$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/32891ff4-2a6f-3708-87ef-f3586572e869.roa File: 32891ff4-2a6f-3708-87ef-f3586572e869.roa (raw, json) Hash identifier: bN4VI+fNZMasxPkWC5sWpcCgHx+h3yUv4HIMj1pDbvg= Subject key identifier: A0:F9:48:46:49:1D:EC:76:23:A1:4A:42:D8:A3:6B:13:F7:20:CD:3C Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584A90A0BEA0B2E1396B68FEEB40 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/32891ff4-2a6f-3708-87ef-f3586572e869.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7181 IP address blocks: 2001:19b8::/32 maxlen: 48 2001:4970::/32 maxlen: 48 2600:2c00::/30 maxlen: 48 2604:7e00::/32 maxlen: 48 2604:7f80::/32 maxlen: 48 2606:a700::/32 maxlen: 48 2607:f1d0::/32 maxlen: 48 2607:f3f8::/32 maxlen: 48 2607:fc38::/32 maxlen: 48 2607:fdb8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:be:a0:b2:e1:39:6b:68:fe:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=15866a4f-c1e8-444d-85cc-073d3a71baa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7d:7c:63:d2:92:c8:b5:d5:63:59:59:d3:0b: f2:b6:a1:3d:0d:11:1f:a8:93:17:1c:36:6f:c6:73: 52:1b:e4:ad:1d:65:5b:15:c6:7a:b3:e6:15:a6:2b: 80:2f:e1:98:dd:cd:5d:22:35:ca:f4:82:61:38:8c: 7d:ea:dd:6f:7d:49:e9:11:1e:c7:7c:7f:1a:92:0c: b1:e4:bc:cf:25:85:b2:4a:c9:da:68:2f:26:a1:cd: 4d:a0:28:1a:6c:29:84:c1:5a:75:37:26:cb:d4:2b: b0:45:40:b5:dd:c7:e5:4c:cf:ee:df:f9:55:0f:cb: 51:7b:ad:2e:4e:28:2d:e4:0b:42:6b:cc:50:70:02: a4:54:83:29:70:a6:e0:3f:39:00:49:3c:c7:c9:44: e2:3a:b3:18:e5:27:d6:3e:d9:ca:90:12:21:2f:b7: b2:25:bf:4d:d5:6b:9e:ac:82:65:ca:6c:c6:b8:cb: 22:97:57:f2:cc:85:0c:ea:3b:9d:a8:02:77:6c:ad: b5:03:db:8e:a8:ff:6d:73:20:0f:a2:ff:19:57:13: d2:c4:75:2c:0f:3e:59:d2:62:40:e3:15:2e:47:10: e2:bf:c9:25:3b:01:fa:84:b5:54:09:88:1c:7d:cd: f5:73:3d:29:d7:51:a6:23:4e:ab:bf:84:9d:00:ff: 84:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F9:48:46:49:1D:EC:76:23:A1:4A:42:D8:A3:6B:13:F7:20:CD:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/32891ff4-2a6f-3708-87ef-f3586572e869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b8::/32 2001:4970::/32 2600:2c00::/30 2604:7e00::/32 2604:7f80::/32 2606:a700::/32 2607:f1d0::/32 2607:f3f8::/32 2607:fc38::/32 2607:fdb8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:13:7a:21:e4:72:02:78:a3:8f:c9:42:7e:e8:e7:86:65:26: 4a:15:1b:d9:34:8b:02:81:96:4b:57:42:54:08:74:5b:1f:10: e3:72:cb:74:36:5d:e6:fb:ad:e3:6a:1c:7f:bc:d3:57:21:e5: 07:bf:e4:da:b5:39:4b:ac:2c:62:62:4e:cb:46:70:b1:80:20: bb:db:72:29:97:c7:d0:14:5c:c2:9a:0f:c0:2c:15:44:35:b6: c2:c7:d7:a4:2a:ed:f6:2a:f1:0b:66:cc:e8:34:66:a9:b0:e3: f0:77:ab:a0:11:02:7f:1d:40:26:95:d9:bc:1c:f5:e6:98:b7: f5:6e:65:6c:c9:85:4b:03:49:be:e5:1b:8e:4e:a1:04:95:b5: 9f:aa:9d:0e:75:ea:5b:7f:6f:df:b4:06:6a:70:c9:24:cf:07: 80:9f:7d:5c:6e:85:b0:11:2c:a8:fe:42:18:f7:f2:9b:a8:cb: 6e:fd:ed:79:1b:22:87:64:ef:e2:d0:65:9b:fa:af:de:00:99: e4:a2:7b:dc:d5:5e:6a:4d:ba:d8:3f:b7:3d:94:fe:a3:75:00: f1:3f:cd:05:c8:e9:be:0b:6b:3e:51:a3:fd:7f:01:91:3d:9c: 65:ad:4e:ee:00:b0:12:70:36:6c:fa:b7:c0:ec:46:63:39:01: ee:e7:cb:08 -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWEqQoL6gsuE5a2j+60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MTU4NjZhNGYtYzFlOC00NDRkLTg1Y2MtMDczZDNhNzFiYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX18Y9KSyLXVY1lZ0wvytqE9DREfqJMXHDZv xnNSG+StHWVbFcZ6s+YVpiuAL+GY3c1dIjXK9IJhOIx96t1vfUnpER7HfH8akgyx 5LzPJYWySsnaaC8moc1NoCgabCmEwVp1NybL1CuwRUC13cflTM/u3/lVD8tRe60u Tigt5AtCa8xQcAKkVIMpcKbgPzkASTzHyUTiOrMY5SfWPtnKkBIhL7eyJb9N1Wue rIJlymzGuMsil1fyzIUM6judqAJ3bK21A9uOqP9tcyAPov8ZVxPSxHUsDz5Z0mJA 4xUuRxDiv8klOwH6hLVUCYgcfc31cz0p11GmI06rv4SdAP+EYQIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFKD5SEZJHex2I6FKQtijaxP3IM08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvMzI4OTFmZjQtMmE2Zi0z NzA4LTg3ZWYtZjM1ODY1NzJlODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUAIAEZuAMF ACABSXADBQImACwAAwUAJgR+AAMFACYEf4ADBQAmBqcAAwUAJgfx0AMFACYH8/gD BQAmB/w4AwUAJgf9uDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmE3oh5HICeKOPyUJ+6OeGZSZKFRvZNIsC gZZLV0JUCHRbHxDjcst0Nl3m+63jahx/vNNXIeUHv+TatTlLrCxiYk7LRnCxgCC7 23Ipl8fQFFzCmg/ALBVENbbCx9ekKu32KvELZszoNGapsOPwd6ugEQJ/HUAmldm8 HPXmmLf1bmVsyYVLA0m+5RuOTqEElbWfqp0Odepbf2/ftAZqcMkkzweAn31cboWw ESyo/kIY9/KbqMtu/e15GyKHZO/i0GWb+q/eAJnkonvc1V5qTbrYP7c9lP6jdQDx P80FyOm+C2s+UaP9fwGRPZxlrU7uALAScDZs+rfA7EZjOQHu58sI -----END CERTIFICATE-----Generated at Sun Aug 24 04:22:57 2025 by rpki-client