$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f5b4c4d3-3c1a-3c16-8b64-9e178e5096b0.roa File: f5b4c4d3-3c1a-3c16-8b64-9e178e5096b0.roa (raw, json) Hash identifier: 9awfKVcOtG78VjMVl2MadPdMtq52jle96sgFX41CdMI= Subject key identifier: 43:0B:19:6D:9B:F3:43:5E:82:F9:18:68:DB:43:A4:52:A8:9E:A8:F3 Certificate issuer: /CN=7d4d1f55-ab35-4c35-9037-e56ddd833168 Certificate serial: 010D0C9F4328584AD50672D6D21428D7E665BB40 Authority key identifier: 8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f5b4c4d3-3c1a-3c16-8b64-9e178e5096b0.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 401736 IP address blocks: 2620:d7:6000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:72:d6:d2:14:28:d7:e6:65:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d4d1f55-ab35-4c35-9037-e56ddd833168 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=f6ee0a95-4150-44bc-bbde-7aa80d677f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9e:01:bb:a7:ff:99:4c:bd:70:8e:eb:94:8f: 2a:99:df:c6:d3:d8:8f:6d:b6:bf:3b:8d:b3:1e:69: 2a:1e:32:18:22:92:cf:00:7c:2a:c4:f5:24:07:b1: 3b:05:e7:fa:43:e7:c9:0d:61:c9:33:49:98:da:d7: f4:28:bc:9a:b7:a1:2a:f8:ab:5a:7f:2e:92:1c:83: 82:f3:1a:f1:84:da:37:df:d4:65:a6:cb:59:72:d8: 77:90:5c:9e:0e:c9:cf:90:d7:1b:d7:f6:df:2f:ae: b6:81:e8:eb:bf:bd:1b:c5:0b:2a:67:78:52:c6:f8: 61:bc:ce:c9:1e:74:5f:d4:b6:60:f5:47:c7:f4:df: da:37:e1:d9:d9:fc:2b:f0:2b:66:d7:01:a6:ca:43: ec:15:48:63:80:bb:9c:73:e3:fd:15:dc:5f:91:2e: 85:98:1a:47:01:52:01:75:10:16:3f:7b:6c:06:42: b8:1b:3f:a8:00:6d:d9:02:fe:e5:e7:05:a9:51:b2: 3c:a4:1c:30:10:de:fe:1b:49:fb:40:d1:17:6a:d2: e0:75:ef:ac:c8:09:6c:9f:9f:71:56:bb:f7:b8:76: 2a:ae:af:46:d4:e7:d9:0c:ef:21:a5:8d:3f:b7:ec: a4:28:34:ca:98:47:0c:5e:dc:8b:91:6b:fb:ad:c7: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0B:19:6D:9B:F3:43:5E:82:F9:18:68:DB:43:A4:52:A8:9E:A8:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f5b4c4d3-3c1a-3c16-8b64-9e178e5096b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.crl X509v3 Authority Key Identifier: keyid:8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer sbgp-ipAddrBlock: critical IPv6: 2620:d7:6000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b1:b8:02:e6:6b:95:d2:48:f7:af:d4:99:40:94:c6:1d:30: 53:00:19:c7:54:5b:d5:8f:99:5b:b2:ac:ce:7f:1b:44:27:01: c1:c2:19:eb:9e:a4:e5:71:4d:91:d2:d5:5a:f9:82:28:fe:30: 63:c8:ba:5b:88:83:8a:05:22:d6:99:2f:ba:14:f1:58:63:d6: 76:0b:e5:14:b1:46:b7:39:8d:52:30:cf:e6:07:35:7a:45:18: 46:64:f7:cd:87:61:d9:f0:32:f0:6b:85:8e:03:b1:64:92:4a: 4c:d8:ae:16:f0:71:a7:14:62:b5:1e:40:5b:87:0d:9f:bb:2d: 34:a0:16:86:34:bf:93:bb:d7:f7:8b:d5:c9:f7:12:f7:55:12: fa:4a:8b:0e:d5:72:71:09:67:19:7c:ed:fd:4c:3d:73:76:02: f9:dd:52:68:5e:6d:6a:3e:81:fd:4e:7d:b1:4e:d9:eb:05:a9: a4:e4:95:6f:aa:07:76:f1:5a:03:72:77:56:0d:78:fb:91:4b: d8:f2:58:2d:20:f2:8e:0e:be:37:02:37:a2:41:64:65:74:47: 74:c9:dc:b0:b8:7e:9d:0b:21:8d:a2:36:d9:df:9e:2b:1a:64: c7:16:d4:4d:6d:cc:3f:af:a7:11:a2:be:67:51:2f:07:b8:44: 34:01:f2:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErVBnLW0hQo1+Zlu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q0ZDFmNTUtYWIzNS00YzM1LTkwMzctZTU2ZGRkODMz MTY4MB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk ZjZlZTBhOTUtNDE1MC00NGJjLWJiZGUtN2FhODBkNjc3ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ4Bu6f/mUy9cI7rlI8qmd/G09iPbba/O42z HmkqHjIYIpLPAHwqxPUkB7E7Bef6Q+fJDWHJM0mY2tf0KLyat6Eq+Ktafy6SHIOC 8xrxhNo339RlpstZcth3kFyeDsnPkNcb1/bfL662gejrv70bxQsqZ3hSxvhhvM7J HnRf1LZg9UfH9N/aN+HZ2fwr8Ctm1wGmykPsFUhjgLucc+P9FdxfkS6FmBpHAVIB dRAWP3tsBkK4Gz+oAG3ZAv7l5wWpUbI8pBwwEN7+G0n7QNEXatLgde+syAlsn59x Vrv3uHYqrq9G1OfZDO8hpY0/t+ykKDTKmEcMXtyLkWv7rcfm+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEMLGW2b80NegvkYaNtDpFKonqjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83ZDRk MWY1NS1hYjM1LTRjMzUtOTAzNy1lNTZkZGQ4MzMxNjgvZjViNGM0ZDMtM2MxYS0z YzE2LThiNjQtOWUxNzhlNTA5NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvN2Q0ZDFmNTUtYWIzNS00YzM1LTkw MzctZTU2ZGRkODMzMTY4LzdkNGQxZjU1LWFiMzUtNGMzNS05MDM3LWU1NmRkZDgz MzE2OC5jcmwwHwYDVR0jBBgwFoAUj0SV22NYyzwm/QC+u5uv6rcsmWIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83ZDRkMWY1NS1hYjM1LTRjMzUtOTAzNy1lNTZk ZGQ4MzMxNjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAA12AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAKxuALma5XSSPev1JlAlMYdMFMAGcdUW9WPmVuyrM5/G0QnAcHC GeuepOVxTZHS1Vr5gij+MGPIuluIg4oFItaZL7oU8Vhj1nYL5RSxRrc5jVIwz+YH NXpFGEZk982HYdnwMvBrhY4DsWSSSkzYrhbwcacUYrUeQFuHDZ+7LTSgFoY0v5O7 1/eL1cn3EvdVEvpKiw7VcnEJZxl87f1MPXN2AvndUmhebWo+gf1OfbFO2esFqaTk lW+qB3bxWgNyd1YNePuRS9jyWC0g8o4OvjcCN6JBZGV0R3TJ3LC4fp0LIY2iNtnf nisaZMcW1E1tzD+vpxGivmdRLwe4RDQB8mE= -----END CERTIFICATE-----Generated at Wed Aug 13 23:02:25 2025 by rpki-client