$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa File: fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa (raw, json) Hash identifier: si/BoneooVZMvV8hKj82fJk1OgZdZnMxYv6oZUiaFsY= Subject key identifier: A5:E9:F8:81:67:15:0F:CC:28:FB:62:9F:1B:46:61:D4:28:C1:05:3D Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F4328584A90A0B7B743D6C966367D4910 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 27299 IP address blocks: 2620:10a:8001::/48 maxlen: 48 2620:10a:8002::/48 maxlen: 48 2620:10a:8004::/48 maxlen: 48 2620:10a:8023::/48 maxlen: 48 2620:10a:80d1::/48 maxlen: 48 2620:10a:80d4::/48 maxlen: 48 2620:10a:80f1::/48 maxlen: 48 2620:10a:80f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:b7:b7:43:d6:c9:66:36:7d:49:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=cc601d32-03eb-4bbf-bb4f-008a379b7f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f9:09:eb:eb:b7:e8:a0:e2:84:2a:19:65:af: e6:0c:f4:5f:8f:02:8f:a9:56:5c:a4:9b:c9:9b:65: 4e:65:72:8e:e2:17:58:a2:bd:d6:f0:7f:53:23:20: 31:99:ff:84:bf:54:bc:a8:16:fe:56:2a:59:62:9e: da:09:84:8a:22:1d:62:47:8b:0e:73:42:5e:4c:92: 34:bb:dd:4e:10:03:3f:fd:0a:92:28:89:35:b3:56: 29:c0:e9:5a:86:c4:51:21:91:f9:5b:75:7b:45:f0: dd:f8:4d:ae:f2:13:e4:8a:85:bf:94:a5:31:ef:62: 36:b2:b5:bd:a0:fb:af:a3:7b:f5:d4:6c:ed:db:b6: 67:76:b9:e1:ae:f4:0c:47:62:d7:51:25:09:69:a6: f6:dd:8a:03:d9:c2:e2:16:22:55:42:8f:98:da:86: b1:79:2c:58:f5:17:86:c3:c5:d3:19:c1:45:ba:51: 96:4e:74:de:99:36:5c:eb:99:f7:dd:39:41:fd:e6: 41:11:e3:5a:42:7b:59:3d:d9:09:b2:a6:1a:75:59: 0e:55:bc:91:e1:62:5b:82:59:77:da:ab:09:1a:2d: 98:c8:95:48:ad:d6:79:28:6f:22:d7:4a:d4:26:bf: bf:5a:6f:43:9c:3a:b9:49:5a:8c:ee:46:06:48:eb: 03:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E9:F8:81:67:15:0F:CC:28:FB:62:9F:1B:46:61:D4:28:C1:05:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:10a:8001::-2620:10a:8002:ffff:ffff:ffff:ffff:ffff 2620:10a:8004::/48 2620:10a:8023::/48 2620:10a:80d1::/48 2620:10a:80d4::/48 2620:10a:80f1::/48 2620:10a:80f4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:35:c9:6a:06:97:6f:1f:c8:5f:56:b2:0f:12:f0:d6:74:bc: 47:38:d0:42:04:48:84:56:90:80:cd:5d:0b:95:de:ac:3a:56: fd:b6:42:eb:2a:48:2c:7b:6f:f8:ea:04:08:a2:a0:e2:b4:5c: 41:0a:4e:e4:46:38:cb:15:15:52:ba:e0:83:1c:2c:7a:3f:e8: 87:2c:1d:c7:80:bd:e1:8d:8a:a0:40:69:2c:64:c9:e2:8c:c2: e9:a2:29:a7:30:fb:26:b4:04:3a:ca:64:2c:79:bd:88:27:11: b1:27:9e:09:4e:bf:1d:95:9a:43:65:8c:d7:4d:e0:35:38:b0: 5d:f8:d0:4e:dc:a7:b5:66:db:08:43:f0:e8:c0:ec:b8:c3:71: fd:4c:2e:f1:f9:b9:64:97:4b:3c:b8:25:0d:69:18:7f:5c:50: 54:ea:86:d5:d4:57:71:07:b8:6b:28:0c:39:07:db:9f:aa:b1: 29:bc:3b:89:5e:1b:3d:cc:ca:16:60:93:95:86:9f:0f:2d:07: 8d:20:cc:b1:b8:fb:0e:e7:6a:2b:e5:ac:5c:0a:0b:94:ea:94: ba:0f:1f:c7:17:4a:f9:a2:9a:62:e4:1c:51:b5:02:88:67:00: 6d:2a:4f:61:ba:86:43:b0:2a:0e:ab:16:5e:d5:47:20:df:b4: 71:c2:c2:5d -----BEGIN CERTIFICATE----- MIIGhzCCBW+gAwIBAgIUAQ0Mn0MoWEqQoLe3Q9bJZjZ9SRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk Y2M2MDFkMzItMDNlYi00YmJmLWJiNGYtMDA4YTM3OWI3ZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfkJ6+u36KDihCoZZa/mDPRfjwKPqVZcpJvJ m2VOZXKO4hdYor3W8H9TIyAxmf+Ev1S8qBb+VipZYp7aCYSKIh1iR4sOc0JeTJI0 u91OEAM//QqSKIk1s1YpwOlahsRRIZH5W3V7RfDd+E2u8hPkioW/lKUx72I2srW9 oPuvo3v11Gzt27ZndrnhrvQMR2LXUSUJaab23YoD2cLiFiJVQo+Y2oaxeSxY9ReG w8XTGcFFulGWTnTemTZc65n33TlB/eZBEeNaQntZPdkJsqYadVkOVbyR4WJbgll3 2qsJGi2YyJVIrdZ5KG8i10rUJr+/Wm9DnDq5SVqM7kYGSOsDMQIDAQABo4IDmTCC A5UwHQYDVR0OBBYEFKXp+IFnFQ/MKPtinxtGYdQowQU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvZmE0Nzg1NzctMTllNS0z YmI2LWI3ZDgtYTJjYmNmMjVhM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAAjBKMBIDBwAmIAEK gAEDBwAmIAEKgAIDBwAmIAEKgAQDBwAmIAEKgCMDBwAmIAEKgNEDBwAmIAEKgNQD BwAmIAEKgPEDBwAmIAEKgPQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARTXJagaXbx/IX1ayDxLw1nS8RzjQ QgRIhFaQgM1dC5XerDpW/bZC6ypILHtv+OoECKKg4rRcQQpO5EY4yxUVUrrggxws ej/ohywdx4C94Y2KoEBpLGTJ4ozC6aIppzD7JrQEOspkLHm9iCcRsSeeCU6/HZWa Q2WM103gNTiwXfjQTtyntWbbCEPw6MDsuMNx/Uwu8fm5ZJdLPLglDWkYf1xQVOqG 1dRXcQe4aygMOQfbn6qxKbw7iV4bPczKFmCTlYafDy0HjSDMsbj7DudqK+WsXAoL lOqUug8fxxdK+aKaYuQcUbUCiGcAbSpPYbqGQ7AqDqsWXtVHIN+0ccLCXQ== -----END CERTIFICATE-----Generated at Sun Jul 27 14:07:24 2025 by rpki-client