$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/f3d8c32d-472b-38e3-8718-679438b174ef.roa File: f3d8c32d-472b-38e3-8718-679438b174ef.roa (raw, json) Hash identifier: eOK1RQb6Igl7L2MzRcmrY7YRHKjRrvBS13R1W3mhIg4= Subject key identifier: 35:1E:C8:DA:42:18:E9:5E:9F:C5:74:C9:FB:05:ED:70:6A:05:37:AD Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F4328584A90A0B8466A030FDDD5F8F880 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/f3d8c32d-472b-38e3-8718-679438b174ef.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 55195 IP address blocks: 2001:500:a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:b8:46:6a:03:0f:dd:d5:f8:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=7ce69da0-4e1c-444e-9241-442d0017de44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:38:c5:68:ac:58:eb:85:af:2f:5d:a6:2a: f3:b0:aa:c3:09:ae:8e:18:cc:13:f1:c1:a2:85:e8: 93:66:7d:c9:5d:c6:ba:14:49:28:32:a9:89:29:43: 9a:f0:5c:cf:ee:55:ef:3e:29:0e:e0:45:52:e6:ab: c6:1a:84:0a:cf:cb:89:ff:1f:6d:3c:29:8e:de:16: f3:d9:cc:fc:cf:1e:a4:06:97:4e:7c:9c:a2:40:be: 7c:e9:ea:e1:ba:92:a2:ca:31:50:ba:92:bd:e4:5b: 16:aa:d5:4c:68:53:fd:d6:72:5f:8d:bf:28:74:0c: c7:7b:34:64:99:8d:d0:10:28:89:7a:bb:e2:d8:dc: 1f:49:b0:a9:a1:66:92:ad:09:18:69:45:ef:49:52: a0:3b:10:4c:cf:32:d7:27:a9:d8:dc:1d:2b:f0:3f: 3d:cb:5b:25:e3:d4:14:60:35:f9:e5:ce:fe:8f:d4: 27:ae:f5:f1:dc:03:e2:7f:a7:05:59:ea:4d:c4:45: 78:35:d4:da:24:50:bf:36:42:2c:f3:0d:4f:54:0c: 5d:63:45:c7:2b:64:b4:0f:4c:48:a8:54:4b:91:76: 5d:5f:86:06:66:77:69:9f:ac:ed:7f:e7:e9:22:92: 77:06:b9:06:df:2d:9c:c0:9f:0b:7a:aa:79:a8:cb: 93:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1E:C8:DA:42:18:E9:5E:9F:C5:74:C9:FB:05:ED:70:6A:05:37:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/f3d8c32d-472b-38e3-8718-679438b174ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:e5:23:88:d5:18:fb:3c:19:a6:8f:1a:09:ec:79:fa:d7:04: 38:6c:5f:fa:3b:ae:8d:b6:d8:d9:96:40:2c:16:5b:c7:80:1b: fc:7f:83:97:34:1a:ab:01:93:fa:5b:10:80:c5:0e:6d:d8:78: 9d:51:aa:55:99:45:78:15:db:9f:dc:7b:cc:96:86:af:09:65: c9:73:42:84:12:2d:75:f9:be:69:4f:62:bb:5a:85:7f:61:ec: 98:6a:41:f4:c1:83:9e:a2:51:02:18:22:0c:43:e1:81:ae:ba: 7b:63:2e:69:5a:00:4d:f4:80:9c:89:43:5c:2d:87:60:f4:40: 81:26:34:24:4c:4d:ff:c1:1f:df:c8:39:7f:ff:49:fb:e9:3b: 65:2e:a0:8e:b2:30:04:f9:33:3d:4d:4f:67:c1:d1:46:e7:26: fa:ac:70:ab:af:94:b6:02:d9:96:c1:9e:c4:d1:4e:ce:d9:da: d4:63:39:22:0a:35:bd:c9:3a:01:03:28:a0:6a:cb:4d:22:48: 80:2e:ad:7c:9f:a8:3b:ff:bd:9f:cb:4c:87:41:3f:28:2d:a9: 6c:95:9c:4c:fe:44:f5:c0:9a:56:4a:d5:cd:01:ba:f1:4d:af: 4b:b6:6b:e0:c1:90:1a:94:b5:14:92:bf:74:6b:54:53:aa:72: 11:43:ff:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoLhGagMP3dX4+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk N2NlNjlkYTAtNGUxYy00NDRlLTkyNDEtNDQyZDAwMTdkZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0k4xWisWOuFry9dpirzsKrDCa6OGMwT8cGi heiTZn3JXca6FEkoMqmJKUOa8FzP7lXvPikO4EVS5qvGGoQKz8uJ/x9tPCmO3hbz 2cz8zx6kBpdOfJyiQL586erhupKiyjFQupK95FsWqtVMaFP91nJfjb8odAzHezRk mY3QECiJervi2NwfSbCpoWaSrQkYaUXvSVKgOxBMzzLXJ6nY3B0r8D89y1sl49QU YDX55c7+j9QnrvXx3APif6cFWepNxEV4NdTaJFC/NkIs8w1PVAxdY0XHK2S0D0xI qFRLkXZdX4YGZndpn6ztf+fpIpJ3BrkG3y2cwJ8Leqp5qMuTEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDUeyNpCGOlen8V0yfsF7XBqBTetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvZjNkOGMzMmQtNDcyYi0z OGUzLTg3MTgtNjc5NDM4YjE3NGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKDlI4jVGPs8GaaPGgnsefrXBDhsX/o7ro222NmWQCwWW8eAG/x/ g5c0GqsBk/pbEIDFDm3YeJ1RqlWZRXgV25/ce8yWhq8JZclzQoQSLXX5vmlPYrta hX9h7JhqQfTBg56iUQIYIgxD4YGuuntjLmlaAE30gJyJQ1wth2D0QIEmNCRMTf/B H9/IOX//SfvpO2UuoI6yMAT5Mz1NT2fB0UbnJvqscKuvlLYC2ZbBnsTRTs7Z2tRj OSIKNb3JOgEDKKBqy00iSIAurXyfqDv/vZ/LTIdBPygtqWyVnEz+RPXAmlZK1c0B uvFNr0u2a+DBkBqUtRSSv3RrVFOqchFD/0k= -----END CERTIFICATE-----Generated at Sun Jul 27 09:44:37 2025 by rpki-client