$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/1a344d99-3e82-3ff5-ae58-a88b4cbf4ac0.roa File: 1a344d99-3e82-3ff5-ae58-a88b4cbf4ac0.roa (raw, json) Hash identifier: jVU42hryNt+pgJNBvEefCgaNN1qJyPgA88fD8/7w+DE= Subject key identifier: 2F:09:29:4B:4E:DF:FC:06:00:55:24:A5:FA:FB:6E:F8:64:31:86:A9 Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977 Certificate serial: 010D0C9F4328584A5FC5E0B59D0F95D6D9D70A80 Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/1a344d99-3e82-3ff5-ae58-a88b4cbf4ac0.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 2605:dd40:8d00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e0:b5:9d:0f:95:d6:d9:d7:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=f3a8fd97-9d56-4591-b533-6b2dcee6d4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9b:16:28:9e:e5:31:92:d7:1c:ed:7e:cc:2c: b2:fc:24:41:8e:d4:a5:c1:b4:43:8c:8a:4a:1c:f8: 2d:0e:01:a9:ff:c5:95:c8:26:43:09:6e:7b:d3:9b: 62:1b:98:66:eb:14:22:c1:9d:d1:ba:9b:ce:0c:5c: 81:24:2b:6a:d3:e7:be:09:ae:13:db:35:ed:ca:09: ed:47:1d:51:67:d6:e5:17:72:f3:e2:3e:e4:04:9e: 3d:17:36:2a:28:c1:22:e6:52:c7:29:e9:4b:6b:44: c7:ef:63:f6:e8:f5:1c:b5:47:e3:a8:28:6e:df:10: f4:0c:00:da:7a:cf:28:bd:30:cd:b2:fa:bd:e9:85: a6:d3:c3:67:25:6c:d7:c7:80:44:cb:49:5a:c7:7f: 33:7e:a3:33:fb:bc:ef:f2:8c:00:df:50:24:6f:ea: 18:43:67:d4:a3:1e:b1:66:2d:88:95:1a:e5:cf:4a: 88:f7:fd:d3:aa:39:2d:8d:d2:7e:65:22:e2:5e:45: 4b:b8:36:36:00:20:34:f3:b2:89:b8:0f:9c:e7:b9: c0:0d:c9:30:28:88:eb:74:b6:b0:7d:95:d6:58:81: 11:45:88:5a:e6:ed:13:8f:6d:65:31:35:62:bf:34: 2d:a8:88:12:48:6a:73:df:b3:b1:4f:a2:6b:fa:41: 55:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:09:29:4B:4E:DF:FC:06:00:55:24:A5:FA:FB:6E:F8:64:31:86:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/1a344d99-3e82-3ff5-ae58-a88b4cbf4ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl X509v3 Authority Key Identifier: keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer sbgp-ipAddrBlock: critical IPv6: 2605:dd40:8d00::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e3:3b:e4:1e:6e:aa:7f:c2:59:fa:37:91:ec:5d:61:29:f8: c0:91:75:3b:08:30:90:a6:17:4f:9b:a1:c9:b6:97:b8:44:fa: d6:a5:e9:f4:3c:6f:86:9d:96:bf:cf:7d:0b:a0:1b:d7:0b:b0: de:b9:1d:81:d8:6b:22:ca:1f:48:22:a6:7d:07:0a:52:44:7a: b1:d9:1a:02:7a:a9:f3:aa:59:73:f7:6c:43:df:3e:17:b0:eb: 8d:d8:11:5d:e0:01:61:fd:39:2b:35:ec:6a:9f:1c:79:c3:5d: dd:cd:ee:44:7a:27:fd:ee:c2:e5:c3:45:e1:7f:7c:c1:52:d9: d0:5c:20:2a:06:99:b7:af:e6:0d:f5:46:e9:25:a7:56:5f:52: 4a:41:ed:96:4e:b4:cf:71:75:d9:6a:03:a6:1f:9c:78:26:60: de:24:5f:4b:4f:1b:1a:10:ab:2b:0f:11:e0:0d:65:fd:ba:73: 24:9f:0f:d4:a8:60:5a:bc:5e:dc:ec:89:33:a9:00:69:70:98: 97:e3:28:a6:04:69:b0:9f:a9:cf:66:4c:bf:10:7a:4e:4c:4d: 77:c6:c9:c7:e5:6e:f3:6b:62:b0:5f:db:f9:7f:60:b4:ea:c5: 16:86:d6:75:91:58:f6:4b:d5:00:d8:72:d0:47:28:32:66:54: 6e:f4:48:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxeC1nQ+V1tnXCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4 OTc3MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZjNhOGZkOTctOWQ1Ni00NTkxLWI1MzMtNmIyZGNlZTZkNGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJsWKJ7lMZLXHO1+zCyy/CRBjtSlwbRDjIpK HPgtDgGp/8WVyCZDCW5705tiG5hm6xQiwZ3RupvODFyBJCtq0+e+Ca4T2zXtygnt Rx1RZ9blF3Lz4j7kBJ49FzYqKMEi5lLHKelLa0TH72P26PUctUfjqChu3xD0DADa es8ovTDNsvq96YWm08NnJWzXx4BEy0lax38zfqMz+7zv8owA31Akb+oYQ2fUox6x Zi2IlRrlz0qI9/3TqjktjdJ+ZSLiXkVLuDY2ACA087KJuA+c57nADckwKIjrdLaw fZXWWIERRYha5u0Tj21lMTVivzQtqIgSSGpz37OxT6Jr+kFVDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC8JKUtO3/wGAFUkpfr7bvhkMYapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvMWEzNDRkOTktM2U4Mi0z ZmY1LWFlNTgtYTg4YjRjYmY0YWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4 ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgXdQI0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADjjO+Qebqp/wln6N5HsXWEp+MCRdTsIMJCmF0+bocm2l7hE+tal 6fQ8b4adlr/PfQugG9cLsN65HYHYayLKH0gipn0HClJEerHZGgJ6qfOqWXP3bEPf Phew643YEV3gAWH9OSs17GqfHHnDXd3N7kR6J/3uwuXDReF/fMFS2dBcICoGmbev 5g31Ruklp1ZfUkpB7ZZOtM9xddlqA6YfnHgmYN4kX0tPGxoQqysPEeANZf26cySf D9SoYFq8XtzsiTOpAGlwmJfjKKYEabCfqc9mTL8Qek5MTXfGycflbvNrYrBf2/l/ YLTqxRaG1nWRWPZL1QDYctBHKDJmVG70SIE= -----END CERTIFICATE-----Generated at Tue Jul 29 03:11:47 2025 by rpki-client