$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/490ab2cd-4dd2-3d12-8478-4839712464fa.roa File: 490ab2cd-4dd2-3d12-8478-4839712464fa.roa (raw, json) Hash identifier: S8TQo55yXuwbR2JtdSaLCa2d/z1hi/8JDWLAxO9vM9U= Subject key identifier: 18:7B:68:A5:57:B0:4D:4C:40:6D:44:D4:74:DA:9E:4E:3A:1F:25:54 Certificate issuer: /CN=2c480684-ece9-4dd6-8ec6-0437d826102d Certificate serial: 010D0C9F4328584AB91B94B66F9E99EAD6E10C00 Authority key identifier: DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/490ab2cd-4dd2-3d12-8478-4839712464fa.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 46616 IP address blocks: 2620:85:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:94:b6:6f:9e:99:ea:d6:e1:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c480684-ece9-4dd6-8ec6-0437d826102d Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=0f77fd46-8170-4b29-b642-c86337f7039a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:ae:10:a9:33:77:6c:74:3a:76:5a:ec:2d: 6c:59:9b:c5:30:45:50:da:b4:f5:3d:fa:56:6f:5b: 5e:28:4b:53:b2:de:29:7a:3f:66:91:a0:6b:b7:26: 75:20:23:ca:18:99:c8:f5:77:3b:58:77:f1:99:7e: e5:29:ec:02:e0:a5:29:db:5b:38:e9:43:7a:b6:be: 16:06:d8:37:27:61:05:b8:80:da:e7:71:11:a8:30: d3:9c:3d:1d:c1:d7:1a:66:23:b2:f5:8f:5e:77:9a: b3:a1:5d:ef:f2:e8:16:fb:aa:e6:f1:1b:df:6d:5b: 70:ea:50:9c:09:9d:45:56:da:09:13:bb:89:8c:d8: 33:e0:eb:e2:41:c5:6d:60:c8:ee:85:da:c1:87:41: 3f:fc:35:26:ec:a7:9c:86:74:de:1d:b6:a6:ae:a9: 1a:51:f2:72:40:5a:1e:15:84:d3:59:8c:dc:6f:f9: eb:c6:9a:84:92:37:7e:dd:0e:c4:4f:a3:41:b6:64: 72:ab:86:d2:32:23:87:9f:ea:e2:86:13:7f:80:50: c5:d1:d4:74:23:50:c2:07:41:0a:23:bc:9a:5d:08: 0a:71:c8:d6:cd:79:17:ea:a4:51:37:79:12:16:14: c9:d5:db:9b:b7:ea:7c:6a:41:1c:53:d2:11:c6:47: 6c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7B:68:A5:57:B0:4D:4C:40:6D:44:D4:74:DA:9E:4E:3A:1F:25:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/490ab2cd-4dd2-3d12-8478-4839712464fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl X509v3 Authority Key Identifier: keyid:DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer sbgp-ipAddrBlock: critical IPv6: 2620:85:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:9f:79:fa:4b:fb:79:57:67:f2:46:a1:7f:bb:f3:2a:0f:cb: 79:42:f2:02:fd:f8:ec:22:5d:ff:b8:61:b0:9f:82:de:fc:ce: 7f:de:c5:63:ca:01:b9:3e:cc:1d:ce:b9:81:65:57:91:19:5f: 5b:d4:65:72:d1:da:66:da:a7:42:e6:35:d0:f7:79:17:14:c5: f0:37:6e:dd:cf:2b:2b:4c:3e:56:13:a2:4f:b4:34:37:56:52: 4b:b3:4b:7e:f4:9f:31:9e:c1:b9:34:84:20:7f:fb:b6:d8:81: fc:22:3c:a1:aa:25:91:57:5b:bb:20:83:2a:23:5f:47:42:ec: 3e:33:73:c0:dd:5d:1f:1c:9e:96:26:19:f3:04:87:23:6b:27: 80:18:b1:d6:1c:44:cd:4e:d6:c0:97:6f:61:01:e3:74:94:4d: 7d:7c:26:61:cd:23:34:a4:d4:9f:55:c2:aa:f3:7e:3d:37:42: 58:77:d4:9d:ea:8e:89:bb:f6:ca:81:2d:72:db:c2:7d:fb:bf: 58:ca:0f:97:a7:32:56:98:39:ca:0f:ab:e9:9e:23:86:1a:4e: 51:67:16:3f:a5:81:bb:d8:5c:e0:63:9a:ba:cc:07:c2:57:84: 81:01:38:18:9a:24:84:1e:6d:54:6e:e6:1d:05:29:15:36:b5: 05:09:af:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G5S2b56Z6tbhDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmM0ODA2ODQtZWNlOS00ZGQ2LThlYzYtMDQzN2Q4MjYx MDJkMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MGY3N2ZkNDYtODE3MC00YjI5LWI2NDItYzg2MzM3ZjcwMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iOuEKkzd2x0OnZa7C1sWZvFMEVQ2rT1PfpW b1teKEtTst4pej9mkaBrtyZ1ICPKGJnI9Xc7WHfxmX7lKewC4KUp21s46UN6tr4W Btg3J2EFuIDa53ERqDDTnD0dwdcaZiOy9Y9ed5qzoV3v8ugW+6rm8RvfbVtw6lCc CZ1FVtoJE7uJjNgz4OviQcVtYMjuhdrBh0E//DUm7KechnTeHbamrqkaUfJyQFoe FYTTWYzcb/nrxpqEkjd+3Q7ET6NBtmRyq4bSMiOHn+rihhN/gFDF0dR0I1DCB0EK I7yaXQgKccjWzXkX6qRRN3kSFhTJ1dubt+p8akEcU9IRxkdsBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBh7aKVXsE1MQG1E1HTank46HyVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYzQ4 MDY4NC1lY2U5LTRkZDYtOGVjNi0wNDM3ZDgyNjEwMmQvNDkwYWIyY2QtNGRkMi0z ZDEyLTg0NzgtNDgzOTcxMjQ2NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmM0ODA2ODQtZWNlOS00ZGQ2LThl YzYtMDQzN2Q4MjYxMDJkLzJjNDgwNjg0LWVjZTktNGRkNi04ZWM2LTA0MzdkODI2 MTAyZC5jcmwwHwYDVR0jBBgwFoAU228xi315cPYMwgcg0hNv9Pw2VXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYzQ4MDY4NC1lY2U5LTRkZDYtOGVjNi0wNDM3 ZDgyNjEwMmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAheAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKGfefpL+3lXZ/JGoX+78yoPy3lC8gL9+OwiXf+4YbCfgt78zn/e xWPKAbk+zB3OuYFlV5EZX1vUZXLR2mbap0LmNdD3eRcUxfA3bt3PKytMPlYTok+0 NDdWUkuzS370nzGewbk0hCB/+7bYgfwiPKGqJZFXW7sggyojX0dC7D4zc8DdXR8c npYmGfMEhyNrJ4AYsdYcRM1O1sCXb2EB43SUTX18JmHNIzSk1J9Vwqrzfj03Qlh3 1J3qjom79sqBLXLbwn37v1jKD5enMlaYOcoPq+meI4YaTlFnFj+lgbvYXOBjmrrM B8JXhIEBOBiaJIQebVRu5h0FKRU2tQUJr/Q= -----END CERTIFICATE-----Generated at Wed Aug 6 16:15:01 2025 by rpki-client