$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ceaca840-5713-3426-8399-6e52e4dc1ec1.roa File: ceaca840-5713-3426-8399-6e52e4dc1ec1.roa (raw, json) Hash identifier: 7ZnFbGVD+biaJYshUe7rBCSL0qamqIfZd2jF5yEains= Subject key identifier: A3:38:16:2C:2C:2E:C9:17:1E:CC:EC:FC:2F:71:61:E1:32:56:D7:54 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B03168DFB3394488DA14B8DC0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ceaca840-5713-3426-8399-6e52e4dc1ec1.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 8987 IP address blocks: 2605:4300:2c15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:8d:fb:33:94:48:8d:a1:4b:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=70433d0b-d80c-4841-8885-1be0fd0c2c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:04:30:48:00:33:f2:18:de:b8:75:f7:85: 12:7c:d5:ef:53:ab:70:d0:0a:3d:9b:bf:21:79:5b: a3:0b:43:36:9a:09:05:a7:b5:eb:d0:ab:be:5d:9b: 23:f0:6f:7a:ab:ba:62:d7:a6:b2:f1:fb:05:32:c0: e2:5f:ca:2d:89:a7:31:df:c4:43:3a:06:f5:62:7e: 44:6c:c3:59:50:ec:0e:54:e6:db:3a:87:a2:c7:1e: f6:95:28:77:6b:f4:b9:19:4c:33:4e:d7:02:40:34: 86:2c:f1:83:90:d4:a3:a4:9d:ed:86:fe:49:8d:c6: 86:2c:5f:bd:cd:a2:68:b6:de:05:3f:1a:35:b1:66: e4:28:b3:36:1e:e1:0e:51:2f:b0:60:81:17:01:13: a4:b0:1b:8b:a4:9c:ef:13:01:30:c3:e6:7f:02:80: 84:b6:53:ac:0b:34:74:6d:87:31:25:39:d5:9e:43: 0b:59:a9:94:a4:0e:8b:c5:40:9a:ef:c1:4c:d9:4f: a3:4e:e0:ff:f6:4a:0d:d3:c4:50:e9:12:88:66:0c: a6:6f:33:23:18:88:48:b0:c2:2b:04:02:84:0b:2a: 4b:c2:3d:ac:20:eb:68:af:73:ba:5d:1e:69:43:53: ee:f2:73:ec:98:77:f0:b6:f6:9e:05:25:42:60:0f: dc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:38:16:2C:2C:2E:C9:17:1E:CC:EC:FC:2F:71:61:E1:32:56:D7:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ceaca840-5713-3426-8399-6e52e4dc1ec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c15::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:35:98:da:25:85:66:1c:0c:a9:32:55:1c:b6:88:bb:15:d4: a5:cf:67:af:da:13:23:84:f8:1a:be:22:3c:2a:49:e3:e1:bf: d9:8e:5f:86:90:cd:6f:73:46:a2:cb:00:fd:f1:1b:65:96:ff: ea:8a:4b:e0:a2:67:ab:4f:b8:79:94:49:21:8d:0a:69:ac:b9: 85:80:29:45:0d:ea:0e:31:07:f0:b9:14:d1:f7:43:15:68:ca: 1c:50:d0:fa:2a:68:b2:60:cf:42:7e:49:5a:37:02:61:ae:cc: 35:3d:5e:be:ed:69:b2:9e:3c:6e:c3:24:37:1f:2b:62:2e:0f: 28:8f:2c:c2:21:ee:c0:3b:71:71:c4:f0:03:38:42:a5:cb:2b: 85:50:85:7e:36:e9:c6:1c:6c:06:bf:0d:d4:5d:9c:b6:85:9c: 45:9b:6b:59:69:66:20:df:a9:b2:31:b6:07:a1:f2:49:53:41: 12:35:5f:57:dc:9f:0c:e9:d7:ac:f4:7d:75:c7:2f:90:12:92: 2c:52:62:c9:62:54:0e:1e:ec:bb:e2:24:05:74:1b:71:cc:af: da:62:5d:c9:13:02:1e:8c:b0:cf:76:59:aa:c8:87:0f:8b:91: 7e:2c:55:ca:e9:96:91:a3:dc:24:6a:4f:00:d5:c9:a6:77:4e: ed:ee:c6:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsDFo37M5RIjaFLjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk NzA0MzNkMGItZDgwYy00ODQxLTg4ODUtMWJlMGZkMGMyYzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+AEMEgAM/IY3rh194USfNXvU6tw0Ao9m78h eVujC0M2mgkFp7Xr0Ku+XZsj8G96q7pi16ay8fsFMsDiX8otiacx38RDOgb1Yn5E bMNZUOwOVObbOoeixx72lSh3a/S5GUwzTtcCQDSGLPGDkNSjpJ3thv5JjcaGLF+9 zaJott4FPxo1sWbkKLM2HuEOUS+wYIEXAROksBuLpJzvEwEww+Z/AoCEtlOsCzR0 bYcxJTnVnkMLWamUpA6LxUCa78FM2U+jTuD/9koN08RQ6RKIZgymbzMjGIhIsMIr BAKECypLwj2sIOtor3O6XR5pQ1Pu8nPsmHfwtvaeBSVCYA/c7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKM4FiwsLskXHszs/C9xYeEyVtdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2VhY2E4NDAtNTcxMy0z NDI2LTgzOTktNmU1MmU0ZGMxZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKU1mNolhWYcDKkyVRy2iLsV1KXPZ6/aEyOE+Bq+IjwqSePhv9mO X4aQzW9zRqLLAP3xG2WW/+qKS+CiZ6tPuHmUSSGNCmmsuYWAKUUN6g4xB/C5FNH3 QxVoyhxQ0PoqaLJgz0J+SVo3AmGuzDU9Xr7tabKePG7DJDcfK2IuDyiPLMIh7sA7 cXHE8AM4QqXLK4VQhX426cYcbAa/DdRdnLaFnEWba1lpZiDfqbIxtgeh8klTQRI1 X1fcnwzp16z0fXXHL5ASkixSYsliVA4e7LviJAV0G3HMr9piXckTAh6MsM92WarI hw+LkX4sVcrplpGj3CRqTwDVyaZ3Tu3uxuQ= -----END CERTIFICATE-----Generated at Sun Sep 7 11:21:35 2025 by rpki-client