$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/86e6d33d-6a23-354c-af89-a3dd6592183c.roa File: 86e6d33d-6a23-354c-af89-a3dd6592183c.roa (raw, json) Hash identifier: aDPYFlGdzL8abtW4nrgbDHJKw/szO7iEJvEX1nfUlWA= Subject key identifier: 1B:E7:2F:E3:C0:73:34:A5:4B:7F:0E:6A:A5:CE:24:B6:F0:C5:D0:9B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A8DD5F8080EEC4ED3CEFAA100 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/86e6d33d-6a23-354c-af89-a3dd6592183c.roa Signing time: Fri 18 Jul 2025 01:00:48 +0000 ROA not before: Fri 18 Jul 2025 01:00:48 +0000 ROA not after: Thu 16 Oct 2025 01:00:48 +0000 asID: 8987 IP address blocks: 2605:4300:2c24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:d5:f8:08:0e:ec:4e:d3:ce:fa:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jul 18 01:00:48 2025 GMT Not After : Oct 16 01:00:48 2025 GMT Subject: CN=e77dcab5-eafd-4b7f-bb02-217798566f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1a:05:8f:2d:4d:0e:85:17:84:dc:e5:b8:ba: 5a:5d:5c:f4:fe:02:22:9b:5d:b4:d1:c4:25:c8:fa: a4:92:da:44:a8:69:b4:7b:0e:a9:13:67:c4:1b:a4: c6:1c:8c:1d:2c:c8:27:f2:61:55:64:03:eb:5a:d9: 5d:d9:35:83:6d:cd:1c:67:f6:25:f9:fb:71:18:1c: b4:4b:b0:7b:e0:5c:8e:48:d8:f5:d7:73:6c:cc:47: 23:7d:6b:73:5d:4f:12:4f:c0:a6:ce:44:64:3b:e3: cf:2c:47:59:8d:ee:33:68:33:40:40:ac:c3:b6:c2: e8:2a:fb:9d:5b:78:29:37:50:56:d6:52:d6:12:16: fe:c3:05:30:31:c8:f0:29:d0:69:ce:c4:a5:e5:65: 0d:cc:a5:4a:ce:00:7b:a5:93:c0:8a:2d:8e:f4:69: d9:82:5a:6c:96:aa:4a:b4:96:65:03:97:f9:8a:1e: da:4a:f1:66:80:16:02:91:fd:27:0b:39:13:2b:5d: ce:53:e2:56:d3:d6:f9:01:67:9f:41:c9:ec:f1:36: 88:c9:30:a0:0b:0f:78:a1:f9:f6:8e:e4:d9:f3:e0: c1:8e:46:5d:a1:ca:71:3e:76:f4:c9:70:6f:db:f6: ec:51:42:fe:09:a4:c4:f6:11:1a:72:f1:2a:cb:60: d6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E7:2F:E3:C0:73:34:A5:4B:7F:0E:6A:A5:CE:24:B6:F0:C5:D0:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/86e6d33d-6a23-354c-af89-a3dd6592183c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c24::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:58:b6:db:55:6a:37:bb:6d:bc:71:c2:7f:aa:97:d6:80:5b: 7c:9c:d2:45:05:cd:b0:82:d3:b0:bd:81:c8:93:2d:45:18:b6: f4:a1:74:e2:02:56:8a:52:39:c3:8b:00:2e:52:6d:90:eb:2c: ab:23:27:2f:f0:29:77:b8:d6:46:34:46:e0:86:fc:90:c6:9d: 51:b7:05:d6:9f:eb:72:60:f0:dc:7a:14:20:90:33:ea:fb:25: 8e:f6:df:e0:a0:ce:6d:5a:15:cc:57:90:07:e7:98:73:38:a4: 99:93:f6:f4:05:eb:7e:02:0e:80:e1:76:b2:bc:9b:11:ba:03: da:22:7d:57:1d:7b:1d:c2:01:38:25:9f:56:f9:ea:0f:79:aa: 9d:5d:95:1d:a1:1e:29:4e:a0:35:61:9a:cb:93:95:2d:87:0b: 95:30:cf:31:de:29:69:af:4d:65:6b:80:23:1a:b8:b4:96:75: 16:2e:25:5d:fa:8a:a2:5c:64:47:60:c3:75:43:af:7b:3d:f3: 78:71:e7:27:75:6c:5b:2a:50:24:0e:de:32:43:60:a1:dc:8b: 17:49:0e:42:13:39:56:26:d6:b5:c3:af:ce:f7:c2:41:c1:59: 6d:a5:73:a4:10:c6:24:53:89:f3:14:1a:cb:7e:f4:b1:d0:12: 37:a7:4f:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqN1fgIDuxO0876oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk ZTc3ZGNhYjUtZWFmZC00YjdmLWJiMDItMjE3Nzk4NTY2ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxoFjy1NDoUXhNzluLpaXVz0/gIim1200cQl yPqkktpEqGm0ew6pE2fEG6TGHIwdLMgn8mFVZAPrWtld2TWDbc0cZ/Yl+ftxGBy0 S7B74FyOSNj113NszEcjfWtzXU8ST8CmzkRkO+PPLEdZje4zaDNAQKzDtsLoKvud W3gpN1BW1lLWEhb+wwUwMcjwKdBpzsSl5WUNzKVKzgB7pZPAii2O9GnZglpslqpK tJZlA5f5ih7aSvFmgBYCkf0nCzkTK13OU+JW09b5AWefQcns8TaIyTCgCw94ofn2 juTZ8+DBjkZdocpxPnb0yXBv2/bsUUL+CaTE9hEacvEqy2DW1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBvnL+PAczSlS38OaqXOJLbwxdCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvODZlNmQzM2QtNmEyMy0z NTRjLWFmODktYTNkZDY1OTIxODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKpYtttVaje7bbxxwn+ql9aAW3yc0kUFzbCC07C9gciTLUUYtvSh dOICVopSOcOLAC5SbZDrLKsjJy/wKXe41kY0RuCG/JDGnVG3Bdaf63Jg8Nx6FCCQ M+r7JY723+Cgzm1aFcxXkAfnmHM4pJmT9vQF634CDoDhdrK8mxG6A9oifVcdex3C ATgln1b56g95qp1dlR2hHilOoDVhmsuTlS2HC5UwzzHeKWmvTWVrgCMauLSWdRYu JV36iqJcZEdgw3VDr3s983hx5yd1bFsqUCQO3jJDYKHcixdJDkITOVYm1rXDr873 wkHBWW2lc6QQxiRTifMUGst+9LHQEjenT8k= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:02 2025 by rpki-client