$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa File: 701df298-19b8-383b-a438-a2b9a42d4aa8.roa (raw, json) Hash identifier: MNqguPcFz4eyufgOwYnaf+DsEr2rgnTftl0fbuQwJCs= Subject key identifier: 3E:F3:8E:80:7C:36:C7:AE:10:D2:FA:71:47:F7:35:1C:1B:9A:26:5C Certificate issuer: /CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81 Certificate serial: 010D0C9F4328584A6DBB3AD424945A23565CA300 Authority key identifier: CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 62668 IP address blocks: 2605:c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:3a:d4:24:94:5a:23:56:5c:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=47b4e71a-f3e9-4ed1-b022-7802f82bda73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bd:ef:82:50:ec:9e:6b:11:54:d8:e6:45:64: 68:5d:11:18:c5:d1:2b:b7:4d:b4:7e:b1:85:f5:b8: fd:dd:64:12:86:4e:dd:4f:9b:c7:5e:ed:5d:b9:f9: 7d:ae:b8:54:51:9c:79:22:79:5d:85:b8:7a:f5:07: f9:a9:8e:e5:0d:4b:50:03:92:50:7c:52:32:3c:ad: 3b:95:03:dc:35:0b:b0:9f:e2:32:a0:0e:ed:9e:28: 1d:8c:7f:bf:e2:33:fe:12:e8:9a:80:7a:dd:86:da: 9d:89:13:7f:a9:38:64:79:69:3f:9a:4c:03:e5:48: 71:e7:2b:a1:29:eb:66:6d:7f:2d:84:20:f4:ec:0e: a3:85:d3:25:ac:da:ea:8f:14:57:85:89:bc:b9:00: 6c:85:1a:d8:ec:42:20:a8:53:3b:5d:a4:0f:1e:2a: c1:b0:81:77:df:dd:9b:4e:b5:6a:60:4b:02:69:62: 06:f6:65:b8:49:21:d6:e5:b6:86:cc:f1:bb:b7:47: 34:51:9c:93:54:f2:7b:60:44:9b:42:9b:51:7d:72: ed:66:d6:6b:67:94:9e:c1:80:17:96:47:ee:dc:25: 3b:c6:38:cf:ae:a8:7b:d8:86:37:dd:48:70:3d:e1: 1d:34:52:67:62:86:d5:2d:60:08:95:db:69:c9:2c: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F3:8E:80:7C:36:C7:AE:10:D2:FA:71:47:F7:35:1C:1B:9A:26:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl X509v3 Authority Key Identifier: keyid:CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer sbgp-ipAddrBlock: critical IPv6: 2605:c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c8:31:67:8c:e0:5c:de:d8:61:02:ed:f3:be:1f:ae:7c:82: 3e:65:b6:91:d9:26:f9:9b:ec:d0:77:81:a9:12:48:b3:37:23: 5a:1d:6b:b4:45:92:68:4a:a8:26:15:85:e0:20:7a:c1:c6:be: e0:10:56:ff:c3:7c:e3:32:c9:fb:fc:d3:ea:19:d6:64:c7:90: da:5f:7f:c8:3f:67:1e:91:8f:82:c6:f7:33:0c:bb:c0:a1:26: 00:03:87:e8:da:ae:65:ed:5c:72:86:1c:b9:7f:4b:59:48:ee: 40:92:49:75:dc:69:46:8b:0f:58:57:7a:8a:5c:3e:b0:5e:06: 00:17:4d:f6:d0:45:c8:d9:6d:ee:b8:3f:07:f9:42:42:1f:94: 4a:3c:78:99:f5:92:ae:7c:c5:8f:d3:f2:fa:72:bd:7c:de:18: 6e:9c:3b:34:de:af:be:5d:e1:93:2c:69:30:46:7f:ba:b1:d0: df:b6:11:e7:1a:d7:4a:8a:e0:27:b2:08:bc:f1:ea:e9:d9:34: 31:08:b8:79:9c:ea:63:21:95:dc:99:d0:8b:d1:f3:8e:01:34: c5:9e:a5:5b:75:80:83:83:18:e4:77:42:7f:12:b0:11:8f:e8: bd:60:48:57:04:49:8f:e4:aa:1d:16:fb:17:91:c2:60:0d:06: ca:d1:2e:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEptuzrUJJRaI1ZcowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg1NTkyYjktOGU3Yi00Y2NiLTg3ZGMtZTFkZTJlOThi ZDgxMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk NDdiNGU3MWEtZjNlOS00ZWQxLWIwMjItNzgwMmY4MmJkYTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL3vglDsnmsRVNjmRWRoXREYxdErt020frGF 9bj93WQShk7dT5vHXu1dufl9rrhUUZx5Inldhbh69Qf5qY7lDUtQA5JQfFIyPK07 lQPcNQuwn+IyoA7tnigdjH+/4jP+EuiagHrdhtqdiRN/qThkeWk/mkwD5Uhx5yuh KetmbX8thCD07A6jhdMlrNrqjxRXhYm8uQBshRrY7EIgqFM7XaQPHirBsIF3392b TrVqYEsCaWIG9mW4SSHW5baGzPG7t0c0UZyTVPJ7YESbQptRfXLtZtZrZ5SewYAX lkfu3CU7xjjPrqh72IY33UhwPeEdNFJnYobVLWAIldtpySzmuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD7zjoB8NseuENL6cUf3NRwbmiZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODU1 OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRlMmU5OGJkODEvNzAxZGYyOTgtMTliOC0z ODNiLWE0MzgtYTJiOWE0MmQ0YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTg1NTkyYjktOGU3Yi00Y2NiLTg3 ZGMtZTFkZTJlOThiZDgxLzk4NTU5MmI5LThlN2ItNGNjYi04N2RjLWUxZGUyZTk4 YmQ4MS5jcmwwHwYDVR0jBBgwFoAUy0A2wcrf/oqJS/RLPYQLTYZ/2xYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODU1OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRl MmU5OGJkODEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUMQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+yDFnjOBc3thhAu3zvh+ufII+ZbaR2Sb5m+zQd4GpEkizNyNaHWu0 RZJoSqgmFYXgIHrBxr7gEFb/w3zjMsn7/NPqGdZkx5DaX3/IP2cekY+CxvczDLvA oSYAA4fo2q5l7Vxyhhy5f0tZSO5Akkl13GlGiw9YV3qKXD6wXgYAF0320EXI2W3u uD8H+UJCH5RKPHiZ9ZKufMWP0/L6cr183hhunDs03q++XeGTLGkwRn+6sdDfthHn GtdKiuAnsgi88erp2TQxCLh5nOpjIZXcmdCL0fOOATTFnqVbdYCDgxjkd0J/ErAR j+i9YEhXBEmP5KodFvsXkcJgDQbK0S5z -----END CERTIFICATE-----Generated at Tue Aug 5 20:16:44 2025 by rpki-client