$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa File: f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa (raw, json) Hash identifier: sSjVd7f77Wg7avPHicqZNZdtR3CroMO1LKwo8UeSZVU= Subject key identifier: DA:22:03:F5:4E:48:38:CF:18:7E:86:A0:42:D4:A5:79:45:11:25:C4 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A68260517089DC0E5236502A0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 8987 IP address blocks: 2605:4300:2c1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:05:17:08:9d:c0:e5:23:65:02:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=3bff28da-28ac-4e0f-af69-39abcbc2ddeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:fd:58:62:0a:4b:e4:ed:34:76:19:97:cf: 44:bc:92:be:16:86:de:42:9f:ee:4d:54:bc:27:59: 6c:f5:ac:7a:5f:98:ab:3d:87:a9:6b:85:42:89:90: ab:d6:c4:40:4d:d8:b3:97:f4:a8:14:63:5f:f3:f6: 95:00:9f:35:c8:3c:3d:e2:73:cc:6c:69:41:ff:e0: 5e:3b:9c:14:8c:2f:2b:43:69:5f:f0:f4:11:70:89: 8b:60:fd:1c:ca:f4:92:56:9e:e8:91:3f:6f:bb:69: 03:8b:10:d9:af:fe:a9:f3:54:dc:cc:81:a7:c9:87: 16:05:0f:00:ed:51:f5:46:c3:34:07:2e:3d:c9:e9: 07:ae:87:7f:69:08:60:2a:f2:2d:0f:37:f6:82:1f: ee:d9:62:d2:b7:2c:2d:4a:bb:09:77:d0:ae:48:22: 69:54:5f:4d:c4:44:a6:ca:43:21:55:9b:2d:04:bd: 29:06:36:97:a7:ef:6c:6f:02:5d:14:e0:b6:fd:53: ae:7d:ec:9c:05:91:89:b0:b1:c1:6a:15:0a:4f:d9: a6:d4:4f:42:07:16:bb:80:de:d8:81:61:12:43:d6: 9d:f6:ed:07:e0:73:29:a2:0d:30:b4:7b:8d:7f:0f: 9b:13:79:29:c0:42:d2:f5:57:cf:fd:27:15:c0:c7: 28:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:22:03:F5:4E:48:38:CF:18:7E:86:A0:42:D4:A5:79:45:11:25:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f4:72:33:3d:19:7c:1e:97:09:89:e5:24:74:8a:f2:c6:9d: 02:5f:0e:53:11:30:00:e0:30:54:7d:6e:73:79:9c:13:43:f7: f5:5e:55:24:12:13:1f:88:e2:13:08:69:ec:31:63:64:e4:08: 05:92:8b:57:69:af:77:ac:6d:7d:26:3b:f4:99:93:2b:bd:42: 3c:4f:41:d1:9d:61:23:e0:61:0e:18:e4:1d:cb:f6:ed:26:58: c5:31:e0:7f:2a:ee:e9:3b:d2:d5:93:c7:2d:a1:54:c6:ca:8f: ef:27:11:2b:9d:e0:f3:40:a0:32:ec:66:70:2c:eb:c4:5c:58: cc:d9:df:55:e3:5d:4d:34:27:cc:a7:ae:9d:66:ce:7f:f7:8b: 1a:6a:77:a0:cf:e8:9f:a8:68:08:3d:9e:2a:94:da:83:05:c0: 29:76:10:7b:b1:e2:63:48:25:ee:b7:41:fc:06:d3:9a:fe:6e: 07:e7:8c:03:ce:70:0a:32:d2:10:cb:4d:55:ba:8f:2b:bc:fc: 56:cb:19:90:9b:0f:95:66:9e:02:ce:3d:c4:3d:0b:d9:e9:b6: f4:da:d9:cc:fb:37:3a:b4:50:ee:5f:68:30:ff:ab:69:19:39: ee:aa:80:81:a7:ac:7e:3f:84:02:8b:25:8a:25:ef:ed:0b:6d: 54:2e:1e:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJgUXCJ3A5SNlAqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk M2JmZjI4ZGEtMjhhYy00ZTBmLWFmNjktMzlhYmNiYzJkZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOr9WGIKS+TtNHYZl89EvJK+FobeQp/uTVS8 J1ls9ax6X5irPYepa4VCiZCr1sRATdizl/SoFGNf8/aVAJ81yDw94nPMbGlB/+Be O5wUjC8rQ2lf8PQRcImLYP0cyvSSVp7okT9vu2kDixDZr/6p81TczIGnyYcWBQ8A 7VH1RsM0By49yekHrod/aQhgKvItDzf2gh/u2WLStywtSrsJd9CuSCJpVF9NxESm ykMhVZstBL0pBjaXp+9sbwJdFOC2/VOufeycBZGJsLHBahUKT9mm1E9CBxa7gN7Y gWESQ9ad9u0H4HMpog0wtHuNfw+bE3kpwELS9VfP/ScVwMcobQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNoiA/VOSDjPGH6GoELUpXlFESXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjYzMTQ0YWItNWVhNy0z MTY1LWEwYTAtNmEwYTE4NzI1MGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAH0cjM9GXwelwmJ5SR0ivLGnQJfDlMRMADgMFR9bnN5nBND9/Ve VSQSEx+I4hMIaewxY2TkCAWSi1dpr3esbX0mO/SZkyu9QjxPQdGdYSPgYQ4Y5B3L 9u0mWMUx4H8q7uk70tWTxy2hVMbKj+8nESud4PNAoDLsZnAs68RcWMzZ31XjXU00 J8ynrp1mzn/3ixpqd6DP6J+oaAg9niqU2oMFwCl2EHux4mNIJe63QfwG05r+bgfn jAPOcAoy0hDLTVW6jyu8/FbLGZCbD5VmngLOPcQ9C9nptvTa2cz7Nzq0UO5faDD/ q2kZOe6qgIGnrH4/hAKLJYol7+0LbVQuHj8= -----END CERTIFICATE-----Generated at Tue Jul 22 04:26:40 2025 by rpki-client