$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/fb09d72b-00b3-3d66-80ba-11207add3752.roa File: fb09d72b-00b3-3d66-80ba-11207add3752.roa (raw, json) Hash identifier: 8Pfsc3ObIZJ1bisFvhizMvMg+eqiycKVV8/ylIip4ek= Subject key identifier: A2:09:1E:D9:91:86:CD:CD:0E:2B:36:75:62:C1:B6:DE:52:BC:E7:8E Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Certificate serial: 010D0C9F4328584AC5AB82353858A8E6BDD10F80 Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/fb09d72b-00b3-3d66-80ba-11207add3752.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 397610 IP address blocks: 2605:4bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:82:35:38:58:a8:e6:bd:d1:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=cc5e7580-ff25-4a00-b6de-cba58a93c9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:c1:f0:bc:13:14:cb:32:9b:e6:ab:77:bd: 94:d6:ac:82:f1:0e:5d:19:cf:9a:37:3f:73:1c:22: 47:d4:e3:e0:e1:ee:4e:28:39:a4:70:6f:dc:a2:9b: 5b:40:59:52:5e:ac:f4:1a:49:36:46:4e:88:6c:00: 8b:86:a4:f5:55:8d:47:6d:c5:e3:64:90:89:0a:5d: c6:61:91:77:75:db:43:05:49:a8:cc:1a:17:56:0b: bf:a9:51:a9:df:bb:07:2f:af:78:20:15:7b:01:1d: 77:d2:af:7c:92:b5:ed:2b:40:3b:b5:52:6b:8f:c2: de:63:93:3f:e4:19:45:01:c6:f0:12:66:75:e6:90: 7a:28:3d:0c:a0:1d:f3:35:b0:8e:b8:db:74:b1:6f: 59:9c:b2:f7:e9:e4:09:1b:ae:d2:0d:cc:f5:6d:17: 35:35:89:cd:1e:3e:27:45:3d:99:f5:1d:ba:91:b7: 14:f6:ce:84:6e:5c:8c:ac:72:62:4f:2d:31:70:cb: d5:31:00:34:45:04:c8:dc:ec:0a:26:d9:12:5d:3d: 52:c6:a9:85:c6:15:ff:1d:40:36:6e:8e:b2:7b:f4: a7:22:68:1c:73:6d:cb:79:6c:0a:7b:90:b4:42:f3: 8c:5b:e0:21:ce:3a:d1:3e:4b:26:dd:0a:ee:39:83: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:09:1E:D9:91:86:CD:CD:0E:2B:36:75:62:C1:B6:DE:52:BC:E7:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/fb09d72b-00b3-3d66-80ba-11207add3752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl X509v3 Authority Key Identifier: keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer sbgp-ipAddrBlock: critical IPv6: 2605:4bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:b3:87:86:c4:0a:f2:79:a2:fd:3b:36:7b:90:0e:b8:99:d7: 08:e9:7e:da:0b:b9:4a:c6:c2:1b:a8:94:84:d9:e2:63:5c:ff: 49:5b:54:42:6f:d5:0e:2c:e6:e9:53:3e:92:64:2a:ec:28:d1: 88:d7:83:4f:b3:a5:c0:67:5e:c5:fe:37:ee:67:1d:f7:7b:ec: 0a:63:62:1b:46:3b:83:8a:b5:4b:03:60:fe:80:db:60:c8:7c: 7e:92:dd:b0:be:a6:f9:51:7e:5c:c0:e2:27:6b:73:1a:50:57: aa:23:9c:5e:a6:6e:7e:63:45:61:ad:ba:71:87:03:75:9d:0c: 06:b2:de:de:bf:ad:c2:40:9e:d1:57:de:4c:84:2b:00:64:a7: 38:4a:71:5a:48:b8:e0:77:c3:f1:06:9c:f3:59:8c:3b:b6:70: 12:5c:cf:2c:53:80:4d:0c:2d:a9:78:25:cd:c7:5e:2a:34:45: e1:46:14:9c:ab:ee:7c:13:4c:37:ef:c9:c6:ad:c4:d6:a1:f3: a7:68:68:88:a6:a2:e8:c6:34:bc:75:6a:33:0c:60:98:33:61: 40:ef:f1:0e:1a:51:b7:e7:70:76:d6:85:1f:2c:ab:97:c6:4d: 95:8b:74:73:31:89:e4:9e:ac:d8:8f:2c:0f:f3:35:62:e3:cb: 51:3b:5c:a9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErFq4I1OFio5r3RD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh OTY5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk Y2M1ZTc1ODAtZmYyNS00YTAwLWI2ZGUtY2JhNThhOTNjOWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq/B8LwTFMsym+ard72U1qyC8Q5dGc+aNz9z HCJH1OPg4e5OKDmkcG/coptbQFlSXqz0Gkk2Rk6IbACLhqT1VY1HbcXjZJCJCl3G YZF3ddtDBUmozBoXVgu/qVGp37sHL694IBV7AR130q98krXtK0A7tVJrj8LeY5M/ 5BlFAcbwEmZ15pB6KD0MoB3zNbCOuNt0sW9ZnLL36eQJG67SDcz1bRc1NYnNHj4n RT2Z9R26kbcU9s6EblyMrHJiTy0xcMvVMQA0RQTI3OwKJtkSXT1SxqmFxhX/HUA2 bo6ye/SnImgcc23LeWwKe5C0QvOMW+AhzjrRPksm3QruOYMT3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKIJHtmRhs3NDis2dWLBtt5SvOeOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvZmIwOWQ3MmItMDBiMy0z ZDY2LTgwYmEtMTEyMDdhZGQzNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4 ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2 N2YyY2E5NjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVLwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCYs4eGxAryeaL9OzZ7kA64mdcI6X7aC7lKxsIbqJSE2eJjXP9JW1RC b9UOLObpUz6SZCrsKNGI14NPs6XAZ17F/jfuZx33e+wKY2IbRjuDirVLA2D+gNtg yHx+kt2wvqb5UX5cwOIna3MaUFeqI5xepm5+Y0VhrbpxhwN1nQwGst7ev63CQJ7R V95MhCsAZKc4SnFaSLjgd8PxBpzzWYw7tnASXM8sU4BNDC2peCXNx14qNEXhRhSc q+58E0w378nGrcTWofOnaGiIpqLoxjS8dWozDGCYM2FA7/EOGlG353B21oUfLKuX xk2Vi3RzMYnknqzYjywP8zVi48tRO1yp -----END CERTIFICATE-----Generated at Sat Aug 9 20:40:18 2025 by rpki-client