$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6afcbf2c-177b-3ee0-9920-b79fed41f54e.roa File: 6afcbf2c-177b-3ee0-9920-b79fed41f54e.roa (raw, json) Hash identifier: RzjEnxGseGtGBaqaZWcOerWK8yevwWwDWdg0yWkakIc= Subject key identifier: CB:11:33:E2:99:9C:57:2F:33:E9:87:69:C9:46:76:6B:00:74:E3:83 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B004C167DD0C281F1DF751540 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6afcbf2c-177b-3ee0-9920-b79fed41f54e.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 54113 IP address blocks: 2607:8940:4eb0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:16:7d:d0:c2:81:f1:df:75:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=87655d1c-dc8b-43ef-8c7a-fa4c3c44971a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:f1:bd:98:63:a0:80:22:42:f4:03:bc:4b: ca:b3:ff:cc:45:34:96:2c:a0:f4:aa:63:d4:6e:76: ed:19:c9:2a:06:89:d8:b5:71:cc:c4:f7:ce:c2:53: 0e:f8:1c:dd:d3:43:39:46:ad:82:51:4d:c8:0b:fd: 16:38:99:ca:64:a3:2f:e0:a4:a0:a0:dd:ba:02:9a: b6:80:c3:3e:c4:be:3f:7b:39:2b:d5:6a:8b:2e:e2: de:80:23:b6:14:bb:a3:50:71:4d:43:97:09:05:71: d3:f0:5f:ba:58:19:1a:42:76:d8:10:2c:a6:eb:57: 30:7b:75:73:0c:ff:9b:e5:7f:31:fc:06:b2:70:64: a5:90:64:ef:7b:89:f5:d9:b8:02:32:28:d0:7a:e7: 74:d3:2f:68:87:0c:39:21:80:b5:42:2a:47:94:35: b1:eb:57:14:a7:89:32:15:74:42:48:31:b6:75:b0: f0:86:a2:5a:b0:6f:cd:31:9a:9d:0e:37:9b:3d:c9: c3:ea:52:3c:e3:04:eb:0b:7a:e9:02:09:16:04:d4: 8d:19:47:ec:78:51:96:f4:6b:a1:bd:fb:5a:50:df: b8:61:be:42:94:c3:ed:a4:66:2e:f6:ad:0c:3f:dc: bd:7a:dc:2b:1f:c7:09:66:91:8a:be:9b:67:fc:bb: 33:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:11:33:E2:99:9C:57:2F:33:E9:87:69:C9:46:76:6B:00:74:E3:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6afcbf2c-177b-3ee0-9920-b79fed41f54e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4eb0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5c:e3:ae:71:1b:8c:b1:e5:e7:a1:7b:2f:23:19:58:28:e6: 57:b6:32:b6:a8:c0:38:c9:99:30:34:98:07:d8:f4:66:5b:02: b5:d7:7d:00:d2:c6:8c:d6:7a:e0:41:3a:03:ed:4b:86:4f:11: 8c:01:8b:b6:fa:11:2e:eb:5f:67:22:20:cc:61:2a:34:bf:43: 0e:a7:61:0c:9a:cb:d3:5f:b0:49:b3:f7:10:8f:f3:a1:4b:32: 18:c2:17:49:d7:2c:3d:8a:9b:f0:a0:27:11:54:f1:40:5b:c8: e9:0f:7c:f6:a1:b5:92:56:d5:70:f1:0e:e3:c3:eb:09:0c:3c: e7:1b:df:62:ea:31:ff:6f:1d:68:ce:a4:d0:96:d4:52:76:a2: 8b:b1:b3:7e:da:69:59:b3:ee:43:df:d6:1c:f1:e4:20:f2:76: 94:58:e7:18:d5:47:55:fe:68:6e:09:39:af:79:62:0f:50:7f: 09:d7:58:d0:51:31:bb:3b:1b:68:54:3b:2b:c9:80:bd:e5:6f: 66:fa:07:f7:b8:b8:3b:07:f7:a9:ef:c1:9a:e5:a2:0b:f9:e8: 10:9a:e9:f6:7f:2c:59:33:9b:1e:81:6d:17:57:e3:19:be:c7: 99:69:d2:86:f5:2e:7b:87:c1:78:89:d3:6f:02:8c:b9:ca:b5: ee:d3:71:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsATBZ90MKB8d91FUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ODc2NTVkMWMtZGM4Yi00M2VmLThjN2EtZmE0YzNjNDQ5NzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxnxvZhjoIAiQvQDvEvKs//MRTSWLKD0qmPU bnbtGckqBonYtXHMxPfOwlMO+Bzd00M5Rq2CUU3IC/0WOJnKZKMv4KSgoN26Apq2 gMM+xL4/ezkr1WqLLuLegCO2FLujUHFNQ5cJBXHT8F+6WBkaQnbYECym61cwe3Vz DP+b5X8x/AaycGSlkGTve4n12bgCMijQeud00y9ohww5IYC1QipHlDWx61cUp4ky FXRCSDG2dbDwhqJasG/NMZqdDjebPcnD6lI84wTrC3rpAgkWBNSNGUfseFGW9Guh vftaUN+4Yb5ClMPtpGYu9q0MP9y9etwrH8cJZpGKvptn/LszDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMsRM+KZnFcvM+mHaclGdmsAdOODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNmFmY2JmMmMtMTc3Yi0z ZWUwLTk5MjAtYjc5ZmVkNDFmNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQE6w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE5c465xG4yx5eehey8jGVgo5le2MraowDjJmTA0mAfY9GZbArXX fQDSxozWeuBBOgPtS4ZPEYwBi7b6ES7rX2ciIMxhKjS/Qw6nYQyay9NfsEmz9xCP 86FLMhjCF0nXLD2Km/CgJxFU8UBbyOkPfPahtZJW1XDxDuPD6wkMPOcb32LqMf9v HWjOpNCW1FJ2oouxs37aaVmz7kPf1hzx5CDydpRY5xjVR1X+aG4JOa95Yg9QfwnX WNBRMbs7G2hUOyvJgL3lb2b6B/e4uDsH96nvwZrlogv56BCa6fZ/LFkzmx6BbRdX 4xm+x5lp0ob1LnuHwXiJ028CjLnKte7TcV0= -----END CERTIFICATE-----Generated at Fri Sep 5 03:37:38 2025 by rpki-client