$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ea5b687-83f6-3539-82a3-84a904f8e622.roa File: 9ea5b687-83f6-3539-82a3-84a904f8e622.roa (raw, json) Hash identifier: bLVrwAgIAVtIYKJSpmzxHlpdiJxBwX9q6ZX2c3AdQ8o= Subject key identifier: A5:DE:14:1C:70:CF:3F:58:D8:F8:4B:A5:2E:A1:DE:3A:78:49:D8:22 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD7D134FF3ED17BB23B34E900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ea5b687-83f6-3539-82a3-84a904f8e622.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 2606:4700:3004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:34:ff:3e:d1:7b:b2:3b:34:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=717f84db-b284-4db8-aee4-4cdb3c8d8f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e1:d3:e7:7f:da:64:6c:81:0f:e0:6d:be:c3: 16:df:16:f0:af:b2:d2:46:e1:ca:7d:01:ad:d5:e7: 31:d7:fa:64:6c:d8:14:8e:3d:e6:a0:74:b0:1f:be: 71:48:9d:ae:d2:3f:23:e6:cb:1c:d8:5d:e6:37:d3: db:9a:cc:90:6a:19:c1:08:e6:38:0d:eb:36:3b:a5: 0a:8e:46:2c:6d:b6:44:88:0d:a3:03:bf:43:16:c9: c8:d3:fe:34:b1:6a:52:13:35:c5:63:23:d3:47:8a: b8:8e:f4:a9:1c:13:0e:cb:55:5a:7b:5c:9a:e6:c3: d1:4e:d7:c2:c7:5b:00:d7:6d:80:d2:a1:71:a1:75: f6:36:65:b0:bf:a9:55:3f:b0:91:0b:61:d8:8a:40: d1:dc:95:57:d6:0d:62:8c:b0:0d:c5:04:86:f4:0d: c4:ed:f4:8a:1e:9d:0d:e5:8c:ed:83:ac:a4:2c:75: 96:54:7e:79:d2:0c:a2:2f:fc:0a:8c:f6:93:24:52: 4f:85:d5:b9:ac:a9:70:64:11:22:ef:ff:dd:44:92: 3b:f1:79:85:7e:c0:68:e2:3d:ab:52:5b:67:23:5c: e6:fb:d2:22:40:0e:be:09:a6:f9:db:9a:e1:97:c3: c5:f8:2d:22:70:4d:d1:c7:37:4c:97:af:fc:4f:70: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DE:14:1C:70:CF:3F:58:D8:F8:4B:A5:2E:A1:DE:3A:78:49:D8:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ea5b687-83f6-3539-82a3-84a904f8e622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3004::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:16:9d:3e:97:f0:25:a8:c5:76:e8:78:f2:e7:7d:66:60:a1: ba:0d:0a:8f:4f:83:12:2e:dd:24:1d:63:2b:5c:75:36:d3:a1: 00:e7:7a:a4:ee:ed:19:8d:ec:6e:21:e8:f9:b7:7f:e1:3e:cd: 2c:4e:4b:fd:67:82:29:5d:7c:f4:5f:1e:53:f3:b2:33:2a:c7: b3:31:df:52:02:ce:54:45:6d:bb:79:70:66:44:d2:82:81:f9: d8:3c:35:85:a2:2f:91:17:63:8c:b9:14:c4:ed:92:76:86:25: 1f:3d:8c:84:e0:fc:d5:4b:93:d0:10:ec:36:62:5f:ff:c8:d4: 26:5a:72:0a:38:ad:96:74:16:ef:e7:ca:60:7d:0b:19:c7:7e: ff:f7:4b:51:27:fc:8d:14:6b:ba:32:06:bc:3b:19:58:98:c5: 97:a4:d5:4e:ad:d3:a1:1e:20:4e:23:2f:d4:74:4f:7f:2c:dd: fb:43:0b:9f:71:5a:eb:83:8b:f8:22:70:12:03:4e:88:13:cb: e6:f0:be:cd:8b:87:82:dc:6a:c4:31:b0:c2:8a:6d:1c:59:11: 98:0c:6f:c3:8c:b6:cb:3c:a0:6c:bc:10:64:b3:8b:f3:64:11: 57:ac:47:ba:2c:5e:16:cc:ea:e4:a8:b0:85:6f:97:e3:c8:ff: d2:00:7e:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErX0TT/PtF7sjs06QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NzE3Zjg0ZGItYjI4NC00ZGI4LWFlZTQtNGNkYjNjOGQ4ZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOHT53/aZGyBD+BtvsMW3xbwr7LSRuHKfQGt 1ecx1/pkbNgUjj3moHSwH75xSJ2u0j8j5ssc2F3mN9PbmsyQahnBCOY4Des2O6UK jkYsbbZEiA2jA79DFsnI0/40sWpSEzXFYyPTR4q4jvSpHBMOy1Vae1ya5sPRTtfC x1sA122A0qFxoXX2NmWwv6lVP7CRC2HYikDR3JVX1g1ijLANxQSG9A3E7fSKHp0N 5Yztg6ykLHWWVH550gyiL/wKjPaTJFJPhdW5rKlwZBEi7//dRJI78XmFfsBo4j2r UltnI1zm+9IiQA6+Cab525rhl8PF+C0icE3RxzdMl6/8T3DMzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKXeFBxwzz9Y2PhLpS6h3jp4SdgiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWVhNWI2ODctODNmNi0z NTM5LTgyYTMtODRhOTA0ZjhlNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4WnT6X8CWoxXboePLnfWZgoboNCo9PgxIu3SQdYytcdTbToQDn eqTu7RmN7G4h6Pm3f+E+zSxOS/1ngildfPRfHlPzsjMqx7Mx31ICzlRFbbt5cGZE 0oKB+dg8NYWiL5EXY4y5FMTtknaGJR89jITg/NVLk9AQ7DZiX//I1CZacgo4rZZ0 Fu/nymB9CxnHfv/3S1En/I0Ua7oyBrw7GViYxZek1U6t06EeIE4jL9R0T38s3ftD C59xWuuDi/gicBIDTogTy+bwvs2Lh4LcasQxsMKKbRxZEZgMb8OMtss8oGy8EGSz i/NkEVesR7osXhbM6uSosIVvl+PI/9IAfow= -----END CERTIFICATE-----Generated at Sat Aug 23 15:14:23 2025 by rpki-client