$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa File: fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa (raw, json) Hash identifier: uJUfDHaDCQdCH7DVxPhcbKTO2FxQ9R8foimxkeC04GA= Subject key identifier: F4:63:DA:EE:69:23:41:8D:41:3C:ED:AA:87:0F:A7:EA:EE:12:A2:D2 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584AFC1BF9D00EF8CF24054EF200 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 62856 IP address blocks: 2620:130:f001::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f9:d0:0e:f8:cf:24:05:4e:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=97c97d7c-2b82-4105-ab98-b60ee4e5f70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:6b:cf:da:9b:94:3d:c3:de:c2:e1:c1:6a: a4:7d:d2:ed:5b:ae:a8:82:98:ed:08:62:1b:37:e6: b6:4e:77:a2:af:9c:b1:82:a1:62:e2:54:5c:6c:0f: 09:98:40:f0:cb:a8:05:58:5a:b1:05:46:9b:47:c5: 32:41:d8:cc:d3:dc:27:9f:ce:da:9a:35:d9:d6:f5: 6d:be:f7:0d:ec:a3:37:f7:b8:27:07:be:f1:c0:25: 9b:5b:5e:6a:b1:9a:f1:d4:03:fe:32:52:ee:70:18: 73:d6:50:38:cf:f7:80:68:b2:19:4a:dd:36:54:2e: 5d:4e:d0:ef:42:17:9f:59:e8:ce:36:37:b5:5c:b3: bc:63:41:38:49:27:22:1f:53:c9:be:c7:87:c9:6f: bf:8d:99:bd:c2:e2:1c:0b:4e:98:18:a3:d4:d0:10: c2:70:71:99:cc:df:b7:7d:15:3b:32:43:75:53:07: 4a:54:3d:93:c2:23:7e:5f:36:7f:3c:27:ce:3b:70: 9e:26:06:1a:36:92:07:67:99:0e:c3:d7:a5:1a:9a: f9:c3:2d:41:00:85:fb:14:4b:d0:78:de:35:d8:5e: 84:44:f5:2e:8b:65:78:c5:d1:12:ca:63:f4:df:d5: f5:ca:ba:60:c5:e7:01:c3:d9:01:6a:df:0b:ba:9f: bd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:63:DA:EE:69:23:41:8D:41:3C:ED:AA:87:0F:A7:EA:EE:12:A2:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv6: 2620:130:f001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:30:a3:7d:19:8f:3d:a6:cf:b5:15:f5:ec:7c:b5:ce:fc:a3: 88:1f:57:f9:cb:90:eb:c9:a4:20:8c:d6:12:7b:f9:c3:c0:32: 14:d5:c4:89:99:68:67:b5:6b:ba:b2:c0:27:f3:78:61:18:64: 0a:46:49:15:b3:8a:35:81:1a:8a:40:d4:d3:3c:b4:63:0a:bf: a0:f8:39:bc:07:08:10:a0:8f:8d:e7:af:6c:68:5e:fb:71:a5: fb:35:d4:60:22:ba:12:20:6e:8b:93:8c:ac:21:82:14:44:b3: c9:c8:5f:2e:8b:8c:43:30:71:fb:bc:63:6f:d1:c5:77:30:f2: 73:0a:34:97:36:a9:b0:65:b9:59:52:45:19:3a:49:e6:f2:00: d1:f5:bb:ed:99:78:6c:fe:68:ed:3e:fe:ab:ea:72:2d:2e:5a: 4f:53:57:b7:ba:14:fa:a3:f0:46:1c:1d:ee:d0:5d:f4:4f:6d: b8:87:62:aa:37:78:98:d5:46:ed:aa:64:c5:4b:05:c7:7e:6a: d9:d1:f7:9b:a6:cd:b4:d2:9d:ed:ac:85:9f:d5:a4:70:57:96: 03:2e:df:7c:a3:63:4a:67:3a:57:ec:fe:3d:ff:da:f6:b0:13: eb:09:17:55:ed:cf:2c:13:ec:df:36:64:ef:a7:2c:42:9d:1a: 17:e6:d8:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8G/nQDvjPJAVO8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OTdjOTdkN2MtMmI4Mi00MTA1LWFiOTgtYjYwZWU0ZTVmNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl5rz9qblD3D3sLhwWqkfdLtW66ogpjtCGIb N+a2Tneir5yxgqFi4lRcbA8JmEDwy6gFWFqxBUabR8UyQdjM09wnn87amjXZ1vVt vvcN7KM397gnB77xwCWbW15qsZrx1AP+MlLucBhz1lA4z/eAaLIZSt02VC5dTtDv QhefWejONje1XLO8Y0E4SSciH1PJvseHyW+/jZm9wuIcC06YGKPU0BDCcHGZzN+3 fRU7MkN1UwdKVD2TwiN+XzZ/PCfOO3CeJgYaNpIHZ5kOw9elGpr5wy1BAIX7FEvQ eN412F6ERPUui2V4xdESymP039X1yrpgxecBw9kBat8Lup+9TQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPRj2u5pI0GNQTztqocPp+ruEqLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvZmI0ZmE2YWQtNmE1OS0z NWZjLWFlOWYtMTFlMTg4NzE5Y2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABMPAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABQwo30Zjz2mz7UV9ex8tc78o4gfV/nLkOvJpCCM1hJ7+cPAMhTV xImZaGe1a7qywCfzeGEYZApGSRWzijWBGopA1NM8tGMKv6D4ObwHCBCgj43nr2xo Xvtxpfs11GAiuhIgbouTjKwhghREs8nIXy6LjEMwcfu8Y2/RxXcw8nMKNJc2qbBl uVlSRRk6SebyANH1u+2ZeGz+aO0+/qvqci0uWk9TV7e6FPqj8EYcHe7QXfRPbbiH Yqo3eJjVRu2qZMVLBcd+atnR95umzbTSne2shZ/VpHBXlgMu33yjY0pnOlfs/j3/ 2vawE+sJF1XtzywT7N82ZO+nLEKdGhfm2Fk= -----END CERTIFICATE-----Generated at Fri Sep 19 16:57:59 2025 by rpki-client