$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/5a5f0437-5aec-387b-aa4c-0992a33b5a94.roa File: 5a5f0437-5aec-387b-aa4c-0992a33b5a94.roa (raw, json) Hash identifier: Hk/lnuJrdbtZDlxhZEznNAcgGvLs50j4Dg7inLM6Avo= Subject key identifier: 0C:3C:05:FD:A3:89:61:73:A8:A9:69:7F:3F:AF:24:B1:B6:C1:3E:A5 Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7 Certificate serial: 010D0C9F4328584A9870812E15C53F9A15093180 Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/5a5f0437-5aec-387b-aa4c-0992a33b5a94.roa Signing time: Mon 21 Jul 2025 20:10:19 +0000 ROA not before: Mon 21 Jul 2025 20:10:19 +0000 ROA not after: Sun 19 Oct 2025 20:10:19 +0000 asID: 5744 IP address blocks: 2610:20:5011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:98:70:81:2e:15:c5:3f:9a:15:09:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7 Validity Not Before: Jul 21 20:10:19 2025 GMT Not After : Oct 19 20:10:19 2025 GMT Subject: CN=97d56822-1e09-409c-88de-182a1304db8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:a0:40:2e:da:38:3b:b8:9a:da:96:b8:38: 6c:1f:c9:71:9b:f1:2f:d7:11:32:10:e1:89:cb:91: c9:99:dc:2a:13:77:62:83:11:c3:40:96:da:d3:0f: 15:65:c1:11:8a:44:c7:a2:c2:71:59:94:47:e3:b7: aa:84:37:1d:cd:27:cd:2f:b9:50:61:cd:6f:20:a8: ed:90:c6:36:7f:fb:07:f6:14:43:ec:da:16:d3:f1: c7:cd:4e:89:6f:c9:a1:df:79:ed:c5:cd:0d:7a:46: 47:11:6d:7a:7b:f8:a1:fd:92:22:92:34:e2:13:75: 5d:12:06:2d:14:d2:ed:c5:c6:e4:73:2d:12:1c:74: f4:a4:ea:a7:48:77:de:0e:99:86:f7:b5:91:08:6d: 1f:34:00:33:24:f6:f5:59:2c:77:1c:88:06:11:c9: 8f:0b:70:a1:15:e1:1c:91:6b:1c:d7:28:7e:0a:7c: 1b:4f:c5:73:d5:f7:87:c3:8f:c3:21:92:0a:29:ce: 6e:75:d4:f1:fc:b5:2b:68:af:44:75:bd:8f:6a:46: c6:e1:d0:73:c9:4e:74:ed:59:bc:e8:c8:c4:ac:9f: f1:f0:51:e0:e7:15:f0:76:e9:db:d8:f2:4d:df:8d: 15:30:58:39:38:29:d4:7a:af:1b:84:83:84:66:66: 3c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3C:05:FD:A3:89:61:73:A8:A9:69:7F:3F:AF:24:B1:B6:C1:3E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/5a5f0437-5aec-387b-aa4c-0992a33b5a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl X509v3 Authority Key Identifier: keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:5011::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1e:32:ed:b7:04:85:f6:e0:6b:18:de:e8:f3:26:58:06:47: bb:9e:86:d8:e8:54:10:b4:f8:40:20:ad:1c:31:c0:3b:40:ee: 05:28:bd:e7:11:aa:31:33:bc:9e:1b:83:e6:c9:ff:53:6f:41: 5a:32:90:27:83:f4:4e:d8:03:42:d1:1e:22:6b:7d:f5:e7:1f: e9:c2:64:e5:85:09:16:87:97:34:cc:77:ef:6d:7c:d2:2d:53: 8b:12:87:29:fc:5b:06:a5:ef:1b:31:dd:3c:e9:ac:32:bf:9a: b0:af:e0:16:ab:4e:59:e7:46:e4:88:5d:99:72:30:15:d5:8b: 46:be:cc:cf:13:03:65:11:0a:d3:25:f4:ce:90:16:26:67:00: ef:c6:e9:7b:90:26:b0:7d:70:f0:aa:b8:cb:5e:4a:5a:fb:e1: 92:e0:af:db:ea:a2:b5:08:fc:bb:04:98:54:47:23:30:7d:b1: 38:36:a4:42:d0:3f:d6:45:e8:49:31:99:7e:d1:62:32:69:63: df:b3:6c:02:d8:a8:45:4e:09:10:4e:a7:0b:7a:96:49:f4:e0: 7a:7e:21:47:c6:5b:62:2d:b4:04:e6:94:62:de:52:7e:18:72: c2:2c:8e:74:dc:d3:95:43:a2:65:45:9c:c1:b9:2f:69:c4:5a: d2:04:fb:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqYcIEuFcU/mhUJMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm YWI3MB4XDTI1MDcyMTIwMTAxOVoXDTI1MTAxOTIwMTAxOVowLzEtMCsGA1UEAxMk OTdkNTY4MjItMWUwOS00MDljLTg4ZGUtMTgyYTEzMDRkYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj6gQC7aODu4mtqWuDhsH8lxm/Ev1xEyEOGJ y5HJmdwqE3digxHDQJba0w8VZcERikTHosJxWZRH47eqhDcdzSfNL7lQYc1vIKjt kMY2f/sH9hRD7NoW0/HHzU6Jb8mh33ntxc0NekZHEW16e/ih/ZIikjTiE3VdEgYt FNLtxcbkcy0SHHT0pOqnSHfeDpmG97WRCG0fNAAzJPb1WSx3HIgGEcmPC3ChFeEc kWsc1yh+CnwbT8Vz1feHw4/DIZIKKc5uddTx/LUraK9Edb2PakbG4dBzyU507Vm8 6MjErJ/x8FHg5xXwdunb2PJN340VMFg5OCnUeq8bhIOEZmY86QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAw8Bf2jiWFzqKlpfz+vJLG2wT6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvNWE1ZjA0MzctNWFlYy0z ODdiLWFhNGMtMDk5MmEzM2I1YTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2 ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3 ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4 ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIFAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFceMu23BIX24GsY3ujzJlgGR7uehtjoVBC0+EAgrRwxwDtA7gUo vecRqjEzvJ4bg+bJ/1NvQVoykCeD9E7YA0LRHiJrffXnH+nCZOWFCRaHlzTMd+9t fNItU4sShyn8Wwal7xsx3TzprDK/mrCv4BarTlnnRuSIXZlyMBXVi0a+zM8TA2UR CtMl9M6QFiZnAO/G6XuQJrB9cPCquMteSlr74ZLgr9vqorUI/LsEmFRHIzB9sTg2 pELQP9ZF6EkxmX7RYjJpY9+zbALYqEVOCRBOpwt6lkn04Hp+IUfGW2IttATmlGLe Un4YcsIsjnTc05VDomVFnMG5L2nEWtIE+34= -----END CERTIFICATE-----Generated at Fri Aug 8 10:17:34 2025 by rpki-client