$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa File: ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa (raw, json) Hash identifier: 1+Fplz7pPe88A11Mo/sZqRR9bOGSoCFKbYDVDVcLTLI= Subject key identifier: C7:DA:9A:91:AA:1E:7F:08:78:C0:9C:EF:25:A2:07:C2:A7:10:10:85 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584A7BB0B8471B508B248D69F780 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 198949 IP address blocks: 2607:f460::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b8:47:1b:50:8b:24:8d:69:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=9ded19c1-d5d9-4935-acd8-fe6237765dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b7:78:cf:30:72:69:24:4d:f2:40:77:d9:6c: 32:8c:ba:f2:6a:4b:66:af:89:bd:8a:38:1a:c8:b6: df:db:1b:20:e0:e2:86:73:3a:9b:4b:b5:10:37:a7: 5c:7f:3c:ea:44:18:40:94:30:44:60:b5:38:0f:03: da:7c:2f:b8:22:33:17:b4:1b:87:8d:e9:ff:5d:aa: b2:2d:a6:f9:21:9f:13:de:a5:c8:b0:49:25:24:3b: 07:60:b6:df:e2:ff:3e:39:13:20:95:b1:99:5f:94: 5b:85:1d:17:4c:15:fa:c4:62:c5:5e:58:6c:b9:f4: d8:54:99:dd:44:f1:b5:30:42:3f:9e:ea:3c:0e:06: c2:65:c4:33:b8:f9:9e:92:ca:81:d9:12:81:15:8a: c2:22:63:d1:6b:ce:12:86:e8:ad:17:ac:9b:6a:84: a5:f2:ea:e1:e9:1d:70:47:12:cf:17:33:3a:74:b5: 0c:1e:f2:27:e2:6f:e4:bb:89:c6:23:49:f6:96:e9: f6:38:98:c6:d8:c1:86:53:49:32:64:9d:06:bb:e8: 20:a0:87:3a:b0:3c:9f:8f:86:d3:5d:67:ae:f7:9a: fc:d1:d7:02:24:5a:71:cf:1e:36:f3:44:16:56:a8: a6:75:2f:c1:96:c0:42:45:72:38:ae:1d:a7:9b:b2: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DA:9A:91:AA:1E:7F:08:78:C0:9C:EF:25:A2:07:C2:A7:10:10:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv6: 2607:f460::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:fc:da:0d:26:a8:34:25:cf:9b:a6:2b:1b:c0:c9:27:68:ba: 11:0e:18:2f:2d:c0:2b:2d:88:3d:fb:df:0a:5a:4a:97:cc:9d: 02:a6:dc:35:74:e0:c8:bb:cc:e6:02:e4:2e:bf:f2:b4:99:87: 87:a0:94:42:de:4f:f5:db:0c:d4:b9:ba:eb:63:a8:97:6c:8c: 38:cf:c4:27:78:ba:39:4e:23:fb:47:2d:86:11:13:94:99:e7: 3b:63:5f:e8:b1:6a:45:7b:59:4a:18:7b:0c:73:20:a9:ac:13: f1:c8:c6:6c:bf:66:9e:15:4f:b4:12:34:52:de:cd:81:09:3a: 27:c5:a9:45:25:7f:1d:07:cb:70:95:36:d3:fc:7b:32:a9:92: 45:42:79:16:68:3e:a6:15:3d:76:a5:95:e8:04:c9:d6:dc:c9: 39:49:0b:64:00:64:d9:24:37:b6:13:c3:1e:00:11:ec:83:97: 68:73:dd:98:23:b4:d4:7d:92:02:ce:2d:6b:d9:22:25:32:f8: cb:f0:13:1f:c3:34:71:0f:13:15:e1:46:62:22:c6:ce:dc:13: d5:03:f7:8b:2f:4a:f9:f9:22:fb:e3:5c:36:95:e2:17:c6:33: 90:0a:bc:89:28:91:da:c5:2e:c1:b3:52:4d:49:3f:93:de:a6: 95:34:39:cb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp7sLhHG1CLJI1p94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk OWRlZDE5YzEtZDVkOS00OTM1LWFjZDgtZmU2MjM3NzY1ZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rd4zzByaSRN8kB32WwyjLryaktmr4m9ijga yLbf2xsg4OKGczqbS7UQN6dcfzzqRBhAlDBEYLU4DwPafC+4IjMXtBuHjen/Xaqy Lab5IZ8T3qXIsEklJDsHYLbf4v8+ORMglbGZX5RbhR0XTBX6xGLFXlhsufTYVJnd RPG1MEI/nuo8DgbCZcQzuPmeksqB2RKBFYrCImPRa84ShuitF6ybaoSl8urh6R1w RxLPFzM6dLUMHvIn4m/ku4nGI0n2lun2OJjG2MGGU0kyZJ0Gu+ggoIc6sDyfj4bT XWeu95r80dcCJFpxzx4280QWVqimdS/BlsBCRXI4rh2nm7ITRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMfampGqHn8IeMCc7yWiB8KnEBCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZWNmM2Q2NTAtMjljZC0z ZTFiLThjYmMtOTNlMjIzYWI2MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0YDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAd/NoNJqg0Jc+bpisbwMknaLoRDhgvLcArLYg9+98KWkqXzJ0Cptw1 dODIu8zmAuQuv/K0mYeHoJRC3k/12wzUubrrY6iXbIw4z8QneLo5TiP7Ry2GEROU mec7Y1/osWpFe1lKGHsMcyCprBPxyMZsv2aeFU+0EjRS3s2BCTonxalFJX8dB8tw lTbT/HsyqZJFQnkWaD6mFT12pZXoBMnW3Mk5SQtkAGTZJDe2E8MeABHsg5doc92Y I7TUfZICzi1r2SIlMvjL8BMfwzRxDxMV4UZiIsbO3BPVA/eLL0r5+SL741w2leIX xjOQCryJKJHaxS7Bs1JNST+T3qaVNDnL -----END CERTIFICATE-----Generated at Tue Aug 5 17:18:12 2025 by rpki-client