$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa File: ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa (raw, json) Hash identifier: NIBfUslfQqz+B61WoM75iS3CLVmclu5z2zw9dM1MBTo= Subject key identifier: 11:92:E9:52:01:F3:C5:BA:8A:6B:0D:42:0E:14:85:D7:D1:5A:D1:E5 Certificate issuer: /CN=b61fdb7f-6654-4226-b916-f915d5e335dc Certificate serial: 010D0C9F4328584AA42B84BACE894F9CA908D7C0 Authority key identifier: 15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 395842 IP address blocks: 2607:8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:84:ba:ce:89:4f:9c:a9:08:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61fdb7f-6654-4226-b916-f915d5e335dc Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=0c5affb6-1c98-4212-9c48-0f29b6bf3f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:66:29:68:fa:a3:41:81:98:1f:06:43:54:d4: 7f:b9:12:33:47:91:12:b0:5d:c6:9c:a7:d6:4d:86: fd:46:74:e5:6a:c3:19:ea:6b:dc:8c:b9:cb:c0:79: 5d:b2:61:c1:73:5d:85:f3:9c:aa:32:10:d9:0b:65: d1:30:a0:15:5f:4a:63:20:a8:2c:bc:de:83:a6:d0: c4:b1:83:34:86:21:ad:dd:af:44:36:e6:36:5a:5c: fe:aa:fd:f6:ab:f8:9c:3a:fd:c3:4b:b0:6d:d1:0c: c9:42:6f:67:8f:e3:be:38:61:bc:c7:a0:8f:f2:13: 8f:a6:db:b2:3c:f6:24:ca:c2:1d:f3:68:3c:2b:ea: f2:eb:1f:6a:d6:f8:6e:ce:d9:fb:db:77:9d:2b:f9: c0:c8:a8:a5:9f:2c:81:52:53:ab:84:dd:68:6e:b2: b7:9a:c7:a6:4b:a4:2f:cc:f1:ce:5a:9b:10:32:4d: 54:42:b3:d1:47:21:f1:38:87:5e:7c:00:1a:2e:b1: ac:0b:1e:71:b2:9a:dd:b1:02:1b:fb:00:5d:69:a1: 00:34:b0:a1:57:84:6b:c0:92:50:6a:b7:ce:86:c0: bb:16:6a:34:2f:96:6f:22:e3:e5:c3:10:9a:87:8c: f5:e6:10:3d:aa:fd:db:c7:34:b7:9a:8c:4e:be:78: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:92:E9:52:01:F3:C5:BA:8A:6B:0D:42:0E:14:85:D7:D1:5A:D1:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl X509v3 Authority Key Identifier: keyid:15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer sbgp-ipAddrBlock: critical IPv6: 2607:8c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:97:94:15:79:0a:6d:68:b3:3a:c4:68:51:b9:df:15:02:56: f6:7a:d3:73:2b:e9:85:1b:39:80:9e:15:e8:e5:5e:1e:8d:2c: c4:a3:71:8d:82:24:f9:4d:81:e6:07:9e:de:07:88:9e:0f:f8: 7b:8a:9e:b0:5c:e4:94:ae:4d:32:59:ea:9d:54:4e:d2:c7:e8: 4b:b1:b3:0f:be:9d:6d:0b:e4:28:fe:59:ee:28:28:e0:1a:e1: 47:60:78:e1:4e:0e:d5:07:19:3e:ec:bc:4c:3f:07:a9:5b:f9: 31:58:bf:44:27:dc:3b:c7:f6:da:0e:d3:31:85:e9:32:1f:51: 4f:06:60:f9:61:87:03:1a:c2:a2:12:a7:f9:a4:4f:94:71:6e: 15:59:8a:08:ee:de:95:c7:c2:f5:d4:ff:d1:e5:51:c5:9f:05: 51:d5:35:19:58:9b:53:76:1a:d0:f4:de:d0:c6:9d:79:60:a4: a9:99:cd:9d:c8:12:aa:07:cd:7a:68:39:dd:08:c0:e1:25:7e: 93:ec:8d:07:fa:05:18:c3:b2:cd:d0:a7:89:dd:a3:e3:e9:0b: 7a:6d:65:8b:11:02:33:b0:92:1c:75:43:76:e1:ac:eb:46:13: 17:d1:f5:7b:14:09:dc:60:a8:78:d7:93:6e:d0:74:ac:65:ca: 87:1d:87:98 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqkK4S6zolPnKkI18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjYxZmRiN2YtNjY1NC00MjI2LWI5MTYtZjkxNWQ1ZTMz NWRjMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MGM1YWZmYjYtMWM5OC00MjEyLTljNDgtMGYyOWI2YmYzZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWYpaPqjQYGYHwZDVNR/uRIzR5ESsF3GnKfW TYb9RnTlasMZ6mvcjLnLwHldsmHBc12F85yqMhDZC2XRMKAVX0pjIKgsvN6DptDE sYM0hiGt3a9ENuY2Wlz+qv32q/icOv3DS7Bt0QzJQm9nj+O+OGG8x6CP8hOPptuy PPYkysId82g8K+ry6x9q1vhuztn723edK/nAyKilnyyBUlOrhN1obrK3msemS6Qv zPHOWpsQMk1UQrPRRyHxOIdefAAaLrGsCx5xsprdsQIb+wBdaaEANLChV4RrwJJQ arfOhsC7Fmo0L5ZvIuPlwxCah4z15hA9qv3bxzS3moxOvnjtEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBGS6VIB88W6imsNQg4UhdfRWtHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFm ZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1ZDVlMzM1ZGMvZmY2YjBhNDMtMWQ0OS0z MzJiLTlhMmUtNGQyNWU5ZWVhNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjYxZmRiN2YtNjY1NC00MjI2LWI5 MTYtZjkxNWQ1ZTMzNWRjL2I2MWZkYjdmLTY2NTQtNDIyNi1iOTE2LWY5MTVkNWUz MzVkYy5jcmwwHwYDVR0jBBgwFoAUFZmiRDC1gBRmr8wtdgwnQKf6ACYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFmZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1 ZDVlMzM1ZGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcIwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNl5QVeQptaLM6xGhRud8VAlb2etNzK+mFGzmAnhXo5V4ejSzEo3GN giT5TYHmB57eB4ieD/h7ip6wXOSUrk0yWeqdVE7Sx+hLsbMPvp1tC+Qo/lnuKCjg GuFHYHjhTg7VBxk+7LxMPwepW/kxWL9EJ9w7x/baDtMxhekyH1FPBmD5YYcDGsKi Eqf5pE+UcW4VWYoI7t6Vx8L11P/R5VHFnwVR1TUZWJtTdhrQ9N7Qxp15YKSpmc2d yBKqB816aDndCMDhJX6T7I0H+gUYw7LN0KeJ3aPj6Qt6bWWLEQIzsJIcdUN24azr RhMX0fV7FAncYKh415Nu0HSsZcqHHYeY -----END CERTIFICATE-----Generated at Sat Aug 9 10:31:29 2025 by rpki-client