$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa File: 7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa (raw, json) Hash identifier: fc8xOxDe4vqmxCrMaF5X/WMJYDAzpBlI2A3jVu1QCuU= Subject key identifier: EC:0B:EC:CC:F7:48:20:42:97:86:1B:2C:D1:E8:20:35:B3:71:29:D0 Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Certificate serial: 010D0C9F4328584B13D6ABFB734F9DA942736A80 Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 32298 IP address blocks: 2606:d640:ef00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:ab:fb:73:4f:9d:a9:42:73:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=b38b46b4-6ca0-497e-bccc-1a405c717297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0a:00:e2:2d:d7:c4:f4:07:e2:95:1f:b6:8a: fc:72:7f:c2:c0:e1:40:2b:e5:3d:fe:d9:23:b1:22: 9f:e1:28:12:ad:5a:07:dd:dd:b7:99:d1:d2:87:d4: 80:a9:97:c4:9c:50:30:fa:f7:b5:a9:5c:5c:6b:a4: 55:88:c4:59:eb:7d:fc:ae:70:2f:bc:6b:5c:a5:f6: e2:9b:16:1b:6b:92:9d:89:9a:cb:0d:12:3c:f9:5c: b2:04:94:60:ae:e3:be:d2:21:85:19:59:5f:16:2f: 7b:e6:e6:11:80:82:4b:f3:00:c4:6a:88:f7:46:d9: b3:67:c0:d0:d7:f9:b8:74:f5:c3:33:cd:16:ac:40: 23:b8:39:cd:3d:54:0c:8d:8c:6a:e5:ad:28:51:85: f8:ec:12:7e:a6:c4:33:64:81:43:0e:29:f5:0f:d6: 1e:e2:82:b0:df:67:ce:bd:29:a8:fe:cb:30:34:24: 2d:95:9c:89:c7:46:2b:1c:89:24:14:37:0a:c4:1b: 1f:e4:24:14:76:b2:32:1b:4a:71:2d:7c:f4:09:fa: df:a8:bf:c0:ac:60:79:0a:a4:62:b7:eb:7a:ea:83: a7:5e:f6:95:97:a0:b5:e7:61:f5:d5:f4:65:c9:18: 5b:af:1e:d1:3d:8a:e6:7d:fc:c7:49:13:50:31:95: 9e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0B:EC:CC:F7:48:20:42:97:86:1B:2C:D1:E8:20:35:B3:71:29:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl X509v3 Authority Key Identifier: keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer sbgp-ipAddrBlock: critical IPv6: 2606:d640:ef00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:2c:dc:c2:15:58:57:74:2e:f4:2d:a4:03:d1:72:9a:ad:7a: dc:8e:64:11:74:7c:cb:da:1f:33:34:3e:40:9a:16:7c:ec:f5: bf:13:d0:c8:d1:a1:fd:5f:0e:49:51:29:88:30:8c:83:4c:51: 9d:ed:14:b0:af:04:70:ad:ef:b7:78:1e:69:78:95:a2:62:87: f4:f0:03:5e:57:f8:60:29:5f:97:ed:40:c0:c4:30:2d:90:9b: e8:b0:21:c4:d0:00:b6:60:8b:7e:f6:0e:1c:8f:b5:89:09:5f: 13:aa:38:bb:60:cd:fa:90:f7:10:d7:d6:b1:ae:97:86:57:eb: 93:11:9d:f2:64:7e:bf:ea:59:83:7c:68:00:55:91:5d:83:21: f1:54:37:e9:3d:9c:69:51:e0:10:36:a2:84:ed:b7:d1:d4:dd: 13:c3:64:d0:47:d6:d7:e7:58:00:f4:3e:33:ee:2c:32:cc:52: 5a:7e:5a:cd:9b:ce:07:ea:f2:05:40:30:db:f2:c4:06:1e:fd: d3:d7:0a:c7:3c:ac:75:2f:8a:ef:92:ad:2a:27:02:7e:e6:17: 50:b0:72:da:35:53:68:e4:da:6f:e4:f4:40:e6:34:dc:73:98: 73:5b:08:b5:dd:fb:ca:9e:67:cc:0c:32:6c:5b:b4:5c:1f:44: 02:df:ef:7c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsT1qv7c0+dqUJzaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk YTM1MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YjM4YjQ2YjQtNmNhMC00OTdlLWJjY2MtMWE0MDVjNzE3Mjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowoA4i3XxPQH4pUftor8cn/CwOFAK+U9/tkj sSKf4SgSrVoH3d23mdHSh9SAqZfEnFAw+ve1qVxca6RViMRZ6338rnAvvGtcpfbi mxYba5KdiZrLDRI8+VyyBJRgruO+0iGFGVlfFi975uYRgIJL8wDEaoj3RtmzZ8DQ 1/m4dPXDM80WrEAjuDnNPVQMjYxq5a0oUYX47BJ+psQzZIFDDin1D9Ye4oKw32fO vSmo/sswNCQtlZyJx0YrHIkkFDcKxBsf5CQUdrIyG0pxLXz0CfrfqL/ArGB5CqRi t+t66oOnXvaVl6C152H11fRlyRhbrx7RPYrmffzHSRNQMZWe+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOwL7Mz3SCBCl4YbLNHoIDWzcSnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5 YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvNzcxM2I0YmQtMWNjZS0z YjJmLTg3NTEtMDRiNzZkZDM3MDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1 NGZkY2RhMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgbWQO8w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVyzcwhVYV3Qu9C2kA9Fymq163I5kEXR8y9ofMzQ+QJoWfOz1vxPQ yNGh/V8OSVEpiDCMg0xRne0UsK8EcK3vt3geaXiVomKH9PADXlf4YClfl+1AwMQw LZCb6LAhxNAAtmCLfvYOHI+1iQlfE6o4u2DN+pD3ENfWsa6XhlfrkxGd8mR+v+pZ g3xoAFWRXYMh8VQ36T2caVHgEDaihO230dTdE8Nk0EfW1+dYAPQ+M+4sMsxSWn5a zZvOB+ryBUAw2/LEBh7909cKxzysdS+K75KtKicCfuYXULBy2jVTaOTab+T0QOY0 3HOYc1sItd37yp5nzAwybFu0XB9EAt/vfA== -----END CERTIFICATE-----Generated at Fri Oct 10 21:36:53 2025 by rpki-client