$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa File: 02490b1e-0527-346f-a427-fa83c48a1597.roa (raw, json) Hash identifier: o4qftkUtku6tAK+USFYbvjjaDVtYZtiIZ2sxW1+VR7g= Subject key identifier: 43:A8:2A:20:C7:9D:B9:53:CA:E0:BA:11:A2:72:9D:49:A4:02:54:29 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411961DC47B7F2FAFE97640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 2607:f8b0:400c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:96:1d:c4:7b:7f:2f:af:e9:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fea1446f-1815-4577-8f46-89cf64a0ff3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:60:a4:32:c4:8a:44:c3:ce:11:bc:4f:b6:a9: 70:4b:d9:e5:90:0a:f4:65:05:e4:b7:9d:e8:70:3e: db:75:61:1f:4c:8f:f9:c1:8d:c7:6a:f5:57:87:32: 58:17:2b:6a:d1:f1:37:ca:11:95:d7:27:ce:27:5a: de:e5:41:b7:64:ec:3a:a9:02:ee:b6:96:c5:2c:25: 7f:cd:d4:69:3d:19:69:73:9d:b0:86:d2:bb:62:a5: ca:8d:24:02:b6:16:fe:63:07:26:76:d5:59:48:c1: 60:31:b0:83:d8:b9:9f:34:5d:5b:45:72:2c:30:66: 65:65:1c:eb:d5:71:7d:c9:f2:f6:9a:36:36:e2:70: ff:18:d0:84:7c:ba:9c:9d:e0:1c:31:8a:be:62:ca: a0:f9:13:c0:cf:f4:63:6e:79:7a:93:0f:96:6c:08: 33:fc:4c:e8:95:32:4f:44:44:44:4a:a0:29:0a:6f: e5:c8:cb:d1:40:17:df:25:20:ac:12:c8:d0:4e:3f: 17:6f:a4:1e:ca:0f:df:52:fe:b1:67:6c:e0:10:b1: 53:95:05:14:6c:17:1f:25:69:1b:34:05:81:df:a9: ed:a4:22:5a:35:db:ff:d2:70:5a:b4:1b:0d:3b:3d: cd:f7:9c:73:d2:af:56:a2:1b:b1:c1:bc:07:3d:cd: ae:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A8:2A:20:C7:9D:B9:53:CA:E0:BA:11:A2:72:9D:49:A4:02:54:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:400c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:f9:b9:29:16:97:41:4b:f1:2d:bf:3b:fb:7e:e8:b8:73:68: af:f4:5e:e2:10:79:bd:c4:42:e9:39:b8:ed:fb:f3:d2:91:6e: f8:23:91:71:66:b5:0e:32:c6:ca:d8:d7:a8:a0:a8:14:df:f8: 1d:a8:c8:c4:9e:70:8d:0c:ed:0d:1e:e4:d4:30:65:3f:6b:29: 11:5e:55:b0:78:d5:11:e0:80:ff:cc:22:a0:fa:4e:b8:75:e8: aa:da:ca:de:5a:2b:51:3e:0e:fd:54:1f:0a:60:46:cf:77:60: 70:66:f2:9b:c0:57:2d:61:a9:12:99:48:01:05:39:e3:cc:86: 56:af:70:34:26:cc:ae:37:59:8e:3e:b7:87:1c:1f:07:51:0a: 35:36:b2:f3:c9:38:30:16:19:93:f0:df:3e:6c:fb:7d:45:7b: 35:a7:98:aa:62:69:29:ba:74:ad:af:49:41:e7:10:20:79:bd: 62:42:5b:8d:18:14:17:43:f7:81:c2:cf:ab:87:d7:00:5b:b6: fa:79:a6:5c:58:00:af:dd:73:23:be:31:eb:1f:d6:f0:0d:fb: 26:99:2e:d3:7f:d6:4a:7d:98:f5:f4:62:2a:d4:84:d3:86:ce: 76:07:a9:18:87:9b:d2:bf:d5:54:80:b1:2a:e9:ea:cb:72:01: 26:69:0c:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEZYdxHt/L6/pdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmVhMTQ0NmYtMTgxNS00NTc3LThmNDYtODljZjY0YTBmZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2CkMsSKRMPOEbxPtqlwS9nlkAr0ZQXkt53o cD7bdWEfTI/5wY3HavVXhzJYFytq0fE3yhGV1yfOJ1re5UG3ZOw6qQLutpbFLCV/ zdRpPRlpc52whtK7YqXKjSQCthb+YwcmdtVZSMFgMbCD2LmfNF1bRXIsMGZlZRzr 1XF9yfL2mjY24nD/GNCEfLqcneAcMYq+Ysqg+RPAz/Rjbnl6kw+WbAgz/EzolTJP RERESqApCm/lyMvRQBffJSCsEsjQTj8Xb6Qeyg/fUv6xZ2zgELFTlQUUbBcfJWkb NAWB36ntpCJaNdv/0nBatBsNOz3N95xz0q9WohuxwbwHPc2uHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEOoKiDHnblTyuC6EaJynUmkAlQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI0OTBiMWUtMDUyNy0z NDZmLWE0MjctZmE4M2M0OGExNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJz5uSkWl0FL8S2/O/t+6LhzaK/0XuIQeb3EQuk5uO3789KRbvgj kXFmtQ4yxsrY16igqBTf+B2oyMSecI0M7Q0e5NQwZT9rKRFeVbB41RHggP/MIqD6 Trh16Krayt5aK1E+Dv1UHwpgRs93YHBm8pvAVy1hqRKZSAEFOePMhlavcDQmzK43 WY4+t4ccHwdRCjU2svPJODAWGZPw3z5s+31FezWnmKpiaSm6dK2vSUHnECB5vWJC W40YFBdD94HCz6uH1wBbtvp5plxYAK/dcyO+Mesf1vAN+yaZLtN/1kp9mPX0YirU hNOGznYHqRiHm9K/1VSAsSrp6styASZpDIw= -----END CERTIFICATE-----Generated at Mon Aug 4 15:04:34 2025 by rpki-client