$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa File: 825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa (raw, json) Hash identifier: dVntWZHhBVMS+5/7l/X3rxArr2AoX5lwQZXQGZjsCjU= Subject key identifier: 61:72:D6:DB:7E:0E:04:E7:02:9D:A0:32:2B:80:6A:58:84:E4:5B:23 Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F4328584A8B0B548455FE13DD28E123A0 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 22987 IP address blocks: 2604:f6c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:54:84:55:fe:13:dd:28:e1:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=8fb46678-89b3-43f9-af9b-2c0165edde75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:78:aa:9d:78:8f:78:a0:9a:bd:5a:9c:96: 92:72:0e:ff:25:55:cf:a4:4a:ec:19:79:67:dc:37: 18:aa:15:b1:b2:56:7b:ca:a0:35:8a:9d:49:94:69: e6:2e:3e:df:a9:f3:0b:24:76:b3:51:e6:ad:a6:b3: 34:35:9e:93:3b:6e:7b:12:d1:ab:20:5e:c9:7b:eb: f1:43:e8:cb:21:38:12:05:b3:38:cc:9d:aa:41:3b: e1:84:e4:d5:ff:1d:71:6f:87:75:36:ad:5b:43:b6: 27:29:7a:b6:14:8d:87:c2:bd:68:b0:0b:09:f4:79: d2:bd:c2:b3:9f:de:97:42:86:4e:4b:b9:c3:1a:2b: c2:e1:61:da:3c:26:a8:64:e6:99:41:2b:a1:12:b3: 60:60:7b:fc:ff:9c:a5:f5:9d:d5:5e:09:e9:dd:87: f5:72:1a:97:76:16:ed:61:cb:fe:eb:7c:09:35:67: 6f:0e:76:e0:b3:f5:19:75:2c:b3:95:f5:0b:83:e7: 37:4f:db:d7:f3:a5:f3:e8:96:ff:8d:4e:c4:a2:86: 94:41:9c:7c:fe:61:cc:1c:4e:ce:4b:3b:41:fa:85: 89:77:d9:8e:dd:9d:a1:02:06:a0:32:56:fd:b0:fd: e3:ab:4d:ed:a1:54:c0:68:16:ce:b2:40:b2:5c:cc: 92:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:72:D6:DB:7E:0E:04:E7:02:9D:A0:32:2B:80:6A:58:84:E4:5B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv6: 2604:f6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:43:76:80:da:13:ee:a9:74:56:92:af:16:b1:12:98:9e:28: 8d:a1:2d:37:36:93:b8:2a:95:5d:74:e6:1c:7e:80:b8:36:f0: 83:c1:18:6e:45:5a:2e:10:e5:65:a9:05:f4:fb:5e:f2:42:c6: 0c:e1:cb:56:7f:01:e1:c8:ea:7f:ae:33:75:1a:73:45:9e:cd: 8b:a6:8e:88:9c:98:b7:3c:6c:6e:a8:e6:90:18:c7:bb:e7:e3: c3:8c:f5:8a:08:06:19:b1:51:64:a3:1f:01:48:6e:40:47:5f: 9c:21:44:31:86:d9:c1:5a:ab:bd:58:e0:12:d0:5e:04:f6:d3: 18:46:a3:44:b6:c1:dc:7e:98:02:61:ae:27:61:fd:4a:ef:cc: 6a:df:d9:7a:2d:5e:07:f7:50:ba:cb:15:39:1f:66:32:e7:d7: b7:e1:3c:07:b7:5c:5e:0a:b2:de:28:29:c0:35:9f:0c:29:f2: ed:66:07:bb:e9:c5:4a:ea:1e:61:65:29:8c:55:ac:34:ed:1a: 4a:61:f0:4d:00:01:10:92:f8:f8:b6:ae:1e:2f:a2:32:3e:b8: e0:8b:68:06:fe:04:40:2b:cd:81:e5:28:be:45:8f:c2:87:13: 9a:a0:cb:2b:28:27:31:ca:f4:e2:56:6a:7e:e7:b1:11:e0:6a: f8:a7:55:b1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqLC1SEVf4T3SjhI6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk OGZiNDY2NzgtODliMy00M2Y5LWFmOWItMmMwMTY1ZWRkZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGd4qp14j3igmr1anJaScg7/JVXPpErsGXln 3DcYqhWxslZ7yqA1ip1JlGnmLj7fqfMLJHazUeatprM0NZ6TO257EtGrIF7Je+vx Q+jLITgSBbM4zJ2qQTvhhOTV/x1xb4d1Nq1bQ7YnKXq2FI2Hwr1osAsJ9HnSvcKz n96XQoZOS7nDGivC4WHaPCaoZOaZQSuhErNgYHv8/5yl9Z3VXgnp3Yf1chqXdhbt Ycv+63wJNWdvDnbgs/UZdSyzlfULg+c3T9vX86Xz6Jb/jU7EooaUQZx8/mHMHE7O SztB+oWJd9mO3Z2hAgagMlb9sP3jq03toVTAaBbOskCyXMyS6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGFy1tt+DgTnAp2gMiuAaliE5FsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvODI1MTQ4YWUtOGVlOS0z YjUzLTlmZGEtZmY2ZWI0OTEyYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT2wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjQ3aA2hPuqXRWkq8WsRKYniiNoS03NpO4KpVddOYcfoC4NvCDwRhu RVouEOVlqQX0+17yQsYM4ctWfwHhyOp/rjN1GnNFns2Lpo6InJi3PGxuqOaQGMe7 5+PDjPWKCAYZsVFkox8BSG5AR1+cIUQxhtnBWqu9WOAS0F4E9tMYRqNEtsHcfpgC Ya4nYf1K78xq39l6LV4H91C6yxU5H2Yy59e34TwHt1xeCrLeKCnANZ8MKfLtZge7 6cVK6h5hZSmMVaw07RpKYfBNAAEQkvj4tq4eL6IyPrjgi2gG/gRAK82B5Si+RY/C hxOaoMsrKCcxyvTiVmp+57ER4Gr4p1Wx -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:20 2025 by rpki-client