$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/420dec1a-fe02-3e6d-b14f-4067aa8dcdba.roa File: 420dec1a-fe02-3e6d-b14f-4067aa8dcdba.roa (raw, json) Hash identifier: rze/HOsL5EfEcAcf8du5DlLciq/XqzKRl33KCfzWNLA= Subject key identifier: 04:11:4A:A8:58:71:C6:EC:7F:B3:FE:B9:07:1C:A9:7F:C1:F0:E5:7F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ABF4C8267BAF590804A5E1F40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/420dec1a-fe02-3e6d-b14f-4067aa8dcdba.roa Signing time: Mon 04 Aug 2025 18:14:19 +0000 ROA not before: Mon 04 Aug 2025 18:14:19 +0000 ROA not after: Sun 02 Nov 2025 19:14:19 +0000 asID: 46558 IP address blocks: 2607:9b80::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:4c:82:67:ba:f5:90:80:4a:5e:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 4 18:14:19 2025 GMT Not After : Nov 2 19:14:19 2025 GMT Subject: CN=d5f1fa2d-e05d-4bf3-9262-4d10dabd0200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:a1:4a:4e:69:99:bb:e4:73:2d:f7:2a:c3: 17:ba:a0:95:16:8f:73:5f:12:30:4a:de:8b:ed:36: 38:6c:ae:96:77:53:1a:79:6d:8b:69:86:6e:96:87: 55:1c:16:42:fd:23:28:19:ea:4a:66:41:3a:b0:c8: ad:84:2d:37:16:95:a0:e7:c6:a6:49:23:a7:2a:7d: 51:5a:0f:85:b3:85:e3:07:05:d6:7f:0b:5f:0a:10: 40:39:7e:81:26:93:ee:f8:8e:c6:c4:d2:86:27:90: 92:74:63:4f:5c:f6:d5:ba:08:0a:4a:e6:00:cf:37: 64:a4:c3:41:06:85:f4:97:1c:dc:fe:07:73:03:3c: d8:f8:33:2f:cf:a0:20:3c:8f:97:84:bc:d9:df:61: ee:e2:02:76:c9:60:e8:66:56:fc:25:c5:76:27:8c: e0:c6:59:0d:75:a0:eb:b5:13:bf:9f:75:d4:4f:6a: e9:a8:44:be:03:e0:a8:2e:bf:49:7c:e9:fb:ee:5d: 88:74:85:01:bc:0c:00:61:16:04:04:d6:4a:a9:93: 6a:af:74:d1:bf:d1:1a:af:01:81:8b:3e:0b:7d:7b: 6d:ba:e9:71:16:58:f5:76:6b:4c:4d:1e:4a:13:53: 07:11:e3:87:ce:6c:16:3b:63:88:6f:03:50:9e:73: ad:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:11:4A:A8:58:71:C6:EC:7F:B3:FE:B9:07:1C:A9:7F:C1:F0:E5:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/420dec1a-fe02-3e6d-b14f-4067aa8dcdba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2607:9b80::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:99:d8:38:87:ba:bb:9b:95:d4:84:c9:c5:ca:02:1f:10:03: 27:31:22:d3:90:b7:31:cf:ee:9b:f1:f1:17:cb:7a:f8:18:21: 1e:80:87:16:01:87:a9:01:ca:d0:9c:4e:63:9c:49:87:db:74: fb:bd:ae:39:41:69:89:bd:ca:10:44:80:b8:70:31:f4:d5:cc: 1a:b1:23:30:d0:3d:bb:b3:2b:ee:9f:ca:bd:49:f1:b6:1b:02: b4:3b:f4:6a:c3:49:56:a0:51:a0:96:9d:61:a3:a9:34:ed:ba: aa:3a:fe:14:64:4e:1b:47:02:f8:a4:3f:f1:80:0c:2a:8a:60: dc:1e:96:7a:cd:c8:59:1f:da:7c:91:b9:d4:18:34:e0:5a:2a: da:76:a1:4d:97:c0:9b:11:55:be:b3:78:66:7e:a9:9e:4a:a0: 42:1b:37:7f:24:c8:be:c3:b0:21:2b:f4:69:97:5d:dc:ed:89: 76:34:e4:da:38:79:6f:8b:1e:3e:30:05:0a:b7:71:83:ad:51: c6:70:aa:e5:4c:40:41:07:9d:e3:ce:3a:b8:59:ce:d9:e6:37: 86:95:84:18:cd:d8:e3:d0:00:d5:08:c5:a4:61:6e:2f:1b:10: 40:2d:30:2e:54:00:ee:b1:45:9d:b9:dd:88:86:d1:1c:36:ad: 1a:26:90:3c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq/TIJnuvWQgEpeH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwNDE4MTQxOVoXDTI1MTEwMjE5MTQxOVowLzEtMCsGA1UEAxMk ZDVmMWZhMmQtZTA1ZC00YmYzLTkyNjItNGQxMGRhYmQwMjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFahSk5pmbvkcy33KsMXuqCVFo9zXxIwSt6L 7TY4bK6Wd1MaeW2LaYZulodVHBZC/SMoGepKZkE6sMithC03FpWg58amSSOnKn1R Wg+Fs4XjBwXWfwtfChBAOX6BJpPu+I7GxNKGJ5CSdGNPXPbVuggKSuYAzzdkpMNB BoX0lxzc/gdzAzzY+DMvz6AgPI+XhLzZ32Hu4gJ2yWDoZlb8JcV2J4zgxlkNdaDr tRO/n3XUT2rpqES+A+CoLr9JfOn77l2IdIUBvAwAYRYEBNZKqZNqr3TRv9EarwGB iz4LfXttuulxFlj1dmtMTR5KE1MHEeOHzmwWO2OIbwNQnnOthwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAQRSqhYccbsf7P+uQccqX/B8OV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDIwZGVjMWEtZmUwMi0z ZTZkLWIxNGYtNDA2N2FhOGRjZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgebgAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALpnYOIe6u5uV1ITJxcoCHxADJzEi05C3Mc/um/HxF8t6+BghHoCH FgGHqQHK0JxOY5xJh9t0+72uOUFpib3KEESAuHAx9NXMGrEjMNA9u7Mr7p/KvUnx thsCtDv0asNJVqBRoJadYaOpNO26qjr+FGROG0cC+KQ/8YAMKopg3B6Wes3IWR/a fJG51Bg04Foq2nahTZfAmxFVvrN4Zn6pnkqgQhs3fyTIvsOwISv0aZdd3O2JdjTk 2jh5b4sePjAFCrdxg61RxnCq5UxAQQed4846uFnO2eY3hpWEGM3Y49AA1QjFpGFu LxsQQC0wLlQA7rFFnbndiIbRHDatGiaQPA== -----END CERTIFICATE-----Generated at Fri Aug 8 12:49:10 2025 by rpki-client