$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cf7850d-5a61-3ceb-86f8-0be244f76344.roa File: 9cf7850d-5a61-3ceb-86f8-0be244f76344.roa (raw, json) Hash identifier: H6fEbXT9bb5WWyrsG3hhpz1h3iMACcj7+Ekyu1R6upg= Subject key identifier: BB:B2:16:0D:DC:A2:66:AD:5E:BF:34:BD:39:F6:FD:98:57:24:1F:26 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123D58970038B21AC62C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cf7850d-5a61-3ceb-86f8-0be244f76344.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 2607:f8b0:400b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:3d:58:97:00:38:b2:1a:c6:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=66d6892f-c13c-47d6-83fa-8b2492f7719e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:a8:93:37:d6:a8:03:58:e8:f8:69:87:5c: 96:25:5c:4c:62:bf:b1:19:6f:26:7e:2e:b4:23:a3: ae:da:78:e5:ad:76:89:1a:f7:bd:47:cb:6b:6e:60: d9:71:f7:70:f5:ea:95:44:57:f2:8c:ab:de:96:28: 8f:5e:21:40:02:9b:aa:0c:56:2f:eb:9a:04:de:b5: 69:96:b7:28:9e:fb:f4:18:9c:fd:55:a6:e7:74:a4: 77:66:02:96:db:0b:90:9f:c7:9c:b0:80:71:b6:44: 66:f7:5e:b1:ee:d8:ac:d8:35:a8:1a:4e:dd:ff:62: ce:7f:b2:3c:41:c0:f9:c0:30:2f:59:82:30:49:31: 0d:79:7b:09:71:a9:99:6a:56:d4:4f:89:0b:c1:0c: 1d:81:4c:67:30:08:c9:5a:ac:f8:62:0d:86:7d:ef: 78:0e:ee:58:c7:ee:b3:00:44:bc:27:be:f2:14:14: 64:0e:8e:38:91:45:2d:51:9d:41:6d:0b:4a:f8:64: b6:12:55:93:79:24:04:a0:7d:f9:7a:ab:79:df:9a: 2a:b5:12:a0:4c:47:68:44:93:e6:a1:ef:41:4b:4d: 1d:ca:b4:9f:07:93:d9:d9:99:70:06:b7:3e:69:9e: e0:21:a8:78:46:0b:dd:7a:1f:5e:c1:5f:2b:f4:db: 70:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B2:16:0D:DC:A2:66:AD:5E:BF:34:BD:39:F6:FD:98:57:24:1F:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cf7850d-5a61-3ceb-86f8-0be244f76344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:400b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:28:ec:b2:7c:25:4c:ed:16:af:ca:1e:5f:a4:32:e7:a2:b3: 32:f0:14:ba:30:a3:e5:78:17:da:a8:7a:7a:c0:d9:06:f8:51: aa:f7:6a:fe:75:84:c1:17:52:4e:fd:07:3e:8e:6d:38:89:60: 18:57:c5:d2:d0:21:9c:a5:89:1d:34:31:a5:d9:bf:7e:37:d0: ae:fc:76:9c:80:36:55:14:7d:33:ce:aa:e8:68:39:43:55:2f: 67:68:cb:ad:1f:7c:c7:dd:eb:e2:54:cc:7e:32:33:70:fd:70: ae:6a:40:51:67:ed:64:df:f7:92:37:fb:e4:d8:1d:11:c0:cb: 9f:0c:b3:80:4b:09:5c:00:c3:47:cb:da:aa:1f:fa:dd:e2:98: 6b:2b:3e:7f:31:32:41:d4:0c:4f:c8:7d:10:e7:e5:2f:32:44: 28:91:cb:a6:27:1f:3c:2d:d6:32:97:81:d0:d7:ee:b7:47:cc: fb:c4:25:c1:cd:12:69:14:46:6d:71:61:3f:12:86:2f:cb:ab: a5:12:c8:7e:e9:01:d1:e5:47:13:ec:8f:32:de:73:fb:ad:f8: e3:e3:e9:ec:7c:5d:7e:b1:41:03:2a:d1:62:e3:4e:e4:c1:f9: 01:07:fa:0a:78:4b:d8:3e:b4:97:fc:d8:ea:20:ed:dd:3c:95: 9f:64:29:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEj1YlwA4shrGLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjZkNjg5MmYtYzEzYy00N2Q2LTgzZmEtOGIyNDkyZjc3MTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0uokzfWqANY6Phph1yWJVxMYr+xGW8mfi60 I6Ou2njlrXaJGve9R8trbmDZcfdw9eqVRFfyjKveliiPXiFAApuqDFYv65oE3rVp lrconvv0GJz9VabndKR3ZgKW2wuQn8ecsIBxtkRm916x7tis2DWoGk7d/2LOf7I8 QcD5wDAvWYIwSTENeXsJcamZalbUT4kLwQwdgUxnMAjJWqz4Yg2Gfe94Du5Yx+6z AES8J77yFBRkDo44kUUtUZ1BbQtK+GS2ElWTeSQEoH35eqt535oqtRKgTEdoRJPm oe9BS00dyrSfB5PZ2ZlwBrc+aZ7gIah4Rgvdeh9ewV8r9Ntw7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLuyFg3comatXr80vTn2/ZhXJB8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWNmNzg1MGQtNWE2MS0z Y2ViLTg2ZjgtMGJlMjQ0Zjc2MzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIko7LJ8JUztFq/KHl+kMueiszLwFLowo+V4F9qoenrA2Qb4Uar3 av51hMEXUk79Bz6ObTiJYBhXxdLQIZyliR00MaXZv3430K78dpyANlUUfTPOquho OUNVL2doy60ffMfd6+JUzH4yM3D9cK5qQFFn7WTf95I3++TYHRHAy58Ms4BLCVwA w0fL2qof+t3imGsrPn8xMkHUDE/IfRDn5S8yRCiRy6YnHzwt1jKXgdDX7rdHzPvE JcHNEmkURm1xYT8Shi/Lq6USyH7pAdHlRxPsjzLec/ut+OPj6ex8XX6xQQMq0WLj TuTB+QEH+gp4S9g+tJf82Oog7d08lZ9kKUA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:34:46 2025 by rpki-client