$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/148affb1-156b-381d-b01e-cb66e8fab060.roa File: 148affb1-156b-381d-b01e-cb66e8fab060.roa (raw, json) Hash identifier: YD8Vx9zEpSXVwoqU2Eg72oZHwX+Vog2R5Ay3VTfxDtA= Subject key identifier: 8D:7E:90:9B:92:80:C5:4D:BC:CE:F3:05:7C:66:AF:6A:16:D8:DB:88 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123DE83D461228A7777C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/148affb1-156b-381d-b01e-cb66e8fab060.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 2001:4860:482b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:3d:e8:3d:46:12:28:a7:77:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=820ff733-0160-4f27-9a66-3e3a7bae377d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c5:9e:18:9a:1e:2a:ab:31:f1:99:8e:a7:88: ea:66:88:bd:78:b9:c0:4e:6d:22:a1:67:d1:b6:6e: 46:70:1d:1c:48:40:fe:1c:8b:a3:a7:d0:69:c8:32: 0e:00:10:36:1a:d7:79:c2:c3:c9:f6:02:bc:31:43: 20:45:b4:d4:df:d1:36:4b:9b:b4:42:6e:cc:45:23: 76:ee:b0:d0:e2:43:64:75:77:ea:da:bc:9f:32:92: ae:14:89:83:0e:46:f8:55:74:cb:ff:fa:50:74:d9: 6f:5d:23:fa:6e:84:46:13:25:7e:ef:5f:86:fd:38: bd:b1:de:90:8f:96:f0:df:e4:f3:4e:19:fc:46:70: 23:86:7e:2c:1d:49:fe:b3:08:a1:94:d0:ef:7b:43: 89:29:c8:1c:13:09:6a:11:aa:e3:0d:c9:f5:9b:fc: 41:86:62:71:5e:ab:20:f7:7f:e1:a7:2e:e3:fb:84: 76:5b:eb:30:74:ca:c8:2c:ba:f6:b5:eb:c3:9f:7d: 99:a4:df:5b:7b:a2:a2:de:e9:1c:69:e5:78:1b:03: 20:62:2d:07:69:31:cc:1b:c1:1d:50:47:9a:01:d1: c7:c1:33:d9:03:d4:fa:ea:c8:8c:8b:93:1d:ba:ec: 70:a1:b0:cf:fe:cf:f8:24:b0:71:ff:5c:12:51:92: 1d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7E:90:9B:92:80:C5:4D:BC:CE:F3:05:7C:66:AF:6A:16:D8:DB:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/148affb1-156b-381d-b01e-cb66e8fab060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:482b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:8a:8d:07:f1:57:af:e8:7f:5e:43:c3:ef:9f:59:f7:59:53: 60:81:9d:63:8b:f8:57:d7:bc:cf:37:1a:ca:59:d2:8a:f8:ec: 29:02:3e:d0:8c:1a:0a:8a:b0:79:62:af:0b:28:19:0e:88:2c: 8f:23:1b:eb:bc:97:1d:86:ed:f7:c0:db:af:6d:ad:07:2c:a4: e9:8b:de:87:6f:3a:f1:2a:7d:e0:67:0a:39:46:6b:9d:7c:3a: e1:4e:a6:c6:9c:91:f5:44:24:e8:e9:38:f8:6d:48:46:f3:ca: bf:4f:1e:59:2c:7c:17:2a:a1:00:9f:c6:4a:e5:a5:c0:83:c6: f4:5f:87:9a:e7:fd:7a:e1:12:09:fb:a8:62:e6:60:93:88:02: 36:23:81:03:05:d6:34:6c:79:d3:e7:9d:28:46:ac:69:cf:a0: 2e:91:78:bb:87:bc:bf:75:94:41:ab:62:9d:03:66:c2:5f:3c: db:bd:8b:07:c6:4c:41:9d:9a:08:36:33:61:9b:e3:9b:bd:a3: 74:68:91:42:bb:1b:17:8a:5b:f2:4e:25:f5:22:ca:06:ba:da: b1:f5:f6:cc:d0:3a:d0:e5:ae:52:21:03:cf:3b:22:5c:45:94: f9:4d:f0:65:6a:0f:e2:bc:d2:2b:c0:c1:d8:66:ca:43:3c:a5: c1:34:85:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEj3oPUYSKKd3fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODIwZmY3MzMtMDE2MC00ZjI3LTlhNjYtM2UzYTdiYWUzNzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sWeGJoeKqsx8ZmOp4jqZoi9eLnATm0ioWfR tm5GcB0cSED+HIujp9BpyDIOABA2Gtd5wsPJ9gK8MUMgRbTU39E2S5u0Qm7MRSN2 7rDQ4kNkdXfq2ryfMpKuFImDDkb4VXTL//pQdNlvXSP6boRGEyV+71+G/Ti9sd6Q j5bw3+TzThn8RnAjhn4sHUn+swihlNDve0OJKcgcEwlqEarjDcn1m/xBhmJxXqsg 93/hpy7j+4R2W+swdMrILLr2tevDn32ZpN9be6Ki3ukcaeV4GwMgYi0HaTHMG8Ed UEeaAdHHwTPZA9T66siMi5MduuxwobDP/s/4JLBx/1wSUZIdJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI1+kJuSgMVNvM7zBXxmr2oW2NuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTQ4YWZmYjEtMTU2Yi0z ODFkLWIwMWUtY2I2NmU4ZmFiMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIuKjQfxV6/of15Dw++fWfdZU2CBnWOL+FfXvM83GspZ0or47CkC PtCMGgqKsHlirwsoGQ6ILI8jG+u8lx2G7ffA269trQcspOmL3odvOvEqfeBnCjlG a518OuFOpsackfVEJOjpOPhtSEbzyr9PHlksfBcqoQCfxkrlpcCDxvRfh5rn/Xrh Egn7qGLmYJOIAjYjgQMF1jRsedPnnShGrGnPoC6ReLuHvL91lEGrYp0DZsJfPNu9 iwfGTEGdmgg2M2Gb45u9o3RokUK7GxeKW/JOJfUiyga62rH19szQOtDlrlIhA887 IlxFlPlN8GVqD+K80ivAwdhmykM8pcE0hVQ= -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:23 2025 by rpki-client