$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c8feafe7-6332-3e90-bf40-ecdd37054e94.roa File: c8feafe7-6332-3e90-bf40-ecdd37054e94.roa (raw, json) Hash identifier: 8VFMhhkSzwPsnAmMfI7uR6mUPGLX1K6+jQg+OdaO6cM= Subject key identifier: 44:AC:01:10:04:83:54:95:F0:6A:96:38:5D:B5:E7:8E:0B:FE:E9:70 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A8DD5F7F50FAE0AE53DE0F4C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c8feafe7-6332-3e90-bf40-ecdd37054e94.roa Signing time: Fri 18 Jul 2025 01:00:48 +0000 ROA not before: Fri 18 Jul 2025 01:00:48 +0000 ROA not after: Thu 16 Oct 2025 01:00:48 +0000 asID: 8987 IP address blocks: 2605:4300:2c23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:d5:f7:f5:0f:ae:0a:e5:3d:e0:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jul 18 01:00:48 2025 GMT Not After : Oct 16 01:00:48 2025 GMT Subject: CN=7245cf27-c1a2-41d1-9b9b-fb5c75772c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:6d:c8:16:61:43:e6:b0:36:4d:55:bc:2c: 43:68:71:91:b9:4c:52:e4:11:72:4e:d2:45:da:24: 99:c2:65:d3:03:b6:ca:bf:b0:ee:be:e8:d9:2a:93: c0:71:96:58:54:91:87:40:c9:00:5c:a9:c7:a9:50: f8:b5:1a:e8:87:d8:fb:84:6e:76:4d:09:68:90:3f: bd:cc:bf:37:32:ca:61:39:78:4c:80:a4:a3:95:96: 19:0d:ee:a3:6b:45:3b:92:3a:3a:10:f5:3a:13:32: 99:e2:6a:37:8c:e8:3b:71:3a:56:42:9c:b1:c4:7a: ed:76:d7:6c:39:c5:97:09:bf:31:1b:2f:4c:bb:66: 09:d6:cf:fa:86:46:97:38:70:9e:22:7e:48:ed:10: db:7e:75:ce:c5:57:19:d1:ee:d5:f5:dd:e9:e0:6f: e5:b6:d7:14:40:ca:bb:04:d6:c9:1b:50:ab:0d:a8: 8e:bf:e3:f8:bf:40:1c:dc:f9:ff:e9:aa:33:19:45: 1c:27:8b:10:c0:ea:3e:c7:9e:f8:7c:6a:63:07:e7: 17:b3:bd:15:77:17:17:79:e9:9b:e5:7c:67:52:11: 1d:b3:c4:06:ec:22:1d:b5:cb:3c:d8:36:50:72:d2: 6d:2a:53:fb:c0:04:61:5b:70:20:2c:5a:4b:86:7f: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AC:01:10:04:83:54:95:F0:6A:96:38:5D:B5:E7:8E:0B:FE:E9:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c8feafe7-6332-3e90-bf40-ecdd37054e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:14:dd:7d:95:e8:4c:63:75:e7:39:29:99:06:c1:b6:6c:ff: d5:23:e7:3e:79:52:57:79:d4:12:62:76:d3:79:5f:31:5d:09: e5:45:94:9c:a1:33:78:04:bc:19:94:9c:db:a7:c9:5e:06:fe: 89:5f:1e:af:b0:ee:3e:90:9f:cf:83:07:d1:ac:6d:be:14:da: cb:41:62:33:b1:ea:1a:cd:d3:95:3c:70:6f:36:2f:bf:ed:b9: a3:59:d8:d1:9a:e5:88:6f:71:4a:78:e0:83:1d:6f:4a:4c:df: 50:79:a9:00:39:e6:d6:b2:3e:ca:c0:02:b4:27:bf:72:47:ef: f2:dd:fe:5f:1b:5f:82:51:8f:25:cb:ac:af:93:6a:dc:75:26: f8:49:5b:6b:b5:9a:5c:c1:cc:30:a4:75:ae:f8:df:1c:a7:7a: 2d:7f:22:5a:54:e1:7b:1a:2d:3d:96:90:c9:2f:37:db:51:77: 74:fd:e2:1c:e2:81:31:6c:f6:73:60:86:e0:e0:08:c9:79:2e: 15:97:0c:81:b7:57:a0:a5:9b:f9:e6:ac:59:9e:b5:6a:60:a3: d4:ce:90:fe:48:07:c6:f6:e3:68:92:44:0e:12:b9:e5:2c:dc: 19:b1:09:e2:ab:03:a8:82:29:2f:e2:07:47:03:9a:e1:34:54: 30:e0:51:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqN1ff1D64K5T3g9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk NzI0NWNmMjctYzFhMi00MWQxLTliOWItZmI1Yzc1NzcyYzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh9tyBZhQ+awNk1VvCxDaHGRuUxS5BFyTtJF 2iSZwmXTA7bKv7DuvujZKpPAcZZYVJGHQMkAXKnHqVD4tRroh9j7hG52TQlokD+9 zL83MsphOXhMgKSjlZYZDe6ja0U7kjo6EPU6EzKZ4mo3jOg7cTpWQpyxxHrtdtds OcWXCb8xGy9Mu2YJ1s/6hkaXOHCeIn5I7RDbfnXOxVcZ0e7V9d3p4G/lttcUQMq7 BNbJG1CrDaiOv+P4v0Ac3Pn/6aozGUUcJ4sQwOo+x574fGpjB+cXs70VdxcXeemb 5XxnUhEds8QG7CIdtcs82DZQctJtKlP7wARhW3AgLFpLhn/AxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFESsARAEg1SV8GqWOF21544L/ulwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYzhmZWFmZTctNjMzMi0z ZTkwLWJmNDAtZWNkZDM3MDU0ZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACIU3X2V6Exjdec5KZkGwbZs/9Uj5z55Uld51BJidtN5XzFdCeVF lJyhM3gEvBmUnNunyV4G/olfHq+w7j6Qn8+DB9Gsbb4U2stBYjOx6hrN05U8cG82 L7/tuaNZ2NGa5YhvcUp44IMdb0pM31B5qQA55tayPsrAArQnv3JH7/Ld/l8bX4JR jyXLrK+Tatx1JvhJW2u1mlzBzDCkda743xynei1/IlpU4XsaLT2WkMkvN9tRd3T9 4hzigTFs9nNghuDgCMl5LhWXDIG3V6Clm/nmrFmetWpgo9TOkP5IB8b242iSRA4S ueUs3BmxCeKrA6iCKS/iB0cDmuE0VDDgUTE= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:01 2025 by rpki-client