$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8bfee3c-de9a-3849-ad11-fa379ffff938.roa File: d8bfee3c-de9a-3849-ad11-fa379ffff938.roa (raw, json) Hash identifier: btep5fWuVia3gBDQyOEfwaXYahKJWLcqszSbVcgvQ4o= Subject key identifier: E4:32:96:65:F8:9D:37:EA:36:1C:BC:4B:17:F7:34:3E:B4:59:F7:82 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8411969A74DE0ADB2CAF5A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8bfee3c-de9a-3849-ad11-fa379ffff938.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 2600:1900:434b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:96:9a:74:de:0a:db:2c:af:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3e7c2c70-3896-4f72-b51b-042dcfd58a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d1:04:61:2c:4e:7f:b9:35:91:9b:7d:bc:07: b9:a1:dc:c2:22:bc:fd:94:b7:ce:38:e5:95:7a:5b: 3b:06:a3:dd:83:35:85:d0:d3:d6:f3:d4:a9:4d:4a: 3f:04:44:f7:59:d6:d5:ca:ac:98:8a:47:66:dd:a4: b9:cc:83:fc:bc:c9:2e:e0:6e:61:cc:17:78:66:9c: 6e:c1:a5:dc:04:2e:d0:1a:46:c3:ce:04:4d:15:9f: c9:2c:57:18:bc:80:dd:1e:95:4a:41:5f:ba:31:e5: 9c:8c:2a:b6:e0:13:24:78:f0:7c:a5:c1:0a:c1:62: 7c:a7:c7:9c:99:0c:c4:43:17:fd:92:7e:bf:0a:b7: 05:63:59:1e:d4:db:53:e1:ce:3c:26:ac:0f:4c:46: ae:db:f0:30:9b:3b:b9:4b:25:bd:0d:19:2b:ec:11: 1e:61:78:54:91:48:69:4f:58:d9:c7:57:c6:12:a3: 67:95:6a:db:19:bb:ba:26:5c:4b:f8:6c:04:64:ba: a6:5f:83:c1:ad:00:a9:09:89:b4:0c:36:4f:7f:c0: 81:0f:61:16:ef:48:96:95:fa:76:87:9a:b6:24:b1: 33:06:37:1f:86:8c:a1:54:f3:8e:a1:b4:08:58:ce: 2d:17:b4:68:11:30:fa:83:31:8d:5d:e0:7f:74:b8: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:32:96:65:F8:9D:37:EA:36:1C:BC:4B:17:F7:34:3E:B4:59:F7:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8bfee3c-de9a-3849-ad11-fa379ffff938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1900:434b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:2f:c1:0a:21:77:2a:97:03:f2:6e:49:34:d1:fa:cd:06:41: 24:b1:ac:1f:6a:34:b1:05:1a:6f:e4:60:d5:56:a2:b6:28:fa: 2b:bd:08:53:a3:66:47:2c:7e:95:65:68:bf:36:92:d2:04:76: 71:95:f5:f5:a1:f9:6b:13:75:43:be:d7:ce:e9:3e:ee:34:06: a3:b3:a4:cb:09:4d:59:bd:68:12:e2:4c:e5:df:63:8d:31:96: 0f:2c:58:6a:91:de:b3:8f:93:42:e9:8f:50:f5:bb:89:16:26: 63:e8:97:da:67:89:5a:01:73:c9:ee:46:b9:bd:66:f8:90:20: 2b:a4:27:0f:4a:2b:58:30:e6:ce:5f:64:66:76:83:98:67:ce: 00:87:64:7d:a6:16:7d:0e:06:5d:7d:6b:84:63:3f:f0:07:b1: 54:c7:df:84:96:3a:f0:12:0c:68:f0:43:d2:f7:83:f4:04:a0: 2d:9c:3b:10:78:51:c1:db:36:6f:53:8a:d1:de:71:8c:81:aa: a5:bc:f6:c5:f1:50:13:f6:2a:b8:86:3f:7e:1f:7c:2d:a4:88: 44:2a:28:7e:24:ad:2d:67:70:62:e4:11:e9:de:83:74:9a:9d: 2d:e9:a5:cb:7d:22:aa:6e:0f:a9:87:ea:04:c7:9a:07:57:8a: cb:4a:49:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEZaadN4K2yyvWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2U3YzJjNzAtMzg5Ni00ZjcyLWI1MWItMDQyZGNmZDU4YTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNEEYSxOf7k1kZt9vAe5odzCIrz9lLfOOOWV els7BqPdgzWF0NPW89SpTUo/BET3WdbVyqyYikdm3aS5zIP8vMku4G5hzBd4Zpxu waXcBC7QGkbDzgRNFZ/JLFcYvIDdHpVKQV+6MeWcjCq24BMkePB8pcEKwWJ8p8ec mQzEQxf9kn6/CrcFY1ke1NtT4c48JqwPTEau2/Awmzu5SyW9DRkr7BEeYXhUkUhp T1jZx1fGEqNnlWrbGbu6JlxL+GwEZLqmX4PBrQCpCYm0DDZPf8CBD2EW70iWlfp2 h5q2JLEzBjcfhoyhVPOOobQIWM4tF7RoETD6gzGNXeB/dLjoQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOQylmX4nTfqNhy8Sxf3ND60WfeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDhiZmVlM2MtZGU5YS0z ODQ5LWFkMTEtZmEzNzlmZmZmOTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAZAENL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEMvwQohdyqXA/JuSTTR+s0GQSSxrB9qNLEFGm/kYNVWorYo+iu9 CFOjZkcsfpVlaL82ktIEdnGV9fWh+WsTdUO+187pPu40BqOzpMsJTVm9aBLiTOXf Y40xlg8sWGqR3rOPk0Lpj1D1u4kWJmPol9pniVoBc8nuRrm9ZviQICukJw9KK1gw 5s5fZGZ2g5hnzgCHZH2mFn0OBl19a4RjP/AHsVTH34SWOvASDGjwQ9L3g/QEoC2c OxB4UcHbNm9TitHecYyBqqW89sXxUBP2KriGP34ffC2kiEQqKH4krS1ncGLkEene g3SanS3ppct9IqpuD6mH6gTHmgdXistKSc8= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:10 2025 by rpki-client