$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1f3baa01-d519-3749-ad08-f9a7023cd9aa.roa File: 1f3baa01-d519-3749-ad08-f9a7023cd9aa.roa (raw, json) Hash identifier: vNlrlOtBDJNsIkLd0/9/jt0gz60bbfgsTUg0sWuXBiI= Subject key identifier: 4F:DA:72:E0:F5:00:E2:29:C8:25:9F:8D:13:24:21:4C:3D:7C:B1:26 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B1C36C90A4C0275D8B57ECAD0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1f3baa01-d519-3749-ad08-f9a7023cd9aa.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 52423 IP address blocks: 2604:c980:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c9:0a:4c:02:75:d8:b5:7e:ca:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=b120fc61-d3fc-46af-a957-ef24a9aa47db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1a:ae:c8:c4:66:e2:2f:10:64:c5:4c:a9:d3: cd:5c:13:bf:e1:f9:3d:3a:6e:7b:55:8a:72:46:cc: 44:c9:10:f1:50:0e:ab:20:47:f2:e6:71:b7:6c:30: c9:99:6b:aa:b2:63:32:f0:ab:03:8d:92:a6:ec:3b: 48:46:5e:b9:d4:ec:d9:7f:0f:31:e4:17:9a:28:46: 14:1e:2c:6d:53:cf:ca:41:92:33:fb:ff:e6:fd:9c: b5:86:5a:4b:4d:1c:d5:19:50:d8:f5:6f:c5:08:88: 45:28:59:cb:a4:55:0c:bb:97:30:c8:0b:15:e5:9f: c9:4f:13:f8:5d:b5:50:85:65:5f:27:a8:48:17:8d: 29:2e:62:7a:f3:4a:88:49:47:21:22:2a:f3:4a:56: 4b:d5:a6:1c:dd:f5:29:7f:8e:db:2b:65:43:12:fc: 17:26:c2:17:3f:5c:8a:f5:2c:58:c5:bc:23:65:ad: 30:4c:04:1e:24:ca:6d:46:01:92:3f:80:8c:b5:4a: 94:6a:e5:90:8f:3a:09:ae:58:bd:6c:ab:2c:4c:9a: 87:7f:ba:11:d5:68:3d:4a:04:1e:18:fa:b7:8f:b6: a1:31:eb:5e:eb:49:2a:a6:dc:c6:64:78:1b:7a:5d: 4b:af:2e:42:d8:d5:a6:15:f8:ab:13:93:99:a7:87: d4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DA:72:E0:F5:00:E2:29:C8:25:9F:8D:13:24:21:4C:3D:7C:B1:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1f3baa01-d519-3749-ad08-f9a7023cd9aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2604:c980:1200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:18:95:aa:8c:31:15:0b:c2:03:1a:77:62:8d:85:de:48:f7: e5:7e:cf:53:42:59:43:06:89:a3:a9:81:2a:4a:e0:d8:f1:2e: 50:bf:72:1a:5f:b6:45:58:8d:27:ec:7c:85:b4:bf:98:6f:43: b9:8f:2c:85:19:d6:d3:51:89:12:34:ec:b6:b7:4d:ab:ab:32: 5f:6c:93:2e:5a:63:33:8f:a3:35:20:2e:47:62:4f:9b:ca:f5: e3:ad:00:e4:9d:ce:2c:1f:fa:30:9b:41:44:48:cc:8d:5b:22: 25:d6:4a:b3:38:3f:d3:c9:d9:61:03:2b:dc:f0:92:92:f6:0b: f8:6d:9b:2b:79:1b:8e:df:c4:4a:a6:cb:cb:df:70:d6:d9:42: a4:e6:74:80:76:ed:58:a5:6d:29:c7:35:c2:a1:a9:52:f4:0f: 8c:40:cd:a3:fd:0a:0d:09:74:db:f1:a0:4d:cf:d6:af:b8:d1: b6:39:20:54:5b:3e:4e:16:26:b0:bf:f4:a2:15:9e:50:cf:8b: 8e:41:29:83:66:cb:f2:02:6f:eb:bb:cf:85:b3:1c:3d:a0:c1: 77:a7:9f:9d:d2:ca:41:7c:09:77:20:26:e9:db:e0:46:d7:4a: e8:4f:e3:eb:65:c7:c0:dd:80:b7:17:96:b6:1e:bd:dd:93:d2: ed:2a:c5:0e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEscNskKTAJ12LV+ytAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YjEyMGZjNjEtZDNmYy00NmFmLWE5NTctZWYyNGE5YWE0N2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRquyMRm4i8QZMVMqdPNXBO/4fk9Om57VYpy RsxEyRDxUA6rIEfy5nG3bDDJmWuqsmMy8KsDjZKm7DtIRl651OzZfw8x5BeaKEYU HixtU8/KQZIz+//m/Zy1hlpLTRzVGVDY9W/FCIhFKFnLpFUMu5cwyAsV5Z/JTxP4 XbVQhWVfJ6hIF40pLmJ680qISUchIirzSlZL1aYc3fUpf47bK2VDEvwXJsIXP1yK 9SxYxbwjZa0wTAQeJMptRgGSP4CMtUqUauWQjzoJrli9bKssTJqHf7oR1Wg9SgQe GPq3j7ahMete60kqptzGZHgbel1Lry5C2NWmFfirE5OZp4fUuQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFE/acuD1AOIpyCWfjRMkIUw9fLEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMWYzYmFhMDEtZDUxOS0z NzQ5LWFkMDgtZjlhNzAyM2NkOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTJgBIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARRiVqowxFQvCAxp3Yo2F3kj35X7PU0JZQwaJo6mBKkrg2PEuUL9y Gl+2RViNJ+x8hbS/mG9DuY8shRnW01GJEjTstrdNq6syX2yTLlpjM4+jNSAuR2JP m8r1460A5J3OLB/6MJtBREjMjVsiJdZKszg/08nZYQMr3PCSkvYL+G2bK3kbjt/E SqbLy99w1tlCpOZ0gHbtWKVtKcc1wqGpUvQPjEDNo/0KDQl02/GgTc/Wr7jRtjkg VFs+ThYmsL/0ohWeUM+LjkEpg2bL8gJv67vPhbMcPaDBd6efndLKQXwJdyAm6dvg RtdK6E/j62XHwN2AtxeWth693ZPS7SrFDg== -----END CERTIFICATE-----Generated at Tue Sep 16 12:17:31 2025 by rpki-client