$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1d14de3b-9052-38e2-bd6c-d3c9ff427266.roa File: 1d14de3b-9052-38e2-bd6c-d3c9ff427266.roa (raw, json) Hash identifier: 1EwshY6W8pI03yag2bgjGjLUM7xvs4QwvmV5mqdhzko= Subject key identifier: 49:3E:47:07:3E:EA:2D:AD:AA:2E:60:04:1C:FC:36:3E:46:83:AD:C8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ABF4C90F147210D6387424D00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1d14de3b-9052-38e2-bd6c-d3c9ff427266.roa Signing time: Mon 04 Aug 2025 18:14:26 +0000 ROA not before: Mon 04 Aug 2025 18:14:26 +0000 ROA not after: Sun 02 Nov 2025 19:14:26 +0000 asID: 46558 IP address blocks: 2607:9b80:a00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:4c:90:f1:47:21:0d:63:87:42:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 4 18:14:26 2025 GMT Not After : Nov 2 19:14:26 2025 GMT Subject: CN=d0a3506c-694b-4131-87e3-d723edce35c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:ca:2f:46:ad:fe:4e:1a:5a:d8:4c:8a:ae: cd:fb:69:7c:1b:49:c3:7a:80:b7:8f:cc:03:e0:fd: a3:a0:16:5c:0f:d9:6a:71:22:1f:18:47:44:81:8e: 03:44:c4:d2:01:69:31:d4:48:4e:c5:15:da:03:5e: e4:31:2d:a0:2b:1b:f6:1c:40:82:66:f5:fa:10:b5: e1:69:aa:5d:ec:07:67:57:c0:4c:17:03:f7:c7:44: 78:38:5d:19:ca:93:d0:54:e1:8a:83:cf:28:e8:0f: 14:a6:97:cb:1d:5c:d0:98:bb:4e:da:04:07:57:be: fd:0e:a9:cf:08:2c:3f:f5:f5:3b:77:74:cd:bb:85: a0:55:01:33:24:1f:72:92:5f:41:5c:b0:a0:48:4c: 8b:37:0a:a9:86:af:08:a3:fd:49:b1:ab:a6:80:29: 55:ce:25:a8:c0:36:12:44:74:ba:f2:26:8d:67:e2: 58:ad:e3:d0:db:0a:f8:7e:5b:b4:f4:1d:73:c6:55: b1:84:0e:8b:92:a4:23:89:b5:92:a8:e8:60:93:1a: 2e:8a:5f:79:e9:1f:c8:43:fc:3a:1b:f6:2a:0c:8c: 89:cc:da:22:f7:ee:a8:61:a3:90:77:c1:62:b9:a1: 6e:59:5c:6e:be:aa:63:93:10:c2:1a:c2:2b:9b:5f: 8f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3E:47:07:3E:EA:2D:AD:AA:2E:60:04:1C:FC:36:3E:46:83:AD:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1d14de3b-9052-38e2-bd6c-d3c9ff427266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2607:9b80:a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:15:b8:a3:66:7e:c9:8e:54:80:ca:30:9a:34:8a:82:29:35: a3:71:1a:52:b6:b8:22:f4:b1:5d:01:c1:58:a5:61:2b:04:8a: 4e:92:00:33:2f:e7:4a:d7:58:a2:83:08:83:f5:84:e6:13:bc: 4f:dc:29:a1:42:6e:3d:1e:05:95:14:ff:59:de:09:7e:42:b7: 2d:da:17:05:3c:28:ff:0c:5e:06:da:d4:de:95:55:ad:ac:a6: a8:ea:ca:50:a0:dc:27:b5:0b:3c:00:a3:28:86:c4:93:d7:61: c2:0a:91:f8:6e:42:7e:30:0b:b8:2c:88:21:d3:bb:cf:49:be: a6:0a:ff:8c:ff:ba:77:2b:f0:b7:41:fa:c7:1b:5a:7b:a4:c2: f3:68:52:34:9b:f8:18:22:39:10:c3:6f:c3:bf:ae:ff:67:28: 7e:6b:26:a4:6a:c2:8d:95:2c:46:43:b7:1d:07:17:e2:c0:7e: 76:4b:29:ba:29:ee:d7:b5:5b:2d:30:ea:81:9d:b0:18:04:d3: cb:0b:10:da:f4:45:86:0c:b3:68:7d:06:cd:51:56:d8:4c:52: ed:d6:69:ff:42:ed:e2:f8:8c:0d:55:18:dc:23:36:f2:56:a4: d8:c4:73:5a:1b:97:be:42:81:28:c9:20:34:ba:46:6f:a0:e5: 9a:93:d7:00 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq/TJDxRyENY4dCTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwNDE4MTQyNloXDTI1MTEwMjE5MTQyNlowLzEtMCsGA1UEAxMk ZDBhMzUwNmMtNjk0Yi00MTMxLTg3ZTMtZDcyM2VkY2UzNWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+zKL0at/k4aWthMiq7N+2l8G0nDeoC3j8wD 4P2joBZcD9lqcSIfGEdEgY4DRMTSAWkx1EhOxRXaA17kMS2gKxv2HECCZvX6ELXh aapd7AdnV8BMFwP3x0R4OF0ZypPQVOGKg88o6A8UppfLHVzQmLtO2gQHV779DqnP CCw/9fU7d3TNu4WgVQEzJB9ykl9BXLCgSEyLNwqphq8Io/1JsaumgClVziWowDYS RHS68iaNZ+JYrePQ2wr4flu09B1zxlWxhA6LkqQjibWSqOhgkxouil956R/IQ/w6 G/YqDIyJzNoi9+6oYaOQd8FiuaFuWVxuvqpjkxDCGsIrm1+PdQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEk+Rwc+6i2tqi5gBBz8Nj5Gg63IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWQxNGRlM2ItOTA1Mi0z OGUyLWJkNmMtZDNjOWZmNDI3MjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgebgAow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEArRW4o2Z+yY5UgMowmjSKgik1o3EaUra4IvSxXQHBWKVhKwSKTpIA My/nStdYooMIg/WE5hO8T9wpoUJuPR4FlRT/Wd4JfkK3LdoXBTwo/wxeBtrU3pVV raymqOrKUKDcJ7ULPACjKIbEk9dhwgqR+G5CfjALuCyIIdO7z0m+pgr/jP+6dyvw t0H6xxtae6TC82hSNJv4GCI5EMNvw7+u/2cofmsmpGrCjZUsRkO3HQcX4sB+dksp uinu17VbLTDqgZ2wGATTywsQ2vRFhgyzaH0GzVFW2ExS7dZp/0Lt4viMDVUY3CM2 8lak2MRzWhuXvkKBKMkgNLpGb6DlmpPXAA== -----END CERTIFICATE-----Generated at Fri Aug 8 12:49:18 2025 by rpki-client