$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e86cdc8-73c5-3922-9334-5c508538a1b0.roa File: 1e86cdc8-73c5-3922-9334-5c508538a1b0.roa (raw, json) Hash identifier: qCloXmBA+XjoSX0TkSoBGE+SKl6/+GxVRJ1zDN0ijZw= Subject key identifier: 6D:0C:60:63:15:17:E5:F6:E9:0B:01:01:36:13:D4:9F:8B:7B:7B:57 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84119440B82B7B075DA6F140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e86cdc8-73c5-3922-9334-5c508538a1b0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 2001:4860:482d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:94:40:b8:2b:7b:07:5d:a6:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ffae1c2d-413f-47f4-ac40-4a3c7af28d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:86:6b:ee:4a:b0:b5:6e:6d:2c:46:ca:c4:11: 11:84:8e:61:dc:a3:75:6c:8d:5c:6a:85:7d:ca:b2: d9:b7:17:66:38:05:4d:76:26:56:aa:80:ff:19:e1: eb:a3:c4:a9:ca:94:3a:a1:5a:2c:a9:c9:75:5e:ac: 66:28:f6:01:b2:95:07:2d:06:8e:d2:76:1e:9e:5e: ff:40:bd:ff:78:dd:92:95:e5:08:ae:39:e5:c7:2a: a0:07:db:84:5a:3c:45:0f:50:0e:7d:c9:0f:4f:06: e0:c8:d6:2d:8e:2a:64:e3:88:41:b2:87:c5:c9:85: 36:3e:aa:19:81:b2:02:48:8a:43:b9:ce:aa:30:eb: 40:c6:ac:23:1e:41:cc:fe:f4:2e:3d:13:45:be:b8: 83:ad:05:d0:39:00:05:9a:4f:1f:30:aa:df:7d:89: 48:32:cc:a1:a0:ac:00:4f:d1:c5:9b:8c:44:c5:da: 2d:97:de:1d:d7:c1:6a:b3:32:c0:a5:1f:85:b2:f9: 47:69:b6:4f:e1:e1:6a:3d:cc:37:16:0e:b9:24:04: 58:85:70:69:a6:49:61:f3:d1:4a:74:ea:d5:99:6e: 06:3a:74:80:d2:b1:9c:1f:5d:2c:d0:8f:56:ab:9f: 53:16:6d:5f:43:73:e1:7f:52:0b:05:22:3a:dd:54: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0C:60:63:15:17:E5:F6:E9:0B:01:01:36:13:D4:9F:8B:7B:7B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e86cdc8-73c5-3922-9334-5c508538a1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:482d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ea:20:88:36:b5:98:3f:05:96:b5:9d:c6:83:f4:b1:e1:5f: dd:c5:f1:0f:16:4f:fe:c2:84:5d:48:c0:02:5a:25:0c:87:fa: 48:79:69:94:5b:31:99:f6:58:50:52:8e:a9:e6:ae:49:34:db: 19:25:d3:af:9e:12:42:b1:39:65:31:ae:76:12:31:5d:1b:42: de:25:42:39:5a:4f:ad:89:a8:55:46:34:12:5e:74:d1:b2:70: ca:bc:e2:1d:d5:fd:5d:db:28:3e:5e:55:7d:90:33:3f:0a:4d: 05:d2:f5:c3:27:16:32:98:d6:f6:1c:3e:9a:40:5f:21:69:41: 03:73:a0:d9:a2:19:00:b3:e5:0e:c2:66:f3:19:eb:d0:45:84: 3f:0e:96:81:af:03:c4:72:81:d9:9e:37:8b:e3:77:e0:6e:2c: 25:b7:21:76:69:52:28:bb:e9:e9:87:17:73:42:79:eb:df:c0: 53:2c:0f:17:d6:85:39:b1:4f:1e:7d:3b:56:14:9c:b7:14:f9: 63:a0:46:0d:9e:7d:b7:b6:34:22:6e:0d:11:79:8a:61:b8:92: d1:bc:b9:47:75:46:2c:81:af:2c:7c:45:2c:bb:37:76:3d:9e: 50:18:92:88:02:eb:06:a1:e0:8c:29:d2:06:d6:d1:f8:94:ae: b8:a9:c5:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEZRAuCt7B12m8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmZhZTFjMmQtNDEzZi00N2Y0LWFjNDAtNGEzYzdhZjI4ZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloZr7kqwtW5tLEbKxBERhI5h3KN1bI1caoV9 yrLZtxdmOAVNdiZWqoD/GeHro8SpypQ6oVosqcl1XqxmKPYBspUHLQaO0nYenl7/ QL3/eN2SleUIrjnlxyqgB9uEWjxFD1AOfckPTwbgyNYtjipk44hBsofFyYU2PqoZ gbICSIpDuc6qMOtAxqwjHkHM/vQuPRNFvriDrQXQOQAFmk8fMKrffYlIMsyhoKwA T9HFm4xExdotl94d18FqszLApR+FsvlHabZP4eFqPcw3Fg65JARYhXBppklh89FK dOrVmW4GOnSA0rGcH10s0I9Wq59TFm1fQ3Phf1ILBSI63VTyOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG0MYGMVF+X26QsBATYT1J+Le3tXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWU4NmNkYzgtNzNjNS0z OTIyLTkzMzQtNWM1MDg1MzhhMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFPqIIg2tZg/BZa1ncaD9LHhX93F8Q8WT/7ChF1IwAJaJQyH+kh5 aZRbMZn2WFBSjqnmrkk02xkl06+eEkKxOWUxrnYSMV0bQt4lQjlaT62JqFVGNBJe dNGycMq84h3V/V3bKD5eVX2QMz8KTQXS9cMnFjKY1vYcPppAXyFpQQNzoNmiGQCz 5Q7CZvMZ69BFhD8OloGvA8RygdmeN4vjd+BuLCW3IXZpUii76emHF3NCeevfwFMs DxfWhTmxTx59O1YUnLcU+WOgRg2efbe2NCJuDRF5imG4ktG8uUd1RiyBryx8RSy7 N3Y9nlAYkogC6wah4Iwp0gbW0fiUrripxf8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:26:02 2025 by rpki-client