$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa File: e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa (raw, json) Hash identifier: 3itU4Jecj61ElGLVpbMN7GixTqJiLI+CUWxchaty8Gk= Subject key identifier: DE:C0:D9:6A:0B:7D:F3:51:02:BC:C7:D7:82:25:F9:47:20:75:6F:AB Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76BDC241E644A861E38C00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 2607:f060:a000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:bd:c2:41:e6:44:a8:61:e3:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=1eedf41b-8591-49fc-8f19-ec07c8237ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d4:b4:38:93:fb:ed:0c:3a:74:7c:26:88:ea: 7f:fe:6c:1f:e7:1b:d7:2d:d7:fc:20:1c:49:ea:b8: 6f:b6:cb:6c:e6:25:b7:d3:be:4c:01:5e:d0:f7:c6: 18:97:b4:c3:9d:03:27:4f:f8:d3:4e:16:9d:6f:6a: d7:17:68:cb:e5:63:27:7e:f8:44:0c:c2:ab:e6:2d: be:de:fc:3b:78:f0:04:ec:18:ed:39:6b:02:52:1e: f2:83:ab:5a:51:b8:44:40:7a:42:56:1d:79:74:cb: dc:a7:14:7c:ed:ee:38:c8:c3:22:6b:31:87:0d:81: 84:0e:c6:fd:f9:e3:62:62:f1:ba:f3:7c:2a:28:43: 03:b8:46:00:13:a3:8d:7e:c0:72:14:ae:fb:53:c0: 8e:8c:78:b6:6f:b5:e7:a8:ba:b9:9a:aa:b8:2d:c2: 99:be:f4:6b:92:50:73:e6:23:2e:87:e5:ea:a4:3e: 0c:97:96:68:1d:79:9a:8a:b6:c1:ce:c7:b5:e7:8c: 92:e3:96:24:ae:e1:d0:c0:c5:31:79:2f:81:8e:13: 94:06:e8:6e:b3:a5:b2:16:6b:05:b3:c2:ef:7d:90: 6a:1b:b4:64:51:6d:e1:82:13:a9:07:a9:1e:af:31: af:c5:1b:14:58:63:33:d4:ac:51:95:d6:46:af:da: e1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C0:D9:6A:0B:7D:F3:51:02:BC:C7:D7:82:25:F9:47:20:75:6F:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2607:f060:a000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f2:fc:ca:0a:b1:72:cc:be:23:50:51:a9:a6:af:1e:82:82: 48:f3:47:1b:9c:7a:a6:0f:a6:6c:97:c4:9d:1f:0e:60:b0:9b: 18:98:4d:e9:c1:ca:f9:d9:02:f5:27:dd:c3:6b:10:61:fc:70: 4a:40:70:83:e7:8a:ef:87:1b:2d:5b:af:d4:7e:67:c1:54:d8: 51:22:bb:1a:b1:c4:2d:48:00:5e:63:f1:f7:e2:90:88:43:a1: 2d:04:47:81:eb:7f:88:22:9f:ef:e4:cb:7a:c9:b2:9c:36:4f: 35:e2:37:e6:6c:49:94:51:d1:d1:86:8c:9b:92:ae:79:cf:81: a5:27:d4:90:44:d7:39:6c:4b:26:2b:8b:b9:f6:5f:6c:cb:aa: 19:18:a7:ea:4e:15:72:fa:5b:d2:68:3f:be:90:e1:7a:a5:75: a7:72:c7:8c:d2:d0:41:de:20:97:bc:91:18:fe:a6:27:ca:95: f7:cf:0d:53:30:b1:c2:1f:18:26:62:ad:18:d5:28:61:a1:f3: e8:b5:62:1d:5d:72:88:4f:b0:82:05:03:9e:58:64:25:e9:0c: db:ad:1a:b4:7f:0c:7b:b8:1e:96:b1:cd:42:a3:be:59:83:b2: 61:93:36:79:a0:62:bd:61:77:e6:65:04:15:a8:4c:d4:a7:72: ac:cb:f0:c2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsLdr3CQeZEqGHjjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MWVlZGY0MWItODU5MS00OWZjLThmMTktZWMwN2M4MjM3YWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59S0OJP77Qw6dHwmiOp//mwf5xvXLdf8IBxJ 6rhvtsts5iW3075MAV7Q98YYl7TDnQMnT/jTThadb2rXF2jL5WMnfvhEDMKr5i2+ 3vw7ePAE7BjtOWsCUh7yg6taUbhEQHpCVh15dMvcpxR87e44yMMiazGHDYGEDsb9 +eNiYvG683wqKEMDuEYAE6ONfsByFK77U8COjHi2b7XnqLq5mqq4LcKZvvRrklBz 5iMuh+XqpD4Ml5ZoHXmairbBzse154yS45YkruHQwMUxeS+BjhOUBuhus6WyFmsF s8LvfZBqG7RkUW3hghOpB6kerzGvxRsUWGMz1KxRldZGr9rh8QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFN7A2WoLffNRArzH14Il+UcgdW+rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZThiMDU4NTItZGZjZS0z ZGMwLTk5ZTktYzY3YjIyZWYzOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfwYKAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW/L8ygqxcsy+I1BRqaavHoKCSPNHG5x6pg+mbJfEnR8OYLCbGJhN 6cHK+dkC9Sfdw2sQYfxwSkBwg+eK74cbLVuv1H5nwVTYUSK7GrHELUgAXmPx9+KQ iEOhLQRHget/iCKf7+TLesmynDZPNeI35mxJlFHR0YaMm5Kuec+BpSfUkETXOWxL JiuLufZfbMuqGRin6k4Vcvpb0mg/vpDheqV1p3LHjNLQQd4gl7yRGP6mJ8qV988N UzCxwh8YJmKtGNUoYaHz6LViHV1yiE+wggUDnlhkJekM260atH8Me7gelrHNQqO+ WYOyYZM2eaBivWF35mUEFahM1KdyrMvwwg== -----END CERTIFICATE-----Generated at Sun Sep 7 00:00:29 2025 by rpki-client