$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa File: 5e77d852-ed63-3985-aa23-e8aa56c369a2.roa (raw, json) Hash identifier: ciHX6lnKU6tvJ9Fx/fjcID0shPLf4tG2G9MdKoPcRkc= Subject key identifier: 9A:A1:A7:11:EE:17:BF:B0:29:80:93:A6:97:5B:7A:35:1F:BE:E0:B7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411945803C5654988A82DC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 11344 IP address blocks: 2001:4860:3::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:94:58:03:c5:65:49:88:a8:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3f2e7bf3-fae9-42da-abe1-ef169c11a4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:42:25:ee:86:34:21:c7:c6:23:bc:fb:14: 75:f8:ea:02:61:2e:63:9d:d8:a8:e7:2e:75:c6:91: cf:73:27:41:39:e4:22:13:f2:df:19:ab:e6:9e:48: aa:4b:5c:1e:ad:c6:58:70:37:4d:50:6e:ae:71:5b: 3d:e6:fd:99:03:de:5b:69:b5:f3:16:df:65:cf:69: 02:2a:0d:ca:3c:4d:3a:f8:ee:8a:b1:c3:c9:20:52: 97:87:fa:37:4d:f7:59:13:e5:d7:f0:4b:5b:eb:f9: 2a:b5:8e:6f:f8:a0:a3:00:ed:a9:a2:14:09:01:ac: 97:71:2d:c9:65:26:09:44:27:8d:88:4a:24:cb:26: db:80:33:7f:66:dc:cc:75:3a:22:3d:55:3a:95:87: 90:31:b0:cc:4b:8c:77:c4:2e:f4:9a:7c:42:83:e3: 24:c1:2f:bd:e7:b8:8f:39:92:a9:f7:06:89:3b:6f: b5:ca:72:27:0e:3f:4d:02:f3:32:5b:fd:8d:ab:8a: b1:fa:33:e6:f3:ec:b2:6d:18:68:95:3a:a1:41:98: 5b:84:cd:a6:6d:60:74:a0:04:ab:41:6d:f8:01:27: f5:e0:15:c2:be:75:30:14:bd:3b:a3:03:3c:4c:7b: e8:4b:09:8e:24:b2:f3:91:73:5c:13:91:e4:3d:bd: de:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A1:A7:11:EE:17:BF:B0:29:80:93:A6:97:5B:7A:35:1F:BE:E0:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:3::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:17:82:04:64:2d:6f:57:4f:d6:46:e7:91:3a:6b:a0:1d:ad: 19:e0:b7:16:b9:ad:e9:da:05:31:6c:d3:e3:d8:aa:c1:3a:74: 6d:65:71:11:0a:d9:88:c0:8f:6f:3a:c8:4c:66:ea:82:22:d4: cb:73:3c:35:61:6b:2b:62:e7:7b:8a:d6:2d:06:d0:2d:cd:c4: 95:b2:f2:ee:17:8b:71:55:b1:a6:34:48:18:62:b9:4e:e3:c2: e3:30:ca:45:fb:b2:1e:ee:1b:78:76:32:8d:d2:7d:e8:f6:46: d6:09:b9:c8:3c:46:90:d4:06:ed:a7:26:e0:d5:be:93:2d:dc: 34:34:77:67:4b:0d:94:ef:33:42:18:79:d9:e2:f8:6a:bc:8e: e2:7a:75:05:21:38:c9:8d:14:78:5e:91:1e:ee:65:3a:b5:6c: f6:7d:7e:4d:96:78:83:8f:5b:0f:4e:fc:ff:81:22:50:31:3d: 1c:e5:ad:96:20:8f:70:f8:e6:c5:21:fc:3b:f9:31:5f:e3:71: d9:81:5c:7c:5b:08:69:53:fa:a7:43:57:13:79:39:2e:3b:8c: 46:f6:7d:8b:f5:93:b1:42:77:8c:17:06:f1:11:2f:3e:ec:03: a4:b2:a5:f7:82:7d:14:90:9b:7d:fb:15:63:4c:b5:b3:da:e3: 58:7b:ac:4a -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEqEEZRYA8VlSYioLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2YyZTdiZjMtZmFlOS00MmRhLWFiZTEtZWYxNjljMTFhNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPhCJe6GNCHHxiO8+xR1+OoCYS5jndio5y51 xpHPcydBOeQiE/LfGavmnkiqS1wercZYcDdNUG6ucVs95v2ZA95babXzFt9lz2kC Kg3KPE06+O6KscPJIFKXh/o3TfdZE+XX8Etb6/kqtY5v+KCjAO2pohQJAayXcS3J ZSYJRCeNiEokyybbgDN/ZtzMdToiPVU6lYeQMbDMS4x3xC70mnxCg+MkwS+957iP OZKp9waJO2+1ynInDj9NAvMyW/2Nq4qx+jPm8+yybRholTqhQZhbhM2mbWB0oASr QW34ASf14BXCvnUwFL07owM8THvoSwmOJLLzkXNcE5HkPb3eHwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFJqhpxHuF7+wKYCTppdbejUfvuC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWU3N2Q4NTItZWQ2My0z OTg1LWFhMjMtZThhYTU2YzM2OWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAFIYAAD AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAiheCBGQtb1dP1kbnkTproB2tGeC3Frmt6doFMWzT49iqwTp0 bWVxEQrZiMCPbzrITGbqgiLUy3M8NWFrK2Lne4rWLQbQLc3ElbLy7heLcVWxpjRI GGK5TuPC4zDKRfuyHu4beHYyjdJ96PZG1gm5yDxGkNQG7acm4NW+ky3cNDR3Z0sN lO8zQhh52eL4aryO4np1BSE4yY0UeF6RHu5lOrVs9n1+TZZ4g49bD078/4EiUDE9 HOWtliCPcPjmxSH8O/kxX+Nx2YFcfFsIaVP6p0NXE3k5LjuMRvZ9i/WTsUJ3jBcG 8REvPuwDpLKl94J9FJCbffsVY0y1s9rjWHusSg== -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:04 2025 by rpki-client