$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c71b1b05-e55c-3676-9889-10923e86a187.roa File: c71b1b05-e55c-3676-9889-10923e86a187.roa (raw, json) Hash identifier: Kr96ziCqdLYpBsnwSH2tfZ4XanyOhwdxE421BjhMZoQ= Subject key identifier: D4:AA:4A:A8:30:D3:0A:84:50:7B:0C:B0:5E:0B:36:EE:D2:C3:79:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123C0F01386B7215F96800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c71b1b05-e55c-3676-9889-10923e86a187.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 2001:4860:4829::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:3c:0f:01:38:6b:72:15:f9:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=844238f2-763c-49c0-92a5-27bcade226f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d6:bf:d3:b2:49:1d:d0:38:33:8f:5d:3f:54: c8:3b:bd:b4:7c:e9:ae:4a:e9:ff:ee:a4:88:0a:d6: 6a:84:59:8b:5c:63:75:b4:92:e9:b6:24:04:7f:05: b0:b5:a1:e7:18:33:23:b6:eb:03:17:7d:a9:91:3a: 14:da:c1:9e:b5:ad:9e:e5:32:02:aa:21:9d:53:86: 54:84:06:04:e0:16:d4:28:24:9b:30:49:7d:1b:62: d9:cf:f8:64:7c:e2:cf:30:42:52:95:d0:b4:dd:2e: b7:67:1d:eb:91:6d:05:ab:99:6e:b7:21:88:8f:cb: 86:d0:66:8b:f2:e4:e4:02:e8:45:3c:37:ec:3d:7c: ff:12:12:ba:0c:a7:16:a5:a5:e8:80:e2:1c:52:3f: 60:76:db:a8:cd:50:09:3c:b2:e1:c5:2f:ce:e0:6b: ee:01:89:5c:e8:83:8b:b7:58:d8:11:93:7e:df:34: a2:b7:d5:8f:af:5f:d3:fc:fc:fc:d1:a7:bb:0b:03: e9:ac:15:8d:ec:8d:97:4f:ab:7f:ea:1e:06:41:3c: 5d:70:a8:e1:5a:75:b3:fb:7b:44:e2:6a:ae:15:78: ca:61:f9:78:c0:ff:a3:0b:49:16:19:0a:18:a4:e8: bc:1c:94:d3:90:49:ad:eb:6f:67:79:da:d4:4e:e2: 14:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AA:4A:A8:30:D3:0A:84:50:7B:0C:B0:5E:0B:36:EE:D2:C3:79:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c71b1b05-e55c-3676-9889-10923e86a187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4829::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:cb:23:2a:8a:0f:62:a5:eb:d6:7b:53:af:9d:54:a4:74:3b: e4:f1:e3:ff:b8:99:c0:af:af:2c:5b:86:d4:28:6c:14:d0:87: 4e:3b:cf:c3:c4:60:4a:86:e7:a1:b6:45:aa:69:1c:79:3f:75: 43:12:56:85:ae:bf:20:72:97:4d:b5:11:ab:79:59:98:76:01: 0a:cd:1d:09:90:ed:01:fe:95:a7:3b:45:bd:d1:e6:a0:3e:51: ae:0d:aa:83:22:21:5f:46:0e:84:0a:e2:dc:f2:7c:b9:69:19: 20:55:10:df:06:e1:28:07:e0:68:82:95:3f:b7:b6:18:21:6f: c6:c6:09:5d:9c:4b:06:70:1a:09:1a:18:1b:0e:ec:3f:c3:06: 9e:b2:88:bc:a2:b0:76:6b:65:5e:8b:15:d6:1f:be:5a:e2:62: f8:65:3a:00:f4:8d:30:b5:3c:34:c2:ef:a5:d0:3d:35:78:ae: 2b:dd:3b:cf:99:aa:72:8a:a7:6b:23:05:cb:6d:84:49:92:04: 05:2b:3e:5c:e2:93:12:7c:b4:5a:0d:b0:f2:b8:f9:8c:f6:8c: af:ba:73:2e:35:21:69:8f:31:aa:4c:f6:78:f3:3a:4e:cd:34: cc:51:66:a2:5a:80:b1:98:a4:12:28:bb:ac:59:aa:92:b7:09: 1c:ed:db:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEjwPAThrchX5aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODQ0MjM4ZjItNzYzYy00OWMwLTkyYTUtMjdiY2FkZTIyNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNa/07JJHdA4M49dP1TIO720fOmuSun/7qSI CtZqhFmLXGN1tJLptiQEfwWwtaHnGDMjtusDF32pkToU2sGeta2e5TICqiGdU4ZU hAYE4BbUKCSbMEl9G2LZz/hkfOLPMEJSldC03S63Zx3rkW0Fq5lutyGIj8uG0GaL 8uTkAuhFPDfsPXz/EhK6DKcWpaXogOIcUj9gdtuozVAJPLLhxS/O4GvuAYlc6IOL t1jYEZN+3zSit9WPr1/T/Pz80ae7CwPprBWN7I2XT6t/6h4GQTxdcKjhWnWz+3tE 4mquFXjKYfl4wP+jC0kWGQoYpOi8HJTTkEmt629nedrUTuIUWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNSqSqgw0wqEUHsMsF4LNu7Sw3lGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzcxYjFiMDUtZTU1Yy0z Njc2LTk4ODktMTA5MjNlODZhMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKjLIyqKD2Kl69Z7U6+dVKR0O+Tx4/+4mcCvryxbhtQobBTQh047 z8PEYEqG56G2RappHHk/dUMSVoWuvyByl021Eat5WZh2AQrNHQmQ7QH+lac7Rb3R 5qA+Ua4NqoMiIV9GDoQK4tzyfLlpGSBVEN8G4SgH4GiClT+3thghb8bGCV2cSwZw GgkaGBsO7D/DBp6yiLyisHZrZV6LFdYfvlriYvhlOgD0jTC1PDTC76XQPTV4rivd O8+ZqnKKp2sjBctthEmSBAUrPlzikxJ8tFoNsPK4+Yz2jK+6cy41IWmPMapM9njz Ok7NNMxRZqJagLGYpBIou6xZqpK3CRzt20A= -----END CERTIFICATE-----Generated at Mon Aug 4 14:17:34 2025 by rpki-client