$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/493b5042-cf83-3dc7-97be-ac05ec09cd0a.roa File: 493b5042-cf83-3dc7-97be-ac05ec09cd0a.roa (raw, json) Hash identifier: ucDgt+TYvxoRF9/eM2m20zz/2JstxpE/h3iJSyEZFTE= Subject key identifier: 42:51:6F:27:9B:9C:92:10:79:DD:E9:EA:D7:64:78:D7:50:28:21:33 Certificate issuer: /CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f Certificate serial: 010D0C9F4328584AC486744FB8590B96148B3480 Authority key identifier: 13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/493b5042-cf83-3dc7-97be-ac05ec09cd0a.roa Signing time: Wed 06 Aug 2025 15:10:06 +0000 ROA not before: Wed 06 Aug 2025 15:10:06 +0000 ROA not after: Tue 04 Nov 2025 16:10:06 +0000 asID: 25635 IP address blocks: 2605:5640:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:86:74:4f:b8:59:0b:96:14:8b:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f Validity Not Before: Aug 6 15:10:06 2025 GMT Not After : Nov 4 16:10:06 2025 GMT Subject: CN=9a5b1aca-7a1a-4387-b032-c12312c14608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:58:00:c1:87:53:fe:d4:bc:d4:f3:97:29: 9e:18:63:a8:29:aa:d9:c3:11:c7:bd:19:97:05:c4: 1c:ba:2b:a7:38:24:99:b9:d3:f0:84:63:df:bd:a5: 8d:0c:82:db:f2:b0:f6:b0:f6:c7:97:a9:20:a1:91: 36:de:fc:70:e8:50:37:f3:0c:0e:30:85:2a:d2:69: 8e:11:34:88:7c:7e:0b:77:ab:23:66:2f:0f:9a:50: 35:3c:f9:71:37:e3:de:2b:a6:5d:a0:97:45:fc:25: 77:63:44:0c:8b:52:31:d1:b6:4a:b8:94:d4:fe:18: 56:7a:05:10:74:a7:22:fd:50:0d:47:41:f9:b7:92: 8e:93:7e:09:7b:92:4c:da:9c:67:6e:41:69:bb:c1: fc:56:ac:71:ff:0a:5a:a8:87:dd:6a:c8:50:60:3d: c4:77:da:af:b8:91:e0:b4:cf:ef:3d:23:37:5a:2c: a0:dc:47:b5:3d:b7:d1:85:b3:7b:4c:e4:f6:c4:d7: 59:8d:6c:49:00:4f:c1:ee:4f:84:a2:23:c5:5c:dd: cb:8f:90:13:77:06:c6:07:cc:18:87:16:3b:e7:ec: 4b:b1:00:22:17:29:96:50:70:67:6f:a1:c1:a3:d0: 92:84:78:cf:d8:33:49:97:09:ef:cc:f2:e7:d5:3e: 2a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:51:6F:27:9B:9C:92:10:79:DD:E9:EA:D7:64:78:D7:50:28:21:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/493b5042-cf83-3dc7-97be-ac05ec09cd0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl X509v3 Authority Key Identifier: keyid:13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer sbgp-ipAddrBlock: critical IPv6: 2605:5640:3000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b4:d2:4f:80:32:e8:96:2b:45:81:20:62:df:6e:6b:e1:47: 06:f8:92:55:29:bb:3a:59:53:16:8f:08:81:45:91:17:fa:d1: 00:04:fe:46:83:12:27:59:ef:8d:74:d1:aa:92:a4:39:40:5d: fa:79:79:d8:0a:69:0f:9d:bf:dd:b9:5e:41:22:52:52:89:e3: 6f:fb:79:6e:b8:b8:ad:5a:8a:4f:9a:a6:09:a9:b1:28:8b:14: 6e:8b:28:ec:f5:e3:2b:bd:53:36:d9:e3:90:f2:81:49:55:ae: 31:13:3b:25:5c:27:3e:9a:89:5d:0f:33:a3:25:a2:05:de:85: 39:75:97:8b:49:fc:05:93:92:04:2a:ec:85:af:96:74:68:fa: 70:48:e6:0c:2a:da:a6:92:db:85:4d:a0:29:47:82:77:52:8a: 56:d4:f8:01:b4:1d:7d:d6:90:cf:c4:47:e4:3d:0a:81:aa:0f: 33:33:d1:5d:21:69:27:80:e7:aa:07:5a:6c:02:d7:da:09:b3: 85:74:6b:2d:ba:02:c6:3c:23:bc:26:a0:fe:9f:54:02:80:a9: e0:e8:a2:5f:b4:58:3c:b8:ee:58:b5:c9:b6:25:1b:a9:90:af: 0d:01:57:7e:50:10:34:8a:69:6b:77:22:8f:ce:0e:07:80:20: 86:42:44:e2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErEhnRPuFkLlhSLNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMxYTQ2M2MtYTBjZC00MTBhLThhYWItMGZhZGZlOTdj NjlmMB4XDTI1MDgwNjE1MTAwNloXDTI1MTEwNDE2MTAwNlowLzEtMCsGA1UEAxMk OWE1YjFhY2EtN2ExYS00Mzg3LWIwMzItYzEyMzEyYzE0NjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw1YAMGHU/7UvNTzlymeGGOoKarZwxHHvRmX BcQcuiunOCSZudPwhGPfvaWNDILb8rD2sPbHl6kgoZE23vxw6FA38wwOMIUq0mmO ETSIfH4Ld6sjZi8PmlA1PPlxN+PeK6ZdoJdF/CV3Y0QMi1Ix0bZKuJTU/hhWegUQ dKci/VANR0H5t5KOk34Je5JM2pxnbkFpu8H8Vqxx/wpaqIfdashQYD3Ed9qvuJHg tM/vPSM3Wiyg3Ee1PbfRhbN7TOT2xNdZjWxJAE/B7k+EoiPFXN3Lj5ATdwbGB8wY hxY75+xLsQAiFymWUHBnb6HBo9CShHjP2DNJlwnvzPLn1T4qkQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEJRbyebnJIQed3p6tdkeNdQKCEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMzFh NDYzYy1hMGNkLTQxMGEtOGFhYi0wZmFkZmU5N2M2OWYvNDkzYjUwNDItY2Y4My0z ZGM3LTk3YmUtYWMwNWVjMDljZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDMxYTQ2M2MtYTBjZC00MTBhLThh YWItMGZhZGZlOTdjNjlmL2QzMWE0NjNjLWEwY2QtNDEwYS04YWFiLTBmYWRmZTk3 YzY5Zi5jcmwwHwYDVR0jBBgwFoAUE3aKKJem3bdRqlpY097adqzaZmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMzFhNDYzYy1hMGNkLTQxMGEtOGFhYi0wZmFk ZmU5N2M2OWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgVWQDAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAarTST4Ay6JYrRYEgYt9ua+FHBviSVSm7OllTFo8IgUWRF/rRAAT+ RoMSJ1nvjXTRqpKkOUBd+nl52AppD52/3bleQSJSUonjb/t5bri4rVqKT5qmCamx KIsUboso7PXjK71TNtnjkPKBSVWuMRM7JVwnPpqJXQ8zoyWiBd6FOXWXi0n8BZOS BCrsha+WdGj6cEjmDCrappLbhU2gKUeCd1KKVtT4AbQdfdaQz8RH5D0KgaoPMzPR XSFpJ4DnqgdabALX2gmzhXRrLboCxjwjvCag/p9UAoCp4OiiX7RYPLjuWLXJtiUb qZCvDQFXflAQNIppa3cij84OB4AghkJE4g== -----END CERTIFICATE-----Generated at Sat Aug 9 20:44:54 2025 by rpki-client