$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e519fb3-b4f6-30d0-9172-c6e0411b96b8.roa File: 3e519fb3-b4f6-30d0-9172-c6e0411b96b8.roa (raw, json) Hash identifier: TeLnihRPvCekP3DKrxin2rmOO97SJ5DBK5hVNbRFh70= Subject key identifier: 83:BC:47:13:32:43:2C:6C:80:E7:A4:C3:EB:01:F5:BB:A9:C9:C4:44 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123C4CC7906005B2DE8280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e519fb3-b4f6-30d0-9172-c6e0411b96b8.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 2607:f8b0:4008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:3c:4c:c7:90:60:05:b2:de:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0762bd37-cd86-4145-bd8d-214f0225e2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:df:1f:43:8e:25:0e:80:9e:90:6d:3c:e8: db:ee:04:98:33:0a:06:42:23:6e:72:8f:95:cd:6d: bf:2a:f3:78:bf:59:12:17:e5:c1:ea:f5:25:12:2e: a3:65:7a:7f:f1:fa:57:d6:98:31:e0:22:37:ca:5e: 23:e8:8c:0c:08:cf:6d:b0:6a:1b:0b:ed:f4:85:f2: 54:e0:99:4a:b4:0b:c0:d4:cc:85:75:26:b1:91:af: 0d:98:90:44:91:1a:df:f5:1b:af:74:59:89:29:f2: f2:ca:83:f8:8d:0c:55:c7:26:da:34:1e:7f:03:23: 34:ab:ac:37:55:9c:09:f0:4e:45:1e:d2:a2:ef:95: 9a:d3:a6:0a:14:0b:0c:3f:40:b4:33:89:20:a2:53: 66:ae:52:36:27:d6:bf:11:1e:20:35:36:99:c0:c8: cd:e8:f6:6b:ef:03:15:c1:43:83:c8:ef:fc:31:df: 04:f2:de:d8:c3:a6:11:2d:c8:38:dd:d7:96:d3:97: 74:97:4a:40:93:a7:84:da:4c:af:ea:28:7a:b9:44: 57:5b:e6:d2:58:e8:10:eb:50:6a:07:20:ca:39:78: 19:e9:1f:47:4c:d5:83:04:da:3c:32:f5:52:17:8d: a6:69:89:85:ff:b6:1c:3a:42:2a:8d:eb:cf:1e:92: 36:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BC:47:13:32:43:2C:6C:80:E7:A4:C3:EB:01:F5:BB:A9:C9:C4:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e519fb3-b4f6-30d0-9172-c6e0411b96b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:21:1d:94:bc:c2:38:1e:f0:8e:5a:b9:3e:5c:ca:fb:6e:90: 80:d0:34:48:4a:33:c3:e7:2a:41:f4:2a:30:9e:0c:e6:be:04: f1:6a:9b:54:6f:ce:c5:95:07:82:41:3e:17:83:8c:91:7e:35: 95:a7:f7:21:dc:a3:0c:33:29:ef:94:f4:3f:3f:17:14:98:4a: 1a:b6:6c:79:dc:68:c3:05:63:f1:39:24:b0:60:04:2f:22:e9: b3:fe:d4:6b:72:ff:d6:30:c6:99:d1:f5:9e:92:70:e6:2e:85: 60:8d:29:de:cd:5c:c5:a2:b1:c7:29:b8:70:78:a8:7f:11:44: 7b:0f:cc:82:f3:27:4c:20:bf:8b:3b:1c:42:ec:5b:b4:b7:1b: 73:20:da:bc:52:cf:c2:7b:d4:00:d8:b3:bb:2b:81:51:1c:df: 4d:b1:ed:7c:28:ef:18:f0:d0:7e:14:cb:dc:95:76:f7:87:d2: cb:dd:b6:77:ea:1d:bb:61:3a:2b:f0:fa:17:fb:87:62:eb:6d: 29:06:65:51:79:38:e3:61:4c:a5:6e:2b:41:d8:99:a8:48:4b: bd:2f:90:ae:fc:04:ca:08:aa:a8:76:f5:13:1a:2d:4e:50:08: a3:46:1c:63:04:b6:25:f9:ee:60:5b:54:06:59:cf:19:03:a4: db:61:61:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEjxMx5BgBbLegoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDc2MmJkMzctY2Q4Ni00MTQ1LWJkOGQtMjE0ZjAyMjVlMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2ffH0OOJQ6AnpBtPOjb7gSYMwoGQiNuco+V zW2/KvN4v1kSF+XB6vUlEi6jZXp/8fpX1pgx4CI3yl4j6IwMCM9tsGobC+30hfJU 4JlKtAvA1MyFdSaxka8NmJBEkRrf9RuvdFmJKfLyyoP4jQxVxybaNB5/AyM0q6w3 VZwJ8E5FHtKi75Wa06YKFAsMP0C0M4kgolNmrlI2J9a/ER4gNTaZwMjN6PZr7wMV wUODyO/8Md8E8t7Yw6YRLcg43deW05d0l0pAk6eE2kyv6ih6uURXW+bSWOgQ61Bq ByDKOXgZ6R9HTNWDBNo8MvVSF42maYmF/7YcOkIqjevPHpI2CwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIO8RxMyQyxsgOekw+sB9bupycREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2U1MTlmYjMtYjRmNi0z MGQwLTkxNzItYzZlMDQxMWI5NmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI8hHZS8wjge8I5auT5cyvtukIDQNEhKM8PnKkH0KjCeDOa+BPFq m1RvzsWVB4JBPheDjJF+NZWn9yHcowwzKe+U9D8/FxSYShq2bHncaMMFY/E5JLBg BC8i6bP+1Gty/9YwxpnR9Z6ScOYuhWCNKd7NXMWisccpuHB4qH8RRHsPzILzJ0wg v4s7HELsW7S3G3Mg2rxSz8J71ADYs7srgVEc302x7Xwo7xjw0H4Uy9yVdveH0svd tnfqHbthOivw+hf7h2LrbSkGZVF5OONhTKVuK0HYmahIS70vkK78BMoIqqh29RMa LU5QCKNGHGMEtiX57mBbVAZZzxkDpNthYTM= -----END CERTIFICATE-----Generated at Tue Aug 5 16:45:45 2025 by rpki-client