$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa File: 7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa (raw, json) Hash identifier: P0yqaTZFWHm8G6GRaX+QhuzM8HzGHCpMC/vZfBCusrg= Subject key identifier: AE:EB:0F:A3:78:1B:7C:F4:26:AF:7C:92:FF:5A:02:14:B9:E2:2F:5C Certificate issuer: /CN=cb49febe-7885-4a3a-8290-3710b3f34905 Certificate serial: 010D0C9F4328584ACF70FAE7A2394FA7BD148880 Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 376 IP address blocks: 2001:510:20c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:70:fa:e7:a2:39:4f:a7:bd:14:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=d2a63431-c834-4959-a8d4-3ae537ef4518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b6:78:51:d3:19:4c:93:58:08:23:6e:df:1d: 02:7a:0b:64:40:24:f5:de:98:d1:3e:88:a8:21:6f: 15:44:b9:c5:30:ef:53:80:f2:13:da:6a:6f:8b:d9: a8:fe:99:49:94:b2:1d:c8:0d:46:8f:af:d9:69:0a: 06:fa:18:73:62:9e:d6:5a:5f:93:d9:f6:cb:5e:a1: 66:f9:86:e1:a6:91:b4:61:19:2e:05:0d:83:6d:f0: 5a:b0:7b:15:80:dd:c1:ba:ac:5c:73:44:72:6e:7f: 64:86:0b:01:b4:fb:1a:71:92:c0:18:8e:d2:d5:28: 49:04:56:0c:82:22:93:ce:f2:e4:02:95:9e:99:ed: 78:4d:ef:29:9b:d5:94:2d:24:d4:fe:be:cd:07:96: 29:ad:31:89:14:d5:5c:c0:47:e8:a3:fa:3f:c4:68: 36:dc:d9:7b:1a:4b:94:60:13:bd:f9:c6:ba:f2:97: ec:18:c5:f7:55:27:24:f6:52:a7:09:14:a8:a3:26: 22:23:9c:b7:aa:5f:01:34:e4:d8:96:71:2a:f2:73: ca:1d:eb:62:8f:48:f4:7f:b8:00:5f:ab:76:e0:ac: 40:93:57:62:4f:60:2f:87:b9:39:c9:ff:28:63:6c: a4:e3:79:55:51:4e:ad:f4:80:f7:a5:37:0b:8a:38: e8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EB:0F:A3:78:1B:7C:F4:26:AF:7C:92:FF:5A:02:14:B9:E2:2F:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl X509v3 Authority Key Identifier: keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer sbgp-ipAddrBlock: critical IPv6: 2001:510:20c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:cb:3a:5f:fc:d0:cc:f2:68:9c:1a:f7:26:3b:09:d2:a7:f5: 91:4e:c7:ee:3c:a1:86:d2:bb:a3:0c:44:df:1b:a2:8d:cf:ee: 32:1b:e1:90:5a:ad:bf:d7:ef:e0:b2:84:b7:96:54:93:97:16: ec:2d:32:31:a9:0e:06:1b:7f:2e:bb:7f:11:66:40:7d:2b:dd: a8:40:25:67:a3:af:5a:14:96:c7:a3:4d:9c:f9:55:2a:1d:d0: ad:79:8d:44:2d:d4:b8:48:22:68:e0:88:2b:2a:74:ec:f1:f0: 8c:51:cc:92:06:84:5f:8b:4d:d5:3a:62:9a:47:a4:c4:fc:e2: 09:16:0b:08:29:ed:33:66:9f:d1:f7:ec:ed:8c:68:7f:16:24: ac:d4:5f:9d:41:84:9c:dc:2f:60:7f:81:9a:71:9e:29:11:31: cc:6c:b6:b8:25:13:10:e0:f7:9e:19:4b:5f:9f:9e:a6:97:71: f8:eb:15:b1:f4:9f:9c:fa:00:3a:75:45:da:26:86:37:f7:f9: 6c:d4:d4:93:40:c2:2e:ee:98:e7:3e:88:d8:bb:3f:fe:37:ec: 88:2c:44:70:df:6f:9f:c3:30:45:ff:9a:80:56:4a:f6:44:d1: 49:e6:cd:d7:01:40:8f:b0:c3:aa:6e:d4:c7:3d:cb:15:1c:e2: 15:1d:ba:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErPcPrnojlPp70UiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OWZlYmUtNzg4NS00YTNhLTgyOTAtMzcxMGIzZjM0 OTA1MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk ZDJhNjM0MzEtYzgzNC00OTU5LWE4ZDQtM2FlNTM3ZWY0NTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLZ4UdMZTJNYCCNu3x0CegtkQCT13pjRPoio IW8VRLnFMO9TgPIT2mpvi9mo/plJlLIdyA1Gj6/ZaQoG+hhzYp7WWl+T2fbLXqFm +YbhppG0YRkuBQ2DbfBasHsVgN3Buqxcc0Rybn9khgsBtPsacZLAGI7S1ShJBFYM giKTzvLkApWeme14Te8pm9WULSTU/r7NB5YprTGJFNVcwEfoo/o/xGg23Nl7GkuU YBO9+ca68pfsGMX3VSck9lKnCRSooyYiI5y3ql8BNOTYlnEq8nPKHetij0j0f7gA X6t24KxAk1diT2Avh7k5yf8oY2yk43lVUU6t9ID3pTcLijjopQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK7rD6N4G3z0Jq98kv9aAhS54i9cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5 ZmViZS03ODg1LTRhM2EtODI5MC0zNzEwYjNmMzQ5MDUvN2Y0ODZkMDktZDdhNS0z MWE2LTliOTItMGFmNmRiOWFjMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2I0OWZlYmUtNzg4NS00YTNhLTgy OTAtMzcxMGIzZjM0OTA1L2NiNDlmZWJlLTc4ODUtNGEzYS04MjkwLTM3MTBiM2Yz NDkwNS5jcmwwHwYDVR0jBBgwFoAUvOGzZkw5m0aMDRmG67KX3JfQGd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5ZmViZS03ODg1LTRhM2EtODI5MC0zNzEw YjNmMzQ5MDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFEAIM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABPLOl/80MzyaJwa9yY7CdKn9ZFOx+48oYbSu6MMRN8boo3P7jIb 4ZBarb/X7+CyhLeWVJOXFuwtMjGpDgYbfy67fxFmQH0r3ahAJWejr1oUlsejTZz5 VSod0K15jUQt1LhIImjgiCsqdOzx8IxRzJIGhF+LTdU6YppHpMT84gkWCwgp7TNm n9H37O2MaH8WJKzUX51BhJzcL2B/gZpxnikRMcxstrglExDg954ZS1+fnqaXcfjr FbH0n5z6ADp1Rdomhjf3+WzU1JNAwi7umOc+iNi7P/437IgsRHDfb5/DMEX/moBW SvZE0UnmzdcBQI+ww6pu1Mc9yxUc4hUdupQ= -----END CERTIFICATE-----Generated at Sun Aug 24 07:35:43 2025 by rpki-client