$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa File: a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa (raw, json) Hash identifier: 9YldgAtU8xalh1zrEhgftJHND0Vmpdc4dUYl5tdA00c= Subject key identifier: 7F:B0:CD:58:CA:B3:E6:3B:FF:05:58:21:48:DE:BB:89:71:BC:15:BC Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584A5FC5EA1234643CA3B2926410 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 17378 IP address blocks: 2001:19b8::/32 maxlen: 48 2001:4970::/32 maxlen: 48 2600:2c00::/30 maxlen: 48 2604:7e00::/32 maxlen: 48 2604:7f80::/32 maxlen: 48 2606:a700::/32 maxlen: 48 2607:f1d0::/32 maxlen: 48 2607:f3f8::/32 maxlen: 48 2607:fc38::/32 maxlen: 48 2607:fdb8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:ea:12:34:64:3c:a3:b2:92:64:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=3d47b4fe-4236-4dfe-b70b-f64a3648872f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:95:94:d7:58:ac:68:59:a4:68:b2:1a:e8:fe: f7:04:e1:a8:09:0d:39:e8:de:be:1d:8d:7a:1b:5f: 88:23:74:a0:42:cd:f5:b5:27:f0:ce:d2:a9:0f:6f: 0a:68:34:f9:ca:f6:e2:ea:e5:83:31:61:2a:c6:81: 36:49:6f:9b:7d:31:87:ec:ff:9c:de:1c:f8:ac:4b: 6e:5a:0e:7c:fe:77:f3:3c:73:e2:b5:09:e6:f9:79: 53:55:d0:78:db:ab:7a:76:f7:b9:93:81:a7:20:f0: 8e:52:ea:95:1c:74:fd:92:3b:2b:3e:96:3b:20:f8: 01:46:b1:36:c4:8b:42:9d:42:f4:88:8a:c2:28:69: d7:75:de:43:a1:dd:f7:14:f5:fb:1e:1b:8f:fd:44: 80:b5:fb:fc:2f:e3:53:34:74:2f:aa:bf:40:43:1a: 46:d2:5c:6d:a3:86:55:cb:d4:9c:dd:8d:0d:7b:5f: 79:20:f5:0f:ea:82:bd:53:6d:52:0d:f2:fe:87:20: e4:13:22:89:6e:1c:90:74:50:62:4e:a0:ce:0b:46: 9e:18:bf:3c:c9:2b:2a:2f:40:33:5d:82:e7:32:dc: f6:5f:c9:9f:23:79:e9:de:92:e0:ff:dd:01:dc:fd: 98:54:ec:e9:81:43:be:39:ee:d6:2b:c2:bf:93:69: 84:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B0:CD:58:CA:B3:E6:3B:FF:05:58:21:48:DE:BB:89:71:BC:15:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b8::/32 2001:4970::/32 2600:2c00::/30 2604:7e00::/32 2604:7f80::/32 2606:a700::/32 2607:f1d0::/32 2607:f3f8::/32 2607:fc38::/32 2607:fdb8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:bc:e1:5c:f4:ea:32:aa:67:18:55:30:ca:78:20:75:1d:07: 0d:31:54:6d:80:9f:07:56:59:91:88:d6:ff:e6:10:1f:df:be: 01:f3:33:1d:b8:9c:ad:4d:9b:6f:10:26:cf:d0:f3:89:99:d3: 37:49:05:a3:5e:f2:96:9e:b6:3a:7a:8c:4d:ba:27:74:a0:30: f2:8c:a1:d1:e3:41:28:6d:cc:26:b6:cd:b9:5a:b0:f4:69:c2: 59:04:1b:dc:3b:c2:00:47:45:db:ba:4e:f2:e7:8d:f4:b1:2c: 19:28:99:38:57:c5:6d:12:25:4e:6f:59:c5:1c:6e:b5:34:02: 32:a6:86:1e:bf:63:0f:09:71:10:55:ce:cf:3b:e7:03:77:0f: 82:fb:48:61:7d:2a:48:f7:df:a0:01:73:6c:8f:f1:37:c8:70: 0a:29:45:b8:ad:3b:ca:14:88:12:5c:82:b4:5e:9f:74:78:cc: 12:05:7b:26:31:57:70:57:fd:3a:a5:89:53:14:9d:b2:4a:e3: 3b:13:76:08:89:22:e3:db:da:05:a8:ea:ad:08:fe:58:9c:77: fa:f2:b0:94:97:20:8d:85:93:36:0e:43:a2:16:0b:f7:4e:6c: 53:67:4b:35:13:22:c4:7d:d4:2e:3e:fa:85:be:cd:bc:5d:b0: c0:9d:a5:ad -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWEpfxeoSNGQ8o7KSZBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk M2Q0N2I0ZmUtNDIzNi00ZGZlLWI3MGItZjY0YTM2NDg4NzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpWU11isaFmkaLIa6P73BOGoCQ056N6+HY16 G1+II3SgQs31tSfwztKpD28KaDT5yvbi6uWDMWEqxoE2SW+bfTGH7P+c3hz4rEtu Wg58/nfzPHPitQnm+XlTVdB426t6dve5k4GnIPCOUuqVHHT9kjsrPpY7IPgBRrE2 xItCnUL0iIrCKGnXdd5Dod33FPX7HhuP/USAtfv8L+NTNHQvqr9AQxpG0lxto4ZV y9Sc3Y0Ne195IPUP6oK9U21SDfL+hyDkEyKJbhyQdFBiTqDOC0aeGL88ySsqL0Az XYLnMtz2X8mfI3np3pLg/90B3P2YVOzpgUO+Oe7WK8K/k2mETQIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFH+wzVjKs+Y7/wVYIUjeu4lxvBW8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTQyY2Q1ZGMtYzlmYi0z MDY1LWJmZDMtMTdjZTY0ZWI4OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUAIAEZuAMF ACABSXADBQImACwAAwUAJgR+AAMFACYEf4ADBQAmBqcAAwUAJgfx0AMFACYH8/gD BQAmB/w4AwUAJgf9uDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9vOFc9OoyqmcYVTDKeCB1HQcNMVRtgJ8H VlmRiNb/5hAf374B8zMduJytTZtvECbP0POJmdM3SQWjXvKWnrY6eoxNuid0oDDy jKHR40Eobcwmts25WrD0acJZBBvcO8IAR0Xbuk7y5430sSwZKJk4V8VtEiVOb1nF HG61NAIypoYev2MPCXEQVc7PO+cDdw+C+0hhfSpI99+gAXNsj/E3yHAKKUW4rTvK FIgSXIK0Xp90eMwSBXsmMVdwV/06pYlTFJ2ySuM7E3YIiSLj29oFqOqtCP5YnHf6 8rCUlyCNhZM2DkOiFgv3TmxTZ0s1EyLEfdQuPvqFvs28XbDAnaWt -----END CERTIFICATE-----Generated at Wed Jul 9 17:37:02 2025 by rpki-client