$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/1834e5ab-df96-322f-8714-bb237eefecc1.roa File: 1834e5ab-df96-322f-8714-bb237eefecc1.roa (raw, json) Hash identifier: ZgU6oUKVsBtCRMrYZKbmybPbf+eL5x7eo2BQxLG+RaI= Subject key identifier: DA:2A:14:2E:9D:19:E7:CE:67:CB:07:25:70:BC:0D:10:CC:81:9F:C4 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584A96369382503FB39D01994260 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/1834e5ab-df96-322f-8714-bb237eefecc1.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 19637 IP address blocks: 2604:b040:518::/48 maxlen: 48 2604:b040:519::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:93:82:50:3f:b3:9d:01:99:42:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=36c71333-2fa9-4a0e-ba81-fb55d05a0d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:b0:cf:bd:92:e7:af:a2:7c:77:f1:85:01: 23:fa:d6:21:72:08:9d:c5:45:82:31:b2:42:c2:a3: 79:ab:1c:60:ad:15:6c:ee:ac:ad:d0:86:f7:c8:ea: 7a:b3:d4:68:ae:78:72:1d:bc:22:8a:19:ce:92:ce: d7:18:8c:7e:25:82:da:bd:30:89:89:b1:61:0a:fb: b8:b0:e4:e8:f1:b6:7f:c6:1c:d0:63:79:ba:3b:e3: dc:2c:db:6c:30:f3:a9:13:83:cc:65:02:fd:78:5e: 0a:86:12:db:c5:bb:45:06:1f:6b:6f:8f:52:96:8d: 74:41:eb:e4:dc:e1:85:48:5d:52:7c:c1:69:8f:57: 22:9d:6d:eb:d9:f7:88:fd:0e:8b:3e:c1:38:ce:b6: f9:30:16:21:0f:64:44:4b:b9:5b:cf:43:65:cc:cf: cb:8e:90:ed:b1:a9:85:a9:d5:99:00:99:cd:b4:b1: a3:ac:27:15:ee:c6:03:18:6a:85:9b:a0:3c:08:d2: db:e3:d8:61:12:a8:19:0e:2c:6a:db:0d:09:37:70: fb:9e:cf:d4:4a:0d:e0:17:92:8b:38:2b:ee:55:d8: ed:68:39:95:34:19:a7:38:41:fe:bd:47:7a:ea:8e: 7d:63:c7:23:f7:62:de:bd:e2:3c:ee:3a:61:21:d5: 21:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2A:14:2E:9D:19:E7:CE:67:CB:07:25:70:BC:0D:10:CC:81:9F:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/1834e5ab-df96-322f-8714-bb237eefecc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv6: 2604:b040:518::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e7:4b:c9:ce:6f:6e:7a:0a:01:1d:61:f1:c7:34:6e:5b:a0: 1c:74:df:63:a5:99:e8:5e:1d:5e:e7:b7:1e:38:c3:bf:69:0e: 4e:14:d8:80:d1:08:e3:ee:d4:60:06:b5:7a:43:01:70:e8:2c: c5:82:28:42:ba:3e:f6:80:21:e0:66:c0:cd:af:02:fc:50:e5: 5d:39:3d:8e:67:ab:c5:be:0a:25:4b:68:46:8f:d7:33:17:dc: 75:71:b0:e7:da:50:aa:e4:98:73:ab:bb:c7:3e:31:76:22:0f: b6:2d:44:d3:1a:e8:f3:13:be:25:c8:3c:4b:4e:68:45:af:32: c6:16:11:9c:99:6f:ad:79:27:36:5b:2d:be:e8:6b:3a:0c:a7: b4:fc:70:e2:6d:dc:bc:a7:d9:0a:30:ee:94:f9:09:eb:83:47: 29:ad:f2:c2:c2:3b:ba:06:18:2f:5d:a1:b4:5f:28:25:82:3a: bd:95:bb:90:08:ca:6f:bb:9f:ca:7b:8b:91:4f:3a:6e:ce:30: 49:4c:4f:d7:fe:73:93:20:6f:8b:8c:a8:19:0a:e8:57:73:b7: 0d:5e:6c:28:0c:34:02:c1:7a:f9:46:40:85:eb:cd:6b:f0:b7: b0:46:1c:20:92:13:a8:a2:72:d9:76:6c:06:75:1b:8a:19:07: a6:5c:46:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqWNpOCUD+znQGZQmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzZjNzEzMzMtMmZhOS00YTBlLWJhODEtZmI1NWQwNWEwZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzuwz72S56+ifHfxhQEj+tYhcgidxUWCMbJC wqN5qxxgrRVs7qyt0Ib3yOp6s9RornhyHbwiihnOks7XGIx+JYLavTCJibFhCvu4 sOTo8bZ/xhzQY3m6O+PcLNtsMPOpE4PMZQL9eF4KhhLbxbtFBh9rb49Slo10Qevk 3OGFSF1SfMFpj1cinW3r2feI/Q6LPsE4zrb5MBYhD2RES7lbz0NlzM/LjpDtsamF qdWZAJnNtLGjrCcV7sYDGGqFm6A8CNLb49hhEqgZDixq2w0JN3D7ns/USg3gF5KL OCvuVdjtaDmVNBmnOEH+vUd66o59Y8cj92LeveI87jphIdUhTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNoqFC6dGefOZ8sHJXC8DRDMgZ/EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMTgzNGU1YWItZGY5Ni0z MjJmLTg3MTQtYmIyMzdlZWZlY2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgSwQAUY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAznS8nOb256CgEdYfHHNG5boBx032OlmeheHV7ntx44w79pDk4U 2IDRCOPu1GAGtXpDAXDoLMWCKEK6PvaAIeBmwM2vAvxQ5V05PY5nq8W+CiVLaEaP 1zMX3HVxsOfaUKrkmHOru8c+MXYiD7YtRNMa6PMTviXIPEtOaEWvMsYWEZyZb615 JzZbLb7oazoMp7T8cOJt3Lyn2Qow7pT5CeuDRymt8sLCO7oGGC9dobRfKCWCOr2V u5AIym+7n8p7i5FPOm7OMElMT9f+c5Mgb4uMqBkK6Fdztw1ebCgMNALBevlGQIXr zWvwt7BGHCCSE6iictl2bAZ1G4oZB6ZcRow= -----END CERTIFICATE-----Generated at Thu Aug 7 00:44:40 2025 by rpki-client