$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa File: ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa (raw, json) Hash identifier: NUHxVAoG39YEy0jtc4xB9UZy8XD9dNtrqEH2S0cXHME= Subject key identifier: 3E:93:AD:E4:7F:F0:4C:EB:3C:DD:21:C5:D5:37:1D:8F:7D:25:03:11 Certificate issuer: /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Certificate serial: 010D0C9F4328584AA590F50BFC9F8D5D92474D00 Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa Signing time: Sat 26 Jul 2025 13:01:04 +0000 ROA not before: Sat 26 Jul 2025 13:01:04 +0000 ROA not after: Fri 24 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 2620:117:5200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:90:f5:0b:fc:9f:8d:5d:92:47:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Validity Not Before: Jul 26 13:01:04 2025 GMT Not After : Oct 24 13:01:04 2025 GMT Subject: CN=c002816e-9188-4fc9-9140-e3f4dbb0e252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:5c:40:de:21:9a:1a:e2:8d:74:9b:a7:d3: 07:f9:a5:1c:ef:99:05:83:4c:52:c4:cc:1c:79:5b: f2:52:87:a9:8a:49:66:4b:c5:52:ff:0e:80:6f:05: 65:0e:01:56:19:67:49:b0:9e:cd:fe:6c:43:05:03: 81:43:3e:ee:aa:dd:13:f3:52:41:59:57:e9:f9:d7: 62:c6:dd:d2:4b:ed:1e:01:3e:c1:42:21:84:06:61: 59:06:41:7b:84:a0:9f:4f:a4:a9:dd:09:61:85:b6: e9:fc:5e:46:33:5d:7a:67:cb:05:7d:04:ed:63:e7: aa:a7:64:2f:ec:ad:4e:16:dd:64:79:08:bb:5a:7d: 2f:30:fc:e5:5b:92:41:c1:9a:89:9f:63:a7:2d:06: 39:c9:84:1f:b8:87:14:72:4a:95:27:d0:df:bc:db: f7:4e:d8:24:d0:ba:ca:c0:2f:4a:6c:e7:61:4a:a8: c9:e9:e5:52:5b:ff:c1:9e:78:b1:49:3d:97:44:90: b7:2e:9e:3b:96:c5:a8:53:83:af:de:97:f4:96:ff: 56:b0:d0:e5:5b:27:85:81:9e:28:2d:cb:d0:69:8d: 2a:5d:2d:2c:c0:e4:98:dd:9c:71:31:44:af:b2:61: aa:58:4e:f1:94:33:b3:9a:9f:fe:9b:09:16:34:79: 32:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:93:AD:E4:7F:F0:4C:EB:3C:DD:21:C5:D5:37:1D:8F:7D:25:03:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl X509v3 Authority Key Identifier: keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:5200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:dc:81:40:50:51:09:c7:3e:1c:3b:ad:cb:0b:87:56:a9:9d: 2d:b9:b6:35:be:11:79:94:84:22:54:2f:77:4b:d2:79:bb:5a: 99:fa:2f:6b:1c:3d:29:f0:9a:c9:34:73:3b:9e:15:00:c4:79: 8b:c1:2d:e2:67:4a:98:6f:a6:45:b3:70:92:94:b5:33:81:f9: 17:e6:79:6f:6c:81:2d:ff:43:41:47:0f:cb:b1:83:54:01:93: 47:34:d2:39:7e:67:18:12:86:4d:4d:9d:d4:35:be:d4:a9:a2: 1d:00:38:7e:eb:b2:80:22:f9:76:fd:94:81:a6:3c:23:93:4f: 1d:a9:f4:64:50:e8:5a:af:cd:ab:0a:08:bd:fb:53:a3:86:e8: 75:0a:00:07:ed:bb:0f:d6:1c:05:3b:96:91:42:d4:7c:e4:6e: 26:47:37:15:a9:3c:dc:72:97:88:d7:b1:2f:38:52:48:d7:e9: 25:31:c9:8e:f5:63:6f:c3:47:78:4e:28:5f:06:34:a4:8a:18: c4:45:97:7b:8c:fa:3c:6f:6d:29:05:b2:08:a0:48:9f:90:fc: 18:d6:e8:39:58:89:f7:09:61:9e:ca:bd:ab:56:2b:90:44:3b: a5:b3:36:45:bd:d2:54:b6:93:29:61:ad:5a:36:d1:d2:ee:e7: 90:bd:45:08 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqlkPUL/J+NXZJHTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU1MGY2NGMtNDYzMy00NWYwLWI4OTYtM2FjN2JkZjdl NWI4MB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk YzAwMjgxNmUtOTE4OC00ZmM5LTkxNDAtZTNmNGRiYjBlMjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYJcQN4hmhrijXSbp9MH+aUc75kFg0xSxMwc eVvyUoepiklmS8VS/w6AbwVlDgFWGWdJsJ7N/mxDBQOBQz7uqt0T81JBWVfp+ddi xt3SS+0eAT7BQiGEBmFZBkF7hKCfT6Sp3Qlhhbbp/F5GM116Z8sFfQTtY+eqp2Qv 7K1OFt1keQi7Wn0vMPzlW5JBwZqJn2OnLQY5yYQfuIcUckqVJ9DfvNv3Ttgk0LrK wC9KbOdhSqjJ6eVSW//BnnixST2XRJC3Lp47lsWoU4Ov3pf0lv9WsNDlWyeFgZ4o LcvQaY0qXS0swOSY3ZxxMUSvsmGqWE7xlDOzmp/+mwkWNHkytQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD6TreR/8EzrPN0hxdU3HY99JQMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUw ZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3YmRmN2U1YjgvY2EzZTg5OWQtZTcyNC0z NWU4LThiNDMtY2JkYmU3YzkyZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU1MGY2NGMtNDYzMy00NWYwLWI4 OTYtM2FjN2JkZjdlNWI4L2E1NTBmNjRjLTQ2MzMtNDVmMC1iODk2LTNhYzdiZGY3 ZTViOC5jcmwwHwYDVR0jBBgwFoAU0bK/CQCZzu0rGnHmo5haYV5HPtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUwZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3 YmRmN2U1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABF1Iw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEArNyBQFBRCcc+HDutywuHVqmdLbm2Nb4ReZSEIlQvd0vSebtamfov axw9KfCayTRzO54VAMR5i8Et4mdKmG+mRbNwkpS1M4H5F+Z5b2yBLf9DQUcPy7GD VAGTRzTSOX5nGBKGTU2d1DW+1KmiHQA4fuuygCL5dv2UgaY8I5NPHan0ZFDoWq/N qwoIvftTo4bodQoAB+27D9YcBTuWkULUfORuJkc3Fak83HKXiNexLzhSSNfpJTHJ jvVjb8NHeE4oXwY0pIoYxEWXe4z6PG9tKQWyCKBIn5D8GNboOViJ9wlhnsq9q1Yr kEQ7pbM2Rb3SVLaTKWGtWjbR0u7nkL1FCA== -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:39 2025 by rpki-client