$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c61ddbd-6f2a-3ee8-bc76-7682feb2aab2.roa File: 1c61ddbd-6f2a-3ee8-bc76-7682feb2aab2.roa (raw, json) Hash identifier: NRef0dGfmA9l0Mu0btRZdknV1na9UG4JjQKzEiH7TxM= Subject key identifier: EB:17:90:C6:2F:2B:C9:A3:2B:B7:6D:E9:9F:62:BF:79:A3:91:5A:1B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123B04D34263AA42ABE700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c61ddbd-6f2a-3ee8-bc76-7682feb2aab2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 2001:4860:4822::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:3b:04:d3:42:63:aa:42:ab:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1b986f8b-8936-4c4d-9b19-dc2064419658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e7:e8:cf:db:b1:8c:d7:f9:72:bb:8c:f9:11: 27:4b:f6:05:77:1f:f2:f8:b1:c9:b6:3e:dc:6d:26: 97:21:fe:35:4d:ed:55:cc:bc:3c:e7:a0:30:58:58: ca:88:82:83:1a:1b:04:83:85:6a:18:01:85:63:f8: f5:06:cc:71:8a:8c:6b:c7:03:04:04:9a:26:0e:02: d1:f9:bf:70:a2:40:dd:bb:ca:dc:5a:fd:cb:e9:a1: de:ec:b0:5e:e5:42:49:48:22:f9:53:08:82:31:e6: 5d:04:1e:ad:23:1e:1a:2e:a2:92:fc:e4:47:f0:2e: 5d:b2:96:9a:1e:b7:ec:4e:57:cb:0f:00:e6:e7:bd: 72:22:02:60:fd:36:d6:dc:3e:67:67:eb:4e:87:6c: 02:3c:7d:ce:b8:38:b2:bc:9e:83:c9:0d:44:78:25: 0a:23:c4:c9:db:2d:ff:d9:a1:4d:73:f9:12:53:b8: 78:75:ad:83:f5:c9:63:03:98:73:d1:68:81:ed:b1: 90:ef:8d:8b:95:41:4b:6a:c5:d7:e2:f9:a3:f9:6d: 42:e6:19:4b:3f:a8:97:2b:57:32:7d:1d:af:e0:b2: d7:c8:86:2f:98:a1:4e:aa:ae:9b:70:23:fd:87:fd: 25:c3:17:4a:d1:a4:b1:bf:0b:94:95:8b:a4:e5:c4: a9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:17:90:C6:2F:2B:C9:A3:2B:B7:6D:E9:9F:62:BF:79:A3:91:5A:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c61ddbd-6f2a-3ee8-bc76-7682feb2aab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4822::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:54:c0:cf:5f:e9:54:3c:8a:6d:94:a7:e7:de:24:21:1f:db: 84:2f:ce:e3:34:30:1a:3d:8b:80:a4:97:57:f6:08:7e:ca:10: 9e:d5:be:e9:ed:2c:03:6d:ef:81:02:fa:b3:e0:81:08:0c:21: 97:2c:ba:44:86:a5:e3:48:63:48:cf:45:a8:6b:15:b9:84:57: a1:47:39:6c:75:b0:0e:6f:e8:83:b6:16:9f:0d:9d:70:7d:c9: 99:49:95:0e:cc:48:27:08:cd:9d:9e:6d:8f:c8:ce:d5:6e:78: 7f:b4:1a:85:d2:2a:a8:31:92:73:bd:b7:82:9c:9b:f1:97:e5: f1:74:16:13:81:ba:ba:59:37:cc:75:5a:bf:10:d3:19:d1:23: 2d:97:6c:7d:4d:42:26:97:b5:b0:a8:1f:35:e4:e9:f6:12:db: ac:52:30:12:fb:c9:f5:f1:23:e2:03:09:61:50:74:d0:f9:4a: 91:a0:64:77:3c:ea:81:b9:57:42:c8:2d:1b:3f:5f:96:44:51: 22:7d:a1:f8:14:45:c5:49:c3:cf:19:4e:2e:c6:34:67:da:f3: 9b:32:4b:81:6f:1b:bf:55:c9:3e:a9:92:b3:68:a4:a4:2b:b5: df:fa:92:6e:b6:f6:1d:ca:7b:06:4e:0b:6d:98:8b:df:c0:93: 01:10:0f:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEjsE00JjqkKr5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWI5ODZmOGItODkzNi00YzRkLTliMTktZGMyMDY0NDE5NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlefoz9uxjNf5cruM+REnS/YFdx/y+LHJtj7c bSaXIf41Te1VzLw856AwWFjKiIKDGhsEg4VqGAGFY/j1BsxxioxrxwMEBJomDgLR +b9wokDdu8rcWv3L6aHe7LBe5UJJSCL5UwiCMeZdBB6tIx4aLqKS/ORH8C5dspaa HrfsTlfLDwDm571yIgJg/TbW3D5nZ+tOh2wCPH3OuDiyvJ6DyQ1EeCUKI8TJ2y3/ 2aFNc/kSU7h4da2D9cljA5hz0WiB7bGQ742LlUFLasXX4vmj+W1C5hlLP6iXK1cy fR2v4LLXyIYvmKFOqq6bcCP9h/0lwxdK0aSxvwuUlYuk5cSpEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOsXkMYvK8mjK7dt6Z9iv3mjkVobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWM2MWRkYmQtNmYyYS0z ZWU4LWJjNzYtNzY4MmZlYjJhYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEhUwM9f6VQ8im2Up+feJCEf24QvzuM0MBo9i4Ckl1f2CH7KEJ7V vuntLANt74EC+rPggQgMIZcsukSGpeNIY0jPRahrFbmEV6FHOWx1sA5v6IO2Fp8N nXB9yZlJlQ7MSCcIzZ2ebY/IztVueH+0GoXSKqgxknO9t4Kcm/GX5fF0FhOBurpZ N8x1Wr8Q0xnRIy2XbH1NQiaXtbCoHzXk6fYS26xSMBL7yfXxI+IDCWFQdND5SpGg ZHc86oG5V0LILRs/X5ZEUSJ9ofgURcVJw88ZTi7GNGfa85syS4FvG79VyT6pkrNo pKQrtd/6km629h3KewZOC22Yi9/AkwEQDz0= -----END CERTIFICATE-----Generated at Mon Aug 4 14:58:06 2025 by rpki-client