$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f8d468e2-df6c-32d9-a013-720419dde62d.roa File: f8d468e2-df6c-32d9-a013-720419dde62d.roa (raw, json) Hash identifier: CX/plfC0vp6HxiEUvfQtp6DF2iqwLEDC/U5AGlL0YvA= Subject key identifier: E3:27:AB:C2:66:8E:0B:14:BC:19:B4:BB:1B:D8:6D:64:8A:63:0F:E0 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584ABD4BA2A9DA6C3F20989DE5A0 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f8d468e2-df6c-32d9-a013-720419dde62d.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 271 IP address blocks: 2607:f8f0:680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:a2:a9:da:6c:3f:20:98:9d:e5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=09fac9b7-4a6e-469f-acec-c4838de706b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f0:1b:73:96:57:cc:b7:81:b1:5b:ef:97:b3: 97:6b:6e:71:55:35:54:38:ca:bc:97:e1:56:f4:ec: ff:1d:57:a2:28:a9:81:74:bd:2b:69:b9:64:5d:f7: 2d:bf:44:73:ef:c6:79:d4:e2:ca:82:1d:b7:e9:3f: dc:b9:9e:72:d4:e5:2a:1c:eb:8e:44:8d:80:14:ff: 4c:f7:3a:d6:8d:22:04:8b:d6:bd:db:18:13:f9:d6: 60:b2:aa:4c:9e:9f:4b:ba:fb:ee:84:17:17:a6:e6: d3:ed:7b:85:b7:ce:60:32:70:90:17:20:1c:41:94: 54:e1:e8:17:85:73:b2:d7:21:9f:f1:ba:5e:2b:01: e9:be:0c:c5:71:e0:c1:92:e6:d6:f8:fb:54:16:85: db:5e:80:86:65:e9:bd:cc:98:ec:91:dd:54:44:c6: e6:bc:99:79:b4:c5:0c:ce:64:ed:ad:5c:c7:3e:18: aa:cd:cd:c4:0f:9b:57:83:b4:d6:88:f3:91:ff:62: 5e:90:26:e6:68:db:4c:85:84:e6:09:dc:7d:36:b3: 24:57:e3:f3:b9:f2:ce:75:ac:49:2f:83:5c:b5:a7: 6e:06:d6:d2:45:96:25:e3:46:25:94:3c:23:48:b0: 5a:11:83:32:b3:c3:9e:05:dd:07:1b:d9:64:73:9a: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:27:AB:C2:66:8E:0B:14:BC:19:B4:BB:1B:D8:6D:64:8A:63:0F:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f8d468e2-df6c-32d9-a013-720419dde62d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:680::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b6:59:f3:7f:79:22:e1:b8:5c:d8:dc:06:87:8b:d8:94:05: 3b:47:16:25:31:6b:f5:64:33:3d:64:4f:e0:43:e8:d7:61:33: 8e:bf:64:09:06:52:d1:83:63:50:57:35:c0:47:96:06:59:82: 03:cd:da:ce:b2:52:09:b9:b5:0b:bd:da:56:5a:e4:25:53:ac: 24:74:3c:f8:f8:dc:99:44:86:4c:58:5a:44:6b:68:ec:23:c0: fc:13:aa:59:fc:8c:ac:1d:67:0c:0b:c9:c3:b6:ac:0e:aa:30: 17:55:24:b5:a7:23:d5:cd:7d:d3:79:c9:c4:45:43:23:ac:d2: 70:17:30:d1:c7:da:75:eb:bb:f6:bb:49:89:d1:70:cf:14:af: 8c:79:57:73:6b:98:49:29:6a:f4:8c:ae:e1:cd:09:ff:b4:eb: c0:67:17:af:e3:10:b4:97:95:13:68:6d:af:15:74:b2:21:24: db:20:96:c6:4e:e9:e9:ac:bf:b2:e9:b8:29:19:db:e5:ff:0b: 58:e3:43:2a:bb:96:04:ab:21:52:65:98:d1:bb:5f:fb:80:69: 8e:0c:ab:de:93:69:8e:19:1c:ad:b6:b3:82:da:ad:01:cf:f3: d6:fc:fd:c3:84:b0:8c:bd:cf:7f:af:73:65:b7:a6:fc:27:91: cf:3c:79:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq9S6Kp2mw/IJid5aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MDlmYWM5YjctNGE2ZS00NjlmLWFjZWMtYzQ4MzhkZTcwNmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/Abc5ZXzLeBsVvvl7OXa25xVTVUOMq8l+FW 9Oz/HVeiKKmBdL0rablkXfctv0Rz78Z51OLKgh236T/cuZ5y1OUqHOuORI2AFP9M 9zrWjSIEi9a92xgT+dZgsqpMnp9LuvvuhBcXpubT7XuFt85gMnCQFyAcQZRU4egX hXOy1yGf8bpeKwHpvgzFceDBkubW+PtUFoXbXoCGZem9zJjskd1URMbmvJl5tMUM zmTtrVzHPhiqzc3ED5tXg7TWiPOR/2JekCbmaNtMhYTmCdx9NrMkV+PzufLOdaxJ L4NctaduBtbSRZYl40YllDwjSLBaEYMys8OeBd0HG9lkc5oVSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOMnq8JmjgsUvBm0uxvYbWSKYw/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvZjhkNDY4ZTItZGY2Yy0z MmQ5LWEwMTMtNzIwNDE5ZGRlNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACW2WfN/eSLhuFzY3AaHi9iUBTtHFiUxa/VkMz1kT+BD6NdhM46/ ZAkGUtGDY1BXNcBHlgZZggPN2s6yUgm5tQu92lZa5CVTrCR0PPj43JlEhkxYWkRr aOwjwPwTqln8jKwdZwwLycO2rA6qMBdVJLWnI9XNfdN5ycRFQyOs0nAXMNHH2nXr u/a7SYnRcM8Ur4x5V3NrmEkpavSMruHNCf+068BnF6/jELSXlRNoba8VdLIhJNsg lsZO6emsv7LpuCkZ2+X/C1jjQyq7lgSrIVJlmNG7X/uAaY4Mq96TaY4ZHK22s4La rQHP89b8/cOEsIy9z3+vc2W3pvwnkc88efw= -----END CERTIFICATE-----Generated at Mon Aug 4 18:27:19 2025 by rpki-client