$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/459b00d2-1e81-3ca1-905e-682f2fa251f1.roa File: 459b00d2-1e81-3ca1-905e-682f2fa251f1.roa (raw, json) Hash identifier: 0n2L5VAagIXYunqQYj92UTE60StiMq+0yhs0l55Dk9c= Subject key identifier: 45:08:B3:5F:72:E9:DB:A3:C2:6B:EC:0C:60:C0:76:45:34:E0:A5:D6 Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7 Certificate serial: 010D0C9F4328584A98707F448D0BF9D0D87C5C80 Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/459b00d2-1e81-3ca1-905e-682f2fa251f1.roa Signing time: Mon 21 Jul 2025 20:10:18 +0000 ROA not before: Mon 21 Jul 2025 20:10:18 +0000 ROA not after: Sun 19 Oct 2025 20:10:18 +0000 asID: 3635 IP address blocks: 2610:20:3000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:98:70:7f:44:8d:0b:f9:d0:d8:7c:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7 Validity Not Before: Jul 21 20:10:18 2025 GMT Not After : Oct 19 20:10:18 2025 GMT Subject: CN=b37c1700-d4a3-4ab6-a55c-bdffe175018d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:62:78:0e:7a:27:47:bf:69:1e:97:95:79:49: 76:8f:04:15:4b:55:57:5d:0f:ae:48:b2:34:50:8a: 40:82:32:35:7c:17:7c:da:e7:33:83:cf:8f:6c:eb: ed:d5:21:7d:5c:6a:7a:5a:f6:31:2a:c9:17:5b:13: 22:b9:5c:d5:ed:58:6d:b7:81:e0:af:12:a8:7a:9d: 42:8e:d9:ed:e2:68:61:bf:11:6c:1d:44:d1:3b:4c: c3:39:0a:67:88:2c:a1:76:7a:ee:41:4a:ac:d3:94: bb:ba:d9:d9:0c:b3:7e:3a:ea:10:68:71:ef:a8:24: 5d:af:b1:91:5d:5f:6e:d8:bf:66:94:ac:54:9f:7e: c9:c8:8a:8f:48:59:52:09:d8:9b:82:54:1d:d9:f1: aa:0a:db:64:1e:37:91:fa:a2:45:33:f3:8d:3e:db: 9b:ea:1e:21:ca:c2:2f:d0:0e:8c:69:71:a9:1e:b1: 25:aa:ec:5f:08:ac:cb:4c:d4:79:28:db:9b:23:c0: 8b:89:de:47:de:9f:65:83:72:46:3c:7e:ae:a5:92: 1c:94:82:72:54:31:21:ef:74:28:e3:b5:9f:c1:17: 8a:be:f5:79:bb:0d:fb:1a:db:10:38:8e:be:65:c8: 67:20:16:13:02:98:01:bd:2e:58:83:1f:65:ab:32: d8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:08:B3:5F:72:E9:DB:A3:C2:6B:EC:0C:60:C0:76:45:34:E0:A5:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/459b00d2-1e81-3ca1-905e-682f2fa251f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl X509v3 Authority Key Identifier: keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ee:d3:c7:8c:d2:be:aa:cd:98:79:9b:a5:e6:22:e7:18:e9: e7:b4:5d:3d:d1:91:79:4a:c4:ba:81:d1:93:63:1e:eb:9e:94: 04:9e:b5:17:a5:92:6d:30:49:bc:3c:bf:89:78:d6:2a:dc:f6: cb:bf:d5:e8:62:e0:a8:93:d2:63:9f:7c:cb:6a:dd:b0:c7:45: 50:66:5c:e3:06:a2:02:a6:32:88:c8:98:0e:a2:f8:38:ba:ef: 91:d7:62:be:53:a9:21:ec:78:64:48:92:86:44:3c:b6:98:b6: 34:0f:93:eb:8b:74:cb:46:c9:2c:97:ef:e4:a5:76:50:40:f8: e6:bc:df:5b:7c:fc:fa:96:a8:16:ec:20:6e:1c:5c:fe:a7:3f: c1:00:ad:1a:13:4f:f3:f7:b0:46:95:56:6c:d1:82:8d:b7:a5: 65:84:1b:3a:c6:d8:8a:fb:f5:a2:ac:45:16:bd:14:ed:8c:21: 32:dc:03:aa:c4:16:81:c6:85:72:5e:31:3c:cf:4b:5d:2a:c3: 9b:8d:ef:66:3f:fd:b3:9d:46:01:fe:ac:2a:11:64:55:50:87: 75:a2:3e:44:8b:da:17:55:8e:69:91:8f:03:e8:0b:fe:f7:d2: 6d:74:8e:ac:08:c9:e9:ce:70:0d:89:c5:bb:17:d9:94:9e:39: 00:9a:c0:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqYcH9EjQv50Nh8XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm YWI3MB4XDTI1MDcyMTIwMTAxOFoXDTI1MTAxOTIwMTAxOFowLzEtMCsGA1UEAxMk YjM3YzE3MDAtZDRhMy00YWI2LWE1NWMtYmRmZmUxNzUwMThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmJ4DnonR79pHpeVeUl2jwQVS1VXXQ+uSLI0 UIpAgjI1fBd82uczg8+PbOvt1SF9XGp6WvYxKskXWxMiuVzV7Vhtt4HgrxKoep1C jtnt4mhhvxFsHUTRO0zDOQpniCyhdnruQUqs05S7utnZDLN+OuoQaHHvqCRdr7GR XV9u2L9mlKxUn37JyIqPSFlSCdibglQd2fGqCttkHjeR+qJFM/ONPtub6h4hysIv 0A6MaXGpHrElquxfCKzLTNR5KNubI8CLid5H3p9lg3JGPH6upZIclIJyVDEh73Qo 47WfwReKvvV5uw37GtsQOI6+ZchnIBYTApgBvS5Ygx9lqzLYswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEUIs19y6dujwmvsDGDAdkU04KXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvNDU5YjAwZDItMWU4MS0z Y2ExLTkwNWUtNjgyZjJmYTI1MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2 ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3 ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4 ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIDAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETu08eM0r6qzZh5m6XmIucY6ee0XT3RkXlKxLqB0ZNjHuuelASe tRelkm0wSbw8v4l41irc9su/1ehi4KiT0mOffMtq3bDHRVBmXOMGogKmMojImA6i +Di675HXYr5TqSHseGRIkoZEPLaYtjQPk+uLdMtGySyX7+SldlBA+Oa831t8/PqW qBbsIG4cXP6nP8EArRoTT/P3sEaVVmzRgo23pWWEGzrG2Ir79aKsRRa9FO2MITLc A6rEFoHGhXJeMTzPS10qw5uN72Y//bOdRgH+rCoRZFVQh3WiPkSL2hdVjmmRjwPo C/730m10jqwIyenOcA2JxbsX2ZSeOQCawBw= -----END CERTIFICATE-----Generated at Wed Aug 6 11:19:00 2025 by rpki-client