$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa File: 5bf9e334-dc7e-3b55-8aff-c525713a2347.roa (raw, json) Hash identifier: UEYW5Wcft2V3B2VJ+/MGbSMq1wk0iONsZR1/XU3sw3M= Subject key identifier: FA:D4:E7:2F:6F:C6:41:2E:D3:51:49:C5:D2:A9:E9:B1:EE:76:A2:83 Certificate issuer: /CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7 Certificate serial: 010D0C9F4328584AF0F13FD48766141E01817760 Authority key identifier: B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 20388 IP address blocks: 2604:ce40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3f:d4:87:66:14:1e:01:81:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=d1bc7aff-4e29-4ebc-8ff3-4746ece43bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:e2:6e:8f:2a:cd:71:3b:bd:e3:8e:0e:a9: 3b:df:2e:d7:74:d2:f2:5d:a1:97:f7:3d:df:14:38: d7:28:01:0e:6b:ff:2b:ad:5e:2b:24:82:bc:93:5d: 84:97:53:33:5e:8d:31:8c:a2:98:09:f4:d9:90:2b: 15:a0:20:8a:04:0c:11:ec:ff:db:0e:b8:b3:32:c1: 8a:45:fd:70:1e:3c:64:84:13:ae:cf:09:a0:bf:39: 39:46:ae:44:17:2a:67:1d:02:a9:90:2e:65:a4:6f: 10:08:d3:1b:f4:74:8b:fd:e7:5c:80:1e:0b:26:ca: b3:8d:5e:90:56:17:ce:48:bc:59:d7:e5:36:ee:37: 60:ea:0c:3f:a7:68:b5:91:77:b9:9b:d3:95:3b:48: 37:f2:52:11:d5:da:9b:dc:e6:d8:1e:81:33:db:66: 59:bd:87:47:b9:74:0d:a4:f6:89:2b:54:97:b7:89: 0b:f7:1a:7a:59:71:61:74:29:5a:de:b5:76:fa:32: 69:52:32:6a:88:6d:b7:d4:fe:f6:83:e7:30:3e:60: 85:95:86:53:97:58:85:0f:e1:3e:46:10:09:b8:52: f5:e7:48:35:34:1f:7a:cb:64:fe:a6:22:87:15:fb: 87:a5:d3:c2:9d:2b:ce:03:20:f4:16:7e:95:a6:ec: 6e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D4:E7:2F:6F:C6:41:2E:D3:51:49:C5:D2:A9:E9:B1:EE:76:A2:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl X509v3 Authority Key Identifier: keyid:B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer sbgp-ipAddrBlock: critical IPv6: 2604:ce40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:3e:d9:8d:7b:75:0f:88:29:10:6f:7d:f8:5a:1a:1f:da:32: ec:f0:10:35:67:80:4c:ff:5f:6f:27:1d:11:b4:b9:2c:4a:3f: 07:ec:92:e2:53:45:1b:e8:49:9c:dc:3d:a3:f9:d8:23:ea:64: 82:d1:9f:01:3d:39:2f:5d:47:60:00:e0:54:e6:62:00:35:c8: 88:b3:8e:24:3e:ce:db:be:0f:77:f0:69:ae:d4:9e:b1:f3:58: 27:31:e5:ff:83:69:d8:26:57:eb:28:69:c5:a2:e1:c7:6b:9f: 0d:25:01:2e:69:e2:72:f4:d5:24:6b:a5:74:0a:7d:41:fd:93: be:3a:7d:cb:82:04:73:11:82:9f:46:39:c6:37:91:02:e1:23: dc:a1:47:dd:43:94:8d:f0:90:d1:be:0c:d2:2e:df:21:ce:04: 05:b8:27:2e:84:8d:d3:05:b3:80:6f:72:72:a8:06:bb:33:d8: 93:4e:af:41:49:eb:c9:48:50:f4:43:72:cd:31:7a:49:bb:99: 26:78:28:b4:9d:66:63:bb:71:3f:ff:d2:78:80:39:11:53:b0: 3f:b1:b4:03:c2:53:4f:b7:3c:96:b2:1d:7f:4b:9a:45:b7:28: b7:2e:60:75:95:80:17:0c:6b:40:6d:89:40:ac:21:5d:3d:81: 15:b4:c3:af -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErw8T/Uh2YUHgGBd2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4ZmI0YzQtMGJjZS00NDM5LWFjNzAtMTJiMWFiN2Mz ZGQ3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZDFiYzdhZmYtNGUyOS00ZWJjLThmZjMtNDc0NmVjZTQzYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnvibo8qzXE7veOODqk73y7XdNLyXaGX9z3f FDjXKAEOa/8rrV4rJIK8k12El1MzXo0xjKKYCfTZkCsVoCCKBAwR7P/bDrizMsGK Rf1wHjxkhBOuzwmgvzk5Rq5EFypnHQKpkC5lpG8QCNMb9HSL/edcgB4LJsqzjV6Q VhfOSLxZ1+U27jdg6gw/p2i1kXe5m9OVO0g38lIR1dqb3ObYHoEz22ZZvYdHuXQN pPaJK1SXt4kL9xp6WXFhdCla3rV2+jJpUjJqiG231P72g+cwPmCFlYZTl1iFD+E+ RhAJuFL150g1NB96y2T+piKHFfuHpdPCnSvOAyD0Fn6VpuxuGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPrU5y9vxkEu01FJxdKp6bHudqKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZThm YjRjNC0wYmNlLTQ0MzktYWM3MC0xMmIxYWI3YzNkZDcvNWJmOWUzMzQtZGM3ZS0z YjU1LThhZmYtYzUyNTcxM2EyMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGU4ZmI0YzQtMGJjZS00NDM5LWFj NzAtMTJiMWFiN2MzZGQ3L2RlOGZiNGM0LTBiY2UtNDQzOS1hYzcwLTEyYjFhYjdj M2RkNy5jcmwwHwYDVR0jBBgwFoAUsFydYYfgTD3CaLN8uM5RmYyIqDMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZThmYjRjNC0wYmNlLTQ0MzktYWM3MC0xMmIx YWI3YzNkZDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTOQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJPtmNe3UPiCkQb334Whof2jLs8BA1Z4BM/19vJx0RtLksSj8H7JLi U0Ub6Emc3D2j+dgj6mSC0Z8BPTkvXUdgAOBU5mIANciIs44kPs7bvg938Gmu1J6x 81gnMeX/g2nYJlfrKGnFouHHa58NJQEuaeJy9NUka6V0Cn1B/ZO+On3LggRzEYKf RjnGN5EC4SPcoUfdQ5SN8JDRvgzSLt8hzgQFuCcuhI3TBbOAb3JyqAa7M9iTTq9B SevJSFD0Q3LNMXpJu5kmeCi0nWZju3E//9J4gDkRU7A/sbQDwlNPtzyWsh1/S5pF tyi3LmB1lYAXDGtAbYlArCFdPYEVtMOv -----END CERTIFICATE-----Generated at Sat Aug 23 23:45:57 2025 by rpki-client