$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2dec7a66-03f5-375a-8ca9-c3d778b27743.roa File: 2dec7a66-03f5-375a-8ca9-c3d778b27743.roa (raw, json) Hash identifier: rNIy8/YxhYRyaW1pXaFqmCpMXYoRMokmq4nXBNctRwU= Subject key identifier: AF:B6:67:5C:63:09:A0:DE:81:0A:98:E6:23:3E:14:CB:39:48:07:13 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8DD600BA6D8FF05E96DC7D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2dec7a66-03f5-375a-8ca9-c3d778b27743.roa Signing time: Fri 18 Jul 2025 01:00:48 +0000 ROA not before: Fri 18 Jul 2025 01:00:48 +0000 ROA not after: Thu 16 Oct 2025 01:00:48 +0000 asID: 396982 IP address blocks: 2600:1901:81d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:d6:00:ba:6d:8f:f0:5e:96:dc:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 18 01:00:48 2025 GMT Not After : Oct 16 01:00:48 2025 GMT Subject: CN=6e13a5b8-8a53-4c86-9a87-b80c67788d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:28:03:d3:31:a3:5d:9f:6f:1e:9d:9d:27: d1:1d:e4:6c:9c:04:72:36:3f:7c:63:b9:2e:32:1c: a1:49:79:39:a8:8e:1e:a8:ba:e8:1f:76:d3:8a:c9: 28:46:41:17:15:a0:08:d7:4d:4d:0a:69:c6:cb:91: 3c:45:66:aa:59:be:40:2d:10:c2:0f:4d:8e:11:7f: e4:4c:a5:66:18:62:5c:d9:6e:88:05:32:f1:fb:b0: 6d:bf:b3:a5:6c:cd:02:4f:22:8c:63:de:42:37:1e: 4b:2b:fd:de:f0:dc:ae:07:e7:55:60:42:50:90:c1: fd:d5:02:70:2b:d9:6d:ca:6a:b4:52:4d:7d:6d:f7: 51:4a:27:fe:02:8e:43:2d:8a:f7:4a:f6:09:cd:b1: b3:d6:be:88:22:08:7a:f4:b9:a5:41:2f:cf:83:74: 37:05:da:e6:3f:8a:4f:37:a4:fe:48:b2:34:bc:d4: c1:c9:a4:44:e1:d6:1c:17:25:82:b3:4d:3d:9b:07: 6d:11:9a:52:de:b4:75:30:ba:01:ec:e5:52:a6:8d: ca:e4:34:18:b4:25:1a:81:1c:a9:9e:9e:56:3f:5a: 18:68:02:a2:70:2e:15:e5:b2:7e:37:7c:88:bc:4d: bc:84:c0:cd:c6:0b:f3:fa:20:7f:ea:10:37:a6:4b: ce:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B6:67:5C:63:09:A0:DE:81:0A:98:E6:23:3E:14:CB:39:48:07:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2dec7a66-03f5-375a-8ca9-c3d778b27743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1901:81d4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:4c:35:31:c6:c0:2c:6e:d5:ba:3e:29:99:e7:f5:ef:7d:f9: 46:73:3d:d3:ef:70:04:87:5e:e0:e0:91:06:6c:b8:bd:ee:c2: d3:5b:fd:16:1b:e5:2a:a1:fd:4c:7c:d6:46:35:dd:4c:75:38: ab:05:b9:a6:d2:bd:88:2e:61:1a:67:f0:80:e3:6f:8b:3d:f2: 74:7c:3c:25:f6:a0:66:54:9f:e9:66:7e:62:92:31:c1:a2:24: 51:42:e3:fd:5c:99:d2:e3:75:2f:19:da:44:fe:2e:52:e9:0d: eb:f1:95:fc:be:40:28:92:b0:8f:be:51:fe:db:41:d5:ae:4a: f6:99:21:06:e4:be:f8:da:7c:f4:4e:70:c7:5a:4d:1c:8e:16: c5:c1:68:c7:77:f8:60:0d:e6:ca:10:29:3c:d9:60:6f:d7:91: 59:fe:01:c2:b8:fc:0f:a1:6a:05:6f:85:9d:e3:64:fe:85:d3: c6:6c:75:ff:e6:81:e2:00:31:50:a6:18:e4:f8:c9:1c:0d:15: 0a:6b:7f:20:c6:a2:92:3f:a4:64:5c:10:ef:0f:6b:37:f2:47: 84:41:f9:c3:c7:7f:da:c1:f6:ca:47:be:90:0a:7e:42:2e:05: 6e:eb:53:f7:9e:76:b8:48:af:98:19:f7:8b:de:5f:36:cf:cd: a7:9f:3c:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqN1gC6bY/wXpbcfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk NmUxM2E1YjgtOGE1My00Yzg2LTlhODctYjgwYzY3Nzg4ZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cgoA9Mxo12fbx6dnSfRHeRsnARyNj98Y7ku MhyhSXk5qI4eqLroH3bTiskoRkEXFaAI101NCmnGy5E8RWaqWb5ALRDCD02OEX/k TKVmGGJc2W6IBTLx+7Btv7OlbM0CTyKMY95CNx5LK/3e8NyuB+dVYEJQkMH91QJw K9ltymq0Uk19bfdRSif+Ao5DLYr3SvYJzbGz1r6IIgh69LmlQS/Pg3Q3BdrmP4pP N6T+SLI0vNTByaRE4dYcFyWCs009mwdtEZpS3rR1MLoB7OVSpo3K5DQYtCUagRyp np5WP1oYaAKicC4V5bJ+N3yIvE28hMDNxgvz+iB/6hA3pkvOwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK+2Z1xjCaDegQqY5iM+FMs5SAcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmRlYzdhNjYtMDNmNS0z NzVhLThjYTktYzNkNzc4YjI3NzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAZAYHU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADNMNTHGwCxu1bo+KZnn9e99+UZzPdPvcASHXuDgkQZsuL3uwtNb /RYb5Sqh/Ux81kY13Ux1OKsFuabSvYguYRpn8IDjb4s98nR8PCX2oGZUn+lmfmKS McGiJFFC4/1cmdLjdS8Z2kT+LlLpDevxlfy+QCiSsI++Uf7bQdWuSvaZIQbkvvja fPROcMdaTRyOFsXBaMd3+GAN5soQKTzZYG/XkVn+AcK4/A+hagVvhZ3jZP6F08Zs df/mgeIAMVCmGOT4yRwNFQprfyDGopI/pGRcEO8PazfyR4RB+cPHf9rB9spHvpAK fkIuBW7rU/eedrhIr5gZ94veXzbPzaefPAo= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:00 2025 by rpki-client