$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce1a6d02-2095-35b1-b89d-03f020480026.roa File: ce1a6d02-2095-35b1-b89d-03f020480026.roa (raw, json) Hash identifier: Yn7sJOWZtFTkI9p57UT7yljjFG3XOTIJbyBxay3sZFA= Subject key identifier: 3A:89:5B:9C:F1:9B:19:F9:AD:87:EF:3D:F9:A1:02:25:21:48:FF:12 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584AA160D51E1A5DFC7301C79780 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce1a6d02-2095-35b1-b89d-03f020480026.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 237 IP address blocks: 2001:468:2620::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d5:1e:1a:5d:fc:73:01:c7:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=d3731633-c23e-4fd2-a71a-82a17d45ccae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:d7:ae:34:d8:00:92:8f:ff:d3:e9:c3:3b: b9:65:4b:0f:62:07:7b:ad:60:32:b9:fd:09:f2:c1: 97:31:b8:ce:d5:03:da:91:8b:56:7c:91:5c:9f:1e: e7:ef:9e:c5:17:32:d8:62:e8:a4:bb:13:44:95:4e: a8:a9:dc:82:d1:a3:92:10:3e:15:71:9d:f6:73:b4: 3a:99:e8:07:d7:8c:76:11:17:97:9f:c5:38:85:a5: b8:79:8a:66:86:6e:dc:51:7a:31:5d:8b:9a:36:63: 9e:7f:5a:71:e4:44:b9:a2:14:99:79:eb:e1:28:0e: b7:d8:58:3e:45:a0:ac:fd:92:c8:1a:f6:32:26:be: 56:6f:ac:c3:17:84:93:a3:56:f2:a8:c8:01:4d:46: f5:72:aa:2f:de:79:6d:2c:69:05:d1:7f:a5:7e:49: ef:dd:cf:4d:fe:ab:df:cc:dd:e2:22:22:a6:da:b5: 25:ee:7c:6b:b5:e1:30:0b:72:9f:bd:a6:a0:14:83: c7:f0:de:a1:70:8d:39:cd:eb:15:7f:43:9c:b2:bc: 97:01:da:fd:a0:ca:8c:35:9c:4f:b8:ea:ad:8f:e0: 45:2f:a1:c2:b9:65:f5:7f:c4:fa:5b:e1:94:c4:0c: 49:fa:34:dc:1d:2d:b4:c3:d8:f7:e3:36:fe:6a:a0: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:89:5B:9C:F1:9B:19:F9:AD:87:EF:3D:F9:A1:02:25:21:48:FF:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce1a6d02-2095-35b1-b89d-03f020480026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:2620::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:13:14:26:4d:db:88:17:fc:8b:7b:27:f6:1b:c7:fe:3c:c8: d5:64:ae:96:a2:5a:97:72:da:77:87:1f:fb:ed:8d:18:7d:c6: 6d:08:ad:06:61:85:cc:d5:03:06:c4:d8:1a:ab:6a:c7:4c:07: 35:82:59:9f:02:21:67:33:31:ef:61:d1:2b:ad:52:5e:9a:8b: af:b0:29:3b:bd:1c:9f:72:d7:57:ad:be:03:f2:2c:54:fe:ee: e9:9e:dd:4c:59:ad:5a:c5:b9:ac:b9:e7:76:e3:13:40:28:fe: 30:9b:d2:e8:03:4e:43:d6:73:1b:2c:4b:ab:d4:d3:26:09:e8: 59:be:91:75:24:7c:6e:10:52:ed:d0:77:3d:2d:12:99:ec:53: 1a:a0:e5:31:19:4e:18:f5:2f:53:c6:38:ae:7a:89:a1:a1:9a: 8c:c8:8e:a7:25:e2:6f:a0:e0:c3:f7:80:de:b9:ff:7a:f2:2a: 82:88:db:ac:40:9d:af:5d:6a:c2:4e:e4:f1:b1:55:16:fb:89: f6:24:97:6d:9d:a3:79:f2:c1:d5:5a:0e:ce:2f:f0:df:6e:40: 1c:3c:3f:db:97:5e:f8:21:a6:fb:6f:77:70:a3:da:b6:95:af: 6a:b9:9d:59:aa:1b:f9:ec:d1:e6:bd:2e:e2:13:b1:33:7d:c5: 5c:e1:13:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqhYNUeGl38cwHHl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZDM3MzE2MzMtYzIzZS00ZmQyLWE3MWEtODJhMTdkNDVjY2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXrXrjTYAJKP/9Ppwzu5ZUsPYgd7rWAyuf0J 8sGXMbjO1QPakYtWfJFcnx7n757FFzLYYuikuxNElU6oqdyC0aOSED4VcZ32c7Q6 megH14x2EReXn8U4haW4eYpmhm7cUXoxXYuaNmOef1px5ES5ohSZeevhKA632Fg+ RaCs/ZLIGvYyJr5Wb6zDF4STo1byqMgBTUb1cqov3nltLGkF0X+lfknv3c9N/qvf zN3iIiKm2rUl7nxrteEwC3KfvaagFIPH8N6hcI05zesVf0OcsryXAdr9oMqMNZxP uOqtj+BFL6HCuWX1f8T6W+GUxAxJ+jTcHS20w9j34zb+aqBJywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDqJW5zxmxn5rYfvPfmhAiUhSP8SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvY2UxYTZkMDItMjA5NS0z NWIxLWI4OWQtMDNmMDIwNDgwMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaCYg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAETFCZN24gX/It7J/Ybx/48yNVkrpaiWpdy2neHH/vtjRh9xm0I rQZhhczVAwbE2BqrasdMBzWCWZ8CIWczMe9h0SutUl6ai6+wKTu9HJ9y11etvgPy LFT+7ume3UxZrVrFuay553bjE0Ao/jCb0ugDTkPWcxssS6vU0yYJ6Fm+kXUkfG4Q Uu3Qdz0tEpnsUxqg5TEZThj1L1PGOK56iaGhmozIjqcl4m+g4MP3gN65/3ryKoKI 26xAna9dasJO5PGxVRb7ifYkl22do3nywdVaDs4v8N9uQBw8P9uXXvghpvtvd3Cj 2raVr2q5nVmqG/ns0ea9LuITsTN9xVzhE6s= -----END CERTIFICATE-----Generated at Sun Jul 27 12:14:08 2025 by rpki-client