$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a2d5db0b-200d-364d-a412-c50d76bffc06.roa File: a2d5db0b-200d-364d-a412-c50d76bffc06.roa (raw, json) Hash identifier: 3GwniaZ2nNf0Y1ZUyYNSEv4wNfe69f6qjRPUspqAsPU= Subject key identifier: 96:59:44:C2:F7:EB:5B:89:B6:5C:56:91:7B:9F:E1:A5:4A:A9:A6:C6 Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd Certificate serial: 010D0C9F4328584AA2C644F20CC7AFC37E89EB40 Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a2d5db0b-200d-364d-a412-c50d76bffc06.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 393844 IP address blocks: 2600:a400::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:44:f2:0c:c7:af:c3:7e:89:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=27a9a0dd-6905-4728-ba3a-5ded438d2e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:73:23:57:8b:ea:d1:87:44:c2:3b:07:62:1d: 36:e7:34:15:86:28:ac:92:a2:27:5d:01:cd:43:29: de:b7:18:d6:68:2a:74:31:20:33:5d:83:fd:46:51: 37:6c:71:60:37:24:11:91:0f:ce:c2:e6:ef:54:ee: a8:70:06:88:96:a0:06:8b:41:f2:f7:ef:3c:f9:e3: 27:c8:99:2d:be:c0:1f:44:0d:6e:d8:58:29:db:a4: 64:e7:7f:3f:42:75:b7:85:77:f0:68:25:37:81:c0: dc:68:d4:2c:ae:3a:a2:52:21:8a:2f:31:41:96:a8: 40:78:44:35:3b:98:d1:e6:78:a3:f2:de:14:30:4d: de:1a:e3:3a:93:dc:7b:2f:03:db:8c:0d:6d:67:75: 26:3f:09:47:f6:94:4b:73:b9:56:ba:c9:1b:e9:b9: 32:ca:3e:0d:0c:a6:3f:f1:39:5b:c9:15:cb:83:7f: 12:2b:15:6f:27:e5:be:9b:90:3b:6d:41:75:df:6d: 86:f7:fc:dd:30:21:fc:94:97:bf:59:59:91:b5:9b: 57:ca:87:08:e3:b8:23:e9:d3:0e:77:5a:57:b1:d1: a8:f4:75:40:29:ee:b7:99:a3:11:ea:40:b4:4b:84: 53:f5:cb:c9:0d:bc:4a:d6:7e:d5:c0:81:dc:e3:af: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:59:44:C2:F7:EB:5B:89:B6:5C:56:91:7B:9F:E1:A5:4A:A9:A6:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a2d5db0b-200d-364d-a412-c50d76bffc06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl X509v3 Authority Key Identifier: keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer sbgp-ipAddrBlock: critical IPv6: 2600:a400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:48:b5:a1:06:ec:71:31:c0:a7:1e:18:0a:4f:2b:b3:9f:42: 10:23:ad:59:fd:0e:5a:92:3e:3e:ba:bf:04:f4:96:b8:a3:d5: e5:be:4e:eb:4d:00:e4:bb:f1:b6:63:93:d5:09:d1:37:a8:6e: 94:45:4a:45:15:f2:5a:8f:21:e4:90:85:e6:27:3e:87:14:d9: 50:7e:f0:9b:a4:89:04:20:ff:15:23:aa:9c:ec:92:7a:c9:a5: 03:68:10:f0:26:a8:df:95:72:5f:7f:f2:4f:d2:e0:74:53:bc: ae:02:01:84:d5:77:7e:00:80:38:b5:2d:c0:03:9a:50:3c:19: 7b:df:aa:69:72:3d:f8:04:05:1c:02:13:4e:96:bf:83:c8:d4: 71:4c:8b:a6:9f:be:59:ee:45:b4:32:ae:07:11:98:f2:86:f4: 01:0c:b9:67:ca:1e:ec:ba:d6:a5:91:10:ef:97:6a:bd:9d:9c: 74:28:97:19:2a:3a:3d:06:0c:a7:e0:85:92:ac:6b:9d:16:6b: c2:9d:e7:5a:6d:b8:9a:e2:a4:4d:6e:fe:eb:ef:69:11:68:60: f3:c7:7c:7d:ab:71:70:ff:19:73:9c:04:95:cd:86:a4:c4:c9: e4:26:70:13:91:66:a4:1c:4e:93:d5:49:52:00:79:51:48:f4: 05:21:26:f6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqixkTyDMevw36J60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4NGYtZDg5M2E1NmRi Y2RkMB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk MjdhOWEwZGQtNjkwNS00NzI4LWJhM2EtNWRlZDQzOGQyZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHMjV4vq0YdEwjsHYh025zQVhiiskqInXQHN QynetxjWaCp0MSAzXYP9RlE3bHFgNyQRkQ/OwubvVO6ocAaIlqAGi0Hy9+88+eMn yJktvsAfRA1u2Fgp26Rk538/QnW3hXfwaCU3gcDcaNQsrjqiUiGKLzFBlqhAeEQ1 O5jR5nij8t4UME3eGuM6k9x7LwPbjA1tZ3UmPwlH9pRLc7lWuskb6bkyyj4NDKY/ 8TlbyRXLg38SKxVvJ+W+m5A7bUF1322G9/zdMCH8lJe/WVmRtZtXyocI47gj6dMO d1pXsdGo9HVAKe63maMR6kC0S4RT9cvJDbxK1n7VwIHc468t2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJZZRML361uJtlxWkXuf4aVKqabGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDg4 ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkzYTU2ZGJjZGQvYTJkNWRiMGItMjAwZC0z NjRkLWE0MTItYzUwZDc2YmZmYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4 NGYtZDg5M2E1NmRiY2RkLzc0ODg4NGIwLTI0NTYtNDcwMC05ODRmLWQ4OTNhNTZk YmNkZC5jcmwwHwYDVR0jBBgwFoAU4rFzysxNL53SxWqp+K4q458SYKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDg4ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkz YTU2ZGJjZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgCkADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAXSLWhBuxxMcCnHhgKTyuzn0IQI61Z/Q5akj4+ur8E9Ja4o9Xlvk7r TQDku/G2Y5PVCdE3qG6URUpFFfJajyHkkIXmJz6HFNlQfvCbpIkEIP8VI6qc7JJ6 yaUDaBDwJqjflXJff/JP0uB0U7yuAgGE1Xd+AIA4tS3AA5pQPBl736ppcj34BAUc AhNOlr+DyNRxTIumn75Z7kW0Mq4HEZjyhvQBDLlnyh7sutalkRDvl2q9nZx0KJcZ Kjo9Bgyn4IWSrGudFmvCnedabbia4qRNbv7r72kRaGDzx3x9q3Fw/xlznASVzYak xMnkJnATkWakHE6T1UlSAHlRSPQFISb2 -----END CERTIFICATE-----Generated at Wed Aug 6 09:28:36 2025 by rpki-client