$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f53b4428-2ca0-38f1-ad46-755f4b7dbd7f.roa File: f53b4428-2ca0-38f1-ad46-755f4b7dbd7f.roa (raw, json) Hash identifier: DPShgk8qvRo4cHYlGC/orHuLe5x60mAdTKYSS3joLGw= Subject key identifier: B9:0F:F5:66:06:88:C2:A3:BE:94:B3:B3:6A:5B:58:8A:80:8B:98:2C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8411944C17C14A20F1573BE0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f53b4428-2ca0-38f1-ad46-755f4b7dbd7f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 2600:1900:40b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:94:4c:17:c1:4a:20:f1:57:3b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=14f9cc4b-0a04-4c79-b2fa-d01451382750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fd:b1:55:28:62:33:d4:fb:bc:da:5f:e1:ba: 0e:f6:61:2f:58:73:ed:80:f0:61:af:47:0e:c4:84: eb:e7:22:3a:10:bd:70:59:b7:57:20:4b:e1:dd:7b: 66:97:b9:94:de:70:59:2d:c8:be:ac:58:9f:e0:d9: a4:7d:1a:4c:8c:58:c3:ec:8d:e5:cb:43:9d:03:1f: e1:7e:34:4c:9e:30:f9:bd:e5:9f:f1:37:49:7d:b6: a5:fa:71:a0:0b:98:51:9a:d3:cb:ac:dd:72:80:ce: 4d:94:3e:bd:31:aa:49:d7:87:d7:58:f2:74:c8:ca: 2a:98:de:f3:36:14:c4:f3:83:8b:f2:68:fc:2b:2c: 0f:21:74:ab:79:ab:1c:d4:40:32:91:cc:34:cb:a3: 09:b6:37:f2:c3:ec:c3:bb:df:ef:e4:a8:80:de:ab: b2:73:df:d2:d0:76:62:85:76:f5:ad:0b:dd:fc:8c: 23:59:ef:6d:b2:50:4c:48:35:0f:ff:01:4c:0d:d3: 7f:6c:66:18:88:78:af:f7:f5:98:18:61:b0:f8:85: 32:e8:db:a6:e8:b3:31:90:cd:d7:11:f4:58:7c:e7: ad:3f:91:85:a6:3c:0f:ae:c4:d3:83:a9:dc:dc:4d: 89:4e:35:49:fa:71:f8:a8:0f:5d:54:2e:1d:f6:21: 3c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0F:F5:66:06:88:C2:A3:BE:94:B3:B3:6A:5B:58:8A:80:8B:98:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f53b4428-2ca0-38f1-ad46-755f4b7dbd7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1900:40b0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:62:a6:27:ff:a3:0c:f4:3b:92:fb:61:43:c1:d8:7f:b4:b5: 22:74:86:14:1e:19:86:62:5f:89:c9:21:76:00:05:b6:0e:27: 60:e7:ce:f1:87:16:5f:e1:cc:cb:c5:8b:15:17:2b:b7:95:85: 51:38:cb:a3:c0:c3:35:84:bd:e4:a9:e0:40:45:07:d4:60:51: d2:00:90:36:b3:4f:3f:cc:be:4d:3a:a1:d1:41:02:31:53:63: 4a:d1:93:ad:c9:b5:a1:6b:99:18:4d:ef:a5:54:96:41:df:d4: c0:6e:e1:fd:f8:48:db:c0:fd:48:ab:5a:fc:89:aa:5c:91:67: 8a:04:a7:76:20:8e:8d:94:ad:c7:54:a7:f0:5f:e5:d5:23:56: 8b:67:bb:0e:90:55:34:8f:00:86:3f:bd:3c:0f:b5:56:a1:8a: dc:e9:8b:f4:18:28:25:c3:6b:bf:0d:85:a3:26:d5:e0:67:e6: 14:11:80:42:db:3c:1e:94:c4:11:b6:4d:eb:c1:75:17:a0:da: bb:37:8c:63:d9:49:67:8f:c7:3e:0d:46:c0:2d:81:51:11:ae: 79:9f:cb:a4:ee:9e:de:dc:e9:af:3c:b5:05:60:6c:29:10:3b: c3:19:db:aa:37:05:fc:3c:8a:32:dd:c6:f1:0b:e7:39:25:9b: 5c:58:4d:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEZRMF8FKIPFXO+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTRmOWNjNGItMGEwNC00Yzc5LWIyZmEtZDAxNDUxMzgyNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/2xVShiM9T7vNpf4boO9mEvWHPtgPBhr0cO xITr5yI6EL1wWbdXIEvh3Xtml7mU3nBZLci+rFif4NmkfRpMjFjD7I3ly0OdAx/h fjRMnjD5veWf8TdJfbal+nGgC5hRmtPLrN1ygM5NlD69MapJ14fXWPJ0yMoqmN7z NhTE84OL8mj8KywPIXSreasc1EAykcw0y6MJtjfyw+zDu9/v5KiA3quyc9/S0HZi hXb1rQvd/IwjWe9tslBMSDUP/wFMDdN/bGYYiHiv9/WYGGGw+IUy6Num6LMxkM3X EfRYfOetP5GFpjwPrsTTg6nc3E2JTjVJ+nH4qA9dVC4d9iE8SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLkP9WYGiMKjvpSzs2pbWIqAi5gsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjUzYjQ0MjgtMmNhMC0z OGYxLWFkNDYtNzU1ZjRiN2RiZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAECw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIdipif/owz0O5L7YUPB2H+0tSJ0hhQeGYZiX4nJIXYABbYOJ2Dn zvGHFl/hzMvFixUXK7eVhVE4y6PAwzWEveSp4EBFB9RgUdIAkDazTz/Mvk06odFB AjFTY0rRk63JtaFrmRhN76VUlkHf1MBu4f34SNvA/UirWvyJqlyRZ4oEp3Ygjo2U rcdUp/Bf5dUjVotnuw6QVTSPAIY/vTwPtVahitzpi/QYKCXDa78NhaMm1eBn5hQR gELbPB6UxBG2TevBdReg2rs3jGPZSWePxz4NRsAtgVERrnmfy6Tunt7c6a88tQVg bCkQO8MZ26o3Bfw8ijLdxvEL5zklm1xYTUE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:22:25 2025 by rpki-client