$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/2aa850df-3965-3478-8482-ece16e652a7a.roa File: 2aa850df-3965-3478-8482-ece16e652a7a.roa (raw, json) Hash identifier: 0FC/7V8u21gcOf5MXDR4AIw1BkCSHGR4W+neL6Mhktw= Subject key identifier: 81:EE:9F:FC:78:29:58:C6:23:D5:A0:54:9C:A9:E1:29:4D:B8:06:E6 Certificate issuer: /CN=f375140c-52cc-401f-b3a0-476ffa367076 Certificate serial: 010D0C9F4328584AF5215454265C024A7D6D2A80 Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/2aa850df-3965-3478-8482-ece16e652a7a.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 399976 IP address blocks: 2602:80c:20b8::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:54:54:26:5c:02:4a:7d:6d:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=f8ea6cc5-d052-41fa-bfca-bba0b6a3e94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:3f:d0:de:4e:80:d3:b9:e4:b4:a8:08:75: 0a:e7:2a:35:a9:01:f4:3a:30:be:e3:c3:4a:fd:1a: 87:77:83:a0:1c:d6:ae:f6:18:fe:23:6f:bf:4f:6e: fa:57:21:0a:a4:76:f3:a0:da:07:49:05:35:cd:48: 2c:01:3f:a1:60:35:af:8c:48:c2:77:ca:17:11:f2: d3:60:77:be:3a:ed:0c:27:2b:92:f0:0b:01:85:12: 2a:25:5c:1d:85:d1:01:26:64:d5:60:38:c7:1a:6f: 13:8a:47:6e:ae:94:42:c2:33:14:b7:f0:32:15:82: 01:38:63:86:68:64:0e:48:35:86:24:f6:73:ea:6c: 6f:80:b8:cb:c5:6e:f0:ef:bb:19:2e:03:ed:66:2d: 1f:8a:9a:b0:27:7b:a8:8d:23:e2:c2:64:be:c6:0d: 50:18:9b:70:a5:e5:61:f6:61:9a:76:23:c3:a3:c3: b6:17:2e:f8:b6:71:48:c0:37:2e:97:a3:4a:b0:1e: 82:08:a2:67:12:34:ae:22:a9:82:fb:cc:71:da:2c: 2c:1f:4c:c7:35:b4:32:83:47:2e:42:42:1c:d2:27: 0b:a8:08:de:58:b4:63:0a:20:3e:43:12:63:7a:b0: 31:67:30:8a:c7:0e:cd:58:83:ef:43:b8:63:0f:97: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EE:9F:FC:78:29:58:C6:23:D5:A0:54:9C:A9:E1:29:4D:B8:06:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/2aa850df-3965-3478-8482-ece16e652a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl X509v3 Authority Key Identifier: keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer sbgp-ipAddrBlock: critical IPv6: 2602:80c:20b8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1d:68:7f:83:04:b6:1c:ee:81:14:49:00:aa:c2:76:7d:cf: ce:18:f1:a1:bb:9e:95:48:dc:5c:cb:5d:9b:d6:ed:8d:7e:f7: 23:b9:ae:af:a5:bc:88:22:39:ea:b6:d0:e2:43:6b:db:23:19: ed:4a:da:69:88:f7:fd:a2:9a:8e:55:5b:74:98:58:e1:6a:b4: 1f:45:1a:a8:7a:22:a3:9c:d1:c5:2d:9b:f4:74:1f:b1:c6:5f: f1:5c:20:7d:35:58:b8:12:43:d7:52:ff:7b:88:01:8a:18:3f: 56:e9:fc:a1:63:d4:3d:99:27:64:56:90:2b:6b:41:74:c7:b3: ba:45:c5:cb:aa:4d:48:70:d2:02:88:5a:8e:9d:58:e4:f1:74: 04:90:15:bc:88:2d:56:01:ce:1f:c3:32:93:ea:e7:09:9f:df: d3:27:a1:a0:fa:4a:87:cc:e3:5f:bd:f3:b1:49:58:fd:1a:3e: 51:1c:ee:26:0c:29:03:1c:58:dd:17:6e:4a:13:c1:a8:87:a6: 8f:a3:b5:23:16:41:8d:b4:86:5c:f6:6b:97:6c:da:0a:5c:24: 8f:c3:d4:dd:40:7a:9b:23:62:92:80:a6:ea:29:5c:17:24:a8: 24:a7:ba:31:0e:ec:dd:63:26:f5:16:c0:2a:a5:95:b0:68:ad: de:da:9f:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1IVRUJlwCSn1tKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3 MDc2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjhlYTZjYzUtZDA1Mi00MWZhLWJmY2EtYmJhMGI2YTNlOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1I/0N5OgNO55LSoCHUK5yo1qQH0OjC+48NK /RqHd4OgHNau9hj+I2+/T276VyEKpHbzoNoHSQU1zUgsAT+hYDWvjEjCd8oXEfLT YHe+Ou0MJyuS8AsBhRIqJVwdhdEBJmTVYDjHGm8TikdurpRCwjMUt/AyFYIBOGOG aGQOSDWGJPZz6mxvgLjLxW7w77sZLgPtZi0fipqwJ3uojSPiwmS+xg1QGJtwpeVh 9mGadiPDo8O2Fy74tnFIwDcul6NKsB6CCKJnEjSuIqmC+8xx2iwsH0zHNbQyg0cu QkIc0icLqAjeWLRjCiA+QxJjerAxZzCKxw7NWIPvQ7hjD5ejOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIHun/x4KVjGI9WgVJyp4SlNuAbmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1 MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvMmFhODUwZGYtMzk2NS0z NDc4LTg0ODItZWNlMTZlNjUyYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2 NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCC4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADkdaH+DBLYc7oEUSQCqwnZ9z84Y8aG7npVI3FzLXZvW7Y1+9yO5 rq+lvIgiOeq20OJDa9sjGe1K2mmI9/2imo5VW3SYWOFqtB9FGqh6IqOc0cUtm/R0 H7HGX/FcIH01WLgSQ9dS/3uIAYoYP1bp/KFj1D2ZJ2RWkCtrQXTHs7pFxcuqTUhw 0gKIWo6dWOTxdASQFbyILVYBzh/DMpPq5wmf39MnoaD6SofM41+987FJWP0aPlEc 7iYMKQMcWN0XbkoTwaiHpo+jtSMWQY20hlz2a5ds2gpcJI/D1N1AepsjYpKApuop XBckqCSnujEO7N1jJvUWwCqllbBord7anzM= -----END CERTIFICATE-----Generated at Mon Aug 25 19:33:23 2025 by rpki-client