$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/c79fa6a2-7d36-310a-b63c-928c510a3373.roa File: c79fa6a2-7d36-310a-b63c-928c510a3373.roa (raw, json) Hash identifier: 5NkhgtsLKWD/7f063Ky9CYm19kpM13OjrLMug1ezw4Q= Subject key identifier: B1:E8:C9:52:60:9C:EE:BB:43:5D:05:AA:EA:2B:38:DF:D2:00:9A:67 Certificate issuer: /CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3 Certificate serial: 010D0C9F4328584AA160D0FEA0A06A014BC84A40 Authority key identifier: 02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/c79fa6a2-7d36-310a-b63c-928c510a3373.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 11708 IP address blocks: 2605:b080::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d0:fe:a0:a0:6a:01:4b:c8:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=3cc53b36-25c0-45c1-a7f8-0c743a1bd04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:50:ed:c5:ee:e0:77:6c:92:ba:f5:0e:b3: 99:8b:db:e0:64:ef:b8:14:00:80:ab:e9:3d:54:8b: e4:cf:34:be:a3:98:02:3d:52:13:ba:0a:81:f6:10: 12:e6:7d:94:3d:8e:9d:47:28:dc:39:9b:84:a2:d4: 17:a0:d6:45:40:36:a0:f3:f5:87:3b:4d:00:42:27: 47:fb:b6:64:93:cf:5f:8c:d9:93:ed:5a:dd:9b:73: 20:34:85:77:67:b7:d6:67:aa:b8:d9:ea:0f:ed:ab: 51:1c:b1:29:86:4f:f7:2c:37:24:7e:26:f5:09:ca: e9:5c:44:f1:90:ad:7b:ae:8a:27:5e:75:c8:b1:f9: 91:db:8f:73:13:c6:de:42:f6:00:4a:13:10:65:82: f1:1e:a7:1b:bc:09:ee:4b:c1:4f:e8:84:c8:e2:61: 4e:da:31:00:4e:09:a5:1b:06:d7:26:4f:48:3b:cd: 5e:5a:c8:6e:a0:35:20:da:75:1f:37:8a:9b:21:95: 3b:84:23:b3:46:fb:d1:1a:65:6a:69:c6:57:db:d9: 60:35:e5:10:e3:66:91:08:2a:ca:93:93:61:d8:cf: be:99:00:8b:e8:eb:a7:e2:f2:b5:df:eb:fe:46:59: 4e:a4:31:62:a6:59:fa:ee:72:51:b8:5c:4f:59:c4: 1c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E8:C9:52:60:9C:EE:BB:43:5D:05:AA:EA:2B:38:DF:D2:00:9A:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/c79fa6a2-7d36-310a-b63c-928c510a3373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl X509v3 Authority Key Identifier: keyid:02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer sbgp-ipAddrBlock: critical IPv6: 2605:b080::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:41:dc:c5:2b:3d:f4:91:91:5c:73:73:d6:16:eb:ac:05:26: 38:8a:9e:92:e9:15:84:c3:6b:b3:08:4f:20:34:20:4f:9b:44: bf:ab:0b:3f:88:15:7a:89:e2:30:a9:b4:70:28:72:91:97:7e: 92:0c:4a:31:cc:bf:a2:97:ad:28:38:6e:bc:7c:58:67:35:b8: c1:f8:81:1a:e4:16:06:03:c8:6a:ac:41:da:37:1f:3f:71:84: 87:19:26:d2:01:c6:05:22:11:fd:77:f0:00:a2:33:6b:5d:6c: 01:5b:d8:11:ee:ad:33:58:c4:eb:a4:7c:96:68:dd:68:44:4e: b7:ef:b2:61:09:75:4c:17:c9:a0:88:3b:63:0b:68:c9:2a:77: 18:be:8f:dd:9e:ba:69:f0:3f:e5:8d:83:55:de:48:41:9e:16: 4c:f6:fb:4d:25:7e:38:ed:29:69:98:82:0a:cc:18:73:b4:24: 20:11:b2:c7:a2:c6:d8:ce:68:bb:d4:e9:ff:f0:24:d9:51:7e: e4:ce:9f:0d:cd:45:1a:69:52:9a:60:5e:ae:b4:af:b5:60:91: 7b:22:8e:66:fa:2c:ce:81:a4:7c:26:b8:b7:f9:45:59:88:b7: 0a:9b:7d:3d:49:cb:49:8c:38:3e:d9:dc:19:db:a6:40:48:a4: 26:a4:2e:c3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqhYND+oKBqAUvISkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA3ZThjNzUtNzVlNC00NjRjLTg4YzAtMGY4YzZkODc1 N2EzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk M2NjNTNiMzYtMjVjMC00NWMxLWE3ZjgtMGM3NDNhMWJkMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomFQ7cXu4Hdskrr1DrOZi9vgZO+4FACAq+k9 VIvkzzS+o5gCPVITugqB9hAS5n2UPY6dRyjcOZuEotQXoNZFQDag8/WHO00AQidH +7Zkk89fjNmT7Vrdm3MgNIV3Z7fWZ6q42eoP7atRHLEphk/3LDckfib1CcrpXETx kK17roonXnXIsfmR249zE8beQvYAShMQZYLxHqcbvAnuS8FP6ITI4mFO2jEATgml GwbXJk9IO81eWshuoDUg2nUfN4qbIZU7hCOzRvvRGmVqacZX29lgNeUQ42aRCCrK k5Nh2M++mQCL6Oun4vK13+v+RllOpDFipln67nJRuFxPWcQcYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLHoyVJgnO67Q10FquorON/SAJpnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDdl OGM3NS03NWU0LTQ2NGMtODhjMC0wZjhjNmQ4NzU3YTMvYzc5ZmE2YTItN2QzNi0z MTBhLWI2M2MtOTI4YzUxMGEzMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDA3ZThjNzUtNzVlNC00NjRjLTg4 YzAtMGY4YzZkODc1N2EzL2QwN2U4Yzc1LTc1ZTQtNDY0Yy04OGMwLTBmOGM2ZDg3 NTdhMy5jcmwwHwYDVR0jBBgwFoAUAjwHSGYDD0Ag9gR4pn9ZKBTI9OgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDdlOGM3NS03NWU0LTQ2NGMtODhjMC0wZjhj NmQ4NzU3YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWwgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQQdzFKz30kZFcc3PWFuusBSY4ip6S6RWEw2uzCE8gNCBPm0S/qws/ iBV6ieIwqbRwKHKRl36SDEoxzL+il60oOG68fFhnNbjB+IEa5BYGA8hqrEHaNx8/ cYSHGSbSAcYFIhH9d/AAojNrXWwBW9gR7q0zWMTrpHyWaN1oRE6377JhCXVMF8mg iDtjC2jJKncYvo/dnrpp8D/ljYNV3khBnhZM9vtNJX447SlpmIIKzBhztCQgEbLH osbYzmi71On/8CTZUX7kzp8NzUUaaVKaYF6utK+1YJF7Io5m+izOgaR8Jri3+UVZ iLcKm309SctJjDg+2dwZ26ZASKQmpC7D -----END CERTIFICATE-----Generated at Mon Aug 4 14:43:53 2025 by rpki-client