c:b7:52:0b:33:87:9b: 37:db:16:d1:10:88:c6:a8:8b:92:0a:c5:99:47:63:89:8d:ad: fb:c6:47:1f:87:69:c9:5a:47:e1:02:e2:e2:aa:9d:eb:55:fb: 04:77:bc:37:b1:81:d0:5d:ee:d8:e2:45:b5:b8:b5:e8:cc:9c: 44:fe:5f:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqLC1FPo7oHfeYZl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNlZjdkYjEtZDBmNy00YTk1LThjMzYtZDE2MmEyOGE1 MmM2MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NjhjOGEzZTEtMmU2MC00OWIxLWFkNDMtNmEwZWU1MDEzZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYCeysfXmiLnMzmWazkVMG53s/rC27Mvv/gS KBU7+gBAsY6Lgmiu86XxArHfpukbKuQ97jumSRT934o3IzoqBKVWBL241/v5uxzd i5ld+9VyYopIQLY49y2+S+J7qYdggZUBRgYzTW4eHGcgVMZ7WZIJuz5Z95HHY1IO GR2P25+hwzdXaI34TurwqwjaT6ySkyYrf9fNS+2ULJF5AgzwF2kgdPT49vqLDA/6 FnA2tyvKTbxD6FOvJf3lQLiR2KOXNrpA0NtU+acYpk2tEQZZDoGpafsHD+GkKOcA O2Pd66haBdkeQXoICyuUcORtQ/yn9HWCPjM6pk4d9vl8/ClsFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMagKr6CFzA9sRvo5BZE/UdYW5qVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2Vm N2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYyYTI4YTUyYzYvNWRhODEzYzYtMzM2Mi0z YTE1LThjOGYtMDFkOTMzZTExMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGNlZjdkYjEtZDBmNy00YTk1LThj MzYtZDE2MmEyOGE1MmM2LzRjZWY3ZGIxLWQwZjctNGE5NS04YzM2LWQxNjJhMjhh NTJjNi5jcmwwHwYDVR0jBBgwFoAUbEoioeXy+BtrS/P6NFeOguEXuyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2VmN2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYy YTI4YTUyYzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABC7AI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEBB8M2M1kJbaZ3fuuS4yBvHB0S+fUoUfgBf8GNoNeTUnqaxJrs7 +eoWXQzjW2W9F8SxCqq+BLaMp2D5eLbXeFRhxSEXMAMuh68ppfKK5QHoZAZinZME o5faRw6USPAMVcapVQJ+CWVfeLVY8avpnQ+knQsSGQA0CTcINuPaPDcGJjH6fUoN cbkfJiQdYuqV322YDSXsscg8SHiaJcxl+2lYs8R3lJp6gT1Tjh7Umhcdprm+9BNS OwnsKvk9jvSfHLdSCzOHmzfbFtEQiMaoi5IKxZlHY4mNrfvGRx+HaclaR+EC4uKq netV+wR3vDexgdBd7tjiRbW4tejMnET+Xwk= -----END CERTIFICATE-----Generated at Mon Aug 4 22:26:35 2025 by rpki-client