$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa File: 86f557d8-087d-3afd-a352-3f7763892440.roa (raw, json) Hash identifier: o7uR0lNt+jXTu4bwz6QDAATOVNexspdOCO5U3FVieLQ= Subject key identifier: 11:47:4D:8B:BD:89:09:24:62:72:E1:84:F5:8B:C9:61:7D:68:F2:3E Certificate issuer: /CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522 Certificate serial: 010D0C9F4328584A8C70CC763078D4864C265C80 Authority key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 40271 IP address blocks: 2620:11a:b002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:cc:76:30:78:d4:86:4c:26:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=bc3ffa52-5ace-4e4b-a209-f2cdff2983c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:63:23:0e:7c:f1:10:85:19:d0:92:e0:80:06: ea:90:0d:ed:35:22:38:50:8d:f2:cd:7c:32:4d:83: 64:88:66:50:64:2e:13:a0:b5:1d:45:44:bf:db:19: 37:3d:71:6c:84:5e:97:e6:58:60:bf:66:6a:cb:48: 87:fd:d1:ed:2a:94:ba:92:78:a1:2c:5e:2c:41:a4: b7:4b:71:31:4a:b6:40:f4:fc:15:fc:fd:ec:bc:65: 6e:5c:c9:1d:75:e3:2f:06:ac:98:a4:03:cc:95:e6: 65:27:df:01:62:4a:ec:0c:c4:b8:8e:8c:3f:c5:22: 25:51:9e:70:b7:03:d5:99:2a:4d:42:3a:d4:05:57: 57:f4:90:10:c6:ce:5a:4d:48:8f:37:e1:3c:39:9d: ab:75:01:05:db:c5:d9:f4:6c:fb:96:81:5d:26:47: bc:09:6d:91:95:16:15:f2:7e:85:9b:71:4d:e8:d6: ac:72:43:77:e5:23:88:88:0f:a5:0e:92:84:fa:2c: 50:db:01:d7:fd:f5:84:d0:1d:a8:de:d2:46:25:10: 7e:05:1f:be:12:3f:7e:02:e0:c2:22:16:d9:48:12: c4:68:78:d3:a9:93:ac:a7:f4:d3:a8:fb:b3:d5:60: e4:4d:93:25:6d:aa:82:6b:ad:fe:92:37:0b:8d:26: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:47:4D:8B:BD:89:09:24:62:72:E1:84:F5:8B:C9:61:7D:68:F2:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl X509v3 Authority Key Identifier: keyid:FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer sbgp-ipAddrBlock: critical IPv6: 2620:11a:b002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:74:70:20:e2:06:f3:3b:a2:01:f6:1b:5b:1c:59:85:46:bf: bb:33:18:4f:05:31:0c:39:31:04:71:f3:18:03:b0:88:61:40: 29:ed:7a:c7:7b:c1:57:48:3b:4c:d8:08:c7:91:b1:3e:13:90: 44:fa:be:af:52:c0:a6:fc:8f:ed:76:31:00:44:70:6f:e0:4d: a0:1c:4c:00:95:ea:62:64:b8:93:96:95:4f:f9:24:e8:c0:fb: f6:bd:af:79:4c:35:a7:56:68:ac:5d:b0:c0:07:10:33:24:62: eb:7b:39:d2:00:fa:3e:11:12:ba:66:34:c1:e8:6c:f3:62:ba: d0:1f:8d:a9:2a:74:c2:14:65:0c:1d:3d:80:1e:25:35:10:35: e7:cd:a6:31:a6:32:40:ec:c9:39:41:7e:2a:a4:02:8c:dc:91: 6c:81:d5:7b:64:a7:4c:43:bd:0e:bd:f8:f7:a1:a8:2a:12:0e: 61:b7:f2:52:8c:7b:db:31:52:91:85:c3:68:9d:8e:f5:83:55: 97:1a:ce:b9:0c:10:e3:f1:98:58:50:89:b0:58:36:2e:3e:12: 71:57:02:a3:4e:a2:9e:9b:35:5a:6b:90:77:89:60:9b:b5:4a: 54:8a:39:ea:d3:11:18:1e:23:22:ba:39:24:66:53:2a:f7:a2: 2d:24:e4:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqMcMx2MHjUhkwmXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRjOWUwY2UtMGYxMi00YmM4LTk4OWMtNWQzMzJhN2Nm NTIyMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YmMzZmZhNTItNWFjZS00ZTRiLWEyMDktZjJjZGZmMjk4M2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWMjDnzxEIUZ0JLggAbqkA3tNSI4UI3yzXwy TYNkiGZQZC4ToLUdRUS/2xk3PXFshF6X5lhgv2Zqy0iH/dHtKpS6knihLF4sQaS3 S3ExSrZA9PwV/P3svGVuXMkddeMvBqyYpAPMleZlJ98BYkrsDMS4jow/xSIlUZ5w twPVmSpNQjrUBVdX9JAQxs5aTUiPN+E8OZ2rdQEF28XZ9Gz7loFdJke8CW2RlRYV 8n6Fm3FN6NasckN35SOIiA+lDpKE+ixQ2wHX/fWE0B2o3tJGJRB+BR++Ej9+AuDC IhbZSBLEaHjTqZOsp/TTqPuz1WDkTZMlbaqCa63+kjcLjSYQuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBFHTYu9iQkkYnLhhPWLyWF9aPI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5 ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMzMmE3Y2Y1MjIvODZmNTU3ZDgtMDg3ZC0z YWZkLWEzNTItM2Y3NzYzODkyNDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTRjOWUwY2UtMGYxMi00YmM4LTk4 OWMtNWQzMzJhN2NmNTIyLzE0YzllMGNlLTBmMTItNGJjOC05ODljLTVkMzMyYTdj ZjUyMi5jcmwwHwYDVR0jBBgwFoAU/fpf04LJWseB5rKwVLTJ0fActTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMz MmE3Y2Y1MjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGrAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ50cCDiBvM7ogH2G1scWYVGv7szGE8FMQw5MQRx8xgDsIhhQCnt esd7wVdIO0zYCMeRsT4TkET6vq9SwKb8j+12MQBEcG/gTaAcTACV6mJkuJOWlU/5 JOjA+/a9r3lMNadWaKxdsMAHEDMkYut7OdIA+j4RErpmNMHobPNiutAfjakqdMIU ZQwdPYAeJTUQNefNpjGmMkDsyTlBfiqkAozckWyB1Xtkp0xDvQ69+PehqCoSDmG3 8lKMe9sxUpGFw2idjvWDVZcazrkMEOPxmFhQibBYNi4+EnFXAqNOop6bNVprkHeJ YJu1SlSKOerTERgeIyK6OSRmUyr3oi0k5LU= -----END CERTIFICATE-----Generated at Fri Aug 1 18:13:52 2025 by rpki-client