$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa File: 8a3d4aac-7add-344d-a542-a96f905f7cdc.roa (raw, json) Hash identifier: liHVQrhSI+c4vcW/iDxu5pIH5fJnqpPgAssQRrQl57Q= Subject key identifier: A4:0F:8B:6F:86:05:1D:8B:6C:BA:72:58:CD:74:F2:7D:C2:87:0A:24 Certificate issuer: /CN=331beef2-1596-4a21-8613-1e84adac3bfc Certificate serial: 010D0C9F4328584AB3DB31BF66A5131B022C94E0 Authority key identifier: 3B:E4:68:FF:DA:73:F9:C2:E4:D5:7B:A3:9B:D2:15:B6:13:68:91:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa Signing time: Thu 31 Jul 2025 15:52:06 +0000 ROA not before: Thu 31 Jul 2025 15:52:06 +0000 ROA not after: Wed 29 Oct 2025 15:52:06 +0000 asID: 3359 IP address blocks: 2620:101:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:db:31:bf:66:a5:13:1b:02:2c:94:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331beef2-1596-4a21-8613-1e84adac3bfc Validity Not Before: Jul 31 15:52:06 2025 GMT Not After : Oct 29 15:52:06 2025 GMT Subject: CN=3359058d-892f-46f8-a2e1-a073d40c552a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:64:b5:c9:e5:fa:94:02:6c:d5:b9:33:18: cd:b3:16:0b:27:67:90:f6:ef:77:b4:45:6c:f2:ef: 3d:49:a6:ac:10:1f:5c:d1:ae:09:63:55:c9:d8:f8: 8c:77:d2:81:cd:57:f2:ee:a7:e2:bd:47:c8:98:fa: 4d:4d:79:e4:de:1d:24:a2:89:00:d8:3d:7b:56:3b: f7:36:e9:57:d0:fc:fd:73:87:55:d4:ea:90:d9:c4: d8:34:72:f9:05:5d:b3:ee:dd:86:a7:45:3e:a9:ed: 53:4d:1c:6d:17:a7:0e:4a:1d:ae:fe:73:76:fe:bd: 48:85:aa:3f:f1:38:f9:6b:a4:3f:3b:15:25:9b:bb: c5:38:82:7e:f4:bd:f9:d1:22:fc:a2:58:9f:0b:23: 90:51:57:2b:f8:6f:97:f7:ef:65:58:5b:ee:1c:e1: 3c:86:77:35:12:57:9f:64:18:4a:1a:5a:9c:dc:ba: 96:a6:3e:94:ca:cc:4d:d9:43:23:70:89:b2:b8:18: f2:bc:ff:7d:e4:5b:6a:96:bd:d3:45:e4:38:ed:e6: f6:aa:d1:29:27:1e:2e:fd:81:de:b7:c7:e6:1c:19: 3a:36:43:bb:dc:a8:88:ac:fc:69:4d:42:21:64:b6: 52:fa:1e:c7:6e:3d:2b:6d:60:64:5e:41:33:e8:6d: 51:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0F:8B:6F:86:05:1D:8B:6C:BA:72:58:CD:74:F2:7D:C2:87:0A:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.crl X509v3 Authority Key Identifier: keyid:3B:E4:68:FF:DA:73:F9:C2:E4:D5:7B:A3:9B:D2:15:B6:13:68:91:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:c000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:84:19:d0:88:c8:a6:55:1a:5d:6b:c0:83:d3:fa:f2:28:e6: 71:8e:d4:89:c3:80:a0:0c:6e:dd:ad:ae:fa:d5:8b:eb:5d:eb: c9:93:5e:03:2f:87:db:19:26:eb:fa:6d:f3:1b:2f:14:ce:a1: 6f:c1:bd:1f:56:09:f5:23:08:f3:f5:fc:bc:9e:63:79:1a:aa: bf:2d:cd:ee:d4:f0:31:5b:45:bd:be:98:a4:33:2a:fe:a2:90: 43:f8:b2:f3:2c:2d:68:ff:eb:e1:7b:fc:7b:1e:c7:7e:84:77: 0e:11:6b:70:b7:19:b6:9f:4c:c4:37:5b:7b:e8:5d:26:0c:95: 50:3c:39:a1:a5:b3:34:af:d1:98:c9:5f:02:9c:f1:b7:6c:0a: 75:67:41:b0:77:f7:b7:a2:3b:d0:1b:6e:e8:a0:71:e4:80:27: ca:ce:db:37:41:ae:67:ce:ce:23:e7:64:a9:40:dd:51:17:06: 73:fb:fa:86:3e:15:20:1b:25:cb:12:0f:a3:62:52:57:f7:79: 37:70:20:8e:8e:20:ea:51:d8:75:e8:10:b4:ef:9f:eb:f0:a9: bb:fa:42:ea:41:54:2d:d7:8f:5d:fc:25:8f:a5:0d:8a:a5:21: da:ae:5c:b0:0e:80:46:7a:f3:2a:79:d3:f2:9b:85:9d:5f:9d: 9a:c4:09:b1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqz2zG/ZqUTGwIslOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzMxYmVlZjItMTU5Ni00YTIxLTg2MTMtMWU4NGFkYWMz YmZjMB4XDTI1MDczMTE1NTIwNloXDTI1MTAyOTE1NTIwNlowLzEtMCsGA1UEAxMk MzM1OTA1OGQtODkyZi00NmY4LWEyZTEtYTA3M2Q0MGM1NTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCpktcnl+pQCbNW5MxjNsxYLJ2eQ9u93tEVs 8u89SaasEB9c0a4JY1XJ2PiMd9KBzVfy7qfivUfImPpNTXnk3h0kookA2D17Vjv3 NulX0Pz9c4dV1OqQ2cTYNHL5BV2z7t2Gp0U+qe1TTRxtF6cOSh2u/nN2/r1Ihao/ 8Tj5a6Q/OxUlm7vFOIJ+9L350SL8olifCyOQUVcr+G+X9+9lWFvuHOE8hnc1Elef ZBhKGlqc3LqWpj6UysxN2UMjcImyuBjyvP995Ftqlr3TReQ47eb2qtEpJx4u/YHe t8fmHBk6NkO73KiIrPxpTUIhZLZS+h7Hbj0rbWBkXkEz6G1RuwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKQPi2+GBR2LbLpyWM108n3ChwokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zMzFi ZWVmMi0xNTk2LTRhMjEtODYxMy0xZTg0YWRhYzNiZmMvOGEzZDRhYWMtN2FkZC0z NDRkLWE1NDItYTk2ZjkwNWY3Y2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzMxYmVlZjItMTU5Ni00YTIxLTg2 MTMtMWU4NGFkYWMzYmZjLzMzMWJlZWYyLTE1OTYtNGEyMS04NjEzLTFlODRhZGFj M2JmYy5jcmwwHwYDVR0jBBgwFoAUO+Ro/9pz+cLk1Xujm9IVthNokZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zMzFiZWVmMi0xNTk2LTRhMjEtODYxMy0xZTg0 YWRhYzNiZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABAcAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFYQZ0IjIplUaXWvAg9P68ijmcY7UicOAoAxu3a2u+tWL613ryZNe Ay+H2xkm6/pt8xsvFM6hb8G9H1YJ9SMI8/X8vJ5jeRqqvy3N7tTwMVtFvb6YpDMq /qKQQ/iy8ywtaP/r4Xv8ex7HfoR3DhFrcLcZtp9MxDdbe+hdJgyVUDw5oaWzNK/R mMlfApzxt2wKdWdBsHf3t6I70Btu6KBx5IAnys7bN0GuZ87OI+dkqUDdURcGc/v6 hj4VIBslyxIPo2JSV/d5N3Agjo4g6lHYdegQtO+f6/Cpu/pC6kFULdePXfwlj6UN iqUh2q5csA6ARnrzKnnT8puFnV+dmsQJsQ== -----END CERTIFICATE-----Generated at Tue Aug 12 22:42:08 2025 by rpki-client