$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a250beff-0df5-3a60-afe1-77574f30a281.roa File: a250beff-0df5-3a60-afe1-77574f30a281.roa (raw, json) Hash identifier: 0WN6e6Iz17Ijl9XKc0GhZ+WWa7Xpi1CqEO4YfdvnRHg= Subject key identifier: CF:5F:BF:ED:69:72:03:BA:78:99:C3:54:08:C4:86:EF:35:C4:00:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411966CEFB1D3AA2BB2BD00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a250beff-0df5-3a60-afe1-77574f30a281.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 2607:f8b0:4009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:96:6c:ef:b1:d3:aa:2b:b2:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=7280b14e-21e1-403c-9822-1c7cfa2d49c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:2c:c0:51:84:52:9a:84:49:f1:d0:88:e8: b8:02:ec:85:f4:16:e1:a8:94:90:8d:86:f6:bc:15: 6d:16:b4:65:0f:ff:44:a1:2c:8b:01:90:bf:97:11: f1:0e:5e:19:9b:24:e3:89:8e:a8:6f:ec:f0:27:a6: 79:e6:00:73:d9:65:da:3d:99:64:03:50:dc:d2:4b: 83:32:84:64:6f:72:34:e2:90:8a:c4:5a:74:4d:b7: 5c:d1:fd:87:92:ab:0e:69:6f:92:ec:8b:c9:1e:80: 46:e2:2e:a3:5f:79:1c:b1:42:33:4e:87:a2:0f:14: 14:55:05:cf:2d:ac:dc:cf:25:e3:90:bc:7d:6c:91: 9f:5b:48:b2:a1:bf:65:f5:fa:87:53:10:d0:7c:e0: 1b:2e:cf:ed:eb:f9:0e:3f:62:8c:16:7b:c8:4b:81: 23:e0:89:92:53:0e:3c:ce:e9:02:09:89:5d:0d:5b: a7:93:c1:fa:4a:42:99:32:16:2e:25:0a:98:89:05: f8:3f:04:fe:15:4a:56:2e:a1:18:ea:e8:94:24:04: 04:a2:5c:9f:a0:ad:25:a7:db:3f:01:be:97:cb:16: 32:5c:a2:f5:4c:64:8d:f2:c8:62:52:fd:13:13:b0: 40:12:ca:59:ba:b9:cb:6c:6f:99:5e:26:83:d3:36: e7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5F:BF:ED:69:72:03:BA:78:99:C3:54:08:C4:86:EF:35:C4:00:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a250beff-0df5-3a60-afe1-77574f30a281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4009::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:72:be:3c:3f:39:ce:23:14:14:af:27:e5:67:a4:72:84:9b: 63:28:24:9f:0e:d6:f7:ec:05:25:ae:4d:ce:25:47:7b:75:d4: f1:28:c0:c0:b2:03:2d:ed:18:3d:a7:f5:d3:7b:c4:0d:9a:cd: 63:68:43:97:3d:80:6e:68:52:f5:48:ed:92:0c:bf:37:72:11: 51:f8:9b:d9:b1:a6:97:4a:35:7b:cb:ec:d2:39:86:5f:07:83: 44:18:ec:81:71:1b:78:af:a5:a1:5b:30:36:e0:fb:86:05:ae: 31:92:70:bb:06:12:ad:6a:f9:d3:f5:92:fc:71:de:f0:02:25: 6d:83:57:8b:74:64:2e:d2:31:d3:59:4b:9a:e1:de:aa:e9:01: f4:96:a2:7d:b5:ba:3b:ad:5e:ba:b1:69:c3:71:d8:08:2d:26: 8d:d3:e3:56:78:2b:9a:be:54:c1:ca:5a:c4:af:54:73:f9:1e: 04:33:8d:66:1f:9d:4a:2b:f7:2d:3f:dc:31:d5:34:e7:11:d6: fc:d7:a1:2a:89:37:a7:0c:8c:7d:ed:e4:1f:10:8f:36:ae:a4: 74:7e:41:fe:d4:ce:d7:8c:34:a6:c5:3d:1e:77:f8:95:2b:c7: 72:f9:17:d0:da:c0:90:57:bf:6d:28:ab:62:03:99:07:ea:88: 1b:c1:22:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEZZs77HTqiuyvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NzI4MGIxNGUtMjFlMS00MDNjLTk4MjItMWM3Y2ZhMmQ0OWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxsswFGEUpqESfHQiOi4AuyF9BbhqJSQjYb2 vBVtFrRlD/9EoSyLAZC/lxHxDl4ZmyTjiY6ob+zwJ6Z55gBz2WXaPZlkA1Dc0kuD MoRkb3I04pCKxFp0Tbdc0f2HkqsOaW+S7IvJHoBG4i6jX3kcsUIzToeiDxQUVQXP LazczyXjkLx9bJGfW0iyob9l9fqHUxDQfOAbLs/t6/kOP2KMFnvIS4Ej4ImSUw48 zukCCYldDVunk8H6SkKZMhYuJQqYiQX4PwT+FUpWLqEY6uiUJAQEolyfoK0lp9s/ Ab6XyxYyXKL1TGSN8shiUv0TE7BAEspZurnLbG+ZXiaD0zbnowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM9fv+1pcgO6eJnDVAjEhu81xAAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTI1MGJlZmYtMGRmNS0z YTYwLWFmZTEtNzc1NzRmMzBhMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIJyvjw/Oc4jFBSvJ+VnpHKEm2MoJJ8O1vfsBSWuTc4lR3t11PEo wMCyAy3tGD2n9dN7xA2azWNoQ5c9gG5oUvVI7ZIMvzdyEVH4m9mxppdKNXvL7NI5 hl8Hg0QY7IFxG3ivpaFbMDbg+4YFrjGScLsGEq1q+dP1kvxx3vACJW2DV4t0ZC7S MdNZS5rh3qrpAfSWon21ujutXrqxacNx2AgtJo3T41Z4K5q+VMHKWsSvVHP5HgQz jWYfnUor9y0/3DHVNOcR1vzXoSqJN6cMjH3t5B8QjzaupHR+Qf7UzteMNKbFPR53 +JUrx3L5F9DawJBXv20oq2IDmQfqiBvBIrs= -----END CERTIFICATE-----Generated at Mon Aug 4 15:31:38 2025 by rpki-client