$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa File: eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa (raw, json) Hash identifier: y2hq+aLCZDQgfWqx70p8BASDi8Lo/xseh7EmPxU2UoI= Subject key identifier: 5D:67:38:91:30:76:99:C0:85:97:8C:68:FE:CE:1C:46:5C:9D:E5:8C Certificate issuer: /CN=4f965035-760e-4232-a4c3-bc290fa7e325 Certificate serial: 010D0C9F4328584AAB26574F4F9965B0A7FCBD40 Authority key identifier: 4F:53:AA:A6:82:E5:67:D0:28:69:98:61:76:F7:6E:EB:DB:83:C1:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 25656 IP address blocks: 2620:38:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:57:4f:4f:99:65:b0:a7:fc:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f965035-760e-4232-a4c3-bc290fa7e325 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=157bbb14-9e95-4525-87f0-88f41aa6f52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:39:86:db:7a:16:59:e0:5c:44:40:d0:c0: 4c:02:05:eb:f7:34:b4:76:cf:ff:de:30:be:e6:f1: 91:f4:94:e4:0e:52:6e:57:31:13:e9:ad:91:21:18: 75:38:cc:76:bd:00:61:54:54:00:c6:38:c0:35:7a: ec:c3:51:49:08:1a:74:7a:d8:a8:78:df:fa:df:8f: d0:34:96:8c:c0:62:4b:6f:a8:5c:c7:44:d1:35:e1: 95:de:0d:b9:07:c2:56:25:ab:39:65:12:b6:cb:51: c4:f5:46:14:46:31:96:16:c4:39:d0:3c:13:b0:07: f2:3b:24:cf:c7:c8:8c:f4:e9:b4:76:92:6b:eb:75: 3a:c2:cd:95:b2:16:75:b0:4e:93:96:89:f2:a9:9c: b8:d7:64:53:b5:fd:67:45:97:f9:d5:a3:e3:f8:06: ff:fb:db:d9:f2:7d:f3:d8:ca:11:72:ff:0c:8f:99: ea:14:72:dd:8c:19:1b:bd:3c:c0:58:b3:67:b4:70: 20:ae:75:06:7e:3b:c8:1e:81:e9:ef:9b:0a:30:f1: 0e:09:de:6b:9f:3f:0b:d0:bb:ed:95:6c:fe:e0:d6: 68:b1:05:37:ff:07:4c:57:38:bc:d8:c9:56:1c:ce: 4e:be:04:ad:62:44:82:a4:c2:88:9e:73:fe:ac:ce: 13:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:67:38:91:30:76:99:C0:85:97:8C:68:FE:CE:1C:46:5C:9D:E5:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.crl X509v3 Authority Key Identifier: keyid:4F:53:AA:A6:82:E5:67:D0:28:69:98:61:76:F7:6E:EB:DB:83:C1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer sbgp-ipAddrBlock: critical IPv6: 2620:38:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e2:e2:06:03:e6:87:43:dc:1a:1f:55:2f:c7:59:25:2e:f6: ee:82:36:83:77:05:0d:c2:c3:88:e3:7d:20:2a:0b:47:53:57: 85:0f:0b:c3:e1:a7:f3:6d:0c:f4:d2:10:f5:2c:ce:cc:70:8c: 28:af:23:89:28:25:96:76:3c:1b:99:9d:02:93:04:0f:a6:fc: ae:08:bf:b1:22:07:83:ba:f8:3f:b0:44:21:66:72:34:6f:1d: 9d:89:a0:35:86:13:16:7a:59:8e:72:5e:98:f6:c6:94:76:04: 52:ca:9e:4d:94:2e:2f:59:42:3a:80:2c:c6:cf:05:18:89:30: 8d:4f:51:ca:cd:b6:a1:0b:a7:eb:90:55:23:38:32:98:4e:22: 9b:99:ef:a0:35:f0:ec:e3:98:70:c6:16:b0:ba:b4:5e:58:d6: fc:9b:ee:0d:c3:30:4d:99:79:07:77:74:dd:af:6b:33:46:75: d1:f2:2a:ea:6f:1e:a4:06:fc:fb:84:9a:51:47:57:58:d5:3f: df:02:cb:a2:31:a0:17:29:f1:ef:b5:ff:c1:bf:d2:03:2a:0e: c0:71:26:b3:fc:7e:95:fc:2f:18:e2:1f:e5:f9:cc:51:dc:e2: 7a:e7:bf:c0:1b:1f:ae:36:01:ea:ec:62:a3:23:52:1b:77:40: e7:db:68:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqrJldPT5llsKf8vUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5NjUwMzUtNzYwZS00MjMyLWE0YzMtYmMyOTBmYTdl MzI1MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MTU3YmJiMTQtOWU5NS00NTI1LTg3ZjAtODhmNDFhYTZmNTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLA5htt6FlngXERA0MBMAgXr9zS0ds//3jC+ 5vGR9JTkDlJuVzET6a2RIRh1OMx2vQBhVFQAxjjANXrsw1FJCBp0etioeN/634/Q NJaMwGJLb6hcx0TRNeGV3g25B8JWJas5ZRK2y1HE9UYURjGWFsQ50DwTsAfyOyTP x8iM9Om0dpJr63U6ws2VshZ1sE6TlonyqZy412RTtf1nRZf51aPj+Ab/+9vZ8n3z 2MoRcv8Mj5nqFHLdjBkbvTzAWLNntHAgrnUGfjvIHoHp75sKMPEOCd5rnz8L0Lvt lWz+4NZosQU3/wdMVzi82MlWHM5OvgStYkSCpMKInnP+rM4T4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF1nOJEwdpnAhZeMaP7OHEZcneWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80Zjk2 NTAzNS03NjBlLTQyMzItYTRjMy1iYzI5MGZhN2UzMjUvZWFhNzE5YTAtNDQwMi0z NjdhLTlmZTYtZjdhZTI1ZGMyM2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGY5NjUwMzUtNzYwZS00MjMyLWE0 YzMtYmMyOTBmYTdlMzI1LzRmOTY1MDM1LTc2MGUtNDIzMi1hNGMzLWJjMjkwZmE3 ZTMyNS5jcmwwHwYDVR0jBBgwFoAUT1OqpoLlZ9AoaZhhdvdu69uDwVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80Zjk2NTAzNS03NjBlLTQyMzItYTRjMy1iYzI5 MGZhN2UzMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAOMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGDi4gYD5odD3BofVS/HWSUu9u6CNoN3BQ3Cw4jjfSAqC0dTV4UP C8Php/NtDPTSEPUszsxwjCivI4koJZZ2PBuZnQKTBA+m/K4Iv7EiB4O6+D+wRCFm cjRvHZ2JoDWGExZ6WY5yXpj2xpR2BFLKnk2ULi9ZQjqALMbPBRiJMI1PUcrNtqEL p+uQVSM4MphOIpuZ76A18OzjmHDGFrC6tF5Y1vyb7g3DME2ZeQd3dN2vazNGddHy KupvHqQG/PuEmlFHV1jVP98Cy6IxoBcp8e+1/8G/0gMqDsBxJrP8fpX8LxjiH+X5 zFHc4nrnv8AbH642AersYqMjUht3QOfbaKY= -----END CERTIFICATE-----Generated at Thu Aug 7 00:39:32 2025 by rpki-client