$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/7f630d2e-d912-3912-9d2f-8f747a67a6c4.roa File: 7f630d2e-d912-3912-9d2f-8f747a67a6c4.roa (raw, json) Hash identifier: jWQ+L0/uBuSNGDCbS/C9ZB/3CeKm0UQoRkpaF9hIuNo= Subject key identifier: 81:CE:41:2B:FE:91:3C:D6:8A:D6:EF:C3:E1:FF:CB:51:3D:36:B6:24 Certificate issuer: /CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740 Certificate serial: 010D0C9F4328584A89ED2DAB374AC64D7777BE80 Authority key identifier: 61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/7f630d2e-d912-3912-9d2f-8f747a67a6c4.roa Signing time: Wed 16 Jul 2025 15:24:23 +0000 ROA not before: Wed 16 Jul 2025 15:24:23 +0000 ROA not after: Tue 14 Oct 2025 15:24:23 +0000 asID: 13356 IP address blocks: 2604:5ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:ed:2d:ab:37:4a:c6:4d:77:77:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740 Validity Not Before: Jul 16 15:24:23 2025 GMT Not After : Oct 14 15:24:23 2025 GMT Subject: CN=8e53ad8a-9f61-4bc4-9cbd-fbe7e817ec5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6d:01:49:33:49:03:88:2f:1f:d6:ca:f2:e7: 26:2e:76:aa:69:e2:e7:4c:f2:a8:37:fa:36:e6:ae: e6:9b:bc:9c:8a:f6:7e:3e:c5:c8:18:63:a0:f8:8e: 41:9a:28:cf:91:42:59:a6:0c:93:66:f0:bf:0f:52: 97:34:e3:84:ab:a6:62:17:e3:32:59:d3:71:e7:b1: 31:cd:b6:8d:b1:5e:d8:67:b1:c7:f6:c3:a4:6f:64: d2:6a:67:0c:1a:48:96:89:b8:30:73:0f:00:68:91: 76:4e:84:0b:af:7c:89:c7:e2:e0:bf:f2:d9:0f:13: 7b:ef:d6:d4:ab:ef:8c:59:53:28:bf:3e:8b:81:6f: 0a:99:5f:56:51:e5:2d:f6:85:3f:b4:5b:16:e7:98: d0:90:13:0f:f4:47:6e:86:19:42:4c:14:37:a3:24: ec:3d:8e:77:a5:6d:c3:80:12:99:34:48:32:f3:5a: 34:de:ba:32:e8:0e:23:0a:50:40:35:29:ec:a5:f9: 4a:f8:57:e0:95:9d:ef:ef:25:54:6a:07:af:66:fe: 6d:89:52:8a:ba:c7:c9:c2:02:9f:db:99:3a:70:d6: f4:14:7b:a4:29:26:86:bd:d6:cd:04:11:00:92:96: a3:b0:74:4f:c8:e0:db:73:9f:1c:ca:fc:16:ab:7b: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CE:41:2B:FE:91:3C:D6:8A:D6:EF:C3:E1:FF:CB:51:3D:36:B6:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/7f630d2e-d912-3912-9d2f-8f747a67a6c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl X509v3 Authority Key Identifier: keyid:61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer sbgp-ipAddrBlock: critical IPv6: 2604:5ec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:39:80:ee:77:2d:4d:37:ba:11:14:b6:ad:10:43:04:e0:36: 9d:2b:39:c9:24:f7:94:73:35:03:d2:72:92:28:bf:7f:e3:de: 57:70:62:c2:f7:3c:9e:ea:53:70:a7:95:bb:39:f5:d2:2e:a3: de:ab:b6:11:a0:d2:51:28:2b:ba:8c:b6:ba:a3:8e:f2:ae:3a: da:d1:7e:7c:42:6e:2f:db:fa:7f:0c:25:b5:fa:12:51:cf:ca: d5:9d:27:3f:48:d6:69:ea:eb:98:1d:0e:37:90:91:00:f0:96: 38:f8:79:32:9d:bc:1b:ec:9e:f7:53:a4:87:88:f7:6c:2e:6f: db:4f:34:33:9b:61:33:50:2b:f7:b7:d0:46:a6:d8:da:26:4d: 6f:74:87:cc:b2:2a:69:09:36:b5:b9:56:4b:ef:47:45:64:4d: 07:c6:71:f0:3f:a8:79:56:15:b3:1f:3f:d3:2a:7b:32:bd:4d: d7:c0:89:93:1b:45:0e:14:9d:d3:3c:f1:b2:2c:c9:6d:7b:3d: 0e:f4:96:18:78:78:3a:8f:05:1e:a8:0a:57:44:54:34:20:84: 8d:7f:96:d6:7a:b9:a6:30:2c:eb:4b:1b:9a:7e:7e:c5:bd:b7: 9c:e8:c0:2b:2c:5b:ef:cb:57:45:a7:b6:71:46:73:41:31:0f: 9e:b6:d1:53 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqJ7S2rN0rGTXd3voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4YTk3ZmEtZmI2ZS00NmQ0LTllOGUtZWZkZDQzNThh NzQwMB4XDTI1MDcxNjE1MjQyM1oXDTI1MTAxNDE1MjQyM1owLzEtMCsGA1UEAxMk OGU1M2FkOGEtOWY2MS00YmM0LTljYmQtZmJlN2U4MTdlYzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW0BSTNJA4gvH9bK8ucmLnaqaeLnTPKoN/o2 5q7mm7ycivZ+PsXIGGOg+I5BmijPkUJZpgyTZvC/D1KXNOOEq6ZiF+MyWdNx57Ex zbaNsV7YZ7HH9sOkb2TSamcMGkiWibgwcw8AaJF2ToQLr3yJx+Lgv/LZDxN779bU q++MWVMovz6LgW8KmV9WUeUt9oU/tFsW55jQkBMP9EduhhlCTBQ3oyTsPY53pW3D gBKZNEgy81o03roy6A4jClBANSnspflK+FfglZ3v7yVUagevZv5tiVKKusfJwgKf 25k6cNb0FHukKSaGvdbNBBEAkpajsHRPyODbc58cyvwWq3u2ywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIHOQSv+kTzWitbvw+H/y1E9NrYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZjhh OTdmYS1mYjZlLTQ2ZDQtOWU4ZS1lZmRkNDM1OGE3NDAvN2Y2MzBkMmUtZDkxMi0z OTEyLTlkMmYtOGY3NDdhNjdhNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2Y4YTk3ZmEtZmI2ZS00NmQ0LTll OGUtZWZkZDQzNThhNzQwLzNmOGE5N2ZhLWZiNmUtNDZkNC05ZThlLWVmZGQ0MzU4 YTc0MC5jcmwwHwYDVR0jBBgwFoAUYRaTXw4eJhCS+xK0VJWAkRb0sDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZjhhOTdmYS1mYjZlLTQ2ZDQtOWU4ZS1lZmRk NDM1OGE3NDAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRewDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASOYDudy1NN7oRFLatEEME4DadKznJJPeUczUD0nKSKL9/495XcGLC 9zye6lNwp5W7OfXSLqPeq7YRoNJRKCu6jLa6o47yrjra0X58Qm4v2/p/DCW1+hJR z8rVnSc/SNZp6uuYHQ43kJEA8JY4+Hkynbwb7J73U6SHiPdsLm/bTzQzm2EzUCv3 t9BGptjaJk1vdIfMsippCTa1uVZL70dFZE0HxnHwP6h5VhWzHz/TKnsyvU3XwImT G0UOFJ3TPPGyLMltez0O9JYYeHg6jwUeqApXRFQ0IISNf5bWermmMCzrSxuafn7F vbec6MArLFvvy1dFp7ZxRnNBMQ+ettFT -----END CERTIFICATE-----Generated at Wed Aug 20 03:47:46 2025 by rpki-client