$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa File: c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa (raw, json) Hash identifier: XMa7TK01bWLLZnY42Seepbiae+TOGpTT5mVJSRgSGkA= Subject key identifier: C2:2E:65:21:B7:99:A0:12:FC:7B:F5:67:60:23:D5:E6:23:84:2B:78 Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F4328584ADD666A355B5BC22FFB231800 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 6939 IP address blocks: 2604:ebc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:6a:35:5b:5b:c2:2f:fb:23:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=c0cb179f-88bb-4b1e-a124-d1c3b25f13c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5d:ac:e4:38:b3:55:bc:22:b8:9a:1b:76:42: 5d:13:7e:92:76:2a:34:66:c4:4f:30:90:24:33:fe: 54:35:fc:10:5d:e8:25:e2:99:03:7b:32:16:08:42: 34:d4:02:93:12:30:04:01:f1:c3:ed:82:02:e0:54: d8:60:8d:c0:09:f8:15:ea:b0:9e:95:ed:6a:f7:62: 1d:c6:a0:f8:f0:2b:2b:8d:3d:0b:f4:da:df:16:62: 6f:9f:76:9e:9a:b3:9a:a9:dc:e8:a9:d7:1e:c3:7f: f6:5d:92:84:ea:37:9f:29:1d:d3:f4:21:50:72:cd: f8:bd:53:27:e1:33:a1:b2:c2:06:68:d1:96:6b:4f: 62:00:92:5d:db:2f:17:ed:95:0d:8a:fc:95:95:bc: a1:e5:43:77:f3:ed:c0:4f:55:e1:19:39:75:8e:68: a7:4b:ed:4f:84:12:f8:f1:7b:59:65:03:16:a0:d2: 3f:d7:de:38:e9:1c:69:fc:f8:4d:6c:a1:c5:0a:fb: 7b:fe:dd:9b:a7:86:a6:bc:c0:2d:15:36:a9:7f:40: 31:13:cf:e3:3a:7f:1c:63:2d:46:57:90:76:d5:0b: c9:15:cd:76:a5:11:78:45:b1:b4:96:5b:09:aa:76: b1:89:b9:b2:3a:d9:9d:4f:93:b7:27:e0:ae:4d:f4: d6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2E:65:21:B7:99:A0:12:FC:7B:F5:67:60:23:D5:E6:23:84:2B:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv6: 2604:ebc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:46:ed:be:ba:cd:4e:22:5e:4e:f9:06:2a:4b:04:b0:5b:04: 2c:a5:32:3e:44:9f:d7:ce:bd:97:c3:bb:f8:3c:bd:e9:e9:11: 00:57:25:59:f2:b6:92:d0:ce:9c:e6:16:3e:0d:c8:cb:61:60: 5d:f1:0c:f3:c3:f8:c5:85:f9:a9:41:d5:91:11:62:69:4e:b3: dc:e4:c8:4b:b5:0b:7d:a3:ac:c6:05:38:9c:df:1a:e5:3a:ec: 96:16:23:30:24:2f:0b:a5:90:ca:0b:aa:c1:19:10:1c:eb:a3: b2:78:ca:22:ed:68:f4:99:cb:b5:a0:86:0b:60:9a:ed:4e:93: ce:9d:c7:31:07:b8:55:42:c7:ce:b0:a2:1d:b2:b1:44:60:e3: 78:e9:7e:94:1c:c0:4e:cf:e7:11:b9:22:3e:cb:d1:19:68:f4: a6:c7:f5:3a:3c:40:c1:68:2b:e6:79:90:c8:48:14:73:06:4b: 3c:54:27:81:87:b1:91:b3:e9:20:ee:f1:9e:06:24:5d:bb:20: 53:3a:cb:c5:08:3a:ea:4a:c4:6f:71:07:cc:a8:a5:9d:b0:8b: 16:8c:f0:26:36:ac:2b:9f:16:c8:14:03:72:8c:52:7e:c7:98: 9f:84:08:49:d4:21:83:42:44:5c:a1:06:de:55:cf:33:41:ee: 7e:c1:96:9e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErdZmo1W1vCL/sjGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YzBjYjE3OWYtODhiYi00YjFlLWExMjQtZDFjM2IyNWYxM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx12s5DizVbwiuJobdkJdE36Sdio0ZsRPMJAk M/5UNfwQXegl4pkDezIWCEI01AKTEjAEAfHD7YIC4FTYYI3ACfgV6rCele1q92Id xqD48CsrjT0L9NrfFmJvn3aemrOaqdzoqdcew3/2XZKE6jefKR3T9CFQcs34vVMn 4TOhssIGaNGWa09iAJJd2y8X7ZUNivyVlbyh5UN38+3AT1XhGTl1jminS+1PhBL4 8XtZZQMWoNI/19446Rxp/PhNbKHFCvt7/t2bp4amvMAtFTapf0AxE8/jOn8cYy1G V5B21QvJFc12pRF4RbG0llsJqnaxibmyOtmdT5O3J+CuTfTWPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMIuZSG3maAS/Hv1Z2Aj1eYjhCt4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvYzlmOGQ0OGEtYzlmMS0z YWQ4LWEyYjktNDhlNTQwYTJmOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYRu2+us1OIl5O+QYqSwSwWwQspTI+RJ/Xzr2Xw7v4PL3p6REAVyVZ 8raS0M6c5hY+DcjLYWBd8Qzzw/jFhfmpQdWREWJpTrPc5MhLtQt9o6zGBTic3xrl OuyWFiMwJC8LpZDKC6rBGRAc66OyeMoi7Wj0mcu1oIYLYJrtTpPOnccxB7hVQsfO sKIdsrFEYON46X6UHMBOz+cRuSI+y9EZaPSmx/U6PEDBaCvmeZDISBRzBks8VCeB h7GRs+kg7vGeBiRduyBTOsvFCDrqSsRvcQfMqKWdsIsWjPAmNqwrnxbIFANyjFJ+ x5ifhAhJ1CGDQkRcoQbeVc8zQe5+wZae -----END CERTIFICATE-----Generated at Sat Aug 23 16:07:06 2025 by rpki-client