$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa File: b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa (raw, json) Hash identifier: C/HVixQ5evJdwo0mgF0vg8lZjv1ptaoqa4iNySIfkgY= Subject key identifier: 4C:9B:BF:44:B1:41:EA:FE:A7:F8:61:98:23:20:BD:EA:F4:A9:96:3B Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Certificate serial: 010D0C9F4328584A9900C48FCCF9DCEB46C4A8F0 Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 958 IP address blocks: 2605:ac40:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c4:8f:cc:f9:dc:eb:46:c4:a8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=efaf8ab0-e2da-4f34-8eb9-1db8c70d8050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:89:9a:82:2e:60:9b:06:d9:34:0d:fd:c0:44: 0d:fb:ad:68:df:88:ee:0c:be:8b:48:ce:db:6c:46: a4:19:17:dd:9f:cc:7d:84:1c:ca:32:f6:20:15:55: 80:ed:2b:10:7e:99:67:f0:1f:63:b7:f1:cd:80:2e: a0:0d:85:88:35:60:60:ad:45:d7:28:fe:84:fe:23: 27:33:70:d4:43:06:13:e6:78:32:0c:14:2d:b3:37: 52:f7:fc:62:58:97:43:32:96:83:90:5c:9b:92:7a: af:54:e7:6b:8b:33:d3:b1:49:b7:74:f3:6c:8f:4d: bf:7f:2e:9e:1e:bd:6c:81:b6:4e:66:c5:70:a0:1b: e8:b0:76:26:72:22:39:66:53:da:0a:d9:75:93:0a: b1:17:ab:fb:a8:24:34:c8:14:9e:93:c7:a0:b3:e1: 45:ba:a9:5b:a5:9d:af:d8:3a:6e:76:14:af:f8:f6: ba:f6:00:7f:de:aa:db:da:d9:55:72:bb:ed:35:3a: 86:48:42:40:07:43:60:9a:63:0a:f4:57:96:39:2a: a4:ff:01:8a:a1:81:4b:6d:cb:93:fa:32:1f:8e:fc: 2f:eb:35:22:57:a2:9f:9c:65:7b:b4:4e:31:12:67: 98:f7:d0:db:85:c9:96:84:60:f1:32:fa:a8:91:9b: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9B:BF:44:B1:41:EA:FE:A7:F8:61:98:23:20:BD:EA:F4:A9:96:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl X509v3 Authority Key Identifier: keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer sbgp-ipAddrBlock: critical IPv6: 2605:ac40:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:40:b5:b6:df:e4:de:53:c1:85:3e:ef:9a:24:59:64:cd:76: bc:e1:88:2c:b2:72:d6:28:31:5b:a4:2e:02:4d:b4:5a:ec:b0: 89:0b:10:f7:c1:a8:a5:8a:02:2c:01:8b:59:ed:c6:80:e8:44: c3:aa:e2:4c:ea:57:9d:16:c5:f8:62:00:ce:73:1e:66:4f:88: 17:3c:02:4b:2a:76:b4:73:01:9d:0a:70:9f:b9:b4:d9:15:7d: 42:b9:8a:b9:7c:03:df:9d:b4:4d:7b:7b:da:e0:d6:91:1b:b4: 9c:2a:12:e2:30:5b:ed:86:9e:08:41:97:66:d4:f3:14:95:f6: 3c:be:c0:4f:67:cd:99:e2:5b:eb:d7:69:fb:60:b9:28:e4:77: 93:1b:86:30:b8:ec:f8:3c:96:18:d4:15:5e:76:cd:f9:6a:59: aa:6e:7e:f7:51:f4:f3:5f:f2:47:61:30:05:c7:35:1a:26:c5: bd:6a:37:15:ea:45:de:a0:a9:b9:e5:78:d7:f9:d5:a0:f4:1e: 08:b5:93:51:19:28:c0:06:fa:85:9d:34:0e:8a:e7:bb:22:23: e7:7e:7c:e2:bb:83:23:2d:36:0f:47:16:e8:6e:97:83:c2:92: 86:13:c4:37:be:91:fd:68:3c:e6:a7:26:84:d0:e5:46:5e:1c: 81:94:ef:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqZAMSPzPnc60bEqPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm YTMxMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZWZhZjhhYjAtZTJkYS00ZjM0LThlYjktMWRiOGM3MGQ4MDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqomagi5gmwbZNA39wEQN+61o34juDL6LSM7b bEakGRfdn8x9hBzKMvYgFVWA7SsQfpln8B9jt/HNgC6gDYWINWBgrUXXKP6E/iMn M3DUQwYT5ngyDBQtszdS9/xiWJdDMpaDkFybknqvVOdrizPTsUm3dPNsj02/fy6e Hr1sgbZOZsVwoBvosHYmciI5ZlPaCtl1kwqxF6v7qCQ0yBSek8egs+FFuqlbpZ2v 2DpudhSv+Pa69gB/3qrb2tlVcrvtNTqGSEJAB0NgmmMK9FeWOSqk/wGKoYFLbcuT +jIfjvwv6zUiV6KfnGV7tE4xEmeY99DbhcmWhGDxMvqokZtzPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEybv0SxQer+p/hhmCMgver0qZY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvYjA5MjQ1YmYtYjNhZC0z NTZiLTgxZjAtZjBmOGJmMDMzYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4 ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3 NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG9Atbbf5N5TwYU+75okWWTNdrzhiCyyctYoMVukLgJNtFrssIkL EPfBqKWKAiwBi1ntxoDoRMOq4kzqV50WxfhiAM5zHmZPiBc8AksqdrRzAZ0KcJ+5 tNkVfUK5irl8A9+dtE17e9rg1pEbtJwqEuIwW+2GnghBl2bU8xSV9jy+wE9nzZni W+vXaftguSjkd5MbhjC47Pg8lhjUFV52zflqWapufvdR9PNf8kdhMAXHNRomxb1q NxXqRd6gqbnleNf51aD0Hgi1k1EZKMAG+oWdNA6K57siI+d+fOK7gyMtNg9HFuhu l4PCkoYTxDe+kf1oPOanJoTQ5UZeHIGU7zQ= -----END CERTIFICATE-----Generated at Mon Aug 4 19:01:44 2025 by rpki-client