$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa File: 0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa (raw, json) Hash identifier: OXnfpI7zRGKa/WaF3bxMX10jjpTqZPlnySdYevtEs4E= Subject key identifier: 6D:49:4C:17:E7:A5:BB:BA:51:81:BF:CB:C0:11:54:F4:A2:18:55:0A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841194D4B2D4C934F3CD70C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 2001:4860:4823::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:94:d4:b2:d4:c9:34:f3:cd:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f0b9e4ff-0260-4000-92e6-bfe125027f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:9f:14:9a:77:9f:d8:80:40:4e:86:04:99: ab:3b:e0:d4:52:cc:32:5a:46:6f:61:02:10:9d:ef: ae:9e:5c:15:af:dc:18:85:2f:b3:f9:3a:c6:cd:7a: 7a:68:06:ae:9f:b0:01:f3:22:96:89:c0:13:a6:5c: cd:6e:9c:5a:34:be:94:cd:47:9d:67:c4:8e:a3:ad: 33:3d:d9:74:51:0d:6e:18:0c:24:26:5a:2e:c3:5b: dd:77:a5:55:1f:19:1d:3b:93:35:44:a2:1f:b7:f9: 19:ca:69:45:b3:7e:5d:f0:e9:1d:19:f8:b3:3c:f3: 8c:87:27:8c:1b:48:69:f6:75:68:4f:9a:fe:0d:a6: 73:57:7f:82:14:b1:2c:1e:01:23:20:e7:bc:5b:18: 0c:3d:0f:62:8c:75:27:75:b2:36:39:b7:5e:51:3b: ed:3b:39:b0:1f:07:31:b2:29:b3:dc:31:f4:0d:b5: f9:b1:ff:7d:e9:be:37:47:81:c3:3b:e4:f7:28:a1: 8d:62:e4:d5:5a:5e:5e:b8:87:ec:b5:70:4b:ad:aa: 9f:ef:65:e8:cb:4b:71:37:5d:98:85:76:85:e2:92: 9c:77:46:3e:47:34:68:3d:a1:a0:6e:f4:0d:71:37: 49:f5:76:ee:fb:aa:40:b9:12:1e:cd:4f:b5:a5:f2: 98:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:49:4C:17:E7:A5:BB:BA:51:81:BF:CB:C0:11:54:F4:A2:18:55:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4823::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:05:38:8f:4a:95:7c:6c:58:e2:eb:95:14:01:1f:3a:e1:7b: 29:e1:1b:08:38:76:80:8c:2c:1f:9d:9f:94:d4:f4:2f:e2:b1: 6a:dc:e9:28:b3:39:db:11:25:b3:2a:8c:05:fe:0c:3d:6a:fc: 8a:00:76:1a:b9:b7:f1:97:90:a6:ab:7d:19:b9:93:3e:06:df: 85:6d:a6:48:37:db:26:9f:4e:d4:d6:ff:b3:d8:24:fd:55:98: c4:ea:ca:98:fa:86:2d:ce:a3:00:59:54:7b:6a:3c:4d:39:52: 47:7a:89:9f:4b:14:ba:ed:5d:cc:5b:31:4b:b5:ca:c5:3d:c5: 7c:b3:af:75:8f:ce:c6:33:23:28:75:e7:9c:c2:91:52:5a:b4: 55:9a:b8:8e:6a:81:8c:9c:2d:f9:13:32:37:85:3d:6a:d7:21: 86:7f:3c:84:3f:89:c5:e2:85:2e:f2:08:f8:35:9b:95:70:2e: 18:84:39:b9:aa:67:65:04:53:06:8b:44:39:56:fe:3e:f2:17: 6f:8a:d3:a4:7c:f9:30:74:9d:06:c9:be:7c:77:be:17:3d:c8: c5:9b:56:22:55:d3:13:64:f9:51:bb:7f:33:21:f3:a2:76:50: 85:c9:89:24:bf:76:ef:17:c1:9a:f4:89:91:b2:0c:4f:bd:77: 65:f6:53:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEZTUstTJNPPNcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjBiOWU0ZmYtMDI2MC00MDAwLTkyZTYtYmZlMTI1MDI3ZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBefFJp3n9iAQE6GBJmrO+DUUswyWkZvYQIQ ne+unlwVr9wYhS+z+TrGzXp6aAaun7AB8yKWicATplzNbpxaNL6UzUedZ8SOo60z Pdl0UQ1uGAwkJlouw1vdd6VVHxkdO5M1RKIft/kZymlFs35d8OkdGfizPPOMhyeM G0hp9nVoT5r+DaZzV3+CFLEsHgEjIOe8WxgMPQ9ijHUndbI2ObdeUTvtOzmwHwcx simz3DH0DbX5sf996b43R4HDO+T3KKGNYuTVWl5euIfstXBLraqf72Xoy0txN12Y hXaF4pKcd0Y+RzRoPaGgbvQNcTdJ9Xbu+6pAuRIezU+1pfKYVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG1JTBfnpbu6UYG/y8ARVPSiGFUKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDg4N2YyNzItOWVmNS0z YzhkLWIwMTMtOTRjMmI3ZjQ1Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACcFOI9KlXxsWOLrlRQBHzrheynhGwg4doCMLB+dn5TU9C/isWrc 6SizOdsRJbMqjAX+DD1q/IoAdhq5t/GXkKarfRm5kz4G34Vtpkg32yafTtTW/7PY JP1VmMTqypj6hi3OowBZVHtqPE05Ukd6iZ9LFLrtXcxbMUu1ysU9xXyzr3WPzsYz Iyh155zCkVJatFWauI5qgYycLfkTMjeFPWrXIYZ/PIQ/icXihS7yCPg1m5VwLhiE ObmqZ2UEUwaLRDlW/j7yF2+K06R8+TB0nQbJvnx3vhc9yMWbViJV0xNk+VG7fzMh 86J2UIXJiSS/du8XwZr0iZGyDE+9d2X2UwA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:07:11 2025 by rpki-client