$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa File: 401bafbe-03cc-3cac-9a44-36c27387a392.roa (raw, json) Hash identifier: erJ44tb33zeMar8ntrNEmNKo1WmoxMAYAPwjTe+qQSo= Subject key identifier: 1A:E6:DF:04:78:69:B9:62:84:63:63:B4:45:01:5C:71:53:96:58:5F Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584AC2E0E67D02A6522FE5505580 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 3384 IP address blocks: 2001:4830:c0c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e6:7d:02:a6:52:2f:e5:50:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=7df14742-9d28-40ae-a0c0-7d6728dd1bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:96:79:d3:a0:93:1c:49:08:68:ba:82:06:8c: ed:86:44:b5:17:60:8f:37:6c:e4:11:4a:a3:c4:ec: 8e:b9:44:ec:eb:22:4e:a3:d0:71:7f:11:87:72:f6: 82:76:f4:82:91:3a:52:53:9e:5f:5a:75:a4:f5:88: 13:e7:49:81:cc:e7:0f:43:dd:22:95:87:65:b5:3b: 69:82:e3:24:8f:34:c3:84:45:bd:2e:ca:6c:ca:a7: 93:91:05:0c:07:00:b2:ce:5e:39:f0:db:2e:39:77: 46:dd:7b:34:ee:0d:d3:47:97:cb:d0:8d:c1:33:1a: c1:e1:2e:cc:ee:91:90:4c:e0:1b:3b:f7:1b:82:63: 42:ad:d8:a0:00:5f:2e:d3:01:9d:ca:26:cb:59:4c: 54:da:70:f7:37:85:62:d4:cd:88:af:b7:df:81:4c: 58:16:91:27:98:87:6e:93:75:4b:2f:7a:9e:d4:b9: 6d:20:5b:6a:a0:b6:c7:1a:30:b4:a6:c1:84:05:2e: 8e:de:e8:e3:a9:36:aa:40:4f:06:8e:8c:21:28:f5: 34:72:c0:43:f5:45:60:48:c8:45:40:c1:fe:83:6d: 8d:3c:1a:54:36:45:87:1c:2f:d6:92:a3:2f:30:e3: 0b:0f:ff:c5:0d:91:13:8d:3d:a8:ec:83:c9:4d:b7: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E6:DF:04:78:69:B9:62:84:63:63:B4:45:01:5C:71:53:96:58:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv6: 2001:4830:c0c0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:3f:74:65:e3:79:c3:96:eb:3d:f8:2f:b9:dc:ac:75:47:a7: a1:9c:77:28:bb:22:53:32:90:5c:3a:c3:8a:23:b5:e1:d4:87: eb:9a:49:e2:ef:6d:ad:e7:ab:4e:6b:8e:54:69:bc:f4:4c:b8: e6:d0:f0:41:0d:63:05:4e:75:8d:40:49:ef:5f:64:dd:45:93: 60:5f:44:57:5f:dd:c1:82:d3:0b:ed:0b:2f:36:23:88:6b:7d: 84:11:c9:10:ab:8f:ca:4c:48:b1:92:72:af:73:94:4f:0b:28: 41:dc:16:46:88:e8:d8:51:9c:0c:29:cc:8f:76:86:a6:f4:fd: 04:85:ea:eb:66:d0:0e:35:f5:f9:ec:ca:1c:91:9b:6a:74:49: 88:ea:95:40:62:22:b7:72:27:4e:a2:1c:86:88:b0:72:ac:d8: 48:c1:37:d5:8e:24:ed:d6:7f:07:d3:58:5a:49:39:05:60:94: fa:6e:ca:77:d5:3b:c0:24:6a:60:8a:b9:55:81:68:03:6a:33: 4a:4e:43:45:24:8d:35:3a:42:ee:13:71:ef:63:96:c7:35:eb: 38:95:6c:d9:f8:58:49:4b:d1:a5:32:f5:d5:ea:43:92:b3:4f: db:33:5d:a3:9c:90:e8:d6:f2:4a:e1:fb:e7:41:cd:f3:4e:d8: 48:98:31:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4OZ9AqZSL+VQVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk N2RmMTQ3NDItOWQyOC00MGFlLWEwYzAtN2Q2NzI4ZGQxYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75Z506CTHEkIaLqCBozthkS1F2CPN2zkEUqj xOyOuUTs6yJOo9BxfxGHcvaCdvSCkTpSU55fWnWk9YgT50mBzOcPQ90ilYdltTtp guMkjzTDhEW9LspsyqeTkQUMBwCyzl458NsuOXdG3Xs07g3TR5fL0I3BMxrB4S7M 7pGQTOAbO/cbgmNCrdigAF8u0wGdyibLWUxU2nD3N4Vi1M2Ir7ffgUxYFpEnmIdu k3VLL3qe1LltIFtqoLbHGjC0psGEBS6O3ujjqTaqQE8GjowhKPU0csBD9UVgSMhF QMH+g22NPBpUNkWHHC/WkqMvMOMLD//FDZETjT2o7IPJTbdZYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBrm3wR4ablihGNjtEUBXHFTllhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvNDAxYmFmYmUtMDNjYy0z Y2FjLTlhNDQtMzZjMjczODdhMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIMMDA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB4/dGXjecOW6z34L7ncrHVHp6Gcdyi7IlMykFw6w4ojteHUh+ua SeLvba3nq05rjlRpvPRMuObQ8EENYwVOdY1ASe9fZN1Fk2BfRFdf3cGC0wvtCy82 I4hrfYQRyRCrj8pMSLGScq9zlE8LKEHcFkaI6NhRnAwpzI92hqb0/QSF6utm0A41 9fnsyhyRm2p0SYjqlUBiIrdyJ06iHIaIsHKs2EjBN9WOJO3WfwfTWFpJOQVglPpu ynfVO8AkamCKuVWBaANqM0pOQ0UkjTU6Qu4Tce9jlsc16ziVbNn4WElL0aUy9dXq Q5KzT9szXaOckOjW8krh++dBzfNO2EiYMeE= -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:42 2025 by rpki-client