$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa File: d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa (raw, json) Hash identifier: 4+8tQY9rgByrqSZDB9fWuWTp/h8hOwMAK1jb/V+5Jg4= Subject key identifier: 64:3A:27:51:1B:51:A4:41:F6:89:90:DD:89:43:7C:E7:8C:79:21:13 Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Certificate serial: 010D0C9F4328584A8B0B5E9C9288197034ED6400 Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 399358 IP address blocks: 2607:6bc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:5e:9c:92:88:19:70:34:ed:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=840b6aea-dfea-4f0b-bf88-a075d4814b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7f:0d:82:23:38:e4:bb:6c:e6:2e:9d:98:09: e9:49:dc:88:80:5e:ce:af:97:42:69:02:a5:dd:c3: c9:a5:f3:1b:83:f5:09:b2:ac:ac:5a:ac:fb:22:97: 52:be:4d:c9:1b:10:9a:15:e1:92:30:b7:5e:8d:38: 56:cc:22:a0:81:dd:33:9a:e6:68:3c:32:eb:dc:3c: 76:b8:f9:fd:89:eb:03:bf:a1:34:07:b4:1a:38:25: 08:ba:11:55:75:13:49:b8:51:30:e5:1d:fa:73:89: 54:c8:4f:64:b8:19:b2:67:5b:11:da:b3:d2:bc:20: 2f:72:04:76:81:b9:51:b7:6c:5f:40:8c:29:e4:4a: 27:f8:29:38:15:2e:98:82:f5:02:c3:c1:36:c8:36: d9:3c:4d:c5:7f:00:e2:45:da:4f:f4:11:9c:59:bb: 76:06:13:6b:03:96:7d:de:b5:df:93:78:73:00:0d: 33:f3:28:6d:2b:74:2a:04:ad:88:a4:74:4b:a7:cf: 6e:b1:2b:5f:4a:26:2e:d8:ec:6a:b4:68:e9:0d:c9: d0:b2:58:13:cb:c6:41:e8:f3:8f:83:e7:11:ea:eb: 99:9a:b9:c8:41:e9:78:b6:d8:e2:19:be:aa:06:8a: a7:00:d3:db:6d:4d:22:f5:3f:71:d8:cc:e4:32:36: 51:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3A:27:51:1B:51:A4:41:F6:89:90:DD:89:43:7C:E7:8C:79:21:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl X509v3 Authority Key Identifier: keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer sbgp-ipAddrBlock: critical IPv6: 2607:6bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:53:4e:91:5f:6a:ff:5d:93:94:cd:58:23:e7:cf:08:81:dc: 4c:62:98:a3:aa:c0:d7:00:40:4f:14:d4:df:1b:7b:67:4b:5f: 46:e5:ee:dd:32:da:ff:01:10:66:38:5f:39:44:b1:93:a6:d2: 3b:f0:8c:9f:f6:b7:d4:72:ca:df:c5:a9:f8:53:19:51:34:a3: 7c:f3:b9:23:0b:15:a7:0f:a7:39:77:e1:f3:48:1e:f7:42:9f: 30:ce:d4:5f:5c:ce:0a:54:d1:d0:2b:23:4b:aa:cc:88:6c:f7: ff:ad:74:64:32:0c:6b:24:f6:e8:8c:68:da:79:bb:e3:d7:b1: 65:6b:7c:92:8a:dc:98:26:c8:76:18:96:8e:2b:44:64:89:ea: 43:93:f7:9d:ea:fc:03:c3:be:41:73:bb:cc:bb:d1:50:50:7f: 31:ab:86:8d:11:26:9e:d9:1b:cf:7f:61:18:1f:34:cd:15:67: 59:0a:58:8c:32:b7:d8:4c:ee:ec:cb:48:d1:ee:ac:75:22:bb: 12:47:e8:c6:38:7f:e2:44:6b:1b:ee:ad:ea:9b:b0:95:1a:e3: 89:4f:a6:49:23:a5:3b:36:2e:65:54:f7:5a:a0:fe:73:ab:0d: 37:3b:16:f2:03:1c:82:54:fd:0d:ef:76:1b:20:d7:0d:aa:59: 69:a7:b4:ae -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqLC16ckogZcDTtZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5 OTc4MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ODQwYjZhZWEtZGZlYS00ZjBiLWJmODgtYTA3NWQ0ODE0YjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn8NgiM45Lts5i6dmAnpSdyIgF7Or5dCaQKl 3cPJpfMbg/UJsqysWqz7IpdSvk3JGxCaFeGSMLdejThWzCKggd0zmuZoPDLr3Dx2 uPn9iesDv6E0B7QaOCUIuhFVdRNJuFEw5R36c4lUyE9kuBmyZ1sR2rPSvCAvcgR2 gblRt2xfQIwp5Eon+Ck4FS6YgvUCw8E2yDbZPE3FfwDiRdpP9BGcWbt2BhNrA5Z9 3rXfk3hzAA0z8yhtK3QqBK2IpHRLp89usStfSiYu2OxqtGjpDcnQslgTy8ZB6POP g+cR6uuZmrnIQel4ttjiGb6qBoqnANPbbU0i9T9x2MzkMjZReQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGQ6J1EbUaRB9omQ3YlDfOeMeSETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZh MDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvZDIwNzc1YzMtZThjNi0z NjcwLWJjYWEtN2Y3ZTY4Y2ViZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjFmYTA2MjAtYzgwZi00YTk0LTll OTUtZWFkNDRmYjc5OTc4L2YxZmEwNjIwLWM4MGYtNGE5NC05ZTk1LWVhZDQ0ZmI3 OTk3OC5jcmwwHwYDVR0jBBgwFoAUphG/cQGHxBw5AaKqJrnTgQz+K3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0 NGZiNzk5NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcU06RX2r/XZOUzVgj588IgdxMYpijqsDXAEBPFNTfG3tnS19G5e7d Mtr/ARBmOF85RLGTptI78Iyf9rfUcsrfxan4UxlRNKN887kjCxWnD6c5d+HzSB73 Qp8wztRfXM4KVNHQKyNLqsyIbPf/rXRkMgxrJPbojGjaebvj17Fla3ySityYJsh2 GJaOK0RkiepDk/ed6vwDw75Bc7vMu9FQUH8xq4aNESae2RvPf2EYHzTNFWdZCliM MrfYTO7sy0jR7qx1IrsSR+jGOH/iRGsb7q3qm7CVGuOJT6ZJI6U7Ni5lVPdaoP5z qw03OxbyAxyCVP0N73YbINcNqllpp7Su -----END CERTIFICATE-----Generated at Mon Aug 4 07:45:28 2025 by rpki-client