$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/3a3eb039-61a2-311a-91ae-3870c3ee1928.roa File: 3a3eb039-61a2-311a-91ae-3870c3ee1928.roa (raw, json) Hash identifier: wPgl+oybpL5NKg9lQd3sGQm7Rvabi3ASnUq5S9yOF9s= Subject key identifier: CB:E6:10:89:E0:9A:54:17:33:90:C3:26:E1:C0:35:9B:31:5F:FF:50 Certificate issuer: /CN=de801427-6a45-470a-898c-c6a2b1b27380 Certificate serial: 010D0C9F4328584AFC1BF7588AC6844DED9D3200 Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/3a3eb039-61a2-311a-91ae-3870c3ee1928.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 13443 IP address blocks: 2620:119:50d2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f7:58:8a:c6:84:4d:ed:9d:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=c5dfaee7-a891-4ad1-b103-ae3d3b94e7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:5b:eb:b9:d1:45:19:10:4d:ce:6e:9c:81: f9:70:6b:bd:ba:45:10:6c:b8:b8:7c:5b:2b:d5:8c: 48:ef:34:7a:33:51:eb:a6:65:64:13:29:89:7f:b7: d8:0b:51:0c:aa:1d:ac:ad:e1:97:5c:cd:34:2f:ec: 88:88:a5:de:07:75:fb:ef:7f:52:4b:bb:68:ba:d5: d0:ae:c5:dd:e8:54:58:b1:95:92:d5:26:5e:50:1d: b4:2e:50:af:7d:cd:7a:42:f5:70:90:4b:d9:be:64: b5:8f:05:71:bd:f2:c6:1b:c4:12:1b:1f:fc:d9:dc: d8:64:bb:be:63:25:73:35:88:1a:e9:fd:1f:90:57: 17:24:43:be:52:13:15:cb:f7:07:ef:c5:f6:51:de: eb:1d:06:b4:d7:c8:cb:14:97:de:3c:1c:8e:4e:34: 71:23:70:75:2f:83:3c:2f:9a:3c:92:e0:52:98:28: 86:1f:72:d1:d9:9b:56:e1:ff:c5:38:5a:d3:cc:c5: 97:1e:df:49:54:d8:31:53:66:e0:26:80:37:34:63: 66:17:a6:bf:72:e7:c4:0b:a5:71:98:f1:57:0b:53: 3b:42:82:62:55:ef:87:8b:b9:b4:70:7d:8f:58:9f: e0:bf:41:29:61:44:16:5c:a0:6c:8a:91:af:c0:ff: 58:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E6:10:89:E0:9A:54:17:33:90:C3:26:E1:C0:35:9B:31:5F:FF:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/3a3eb039-61a2-311a-91ae-3870c3ee1928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl X509v3 Authority Key Identifier: keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer sbgp-ipAddrBlock: critical IPv6: 2620:119:50d2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:82:b7:cb:00:1a:9b:11:c3:2b:ac:b3:c6:5f:32:c0:d9:a9: 43:60:35:a6:f3:de:07:40:f5:85:f7:6e:f4:e6:ed:e1:8e:e4: c9:28:3e:fb:a4:89:ba:06:d6:60:79:2d:f9:14:fc:0f:d0:e2: ff:90:1f:1f:08:8a:a6:e4:ea:c6:1b:e0:27:5f:c4:6e:dd:4a: 30:c2:3a:ed:2f:ae:d8:3f:68:03:16:a9:2f:0a:e5:c8:29:70: b8:10:8e:71:90:8e:dc:85:dc:df:6d:4d:ad:c8:a7:81:ee:88: 85:1c:46:21:59:60:e5:a1:63:b0:6b:b3:d3:87:d8:fc:76:86: b8:03:5e:63:f1:3f:51:bb:0d:f3:45:58:df:07:dc:54:1c:ff: c2:7a:67:3d:2e:37:47:5f:ca:6a:d5:49:65:3d:fd:88:b6:fb: f1:d6:86:29:13:8a:5b:ee:8d:8e:2b:c1:ec:47:1b:b5:c6:a2: 3a:45:28:a8:dd:10:7f:73:09:88:80:23:40:07:97:c4:2d:38: 70:2e:a4:5d:38:d6:57:1d:4a:d8:5c:1f:58:b3:72:3e:81:aa: 3c:ab:f0:a3:50:96:2c:72:12:15:d4:44:39:ce:da:43:3d:7a: 77:b1:d7:b6:b3:ae:ac:ae:c8:b3:1b:2a:db:c8:89:25:91:80: b1:8b:a2:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8G/dYisaETe2dMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4MDE0MjctNmE0NS00NzBhLTg5OGMtYzZhMmIxYjI3 MzgwMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YzVkZmFlZTctYTg5MS00YWQxLWIxMDMtYWUzZDNiOTRlN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHZb67nRRRkQTc5unIH5cGu9ukUQbLi4fFsr 1YxI7zR6M1HrpmVkEymJf7fYC1EMqh2sreGXXM00L+yIiKXeB3X7739SS7toutXQ rsXd6FRYsZWS1SZeUB20LlCvfc16QvVwkEvZvmS1jwVxvfLGG8QSGx/82dzYZLu+ YyVzNYga6f0fkFcXJEO+UhMVy/cH78X2Ud7rHQa018jLFJfePByOTjRxI3B1L4M8 L5o8kuBSmCiGH3LR2ZtW4f/FOFrTzMWXHt9JVNgxU2bgJoA3NGNmF6a/cufEC6Vx mPFXC1M7QoJiVe+Hi7m0cH2PWJ/gv0EpYUQWXKBsipGvwP9YDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMvmEIngmlQXM5DDJuHANZsxX/9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZTgw MTQyNy02YTQ1LTQ3MGEtODk4Yy1jNmEyYjFiMjczODAvM2EzZWIwMzktNjFhMi0z MTFhLTkxYWUtMzg3MGMzZWUxOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGU4MDE0MjctNmE0NS00NzBhLTg5 OGMtYzZhMmIxYjI3MzgwL2RlODAxNDI3LTZhNDUtNDcwYS04OThjLWM2YTJiMWIy NzM4MC5jcmwwHwYDVR0jBBgwFoAUIeQVrQ52f9WA8jMJ584FENpzaBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZTgwMTQyNy02YTQ1LTQ3MGEtODk4Yy1jNmEy YjFiMjczODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGVDS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFCCt8sAGpsRwyuss8ZfMsDZqUNgNabz3gdA9YX3bvTm7eGO5Mko PvukiboG1mB5LfkU/A/Q4v+QHx8Iiqbk6sYb4CdfxG7dSjDCOu0vrtg/aAMWqS8K 5cgpcLgQjnGQjtyF3N9tTa3Ip4HuiIUcRiFZYOWhY7Brs9OH2Px2hrgDXmPxP1G7 DfNFWN8H3FQc/8J6Zz0uN0dfymrVSWU9/Yi2+/HWhikTilvujY4rwexHG7XGojpF KKjdEH9zCYiAI0AHl8QtOHAupF041lcdSthcH1izcj6Bqjyr8KNQlixyEhXURDnO 2kM9enex17azrqyuyLMbKtvIiSWRgLGLooA= -----END CERTIFICATE-----Generated at Tue Sep 9 17:33:56 2025 by rpki-client