$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be5d2c8a-54d2-398d-a73b-78031c15b211.roa File: be5d2c8a-54d2-398d-a73b-78031c15b211.roa (raw, json) Hash identifier: FpHFb9SNEJIz8RG2c6MEzntGlFQcbLVrix51+RHFP2c= Subject key identifier: 48:B6:64:5A:BF:73:68:49:6F:A9:3F:F1:71:52:D3:8C:19:4F:0B:D1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A761B531C90312699533A1AC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be5d2c8a-54d2-398d-a73b-78031c15b211.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2e8b:6000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:53:1c:90:31:26:99:53:3a:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=e91500af-33a0-40c7-8be5-e209e1ab7edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:e4:03:8c:99:12:6d:cf:31:3e:c2:94:41: 62:a0:d0:f5:87:aa:d2:82:25:46:c4:5e:45:9c:e3: 23:b7:7e:74:25:27:38:fb:ee:eb:67:ff:2a:d2:a5: 87:b4:2b:e4:38:9c:5c:17:a4:fe:cb:ba:58:02:53: 50:6d:8c:4f:b3:92:8b:9e:d0:6a:bf:bb:cf:f0:0d: d1:72:f1:71:cf:87:1b:ce:c8:4b:53:9d:58:4c:75: 54:fa:44:df:27:1e:fd:e4:7b:c8:f8:f6:45:89:8b: 3d:4c:97:f9:cd:40:f9:39:fb:28:bc:22:f8:92:50: 17:a4:cf:1c:b7:bd:65:63:47:b2:5f:40:6a:d7:c3: 58:f2:31:ee:74:64:03:c9:96:b9:2c:80:88:50:e3: 17:6f:da:3f:27:67:d7:b5:c3:5c:41:03:2d:cf:a9: ee:71:62:1b:aa:0f:0c:35:92:8d:86:96:f7:9b:c0: 93:d0:2d:22:01:42:ca:8d:6e:70:1c:1f:77:c9:51: 49:db:3e:c5:cf:dc:79:1f:b9:3b:65:82:02:0c:89: 81:53:87:53:93:10:b8:f6:6d:af:8c:ec:34:e9:df: 82:5f:26:d7:2f:75:80:55:34:b3:cd:a3:32:c2:5b: 08:f7:d9:d3:9c:e6:6d:d7:a8:b1:35:4c:e0:fa:e1: 17:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B6:64:5A:BF:73:68:49:6F:A9:3F:F1:71:52:D3:8C:19:4F:0B:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be5d2c8a-54d2-398d-a73b-78031c15b211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:6000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:67:9a:2c:0e:0a:7f:b3:8e:c7:12:7f:cb:99:43:df:61:1c: 86:07:68:07:7e:34:a2:68:74:72:0f:fd:9d:b3:28:de:f2:80: 82:57:8d:bb:dc:e5:b6:14:ea:66:e0:2e:d6:39:ca:1f:23:73: f5:89:3e:ea:f9:60:57:fc:b0:ca:aa:06:02:a7:10:6a:28:26: e5:c2:80:b4:28:44:29:ee:c8:82:7b:30:a2:65:7a:5d:60:2a: 05:41:27:cf:87:0f:97:dc:42:40:4e:b7:7f:97:b3:30:7a:61: b4:73:21:c5:fc:98:54:44:a3:aa:46:a4:11:6d:1a:f8:f7:55: c8:67:68:54:00:6f:74:60:7b:7e:5f:1c:7c:7f:84:01:f3:2c: de:3e:97:55:12:d2:ba:3b:16:9d:47:2a:fa:57:70:a3:9d:7f: 3d:f8:06:a3:1e:d3:6d:33:27:22:46:45:1e:f8:dd:12:45:b4: 52:c2:93:7c:f2:0b:ee:be:ee:46:78:b8:02:c6:d4:00:eb:c5: 4f:52:b7:a1:fc:3a:c1:fc:f8:27:5b:08:c0:48:a4:1c:15:b4: 5d:54:09:e4:5e:39:93:9a:2f:5c:b7:2e:c9:0d:0d:87:87:bf: d9:f3:78:45:2f:d7:da:d1:02:88:31:aa:b3:ca:c7:98:2f:cc: ff:69:bf:23 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEp2G1MckDEmmVM6GsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk ZTkxNTAwYWYtMzNhMC00MGM3LThiZTUtZTIwOWUxYWI3ZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi/kA4yZEm3PMT7ClEFioND1h6rSgiVGxF5F nOMjt350JSc4++7rZ/8q0qWHtCvkOJxcF6T+y7pYAlNQbYxPs5KLntBqv7vP8A3R cvFxz4cbzshLU51YTHVU+kTfJx795HvI+PZFiYs9TJf5zUD5OfsovCL4klAXpM8c t71lY0eyX0Bq18NY8jHudGQDyZa5LICIUOMXb9o/J2fXtcNcQQMtz6nucWIbqg8M NZKNhpb3m8CT0C0iAULKjW5wHB93yVFJ2z7Fz9x5H7k7ZYICDImBU4dTkxC49m2v jOw06d+CXybXL3WAVTSzzaMywlsI99nTnOZt16ixNUzg+uEXowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEi2ZFq/c2hJb6k/8XFS04wZTwvRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmU1ZDJjOGEtNTRkMi0z OThkLWE3M2ItNzgwMzFjMTViMjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui2Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAe2eaLA4Kf7OOxxJ/y5lD32EchgdoB340omh0cg/9nbMo3vKAgleN u9zlthTqZuAu1jnKHyNz9Yk+6vlgV/ywyqoGAqcQaigm5cKAtChEKe7IgnswomV6 XWAqBUEnz4cPl9xCQE63f5ezMHphtHMhxfyYVESjqkakEW0a+PdVyGdoVABvdGB7 fl8cfH+EAfMs3j6XVRLSujsWnUcq+ldwo51/PfgGox7TbTMnIkZFHvjdEkW0UsKT fPIL7r7uRni4AsbUAOvFT1K3ofw6wfz4J1sIwEikHBW0XVQJ5F45k5ovXLcuyQ0N h4e/2fN4RS/X2tECiDGqs8rHmC/M/2m/Iw== -----END CERTIFICATE-----Generated at Thu Jul 10 06:41:58 2025 by rpki-client