$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f53cfe8-3766-31b5-8862-753274ab5043.roa File: 8f53cfe8-3766-31b5-8862-753274ab5043.roa (raw, json) Hash identifier: nMimWUumVa94tkwsC7WvuvJdEH7MAzdADbIfBbVwqn8= Subject key identifier: AA:34:74:62:E0:F6:C0:0C:D8:9F:BA:D1:6E:B8:92:3A:EB:41:F8:6E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84119399C0D8811604F55000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f53cfe8-3766-31b5-8862-753274ab5043.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 11344 IP address blocks: 2001:4860:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:93:99:c0:d8:81:16:04:f5:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=35ac6b6e-13ab-4087-8707-a87bbe3ef429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:47:5c:e5:02:a2:5a:de:ce:81:1d:26:09:8b: cb:6f:34:68:9e:d3:37:01:54:1b:a9:50:79:af:b0: 82:0c:e4:5c:50:ba:84:2b:e1:47:64:03:43:e9:51: 33:d2:d4:c0:88:35:df:d8:2e:d8:b4:75:eb:a4:32: 8d:44:b5:01:1a:71:aa:92:c3:e2:bb:10:51:94:1b: 7a:5d:d9:03:ae:44:79:93:88:a1:75:72:6d:e2:53: ce:35:50:a2:5c:4c:64:71:79:1d:2d:db:4f:be:35: f1:5f:78:0f:ca:88:26:9d:be:6a:b8:aa:00:12:bf: 9c:bb:cb:c5:50:14:ff:3f:d0:4b:da:0d:ed:79:ad: 7c:88:77:9c:67:52:d7:04:ae:08:63:13:b4:a9:d3: 7e:35:55:f3:9b:56:f9:69:5a:6b:0a:f8:1e:32:a8: e3:ef:28:de:31:26:b8:bd:db:56:59:27:3c:24:94: 94:51:15:fc:51:f2:a4:e4:f3:dc:93:b0:fc:83:e0: 46:a9:40:be:e9:23:55:48:10:88:2f:25:8d:64:ad: 0b:4d:7f:a5:07:9c:f5:1c:f3:8e:d3:31:53:8d:d1: a0:be:d3:2a:78:37:69:15:2d:51:57:c0:0c:3c:e5: 2a:0f:30:3d:f1:fc:83:f7:5b:b4:b1:84:b8:89:ac: c3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:34:74:62:E0:F6:C0:0C:D8:9F:BA:D1:6E:B8:92:3A:EB:41:F8:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f53cfe8-3766-31b5-8862-753274ab5043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:82:bd:3b:76:c5:8d:9c:b8:3b:e3:d1:06:39:46:f0:86:8a: 7f:d3:2a:f5:9a:89:7c:e8:33:c1:10:8d:57:df:04:fe:ef:7e: 93:99:f2:bc:6b:9e:5d:c3:48:e3:76:d5:1c:75:cd:5b:83:51: e7:40:b9:c2:c2:4d:93:8c:f7:7d:65:53:5a:d3:12:0a:2a:2b: 23:27:9c:ee:e0:50:d9:14:9e:3a:69:ff:45:9d:db:41:72:14: 00:f6:df:ae:72:5e:a7:b3:07:50:78:82:59:b7:0e:77:a2:38: 03:42:31:e1:df:4a:82:72:b0:62:9a:7b:ae:70:ed:bd:3e:e1: c2:46:a2:81:ff:38:fc:e2:b1:8a:4c:35:29:17:12:89:b3:43: 5e:0d:9d:d9:87:81:fd:3d:95:59:12:82:37:f8:ff:df:ac:87: 4d:f4:4d:40:cc:11:c8:31:10:da:6a:12:4d:15:6c:f0:36:1b: 4c:0a:0f:df:25:5a:87:98:fc:a1:a7:4d:18:c1:78:f7:be:3e: 23:15:82:ee:91:84:27:1e:a3:2b:8d:4c:e9:aa:61:44:bd:5b: 4b:a5:a6:a7:4b:89:92:64:e8:d4:9d:5e:53:65:6b:ea:c9:81: b2:d8:41:96:6b:f8:7d:5c:ff:9e:7f:12:38:51:c2:39:5b:1c: 9c:2c:90:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEZOZwNiBFgT1UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzVhYzZiNmUtMTNhYi00MDg3LTg3MDctYTg3YmJlM2VmNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0dc5QKiWt7OgR0mCYvLbzRontM3AVQbqVB5 r7CCDORcULqEK+FHZAND6VEz0tTAiDXf2C7YtHXrpDKNRLUBGnGqksPiuxBRlBt6 XdkDrkR5k4ihdXJt4lPONVCiXExkcXkdLdtPvjXxX3gPyogmnb5quKoAEr+cu8vF UBT/P9BL2g3tea18iHecZ1LXBK4IYxO0qdN+NVXzm1b5aVprCvgeMqjj7yjeMSa4 vdtWWSc8JJSUURX8UfKk5PPck7D8g+BGqUC+6SNVSBCILyWNZK0LTX+lB5z1HPOO 0zFTjdGgvtMqeDdpFS1RV8AMPOUqDzA98fyD91u0sYS4iazDyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKo0dGLg9sAM2J+60W64kjrrQfhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY1M2NmZTgtMzc2Ni0z MWI1LTg4NjItNzUzMjc0YWI1MDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK2CvTt2xY2cuDvj0QY5RvCGin/TKvWaiXzoM8EQjVffBP7vfpOZ 8rxrnl3DSON21Rx1zVuDUedAucLCTZOM931lU1rTEgoqKyMnnO7gUNkUnjpp/0Wd 20FyFAD2365yXqezB1B4glm3DneiOANCMeHfSoJysGKae65w7b0+4cJGooH/OPzi sYpMNSkXEomzQ14NndmHgf09lVkSgjf4/9+sh030TUDMEcgxENpqEk0VbPA2G0wK D98lWoeY/KGnTRjBePe+PiMVgu6RhCceoyuNTOmqYUS9W0ulpqdLiZJk6NSdXlNl a+rJgbLYQZZr+H1c/55/EjhRwjlbHJwskBI= -----END CERTIFICATE-----Generated at Wed Aug 6 09:34:19 2025 by rpki-client