$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3841948e-5bde-314e-a58e-955a4e7f65a8.roa File: 3841948e-5bde-314e-a58e-955a4e7f65a8.roa (raw, json) Hash identifier: /eYYSKEuoTlPYnHzjasxRqqJ6FNCnJ8I6RGvkNRLvno= Subject key identifier: C1:ED:62:13:9F:EA:88:38:FC:6A:35:C5:FB:A8:C3:DE:A7:C5:22:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84123B8DF831C8D702C6FB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3841948e-5bde-314e-a58e-955a4e7f65a8.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 2600:1901:bdd0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:3b:8d:f8:31:c8:d7:02:c6:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=85a476df-bf78-4ed1-9c6c-2f03d63c4f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:a5:db:e3:d0:5b:33:fa:e2:45:1a:3c:f3: f2:13:67:2b:89:b8:4e:2a:ba:c3:da:c6:67:87:77: dc:02:8f:6c:9a:f6:c1:8a:b7:dc:d9:e8:d6:f5:74: e3:86:b3:f6:25:7a:ef:fe:c7:0b:8a:27:59:76:61: cd:c9:69:29:d0:e2:04:ea:fd:f5:d9:d2:48:42:3a: a1:5c:e2:84:44:36:7c:ee:6d:45:2d:68:89:b5:00: 9d:5a:0a:ca:f1:c7:21:c3:d6:b3:06:ad:74:1e:34: db:e6:77:ad:90:72:49:af:ef:33:d3:90:1e:1c:9a: 27:67:f6:3c:2b:ff:aa:f5:f4:23:00:89:f8:c8:2b: eb:0a:8f:4d:dc:f2:44:51:3b:e1:a8:60:31:40:ea: 5a:e9:52:c4:33:8a:d8:b0:03:f3:99:4a:06:41:33: 01:42:4d:64:4c:d1:c4:cb:b5:3f:bd:a6:c8:90:bf: a1:9f:d5:2d:24:cb:ea:6e:05:f4:ff:3e:1b:05:c2: 12:e7:69:94:ae:0e:63:1b:e6:3d:bd:14:16:ac:9a: b3:08:24:d8:27:c3:0e:50:11:c4:7b:aa:15:51:0c: cc:a1:41:2c:b0:4b:48:6b:d1:49:75:4f:44:c2:94: b9:94:cc:64:e4:f1:30:32:80:7b:2b:c8:ba:9e:f2: 1f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:ED:62:13:9F:EA:88:38:FC:6A:35:C5:FB:A8:C3:DE:A7:C5:22:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3841948e-5bde-314e-a58e-955a4e7f65a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1901:bdd0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:34:3e:7c:e7:ac:c2:49:d2:68:33:8b:25:23:81:7e:6a:04: c0:0e:a4:c2:e0:76:bc:8b:5d:ed:ef:a3:9d:4c:0e:95:94:ba: e4:59:97:21:b7:2c:21:89:c1:26:d9:0f:29:4e:dd:47:84:46: 35:65:89:4c:b6:f2:95:22:31:6d:d8:ff:dd:88:79:71:9e:e1: 55:a7:05:8c:f7:8a:1d:40:d8:3a:d3:d2:7b:a6:ee:d5:20:10: 8d:02:bd:41:8b:f7:aa:46:45:d2:3c:f7:75:d9:c0:e1:d9:65: 58:14:dd:3e:8e:dd:0c:26:e7:10:dd:4e:f2:fd:94:23:b7:d5: 03:40:9f:90:84:7b:78:f6:a9:37:8a:f5:20:1d:28:74:23:b0: 45:e6:4a:e0:59:49:a7:ed:28:e3:96:88:55:af:c7:c6:f2:57: aa:f9:6a:a7:b1:11:cf:a7:ed:9d:e0:c5:c6:6b:94:3b:78:2b: a2:0b:0a:f9:2f:05:54:03:62:b3:5b:f4:02:4f:8a:12:3e:1d: 79:0c:20:93:c0:ab:08:50:24:52:06:13:b2:db:29:d0:e3:eb: 18:a1:f6:2a:29:54:9f:ba:6a:3d:ae:9e:b6:19:84:ff:12:a8: 8f:88:d2:4a:8f:74:06:36:34:05:56:9e:85:d4:a9:2c:01:9b: 37:83:ff:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEjuN+DHI1wLG+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODVhNDc2ZGYtYmY3OC00ZWQxLTljNmMtMmYwM2Q2M2M0ZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorGl2+PQWzP64kUaPPPyE2cribhOKrrD2sZn h3fcAo9smvbBirfc2ejW9XTjhrP2JXrv/scLiidZdmHNyWkp0OIE6v312dJIQjqh XOKERDZ87m1FLWiJtQCdWgrK8cchw9azBq10HjTb5netkHJJr+8z05AeHJonZ/Y8 K/+q9fQjAIn4yCvrCo9N3PJEUTvhqGAxQOpa6VLEM4rYsAPzmUoGQTMBQk1kTNHE y7U/vabIkL+hn9UtJMvqbgX0/z4bBcIS52mUrg5jG+Y9vRQWrJqzCCTYJ8MOUBHE e6oVUQzMoUEssEtIa9FJdU9EwpS5lMxk5PEwMoB7K8i6nvIfjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMHtYhOf6og4/Go1xfuow96nxSLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzg0MTk0OGUtNWJkZS0z MTRlLWE1OGUtOTU1YTRlN2Y2NWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAb3Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJU0PnznrMJJ0mgziyUjgX5qBMAOpMLgdryLXe3vo51MDpWUuuRZ lyG3LCGJwSbZDylO3UeERjVliUy28pUiMW3Y/92IeXGe4VWnBYz3ih1A2DrT0num 7tUgEI0CvUGL96pGRdI893XZwOHZZVgU3T6O3Qwm5xDdTvL9lCO31QNAn5CEe3j2 qTeK9SAdKHQjsEXmSuBZSaftKOOWiFWvx8byV6r5aqexEc+n7Z3gxcZrlDt4K6IL CvkvBVQDYrNb9AJPihI+HXkMIJPAqwhQJFIGE7LbKdDj6xih9iopVJ+6aj2unrYZ hP8SqI+I0kqPdAY2NAVWnoXUqSwBmzeD/6s= -----END CERTIFICATE-----Generated at Tue Jul 22 04:38:11 2025 by rpki-client