$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba8b121c-e521-3b94-85dd-d50459da2ef0.roa File: ba8b121c-e521-3b94-85dd-d50459da2ef0.roa (raw, json) Hash identifier: bk3NSVB3rzj76bqa2MUWn74aJ53d63QikXl28CbW0O8= Subject key identifier: 4B:BD:C2:E5:C9:AC:72:E7:EA:9A:78:1B:FD:9A:AB:21:8C:7D:2D:37 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A74B5D6A671B0234BD460E280 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba8b121c-e521-3b94-85dd-d50459da2ef0.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 852 IP address blocks: 2001:569:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:d6:a6:71:b0:23:4b:d4:60:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=2d502809-b677-408b-9f54-f4d3017568a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:44:ce:4c:b9:b8:a9:ab:a8:c7:b7:4b:7e: 77:12:73:fe:8c:73:9a:93:06:2a:6d:ca:f6:a8:30: 4c:f9:dd:8d:67:02:7b:3d:98:39:72:77:fa:a4:1e: 9e:1d:04:17:a7:21:6d:74:91:0e:7a:dc:bf:4e:e1: 75:95:17:3b:cd:57:8b:57:6f:27:91:b6:04:68:9b: a2:e5:bd:7f:74:3f:9c:7d:a0:84:a5:88:40:05:ee: 41:6b:31:01:e5:8f:66:7f:e3:3a:98:db:8d:c7:00: 31:40:5f:0e:36:01:2f:56:c4:e3:6f:9c:28:cb:4a: 92:74:71:15:a4:8c:83:8f:11:7c:ce:4a:11:25:c4: 24:b2:c6:44:21:82:92:ce:37:c3:04:8c:76:6d:56: 5b:19:51:41:89:bd:11:e8:d5:08:26:58:7c:cf:50: 1f:a5:0a:11:d4:78:12:62:c6:52:3a:e6:d4:a0:77: 68:9a:52:bb:23:b9:9d:34:bd:7f:c1:e0:f3:95:f4: ab:0d:4d:c2:8c:25:b6:28:a0:01:b1:85:db:8b:a2: c2:4f:7b:c1:06:67:76:2e:4c:2a:fe:0f:f9:38:7d: 49:7e:57:66:91:f4:b3:e4:61:82:39:9a:0f:c4:4d: c2:84:34:fb:a1:aa:32:55:cd:c6:bd:0b:a6:9d:62: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BD:C2:E5:C9:AC:72:E7:EA:9A:78:1B:FD:9A:AB:21:8C:7D:2D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba8b121c-e521-3b94-85dd-d50459da2ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:569:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:92:d4:a0:49:56:a1:79:bf:d1:a2:01:5b:76:20:89:2b:04: 5e:6b:f6:50:19:a7:3f:d8:bb:e6:1d:02:d8:c2:be:cd:74:6b: 18:36:4d:0a:79:ac:83:b6:04:17:6a:c3:f8:82:4b:4f:f3:51: ce:b7:64:0f:6d:a8:2b:81:ba:5a:2d:b2:6b:7e:fd:1c:fe:c1: 2b:e3:6b:71:04:20:dd:24:79:dd:de:93:4a:62:f2:11:65:6d: 1f:f3:63:ab:83:9f:b2:d2:36:61:31:6d:33:3d:15:96:1a:35: 41:e4:2a:2b:da:b3:08:4c:82:eb:b4:b2:69:91:7e:ff:0a:7d: 12:ef:2e:04:f5:fe:69:cc:21:e8:27:6f:81:be:b2:33:5e:00: 32:20:90:f5:6d:a4:d2:42:ad:9a:ed:3a:97:f9:94:b7:13:ca: 49:c7:0e:a4:cf:8c:cf:00:c8:09:88:bd:f7:d7:62:00:60:25: bf:24:81:00:b5:aa:bc:0b:3a:75:8e:6c:09:69:fb:b8:9a:27: a2:0e:cd:db:27:83:b0:ce:54:5d:d8:ea:5d:60:ae:72:22:1c: e4:17:72:f0:e2:1d:70:24:60:f7:0f:e9:80:02:88:5a:f1:2d: ff:0a:00:73:b1:93:05:3a:fb:ff:7d:64:d8:8f:f0:a7:51:42: e7:39:68:f1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEp0tdamcbAjS9Rg4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk MmQ1MDI4MDktYjY3Ny00MDhiLTlmNTQtZjRkMzAxNzU2OGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNdEzky5uKmrqMe3S353EnP+jHOakwYqbcr2 qDBM+d2NZwJ7PZg5cnf6pB6eHQQXpyFtdJEOety/TuF1lRc7zVeLV28nkbYEaJui 5b1/dD+cfaCEpYhABe5BazEB5Y9mf+M6mNuNxwAxQF8ONgEvVsTjb5woy0qSdHEV pIyDjxF8zkoRJcQkssZEIYKSzjfDBIx2bVZbGVFBib0R6NUIJlh8z1AfpQoR1HgS YsZSOubUoHdomlK7I7mdNL1/weDzlfSrDU3CjCW2KKABsYXbi6LCT3vBBmd2Lkwq /g/5OH1JfldmkfSz5GGCOZoPxE3ChDT7oaoyVc3GvQumnWKAjwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEu9wuXJrHLn6pp4G/2aqyGMfS03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmE4YjEyMWMtZTUyMS0z Yjk0LTg1ZGQtZDUwNDU5ZGEyZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGIAEFaYAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWpLUoElWoXm/0aIBW3YgiSsEXmv2UBmnP9i75h0C2MK+zXRrGDZN Cnmsg7YEF2rD+IJLT/NRzrdkD22oK4G6Wi2ya379HP7BK+NrcQQg3SR53d6TSmLy EWVtH/Njq4OfstI2YTFtMz0Vlho1QeQqK9qzCEyC67SyaZF+/wp9Eu8uBPX+acwh 6Cdvgb6yM14AMiCQ9W2k0kKtmu06l/mUtxPKSccOpM+MzwDICYi999diAGAlvySB ALWqvAs6dY5sCWn7uJonog7N2yeDsM5UXdjqXWCuciIc5Bdy8OIdcCRg9w/pgAKI WvEt/woAc7GTBTr7/31k2I/wp1FC5zlo8Q== -----END CERTIFICATE-----Generated at Fri Jul 25 19:20:59 2025 by rpki-client