$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/68b0539d-9001-3fdf-a61a-75dbfde2df07.roa File: 68b0539d-9001-3fdf-a61a-75dbfde2df07.roa (raw, json) Hash identifier: mApcUCpYCnly54vH1AbmRC8iTYi2jommaPTLbF/asDc= Subject key identifier: 0C:EC:96:EC:51:A6:AF:18:E0:B5:7A:BC:EA:D7:E9:FA:3F:B2:AE:28 Certificate issuer: /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Certificate serial: 010D0C9F4328584AB650DE45F7AD76912A4C4CA8 Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/68b0539d-9001-3fdf-a61a-75dbfde2df07.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 19905 IP address blocks: 2604:fb80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:de:45:f7:ad:76:91:2a:4c:4c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=c6ffe2d3-9861-420b-900a-fbd66ec3cb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:f8:85:b2:9d:96:7b:a9:21:3f:a1:06:57: d5:9b:cc:7a:78:54:80:a8:f0:d9:17:79:9e:41:5b: 04:b2:bf:d9:4a:b7:43:f7:f3:16:ad:d8:a8:b7:27: 88:a5:26:7d:96:f8:d3:22:15:5e:12:28:5d:89:03: 74:f6:3d:ae:94:95:9c:80:6a:8d:69:21:e0:78:cd: c5:59:d8:90:d6:5a:d8:23:0a:a8:41:8e:65:07:1e: f3:53:17:2e:5e:92:ae:0e:a3:71:99:cf:8a:83:ac: 31:14:5a:35:bb:05:88:18:ed:e3:8f:05:60:bd:be: fa:d7:c7:90:3a:9d:36:ac:83:12:5e:47:ea:1d:26: f7:d9:de:c8:80:f0:d2:d3:07:02:6e:da:ed:64:9f: 34:5c:7c:01:17:60:a4:01:41:71:73:8b:09:cd:ab: bb:02:1e:c2:64:89:78:cb:19:26:35:a6:df:92:b2: 0e:85:a1:10:e0:c3:0b:a6:8a:f7:a4:e3:7c:1a:c5: c8:72:65:92:b8:f4:3d:ee:21:59:e6:fc:c8:d6:49: c8:c4:ad:87:76:70:fa:e3:7f:eb:5d:0f:45:54:32: a1:a1:f7:6f:dc:17:57:13:b0:94:d2:1d:59:53:6e: 85:29:ff:ba:b2:46:81:fd:b6:9b:4d:5c:41:38:f5: 8a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EC:96:EC:51:A6:AF:18:E0:B5:7A:BC:EA:D7:E9:FA:3F:B2:AE:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/68b0539d-9001-3fdf-a61a-75dbfde2df07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl X509v3 Authority Key Identifier: keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer sbgp-ipAddrBlock: critical IPv6: 2604:fb80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e1:42:52:04:e6:67:0e:23:9c:e8:3e:0a:f1:31:7a:44:c3: af:b2:62:89:6e:78:01:02:34:6d:f5:52:6d:13:f1:0e:23:76: a3:a7:a6:01:98:b6:bc:88:dd:d1:28:1e:19:87:ba:79:85:0d: f1:58:9d:33:98:d1:d9:72:36:7e:60:4d:2d:3e:05:d3:7a:b6: cc:61:82:04:d1:45:3c:c1:db:8e:6a:65:ea:1b:b1:0d:ac:4a: 95:02:c3:1b:ef:03:e5:e7:38:91:46:a9:6d:ab:1c:f6:15:7d: 3b:89:64:9f:dd:8c:5a:11:ff:6d:96:87:cc:11:83:aa:69:9e: a9:d5:ec:b6:0f:67:e1:2c:e7:5e:68:e5:f4:12:7a:4f:36:b3: 6d:98:ef:40:b7:82:6b:56:72:0c:93:ec:ce:77:ef:19:9f:e4: 2b:85:a4:43:ae:ca:78:ad:9b:64:4e:89:cd:46:8e:f8:bd:dd: 12:52:bb:fc:7b:50:04:07:89:1b:6e:77:f4:1f:0c:77:fb:c4: 14:09:55:79:c8:2f:aa:88:f9:f8:46:68:47:8b:fc:e2:68:22: 0d:77:85:9f:34:e6:fb:29:53:d5:46:7b:ea:0e:97:33:16:85: 63:66:63:6f:52:2b:af:3c:15:8e:5a:09:47:d5:8e:36:2b:9f: 68:e5:c6:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEq2UN5F9612kSpMTKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU2NTNmMzctNGIyMi00MGEzLWE4YmQtZTcwZjIwOGMw ZWZiMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk YzZmZmUyZDMtOTg2MS00MjBiLTkwMGEtZmJkNjZlYzNjYjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxn4hbKdlnupIT+hBlfVm8x6eFSAqPDZF3me QVsEsr/ZSrdD9/MWrdiotyeIpSZ9lvjTIhVeEihdiQN09j2ulJWcgGqNaSHgeM3F WdiQ1lrYIwqoQY5lBx7zUxcuXpKuDqNxmc+Kg6wxFFo1uwWIGO3jjwVgvb7618eQ Op02rIMSXkfqHSb32d7IgPDS0wcCbtrtZJ80XHwBF2CkAUFxc4sJzau7Ah7CZIl4 yxkmNabfkrIOhaEQ4MMLpor3pON8GsXIcmWSuPQ97iFZ5vzI1knIxK2HdnD643/r XQ9FVDKhofdv3BdXE7CU0h1ZU26FKf+6skaB/babTVxBOPWK6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAzsluxRpq8Y4LV6vOrX6fo/sq4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1 M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4YzBlZmIvNjhiMDUzOWQtOTAwMS0z ZmRmLWE2MWEtNzVkYmZkZTJkZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGU2NTNmMzctNGIyMi00MGEzLWE4 YmQtZTcwZjIwOGMwZWZiLzRlNjUzZjM3LTRiMjItNDBhMy1hOGJkLWU3MGYyMDhj MGVmYi5jcmwwHwYDVR0jBBgwFoAUIiOW/w0X1WDrC+ORelaadJKAwRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBm MjA4YzBlZmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT7gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAF4UJSBOZnDiOc6D4K8TF6RMOvsmKJbngBAjRt9VJtE/EOI3ajp6YB mLa8iN3RKB4Zh7p5hQ3xWJ0zmNHZcjZ+YE0tPgXTerbMYYIE0UU8wduOamXqG7EN rEqVAsMb7wPl5ziRRqltqxz2FX07iWSf3YxaEf9tlofMEYOqaZ6p1ey2D2fhLOde aOX0EnpPNrNtmO9At4JrVnIMk+zOd+8Zn+QrhaRDrsp4rZtkTonNRo74vd0SUrv8 e1AEB4kbbnf0Hwx3+8QUCVV5yC+qiPn4RmhHi/ziaCINd4WfNOb7KVPVRnvqDpcz FoVjZmNvUiuvPBWOWglH1Y42K59o5cam -----END CERTIFICATE-----Generated at Mon Aug 4 14:54:59 2025 by rpki-client