$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa File: df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa (raw, json) Hash identifier: iEGQXlMcoGj48pXpB/Pd907kfpc5kCn4g32UT8s+8iY= Subject key identifier: 2D:85:18:05:10:53:CA:F7:0B:32:50:D3:2C:0C:17:EB:2A:A7:37:9C Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584AC8763EB26F774E3F139EFF80 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 26211 IP address blocks: 2620:100:9000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:3e:b2:6f:77:4e:3f:13:9e:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=c86d21e3-7696-48f0-835a-a9e174e74a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:d0:28:8c:02:b9:58:76:cf:d7:e6:d0:5c: af:70:84:68:89:80:aa:af:f7:2e:b7:25:ad:3d:d4: dd:3c:05:0e:e3:bc:ff:b6:aa:8d:20:05:bf:73:d9: fd:c4:d4:6e:69:35:28:a5:cc:46:cf:42:01:a2:10: 72:2b:9d:3b:3f:16:b9:3c:b9:f4:48:e2:06:81:02: e1:86:21:fd:e1:1a:f2:0e:41:f8:c7:e2:3c:02:6a: 3c:60:18:e5:a1:46:7c:27:32:55:d0:c8:c8:a5:63: 04:51:13:bf:9b:8b:9b:a7:28:c2:76:12:8a:c6:b3: 2b:07:be:52:47:ce:55:51:1e:b8:b7:b7:90:4b:f6: df:a2:0a:cb:fc:20:54:b3:d0:7b:d3:98:e0:3b:c2: 71:df:eb:e6:ce:82:9c:35:9e:77:97:a0:5b:8b:b1: 7a:54:4d:f0:c1:4b:3f:48:cf:2b:c1:ff:b6:9b:9a: e8:25:26:ac:9d:51:9e:31:85:3d:a5:bf:65:9b:ac: 9d:ef:37:8f:6d:0b:70:62:37:10:78:f3:b6:cf:57: fb:be:85:b1:08:cd:97:8b:03:cb:cc:c7:1f:1e:3b: ee:b0:54:3a:d4:8b:ba:02:9b:ba:f0:90:0b:67:e6: 99:3b:a1:4a:13:32:01:b7:b3:89:cc:df:f9:e4:36: 93:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:85:18:05:10:53:CA:F7:0B:32:50:D3:2C:0C:17:EB:2A:A7:37:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2620:100:9000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b8:79:b2:1a:3b:ff:31:5e:79:15:d7:70:7c:7b:d1:1f:0b: d6:29:0e:c9:57:cd:6a:9c:e0:2e:cc:91:0b:d3:0c:12:10:08: eb:65:9d:ec:7e:ec:bd:51:0f:ba:50:bd:a2:16:27:34:cb:79: 00:fa:c8:b4:fa:bc:9a:d8:cd:0c:a1:38:9f:46:22:3a:b8:6e: 3b:1c:8d:0c:09:1f:f1:a8:0f:bb:92:5a:c1:7f:1a:98:ed:91: ef:d9:28:ca:fb:da:ec:de:a8:de:58:53:41:c7:af:45:9c:40: c6:7f:32:4f:b7:82:18:a2:4f:a7:31:8c:0c:7b:35:4a:15:5a: 08:bb:4b:c3:9f:39:6a:17:a2:0b:ec:09:5d:28:8d:8f:f2:2c: 78:ef:cd:28:c9:4e:22:fc:45:11:be:02:85:d6:98:2f:81:31: 22:b9:e9:e9:72:96:1a:bc:d3:22:82:45:fe:d8:02:06:7f:2f: da:14:91:4e:07:a7:8f:e3:67:33:c8:52:30:75:5b:56:9b:ab: ec:65:9c:d1:17:26:4a:6e:b1:44:24:5d:37:71:7f:1c:73:4e: 79:bb:d0:ac:9e:88:94:f6:04:cb:84:b3:48:49:c1:2d:2b:ff: 5e:39:9a:b1:ff:e4:99:2d:0a:7c:d3:61:5e:a7:4b:4a:aa:b5: 8e:6d:17:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErIdj6yb3dOPxOe/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk Yzg2ZDIxZTMtNzY5Ni00OGYwLTgzNWEtYTllMTc0ZTc0YTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXzQKIwCuVh2z9fm0FyvcIRoiYCqr/cutyWt PdTdPAUO47z/tqqNIAW/c9n9xNRuaTUopcxGz0IBohByK507Pxa5PLn0SOIGgQLh hiH94RryDkH4x+I8Amo8YBjloUZ8JzJV0MjIpWMEURO/m4ubpyjCdhKKxrMrB75S R85VUR64t7eQS/bfogrL/CBUs9B705jgO8Jx3+vmzoKcNZ53l6Bbi7F6VE3wwUs/ SM8rwf+2m5roJSasnVGeMYU9pb9lm6yd7zePbQtwYjcQePO2z1f7voWxCM2XiwPL zMcfHjvusFQ61Iu6Apu68JALZ+aZO6FKEzIBt7OJzN/55DaTwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC2FGAUQU8r3CzJQ0ywMF+sqpzecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvZGYzY2IxYWUtYjI3ZC0z MGY5LWE5ZGMtODVkM2I1YjlmNzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABAJAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFC4ebIaO/8xXnkV13B8e9EfC9YpDslXzWqc4C7MkQvTDBIQCOtl nex+7L1RD7pQvaIWJzTLeQD6yLT6vJrYzQyhOJ9GIjq4bjscjQwJH/GoD7uSWsF/ Gpjtke/ZKMr72uzeqN5YU0HHr0WcQMZ/Mk+3ghiiT6cxjAx7NUoVWgi7S8OfOWoX ogvsCV0ojY/yLHjvzSjJTiL8RRG+AoXWmC+BMSK56elylhq80yKCRf7YAgZ/L9oU kU4Hp4/jZzPIUjB1W1abq+xlnNEXJkpusUQkXTdxfxxzTnm70KyeiJT2BMuEs0hJ wS0r/145mrH/5JktCnzTYV6nS0qqtY5tF/Q= -----END CERTIFICATE-----Generated at Sat Aug 23 12:57:13 2025 by rpki-client