$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/1434977d-ec30-378c-a9e6-319334f0b01d.roa File: 1434977d-ec30-378c-a9e6-319334f0b01d.roa (raw, json) Hash identifier: 8OXPVH/xNibRTdZMyu+o6aVopNPNBQ5uhBd5yxgopE8= Subject key identifier: DA:A1:4A:DE:75:38:BE:99:AC:EC:E5:38:B6:4D:9E:22:0C:AC:BD:E7 Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Certificate serial: 010D0C9F4328584AB220C48EAA0E70226388E200 Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/1434977d-ec30-378c-a9e6-319334f0b01d.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 31915 IP address blocks: 2606:3840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:c4:8e:aa:0e:70:22:63:88:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=f3f97ea8-3b38-451f-9765-413ffea2ef76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:14:e5:1a:51:a6:4d:b3:70:20:9a:b1:42:41: fe:d6:99:c9:c1:2e:1b:87:10:24:a4:13:17:74:78: 54:51:9e:6f:c0:77:61:78:e2:39:76:02:27:2b:8f: 85:7a:6a:b5:83:ee:d0:59:fb:e8:8c:e1:de:d2:0d: 03:c5:1e:c7:0d:ba:46:46:39:ce:f9:e1:40:8b:7b: 7b:52:a1:99:9e:5a:9c:bd:72:bc:01:ec:a1:a4:94: 72:ee:6b:3a:6d:40:c0:4b:ca:89:0f:75:17:d8:a7: 27:38:26:8b:0b:b4:6f:f6:a3:11:61:f2:9f:8a:f4: a5:c9:2c:f4:7a:85:8c:8c:94:56:ff:7e:0e:f6:a7: 5d:ae:f5:64:69:e3:88:ef:cb:d9:20:54:c1:82:77: 0b:ef:e9:d9:56:92:05:da:6c:c3:dd:4d:8d:b2:18: 20:b7:60:dc:d7:22:39:f4:ff:18:16:d5:17:0c:82: d1:91:77:e9:83:5b:3c:77:c7:12:c6:ff:f7:39:ef: ec:50:33:8e:2a:1e:a3:2e:be:19:fd:27:9f:28:29: 7b:2c:3c:21:c8:61:c3:95:0d:37:e3:13:81:8d:4e: aa:6a:2c:6a:52:78:8d:3f:d9:8e:6f:33:e8:bb:ff: 6b:05:55:4f:60:39:03:90:22:a4:3c:06:4c:de:6f: e9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A1:4A:DE:75:38:BE:99:AC:EC:E5:38:B6:4D:9E:22:0C:AC:BD:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/1434977d-ec30-378c-a9e6-319334f0b01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl X509v3 Authority Key Identifier: keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer sbgp-ipAddrBlock: critical IPv6: 2606:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:6c:83:fa:aa:19:65:11:85:c9:20:99:4f:04:3e:74:02:27: 8a:3c:c9:e9:14:a1:6b:09:03:84:ff:ed:12:2a:54:d5:9d:ca: 54:a6:7e:36:78:2c:11:4a:36:a5:0e:89:a7:38:0e:33:55:36: ad:b2:eb:e8:f4:e9:e6:c7:bc:c4:d0:86:d0:45:d7:8f:71:91: d9:c1:75:89:f6:f8:32:41:e9:fa:d8:d8:ee:bc:c0:6c:d0:dd: f4:c6:24:70:cb:bd:1f:67:f0:38:b4:ab:24:06:71:d4:83:5c: da:5f:d6:d0:46:6b:af:bd:6f:6a:ab:95:29:03:c4:6e:d3:d5: 52:6e:ea:03:c7:9d:a6:7c:39:a3:84:5a:d2:11:37:94:7c:31: f3:9c:a5:35:00:d2:b1:59:09:45:b5:69:3e:f8:a7:ba:26:e8: cc:a8:f5:1b:aa:89:2b:5d:7d:e2:0f:48:96:99:68:8e:f6:3e: 08:e3:2a:55:e1:34:bf:1e:02:1a:30:c5:62:61:48:90:ab:e3: 1d:66:4e:2d:2f:25:13:ce:ea:7b:35:02:c9:12:24:47:71:9c: 25:50:b6:05:03:15:a3:dc:3b:22:ab:b4:de:9f:37:14:9e:31: 76:88:45:d7:2e:a7:63:1d:eb:39:44:61:b7:fb:a2:87:d1:52: 4b:16:0a:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqyIMSOqg5wImOI4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz ZjcxMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjNmOTdlYTgtM2IzOC00NTFmLTk3NjUtNDEzZmZlYTJlZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxTlGlGmTbNwIJqxQkH+1pnJwS4bhxAkpBMX dHhUUZ5vwHdheOI5dgInK4+Femq1g+7QWfvojOHe0g0DxR7HDbpGRjnO+eFAi3t7 UqGZnlqcvXK8AeyhpJRy7ms6bUDAS8qJD3UX2KcnOCaLC7Rv9qMRYfKfivSlySz0 eoWMjJRW/34O9qddrvVkaeOI78vZIFTBgncL7+nZVpIF2mzD3U2Nshggt2Dc1yI5 9P8YFtUXDILRkXfpg1s8d8cSxv/3Oe/sUDOOKh6jLr4Z/SefKCl7LDwhyGHDlQ03 4xOBjU6qaixqUniNP9mObzPou/9rBVVPYDkDkCKkPAZM3m/pyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNqhSt51OL6ZrOzlOLZNniIMrL3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5 NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvMTQzNDk3N2QtZWMzMC0z NzhjLWE5ZTYtMzE5MzM0ZjBiMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi NzRlMDNmNzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgY4QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmbIP6qhllEYXJIJlPBD50AieKPMnpFKFrCQOE/+0SKlTVncpUpn42 eCwRSjalDomnOA4zVTatsuvo9Onmx7zE0IbQRdePcZHZwXWJ9vgyQen62NjuvMBs 0N30xiRwy70fZ/A4tKskBnHUg1zaX9bQRmuvvW9qq5UpA8Ru09VSbuoDx52mfDmj hFrSETeUfDHznKU1ANKxWQlFtWk++Ke6JujMqPUbqokrXX3iD0iWmWiO9j4I4ypV 4TS/HgIaMMViYUiQq+MdZk4tLyUTzup7NQLJEiRHcZwlULYFAxWj3Dsiq7TenzcU njF2iEXXLqdjHes5RGG3+6KH0VJLFgr0 -----END CERTIFICATE-----Generated at Sat Aug 2 05:30:35 2025 by rpki-client