$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa File: 342be0e4-6b26-3229-8808-286812c3a7c1.roa (raw, json) Hash identifier: 2bhdkZYerHF/LywC78KKs96dT5yGkLRVg/B624ZO8M0= Subject key identifier: 05:BE:83:1C:FD:E2:2F:21:FB:02:E5:BB:BC:12:67:F5:73:81:A4:2E Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584A8B0B5F6C318B4E6324C08F80 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 398203 IP address blocks: 2605:8cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:5f:6c:31:8b:4e:63:24:c0:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=fb708c48-82c0-4422-a970-2be2cb81978a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c3:b8:89:27:34:c8:de:72:0b:a1:e8:b0:d9: a4:a2:0f:7d:6f:f8:f2:21:97:cc:39:5c:e4:1d:a5: aa:19:13:5c:4b:cb:b4:12:01:f7:c1:20:96:c5:d6: dd:cc:f1:cb:ea:18:f4:86:68:14:76:17:dc:15:91: b9:89:6b:52:93:7c:a1:5d:aa:d3:b9:82:5d:0a:2e: f6:e8:67:a4:9e:d0:fb:bb:85:c2:93:32:c5:4f:09: 56:2b:4a:e8:68:ca:6d:a4:e1:41:16:51:e7:e9:1b: 20:d6:43:e7:4b:37:4e:bf:fd:56:30:9b:d8:98:72: de:01:07:79:a3:3a:ed:cb:fd:35:bc:41:7f:63:17: 54:96:1c:2d:96:55:62:46:78:8d:1d:94:47:26:33: 0c:90:be:4a:fc:74:d6:f0:18:38:d6:47:ae:99:58: f3:d7:7b:27:f8:c1:6f:f0:89:49:b8:8a:a3:83:1b: 6d:b8:48:4d:f9:68:11:0d:43:4c:ec:3f:a6:6e:f6: a8:03:28:54:16:71:29:5a:ec:25:b3:82:1d:af:52: 12:38:a9:c9:69:12:0d:4f:99:84:5b:49:9c:16:f4: ee:43:72:b7:87:d9:99:6e:b3:0e:d4:3c:e0:48:2b: 8a:21:e2:6b:3b:86:88:c7:d6:07:5f:05:6b:1b:a5: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BE:83:1C:FD:E2:2F:21:FB:02:E5:BB:BC:12:67:F5:73:81:A4:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv6: 2605:8cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:06:f6:7c:ee:96:7f:f0:c0:9b:5d:e6:12:3e:1a:d9:0c:a1: 20:22:76:ac:14:96:5c:98:e6:2f:09:4f:51:0d:6c:17:37:99: 54:f6:d9:fc:89:f3:bb:ca:22:1e:68:07:6a:e3:26:99:bc:fc: 1b:bc:0b:20:20:58:05:f6:29:96:16:06:46:65:4e:e0:aa:d8: 0e:ab:29:00:53:ad:0d:c3:fb:32:1e:ee:62:a2:c9:1a:36:b8: 80:b3:cb:74:09:8e:82:f5:12:29:57:f8:25:64:38:8f:cb:07: f0:e6:c5:6c:0a:92:70:33:db:4a:ab:5b:ee:e1:cc:cf:58:8e: e9:d2:04:2a:bc:b7:28:72:c5:36:6b:d2:73:b5:d4:bf:47:06: 12:88:67:10:ce:47:d0:88:b7:3e:3f:c7:16:af:f1:21:89:57: c0:c6:40:36:5a:68:9d:d9:fd:4f:cf:f6:6e:94:0f:63:12:41: 2a:f4:cb:77:cc:40:a2:87:82:b3:50:4b:6b:47:1c:bb:8a:42: 4a:b3:63:e5:d1:6f:dd:66:1c:f8:2b:ac:f3:59:6a:bd:35:be: c7:68:cc:ab:41:b9:01:f7:b5:35:c2:b1:ed:09:88:e0:eb:57: 9a:81:e7:00:b1:d2:8a:6f:1a:33:a7:a0:80:14:fc:b2:d1:d7: 33:31:88:41 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqLC19sMYtOYyTAj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ZmI3MDhjNDgtODJjMC00NDIyLWE5NzAtMmJlMmNiODE5NzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MO4iSc0yN5yC6HosNmkog99b/jyIZfMOVzk HaWqGRNcS8u0EgH3wSCWxdbdzPHL6hj0hmgUdhfcFZG5iWtSk3yhXarTuYJdCi72 6GekntD7u4XCkzLFTwlWK0roaMptpOFBFlHn6Rsg1kPnSzdOv/1WMJvYmHLeAQd5 ozrty/01vEF/YxdUlhwtllViRniNHZRHJjMMkL5K/HTW8Bg41keumVjz13sn+MFv 8IlJuIqjgxttuEhN+WgRDUNM7D+mbvaoAyhUFnEpWuwls4Idr1ISOKnJaRINT5mE W0mcFvTuQ3K3h9mZbrMO1DzgSCuKIeJrO4aIx9YHXwVrG6XIlwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAW+gxz94i8h+wLlu7wSZ/VzgaQuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvMzQyYmUwZTQtNmIyNi0z MjI5LTg4MDgtMjg2ODEyYzNhN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWMwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbBvZ87pZ/8MCbXeYSPhrZDKEgInasFJZcmOYvCU9RDWwXN5lU9tn8 ifO7yiIeaAdq4yaZvPwbvAsgIFgF9imWFgZGZU7gqtgOqykAU60Nw/syHu5ioska NriAs8t0CY6C9RIpV/glZDiPywfw5sVsCpJwM9tKq1vu4czPWI7p0gQqvLcocsU2 a9JztdS/RwYSiGcQzkfQiLc+P8cWr/EhiVfAxkA2Wmid2f1Pz/ZulA9jEkEq9Mt3 zECih4KzUEtrRxy7ikJKs2Pl0W/dZhz4K6zzWWq9Nb7HaMyrQbkB97U1wrHtCYjg 61eagecAsdKKbxozp6CAFPyy0dczMYhB -----END CERTIFICATE-----Generated at Mon Aug 4 18:36:26 2025 by rpki-client