$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8018ebf-ceb4-3b29-8bd1-7a74a422407b.roa File: d8018ebf-ceb4-3b29-8bd1-7a74a422407b.roa (raw, json) Hash identifier: yHRigl8L/miM9P3G1CmFz2zvwkvSeUt43BdcR7PPwUE= Subject key identifier: 43:5D:2B:BC:02:3C:84:78:1B:7A:D2:3B:4C:3F:68:FD:F5:AA:BD:0A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123BFBFE615F09C684D0A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8018ebf-ceb4-3b29-8bd1-7a74a422407b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 2607:f8b0:4012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:3b:fb:fe:61:5f:09:c6:84:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c855b487-060e-4e51-aa5a-14077ddf4286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cb:44:d8:7d:0f:7d:1f:5a:b1:6a:85:11:02: c4:5f:19:0e:69:c6:2e:3c:44:46:24:3c:84:b2:44: 6c:31:d6:37:fb:d1:6a:b9:2a:35:b5:69:87:cf:a3: 45:54:f4:87:1a:d8:4b:08:7d:a7:3c:00:9b:61:91: f4:e2:82:9b:b5:67:84:1e:52:6e:26:ba:95:5d:ac: 6e:7e:e4:73:f2:79:54:69:22:94:64:1b:c2:3f:6e: 0c:4c:48:21:cd:a8:ef:f8:c7:d9:f8:cc:d5:91:4e: ee:79:47:38:56:f5:a3:ec:c6:e4:21:5a:43:38:0a: 9c:26:03:46:1f:35:c3:78:6c:ca:71:54:2c:47:18: bf:52:f1:36:62:3d:5d:c6:6c:10:8d:e1:c2:31:63: df:82:cf:b1:f9:d1:38:d2:49:b1:e0:ad:fc:8f:15: 2a:ab:47:59:00:ca:d7:5f:f3:f6:f4:c6:77:53:8c: 81:b3:9f:44:27:42:36:70:b0:c9:b7:9b:51:af:69: 0d:ea:40:9b:ac:54:22:a2:dc:d6:3a:aa:df:08:b1: 04:36:2d:e8:08:7a:c8:8c:1a:e4:dc:49:34:a1:5c: 4f:a6:24:0a:46:68:8e:3c:c4:59:00:68:fa:70:20: 53:2e:90:ed:cf:93:cd:d5:42:66:51:b4:01:0a:0b: e7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5D:2B:BC:02:3C:84:78:1B:7A:D2:3B:4C:3F:68:FD:F5:AA:BD:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8018ebf-ceb4-3b29-8bd1-7a74a422407b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4012::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:da:6d:69:dd:ad:58:3e:64:40:dc:4f:6e:cc:ea:27:a2:85: f0:42:b1:8d:12:9f:6f:dd:c7:60:26:05:e3:7a:5a:69:2f:a6: 8a:92:2c:a4:24:4f:16:be:ef:60:10:f8:e0:3f:3b:7e:4e:71: b7:c8:10:7f:a6:05:96:61:7d:c1:a9:a2:a9:6b:56:94:34:1e: 0b:b3:ca:c6:03:1b:69:d9:13:57:74:00:7c:77:c3:dc:ac:11: 85:a5:50:a8:76:28:0a:34:ef:b5:fc:3c:6a:b8:71:ec:fd:f3: 88:11:8c:13:5e:70:2f:4b:94:06:bb:e6:bc:bb:07:a0:fe:f6: ab:5b:e2:ef:6e:6f:39:4c:3d:b9:a2:c1:9d:87:5e:8f:14:74: b2:d1:62:bb:6a:5c:4a:34:6e:c8:4b:dc:21:44:08:51:18:bb: 02:e8:ab:7a:9f:66:f6:4b:38:81:23:23:b0:04:b1:06:d3:f8: 19:97:3f:05:0b:f3:15:cd:05:b6:9c:34:9c:c9:09:f8:be:0d: db:d9:cd:6b:12:48:c1:ea:10:1f:df:63:36:5e:bc:5f:60:f5: 93:fd:b5:2d:03:34:43:5c:9b:42:ee:a9:91:56:70:c0:21:3c: 36:b2:4a:d6:fa:0c:80:20:5d:bb:9b:88:fb:27:b9:8d:d5:ca: 26:80:e4:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEjv7/mFfCcaE0KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Yzg1NWI0ODctMDYwZS00ZTUxLWFhNWEtMTQwNzdkZGY0Mjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnstE2H0PfR9asWqFEQLEXxkOacYuPERGJDyE skRsMdY3+9FquSo1tWmHz6NFVPSHGthLCH2nPACbYZH04oKbtWeEHlJuJrqVXaxu fuRz8nlUaSKUZBvCP24MTEghzajv+MfZ+MzVkU7ueUc4VvWj7MbkIVpDOAqcJgNG HzXDeGzKcVQsRxi/UvE2Yj1dxmwQjeHCMWPfgs+x+dE40kmx4K38jxUqq0dZAMrX X/P29MZ3U4yBs59EJ0I2cLDJt5tRr2kN6kCbrFQiotzWOqrfCLEENi3oCHrIjBrk 3Ek0oVxPpiQKRmiOPMRZAGj6cCBTLpDtz5PN1UJmUbQBCgvnOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFENdK7wCPIR4G3rSO0w/aP31qr0KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDgwMThlYmYtY2ViNC0z YjI5LThiZDEtN2E3NGE0MjI0MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAInabWndrVg+ZEDcT27M6ieihfBCsY0Sn2/dx2AmBeN6WmkvpoqS LKQkTxa+72AQ+OA/O35OcbfIEH+mBZZhfcGpoqlrVpQ0HguzysYDG2nZE1d0AHx3 w9ysEYWlUKh2KAo077X8PGq4cez984gRjBNecC9LlAa75ry7B6D+9qtb4u9ubzlM PbmiwZ2HXo8UdLLRYrtqXEo0bshL3CFECFEYuwLoq3qfZvZLOIEjI7AEsQbT+BmX PwUL8xXNBbacNJzJCfi+DdvZzWsSSMHqEB/fYzZevF9g9ZP9tS0DNENcm0LuqZFW cMAhPDayStb6DIAgXbubiPsnuY3VyiaA5Ao= -----END CERTIFICATE-----Generated at Tue Aug 5 20:12:53 2025 by rpki-client