$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/961600cd-6ae6-3596-924d-2a01837588b7.roa File: 961600cd-6ae6-3596-924d-2a01837588b7.roa (raw, json) Hash identifier: scqHkgnNkzXPgQjduSknna0D515zm1a/EejFkkq3Iec= Subject key identifier: 4F:60:49:81:53:DE:C9:C6:7A:1B:A7:B1:69:34:D8:2C:6F:4C:4D:7A Certificate issuer: /CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2 Certificate serial: 010D0C9F4328584AECC11BB06F531E05BE3BE840 Authority key identifier: 66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/961600cd-6ae6-3596-924d-2a01837588b7.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 393562 IP address blocks: 2604:640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:1b:b0:6f:53:1e:05:be:3b:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=58ee5654-9ede-459c-89d7-35d487d2982b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8a:bd:04:68:27:65:a6:a8:b9:fa:73:20:5b: 70:bc:73:52:b3:8f:3d:c7:9f:61:55:fa:c1:e2:63: 47:34:1f:e9:ba:6b:15:a1:e8:3a:46:cf:b5:06:31: f2:82:89:77:5c:f0:e1:3c:ed:78:85:ad:c8:4c:dd: cd:7a:b3:f8:c9:94:de:5a:2c:51:da:ef:81:05:3a: 52:e1:79:2c:04:2e:c2:ed:ba:8a:41:19:5d:84:cf: 57:ba:4c:42:7c:d0:c2:9c:8f:eb:97:57:db:dc:80: de:e1:9f:26:5b:11:ae:3f:e8:de:f2:c1:e9:49:91: cb:66:3f:5d:75:9c:b4:9c:15:51:8f:6a:9f:db:58: 16:99:57:16:ce:9c:2c:63:d3:26:03:22:3d:5b:13: 65:ca:12:2c:63:49:7d:38:b4:2b:b0:bc:a4:3c:7e: 1c:6d:5b:81:74:83:72:01:62:78:eb:e9:b9:39:81: 57:44:aa:a9:16:b8:ae:81:4c:10:64:ad:d8:65:09: e7:30:95:ea:d8:b5:4d:01:d1:7c:30:c3:67:a8:07: 3e:47:00:a1:e7:00:67:88:e2:bb:06:98:a3:62:63: 74:ea:a1:3a:20:d3:9c:93:be:a7:4f:8d:10:94:54: c2:32:72:b6:e4:a9:d0:28:c2:99:a8:b1:df:5d:af: e0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:60:49:81:53:DE:C9:C6:7A:1B:A7:B1:69:34:D8:2C:6F:4C:4D:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/961600cd-6ae6-3596-924d-2a01837588b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl X509v3 Authority Key Identifier: keyid:66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer sbgp-ipAddrBlock: critical IPv6: 2604:640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:9c:53:b0:08:17:0b:ed:d7:a1:d0:35:ee:86:65:6e:d4:a8: ad:2a:7d:ed:1c:e3:04:50:a3:91:df:aa:ec:6c:51:fd:0b:1b: 76:5e:5e:e7:2b:a3:8a:65:67:3b:a2:bd:ee:cc:82:fe:f8:f8: e5:3c:d2:86:d6:f3:cf:c7:78:57:9f:ad:4a:a9:16:92:31:a4: ba:2f:69:95:3d:c8:d7:6c:53:53:28:ff:21:b5:25:dc:9a:03: e0:fc:92:8a:33:1d:2f:1f:3f:4f:84:22:66:e4:d2:80:3c:1e: 07:77:a4:0c:85:4c:cd:e3:93:f9:c2:d8:32:f0:d6:47:4f:5c: fb:8e:cb:f9:97:7c:32:03:77:73:26:d7:45:09:0c:08:d1:ff: 58:c1:11:49:f5:3e:24:a0:0c:f6:5e:67:df:b1:d9:c4:04:d7: 97:af:a9:ac:c5:73:bc:b1:a6:f8:91:66:b1:ec:68:7a:9d:f0: 90:3e:c3:e9:a7:cb:31:dc:6f:92:ae:06:2a:d8:37:47:73:b9: 1f:be:cd:63:57:dc:ba:22:8d:85:36:23:e2:40:31:34:8f:b0: 9e:b7:22:30:dc:7f:52:cd:1a:2d:f0:ce:5a:30:a8:91:80:e9: 65:e7:ec:8a:75:12:44:6b:4a:dc:6f:49:5c:8f:d7:05:02:7f: e2:bf:3c:41 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErswRuwb1MeBb476EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y5NTc2ZTAtMjBlMS00YzIyLWJmZWItZjUwZWE4ZGUy Y2UyMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NThlZTU2NTQtOWVkZS00NTljLTg5ZDctMzVkNDg3ZDI5ODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYq9BGgnZaaoufpzIFtwvHNSs489x59hVfrB 4mNHNB/pumsVoeg6Rs+1BjHygol3XPDhPO14ha3ITN3NerP4yZTeWixR2u+BBTpS 4XksBC7C7bqKQRldhM9XukxCfNDCnI/rl1fb3IDe4Z8mWxGuP+je8sHpSZHLZj9d dZy0nBVRj2qf21gWmVcWzpwsY9MmAyI9WxNlyhIsY0l9OLQrsLykPH4cbVuBdINy AWJ46+m5OYFXRKqpFriugUwQZK3YZQnnMJXq2LVNAdF8MMNnqAc+RwCh5wBniOK7 BpijYmN06qE6INOck76nT40QlFTCMnK25KnQKMKZqLHfXa/guQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE9gSYFT3snGehunsWk02CxvTE16MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjk1 NzZlMC0yMGUxLTRjMjItYmZlYi1mNTBlYThkZTJjZTIvOTYxNjAwY2QtNmFlNi0z NTk2LTkyNGQtMmEwMTgzNzU4OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2Y5NTc2ZTAtMjBlMS00YzIyLWJm ZWItZjUwZWE4ZGUyY2UyL2NmOTU3NmUwLTIwZTEtNGMyMi1iZmViLWY1MGVhOGRl MmNlMi5jcmwwHwYDVR0jBBgwFoAUZpd9pB/GFxsKX+73esfcVN617lQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjk1NzZlMC0yMGUxLTRjMjItYmZlYi1mNTBl YThkZTJjZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQGQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6nFOwCBcL7deh0DXuhmVu1KitKn3tHOMEUKOR36rsbFH9Cxt2Xl7n K6OKZWc7or3uzIL++PjlPNKG1vPPx3hXn61KqRaSMaS6L2mVPcjXbFNTKP8htSXc mgPg/JKKMx0vHz9PhCJm5NKAPB4Hd6QMhUzN45P5wtgy8NZHT1z7jsv5l3wyA3dz JtdFCQwI0f9YwRFJ9T4koAz2XmffsdnEBNeXr6msxXO8sab4kWax7Gh6nfCQPsPp p8sx3G+SrgYq2DdHc7kfvs1jV9y6Io2FNiPiQDE0j7CetyIw3H9SzRot8M5aMKiR gOll5+yKdRJEa0rcb0lcj9cFAn/ivzxB -----END CERTIFICATE-----Generated at Sat Aug 23 22:35:44 2025 by rpki-client