$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa File: 3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa (raw, json) Hash identifier: MYoiEXG4+mMCki7j/dymOrPfZBLnskO0aUJW31Ubj/E= Subject key identifier: 4B:0E:8A:53:EA:25:15:15:4E:AE:C1:B0:64:92:69:5D:2A:2D:26:C4 Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F4328584A9E962060FFEF0ED971B76F80 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 398191 IP address blocks: 2607:c7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:20:60:ff:ef:0e:d9:71:b7:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=02b49625-e5cf-425d-9b70-a279f85d5b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ee:fd:b8:7f:32:be:c1:30:fd:fe:df:05:7c: 81:63:fb:73:f0:d8:22:f6:bd:1b:98:f6:b4:c5:b9: 86:59:21:76:8a:39:5e:45:7f:b7:a4:5b:2e:d5:76: 52:9b:49:28:65:0b:a8:a9:78:2a:23:6a:7f:9f:15: 26:86:9e:70:5a:25:e6:a2:8f:b5:27:76:9c:88:06: f6:54:e7:dd:23:ae:71:1c:cb:b9:cc:62:aa:25:3a: 62:a2:6f:78:dd:d6:a1:66:c3:4e:93:b7:fb:4e:e5: 24:da:8d:02:52:64:84:e9:54:58:b1:b8:c0:71:29: 1d:56:c5:51:32:22:36:0d:b6:73:6f:09:0d:3b:f1: c3:75:ff:dc:c5:de:3c:8d:93:05:c0:e5:84:22:79: 2c:43:f8:b5:34:0d:77:5a:70:a5:42:eb:b2:70:58: 63:19:a5:5e:96:34:cb:e3:a7:d0:2f:8d:b8:df:a2: d5:0d:c4:83:96:74:a6:e6:b0:d0:98:57:81:dc:11: 98:13:87:aa:36:81:56:6e:53:2c:01:1c:6e:0e:e9: 72:db:c7:b0:f8:6d:9c:ef:32:9a:54:f6:d4:d8:64: c8:c2:99:07:7f:ca:d5:17:fe:24:12:af:73:32:e4: 7b:6c:4d:3b:14:b3:f3:fd:c8:92:f1:34:c5:52:d1: 3a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0E:8A:53:EA:25:15:15:4E:AE:C1:B0:64:92:69:5D:2A:2D:26:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv6: 2607:c7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ac:0f:92:36:dc:87:5f:e9:a4:d6:bc:1d:cf:ed:6b:f6:b7: 62:94:aa:c1:db:e6:45:64:11:f3:ee:d8:d7:15:7d:d4:3c:1b: d2:a1:86:a5:63:a5:7c:7a:fb:30:1c:f3:6e:38:82:6e:b5:59: 81:50:08:13:40:2e:ca:9c:65:97:8d:39:f6:c2:43:88:d1:30: 1e:26:14:45:6e:b5:8a:32:6e:c4:e6:19:b5:b0:67:4c:5a:e5: 50:af:11:8f:f8:b8:e6:13:ca:f2:77:7b:e3:eb:6f:5a:c5:19: 13:df:45:f8:e1:27:68:30:58:b0:4e:a0:fd:1a:cd:06:cf:56: 1a:f9:92:3d:70:79:e8:b8:7e:eb:fa:00:3d:0f:65:a4:98:e7: 38:04:dc:45:38:f1:d1:65:19:7a:eb:96:59:96:2b:50:2d:c0: 05:ad:9d:d2:bc:1a:81:b7:54:19:20:1b:ec:97:43:cb:32:d9: f3:6a:ff:8a:a5:47:27:3c:76:94:b3:bb:c7:a6:f1:b0:7e:1f: 30:0a:63:c7:bb:1f:9c:8e:42:4c:61:78:f6:a4:68:bf:c1:85: 57:ef:5d:6f:e5:84:89:54:5f:3b:30:06:79:81:0d:31:a1:37: 99:c7:b0:ec:66:42:45:b5:38:57:c0:61:71:e0:d0:94:67:e7: 54:7a:90:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeliBg/+8O2XG3b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MDJiNDk2MjUtZTVjZi00MjVkLTliNzAtYTI3OWY4NWQ1YjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe79uH8yvsEw/f7fBXyBY/tz8Ngi9r0bmPa0 xbmGWSF2ijleRX+3pFsu1XZSm0koZQuoqXgqI2p/nxUmhp5wWiXmoo+1J3aciAb2 VOfdI65xHMu5zGKqJTpiom943dahZsNOk7f7TuUk2o0CUmSE6VRYsbjAcSkdVsVR MiI2DbZzbwkNO/HDdf/cxd48jZMFwOWEInksQ/i1NA13WnClQuuycFhjGaVeljTL 46fQL42436LVDcSDlnSm5rDQmFeB3BGYE4eqNoFWblMsARxuDuly28ew+G2c7zKa VPbU2GTIwpkHf8rVF/4kEq9zMuR7bE07FLPz/ciS8TTFUtE6ewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEsOilPqJRUVTq7BsGSSaV0qLSbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvM2E2ZTc1YTEtYzljMS0z Y2U4LTg3MDktNjc1OGNmYTFlYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAKrA+SNtyHX+mk1rwdz+1r9rdilKrB2+ZFZBHz7tjXFX3UPBvSoYal Y6V8evswHPNuOIJutVmBUAgTQC7KnGWXjTn2wkOI0TAeJhRFbrWKMm7E5hm1sGdM WuVQrxGP+LjmE8ryd3vj629axRkT30X44SdoMFiwTqD9Gs0Gz1Ya+ZI9cHnouH7r +gA9D2WkmOc4BNxFOPHRZRl665ZZlitQLcAFrZ3SvBqBt1QZIBvsl0PLMtnzav+K pUcnPHaUs7vHpvGwfh8wCmPHux+cjkJMYXj2pGi/wYVX711v5YSJVF87MAZ5gQ0x oTeZx7DsZkJFtThXwGFx4NCUZ+dUepDQ -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:18 2025 by rpki-client