$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/330d7a56-9d3b-325a-9408-7b85401e8917.roa File: 330d7a56-9d3b-325a-9408-7b85401e8917.roa (raw, json) Hash identifier: JkBSDCQwdvvYfcCqn9gw7pzv3luX1JfTEwXZBzGHpIs= Subject key identifier: B2:DA:1D:A0:B5:CB:AE:C8:22:11:37:E8:77:B6:00:8F:22:B6:EC:F1 Certificate issuer: /CN=8715c48f-238b-4492-ab94-609edd679287 Certificate serial: 010D0C9F4328584A9BCB7216880F9D10B97125F8 Authority key identifier: 15:6C:BC:CD:BB:DE:77:3B:E2:ED:55:0B:0F:8C:04:DD:7F:24:86:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/330d7a56-9d3b-325a-9408-7b85401e8917.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 68 IP address blocks: 2620:126:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:72:16:88:0f:9d:10:b9:71:25:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8715c48f-238b-4492-ab94-609edd679287 Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=d5fc52eb-fe99-4b04-8a48-29c140e32691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:6c:dc:30:66:93:86:58:d2:bc:8d:6b:46: 15:44:f8:0a:b3:48:bf:52:d5:02:35:4c:5b:92:30: ab:24:87:74:23:0b:08:7a:df:c4:d0:19:c5:a5:2f: 5e:86:b8:c4:8c:0e:8b:db:31:c8:9c:1a:96:32:10: f4:41:95:6a:40:63:49:b4:6d:3c:79:6e:ed:31:95: 25:3d:7b:cb:61:6d:63:b9:ef:e0:74:eb:61:0a:31: e8:9e:57:c0:43:56:21:e3:29:5d:a4:0e:a6:56:12: 08:e5:fc:16:51:40:a2:2e:ae:37:c6:07:15:fa:0c: 48:81:a3:74:1e:3f:11:2d:b5:dd:10:e4:42:6d:84: f9:ed:68:3b:ea:21:9b:18:5c:c4:58:ad:46:8c:15: 3c:b9:be:8e:b1:fc:67:15:f8:d7:dd:f7:3e:fd:41: ee:7c:16:97:66:f1:33:28:a8:6e:57:aa:b9:c8:9c: 33:a1:db:60:7b:a3:65:e3:86:86:46:fa:0c:e7:83: 2a:07:f5:4a:42:b0:6d:47:08:0d:0d:8c:e7:cc:46: 50:51:d4:a3:03:cd:ae:95:50:81:75:22:27:9b:51: fe:a0:4d:7d:e7:c7:6c:c6:4d:83:c8:0b:8b:34:fd: 5a:a1:18:15:7f:57:d3:23:9a:9c:1e:f8:5f:00:fb: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DA:1D:A0:B5:CB:AE:C8:22:11:37:E8:77:B6:00:8F:22:B6:EC:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/330d7a56-9d3b-325a-9408-7b85401e8917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.crl X509v3 Authority Key Identifier: keyid:15:6C:BC:CD:BB:DE:77:3B:E2:ED:55:0B:0F:8C:04:DD:7F:24:86:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer sbgp-ipAddrBlock: critical IPv6: 2620:126:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ed:66:1e:7e:99:5b:99:4a:f9:ed:2a:09:8d:bd:31:ff:5e: 0f:d4:4d:10:cb:22:db:18:5a:e5:20:20:52:75:28:a3:db:a5: f8:c3:7a:25:a8:74:13:5e:c8:de:48:2f:fc:eb:dd:36:dd:04: ba:1b:7f:76:23:bc:39:96:87:e8:cb:97:40:32:ab:8e:03:1d: 28:c6:bc:02:eb:ea:f4:43:24:5e:60:b5:ce:33:63:3d:c8:60: 76:de:86:48:7a:57:bc:9c:6f:ca:f8:fd:2c:96:47:7a:e0:1c: 80:af:bb:96:1d:df:d7:84:de:84:5f:4b:9f:07:42:b8:a7:f2: 6f:af:bb:75:1c:1f:b2:d1:72:16:6a:7a:34:2b:77:46:ee:d6: 9c:83:fe:d2:d5:57:d7:60:ee:91:45:d2:fc:14:d9:05:38:79: 2c:34:a2:fe:ef:04:e0:65:34:0d:5c:b9:9d:e1:5b:ca:f3:6a: 08:74:9c:83:f6:95:e0:9a:67:c0:c4:9b:0f:ed:6e:d1:e2:c7: e5:01:c2:c4:ca:ed:d4:05:ef:18:3e:7d:5c:90:a5:46:37:e2: c4:0a:46:00:5a:4c:74:f3:8a:23:fb:29:24:f0:b3:36:6c:31: 87:15:69:39:a0:d2:7f:d7:6c:22:35:9e:e5:b0:34:95:1a:4c: 42:3e:b7:08 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqby3IWiA+dELlxJfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxNWM0OGYtMjM4Yi00NDkyLWFiOTQtNjA5ZWRkNjc5 Mjg3MB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk ZDVmYzUyZWItZmU5OS00YjA0LThhNDgtMjljMTQwZTMyNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRts3DBmk4ZY0ryNa0YVRPgKs0i/UtUCNUxb kjCrJId0IwsIet/E0BnFpS9ehrjEjA6L2zHInBqWMhD0QZVqQGNJtG08eW7tMZUl PXvLYW1jue/gdOthCjHonlfAQ1Yh4yldpA6mVhII5fwWUUCiLq43xgcV+gxIgaN0 Hj8RLbXdEORCbYT57Wg76iGbGFzEWK1GjBU8ub6OsfxnFfjX3fc+/UHufBaXZvEz KKhuV6q5yJwzodtge6Nl44aGRvoM54MqB/VKQrBtRwgNDYznzEZQUdSjA82ulVCB dSInm1H+oE1958dsxk2DyAuLNP1aoRgVf1fTI5qcHvhfAPuknwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLLaHaC1y67IIhE36He2AI8ituzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzE1 YzQ4Zi0yMzhiLTQ0OTItYWI5NC02MDllZGQ2NzkyODcvMzMwZDdhNTYtOWQzYi0z MjVhLTk0MDgtN2I4NTQwMWU4OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODcxNWM0OGYtMjM4Yi00NDkyLWFi OTQtNjA5ZWRkNjc5Mjg3Lzg3MTVjNDhmLTIzOGItNDQ5Mi1hYjk0LTYwOWVkZDY3 OTI4Ny5jcmwwHwYDVR0jBBgwFoAUFWy8zbvedzvi7VULD4wE3X8khqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84NzE1YzQ4Zi0yMzhiLTQ0OTItYWI5NC02MDll ZGQ2NzkyODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABJkAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAh+1mHn6ZW5lK+e0qCY29Mf9eD9RNEMsi2xha5SAgUnUoo9ul+MN6 Jah0E17I3kgv/OvdNt0Euht/diO8OZaH6MuXQDKrjgMdKMa8Auvq9EMkXmC1zjNj Pchgdt6GSHpXvJxvyvj9LJZHeuAcgK+7lh3f14TehF9LnwdCuKfyb6+7dRwfstFy Fmp6NCt3Ru7WnIP+0tVX12DukUXS/BTZBTh5LDSi/u8E4GU0DVy5neFbyvNqCHSc g/aV4JpnwMSbD+1u0eLH5QHCxMrt1AXvGD59XJClRjfixApGAFpMdPOKI/spJPCz NmwxhxVpOaDSf9dsIjWe5bA0lRpMQj63CA== -----END CERTIFICATE-----Generated at Sun Aug 10 13:58:58 2025 by rpki-client