$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/1470d6ba-0af0-3bb8-9022-7448c03a312a.roa File: 1470d6ba-0af0-3bb8-9022-7448c03a312a.roa (raw, json) Hash identifier: WE9C0hprP+XBrLhJZKZE3Uo9jdrunZmlx4PX5HuWdqs= Subject key identifier: 03:55:D6:B0:93:45:A8:56:68:7A:FA:D6:D9:DC:5D:8E:0D:98:69:DF Certificate issuer: /CN=9d91b72c-b83a-431c-9cfd-60b797f3113e Certificate serial: 010D0C9F4328584A9FFBA557A2C8CC81F312E500 Authority key identifier: 3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/1470d6ba-0af0-3bb8-9022-7448c03a312a.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 32097 IP address blocks: 2001:4858::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a5:57:a2:c8:cc:81:f3:12:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d91b72c-b83a-431c-9cfd-60b797f3113e Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=4ac6b773-6b3e-49fe-8e7b-0b9417d2d14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:79:c0:34:d0:02:71:f5:8a:34:8a:1f:00:17: 09:fa:7a:33:3f:43:7e:4c:fb:6c:2e:24:f9:8f:74: a4:9d:63:30:6c:39:06:41:c3:20:cb:c6:93:40:23: 91:0a:0f:1a:69:22:79:66:59:d2:e3:35:99:dc:38: a9:38:ab:5d:d1:73:53:87:ff:59:9c:41:5c:97:17: 60:00:82:f7:d9:3f:82:a5:94:79:38:c0:0a:27:c0: 17:51:ec:68:32:d4:d2:62:75:8d:de:76:71:92:0a: f8:55:fe:f4:1b:da:d6:fd:c5:e5:10:dd:f8:f6:5a: 9d:42:43:43:23:96:59:38:37:c5:f1:ed:21:bb:83: 66:25:54:bc:e4:14:8e:6a:b0:d2:c6:a2:24:af:e6: 74:b2:b6:03:09:08:56:10:84:69:49:40:20:8e:1f: 21:c8:d2:31:3e:5c:37:ce:3c:18:c7:56:76:00:0d: d5:93:e6:8d:25:30:af:4c:81:b7:b5:b6:b1:94:4a: 98:c9:da:1a:59:1a:a9:4a:1a:70:68:7c:14:c8:fe: fa:6b:c8:80:3a:37:52:93:d6:c5:bc:b3:53:56:9c: 14:a9:d5:da:c4:0a:45:5c:16:de:bb:cb:e8:48:ea: 5b:8b:55:99:19:26:85:85:cc:de:b5:28:55:6f:46: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:55:D6:B0:93:45:A8:56:68:7A:FA:D6:D9:DC:5D:8E:0D:98:69:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/1470d6ba-0af0-3bb8-9022-7448c03a312a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl X509v3 Authority Key Identifier: keyid:3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer sbgp-ipAddrBlock: critical IPv6: 2001:4858::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ce:ea:74:10:5c:de:44:ba:6d:20:97:63:35:08:f0:7b:45: 01:ae:86:f6:48:3d:25:a8:5f:cf:01:1e:a7:69:6a:f1:bd:f6: 90:8e:7d:bd:2c:90:b2:bd:7b:50:84:b1:c5:51:1e:d8:64:42: 73:d8:ac:8f:05:fc:02:73:ec:7f:f3:56:1a:2d:42:0f:13:61: cb:02:f5:0c:23:f9:65:f2:e7:09:96:2f:9e:54:af:cb:a9:ac: 60:ea:d2:c8:0c:14:f7:7c:f7:bf:58:ef:6d:b5:05:ec:b6:ae: f9:d2:8e:07:31:ef:fa:82:88:40:2c:51:12:ac:fe:d5:f9:43: c6:66:99:b6:75:55:5e:47:46:ec:91:46:d9:6b:61:cc:4b:cf: 28:92:f7:e9:f7:35:6e:4a:25:72:0d:c8:e2:d7:4d:a6:d7:6b: 24:0c:09:49:e5:50:6e:a7:0b:06:27:3e:fd:00:dd:65:16:3e: 04:68:50:83:70:be:ef:6b:1a:fc:b8:b0:89:d4:47:33:8b:7e: fc:ff:3f:08:0c:0c:27:ff:87:bc:c8:16:cb:68:cc:36:74:a1: 30:3a:00:43:1d:26:70:3b:30:53:4b:4c:43:93:1c:ba:8c:a1: 62:17:6c:b8:4a:85:1d:41:b0:37:2e:f2:a4:c7:1a:b3:58:b1: 3a:8f:70:3a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+6VXosjMgfMS5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQ5MWI3MmMtYjgzYS00MzFjLTljZmQtNjBiNzk3ZjMx MTNlMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NGFjNmI3NzMtNmIzZS00OWZlLThlN2ItMGI5NDE3ZDJkMTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHnANNACcfWKNIofABcJ+nozP0N+TPtsLiT5 j3SknWMwbDkGQcMgy8aTQCORCg8aaSJ5ZlnS4zWZ3DipOKtd0XNTh/9ZnEFclxdg AIL32T+CpZR5OMAKJ8AXUexoMtTSYnWN3nZxkgr4Vf70G9rW/cXlEN349lqdQkND I5ZZODfF8e0hu4NmJVS85BSOarDSxqIkr+Z0srYDCQhWEIRpSUAgjh8hyNIxPlw3 zjwYx1Z2AA3Vk+aNJTCvTIG3tbaxlEqYydoaWRqpShpwaHwUyP76a8iAOjdSk9bF vLNTVpwUqdXaxApFXBbeu8voSOpbi1WZGSaFhczetShVb0ab/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFANV1rCTRahWaHr61tncXY4NmGnfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDkx YjcyYy1iODNhLTQzMWMtOWNmZC02MGI3OTdmMzExM2UvMTQ3MGQ2YmEtMGFmMC0z YmI4LTkwMjItNzQ0OGMwM2EzMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWQ5MWI3MmMtYjgzYS00MzFjLTlj ZmQtNjBiNzk3ZjMxMTNlLzlkOTFiNzJjLWI4M2EtNDMxYy05Y2ZkLTYwYjc5N2Yz MTEzZS5jcmwwHwYDVR0jBBgwFoAUPjNm+hrAnQiv1exytdf7JMy2qUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDkxYjcyYy1iODNhLTQzMWMtOWNmZC02MGI3 OTdmMzExM2UuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFIWDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3zup0EFzeRLptIJdjNQjwe0UBrob2SD0lqF/PAR6naWrxvfaQjn29 LJCyvXtQhLHFUR7YZEJz2KyPBfwCc+x/81YaLUIPE2HLAvUMI/ll8ucJli+eVK/L qaxg6tLIDBT3fPe/WO9ttQXstq750o4HMe/6gohALFESrP7V+UPGZpm2dVVeR0bs kUbZa2HMS88okvfp9zVuSiVyDcji102m12skDAlJ5VBupwsGJz79AN1lFj4EaFCD cL7vaxr8uLCJ1Eczi378/z8IDAwn/4e8yBbLaMw2dKEwOgBDHSZwOzBTS0xDkxy6 jKFiF2y4SoUdQbA3LvKkxxqzWLE6j3A6 -----END CERTIFICATE-----Generated at Fri Jul 25 00:21:19 2025 by rpki-client