$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/887e3efc-0de1-3597-97eb-7d1d2623f258.roa File: 887e3efc-0de1-3597-97eb-7d1d2623f258.roa (raw, json) Hash identifier: uQ1pzR/uLPhbc8v/41Gos+sw/upvLC771MHdJn8tPq0= Subject key identifier: 4F:C8:41:17:58:A9:0D:AE:33:15:C9:5C:2A:D2:06:AF:5D:12:7C:D5 Certificate issuer: /CN=5ad08772-ee15-4587-860d-5bbe7077c592 Certificate serial: 010D0C9F4328584A85093310D573D7D60BA53280 Authority key identifier: 8E:1A:E4:0F:32:6B:F7:79:01:18:BB:2E:E5:8B:26:2E:AF:4E:C8:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/887e3efc-0de1-3597-97eb-7d1d2623f258.roa Signing time: Mon 14 Jul 2025 21:21:49 +0000 ROA not before: Mon 14 Jul 2025 21:21:49 +0000 ROA not after: Sun 12 Oct 2025 21:21:49 +0000 asID: 3356 IP address blocks: 2620:13d:2060::/48 maxlen: 48 2620:13d:2061::/48 maxlen: 48 2620:13d:2062::/48 maxlen: 48 2620:13d:2063::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/5ad08772-ee15-4587-860d-5bbe7077c592.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/5ad08772-ee15-4587-860d-5bbe7077c592.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:09:33:10:d5:73:d7:d6:0b:a5:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad08772-ee15-4587-860d-5bbe7077c592 Validity Not Before: Jul 14 21:21:49 2025 GMT Not After : Oct 12 21:21:49 2025 GMT Subject: CN=1c25bba8-09a3-4e64-aad9-83a162d15d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:8c:64:3b:ad:fe:0d:61:1b:52:f4:df:1c: 74:e6:75:cd:f2:84:13:b7:35:c0:10:32:88:f4:c0: 0a:ff:92:91:4e:f5:a5:55:1a:40:1a:ef:1c:51:22: fd:19:94:25:2c:61:c3:c1:0f:ad:04:af:09:d3:8a: 60:29:d0:15:4c:a5:0d:e9:1d:48:17:66:ba:5e:c1: 18:d2:60:65:12:8f:e2:90:81:10:71:84:6f:85:ef: 7a:ef:2a:1a:40:53:e1:12:7a:b0:13:21:2e:a4:da: 0b:12:49:70:d0:c0:5d:15:ed:18:c4:a1:7f:6e:90: 3e:c4:30:80:2e:3c:ec:c1:e8:b6:de:77:f0:13:25: 8a:4c:6c:4d:59:69:7e:90:e8:f0:c7:d8:cb:33:1d: 22:1b:47:75:37:25:35:f3:90:2f:b6:fa:8c:a6:7c: 3a:ca:e1:f5:5e:37:ca:e4:4a:3e:ca:08:59:be:71: 9c:0a:ce:34:cc:fa:3b:07:07:ad:51:31:5d:75:48: 80:c5:7d:ac:20:37:e6:92:db:19:69:91:3d:bf:38: 06:e4:96:12:e8:a6:7f:f9:45:74:7b:2a:ab:54:d2: 57:6a:93:0f:0d:b6:6c:54:b9:0b:37:a3:4d:f1:da: ed:70:d1:65:b7:fa:78:6c:81:30:e8:3e:ae:76:78: 87:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C8:41:17:58:A9:0D:AE:33:15:C9:5C:2A:D2:06:AF:5D:12:7C:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/887e3efc-0de1-3597-97eb-7d1d2623f258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/5ad08772-ee15-4587-860d-5bbe7077c592.crl X509v3 Authority Key Identifier: keyid:8E:1A:E4:0F:32:6B:F7:79:01:18:BB:2E:E5:8B:26:2E:AF:4E:C8:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592.cer sbgp-ipAddrBlock: critical IPv6: 2620:13d:2060::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:3f:70:5c:e9:93:37:6e:c5:b5:82:5f:7e:41:fb:38:ec:a6: 06:a0:96:09:c1:0a:c1:cd:f0:40:72:6b:81:4a:fd:24:b9:ad: d0:3f:bb:5e:6f:7a:e8:96:51:6c:f8:ea:43:b0:a8:d9:21:f7: 33:f0:de:d2:5d:da:dd:49:22:7d:dd:4f:47:82:65:20:38:a0: 23:02:1c:da:c9:f0:cd:0b:dd:6e:5d:8c:ea:75:76:0f:1d:e3: 08:8c:b4:78:11:ae:27:fb:2d:85:22:86:2e:47:ae:c2:73:7c: 28:a9:cd:e6:f5:f8:57:19:b8:c1:82:de:6f:58:eb:51:9e:27: b9:65:a4:17:c8:fb:b8:9f:eb:63:4a:25:e9:5e:d3:58:ce:ce: 3f:53:ac:14:7d:c3:94:be:33:00:c6:b6:c6:7d:f7:f8:83:e7: 77:f2:b4:64:90:92:62:17:37:58:40:a6:84:98:48:d7:5d:9d: 96:5b:a7:72:b6:1a:b9:c2:cf:e7:7e:f4:d1:45:65:ec:f9:3e: 43:d0:3e:37:d3:05:26:0c:35:20:39:a3:7e:e8:c3:d8:73:bf: 97:5b:b2:ad:97:93:05:9f:78:48:20:60:3e:d4:7c:18:7e:b6: 4a:4a:67:df:f3:89:e9:ba:e6:af:3b:62:3c:8c:97:7e:1b:12: ed:94:f4:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqFCTMQ1XPX1gulMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkMDg3NzItZWUxNS00NTg3LTg2MGQtNWJiZTcwNzdj NTkyMB4XDTI1MDcxNDIxMjE0OVoXDTI1MTAxMjIxMjE0OVowLzEtMCsGA1UEAxMk MWMyNWJiYTgtMDlhMy00ZTY0LWFhZDktODNhMTYyZDE1ZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZaMZDut/g1hG1L03xx05nXN8oQTtzXAEDKI 9MAK/5KRTvWlVRpAGu8cUSL9GZQlLGHDwQ+tBK8J04pgKdAVTKUN6R1IF2a6XsEY 0mBlEo/ikIEQcYRvhe967yoaQFPhEnqwEyEupNoLEklw0MBdFe0YxKF/bpA+xDCA Ljzswei23nfwEyWKTGxNWWl+kOjwx9jLMx0iG0d1NyU185AvtvqMpnw6yuH1XjfK 5Eo+yghZvnGcCs40zPo7BwetUTFddUiAxX2sIDfmktsZaZE9vzgG5JYS6KZ/+UV0 eyqrVNJXapMPDbZsVLkLN6NN8drtcNFlt/p4bIEw6D6udniHOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE/IQRdYqQ2uMxXJXCrSBq9dEnzVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81YWQw ODc3Mi1lZTE1LTQ1ODctODYwZC01YmJlNzA3N2M1OTIvODg3ZTNlZmMtMGRlMS0z NTk3LTk3ZWItN2QxZDI2MjNmMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWFkMDg3NzItZWUxNS00NTg3LTg2 MGQtNWJiZTcwNzdjNTkyLzVhZDA4NzcyLWVlMTUtNDU4Ny04NjBkLTViYmU3MDc3 YzU5Mi5jcmwwHwYDVR0jBBgwFoAUjhrkDzJr93kBGLsu5YsmLq9OyI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81YWQwODc3Mi1lZTE1LTQ1ODctODYwZC01YmJl NzA3N2M1OTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiABPSBg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAII/cFzpkzduxbWCX35B+zjspgaglgnBCsHN8EBya4FK/SS5rdA/ u15veuiWUWz46kOwqNkh9zPw3tJd2t1JIn3dT0eCZSA4oCMCHNrJ8M0L3W5djOp1 dg8d4wiMtHgRrif7LYUihi5HrsJzfCipzeb1+FcZuMGC3m9Y61GeJ7llpBfI+7if 62NKJele01jOzj9TrBR9w5S+MwDGtsZ99/iD53fytGSQkmIXN1hApoSYSNddnZZb p3K2GrnCz+d+9NFFZez5PkPQPjfTBSYMNSA5o37ow9hzv5dbsq2XkwWfeEggYD7U fBh+tkpKZ9/ziem65q87YjyMl34bEu2U9Fs= -----END CERTIFICATE-----Generated at Sat Aug 9 23:22:03 2025 by rpki-client