$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa File: fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa (raw, json) Hash identifier: 8X0TBRIzVT7Lf+wwMfJl0QfllibD5wXGGo4Omg3bbm4= Subject key identifier: 13:54:3F:28:3E:17:75:E3:E3:B4:CC:2D:4A:B3:9B:52:C2:02:2D:6A Certificate issuer: /CN=dccebd00-21a5-4af6-b51a-e1f651e635f7 Certificate serial: 010D0C9F4328584AC2E1033136C543EFA037FB00 Authority key identifier: F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 0 IP address blocks: 2001:505:140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:03:31:36:c5:43:ef:a0:37:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dccebd00-21a5-4af6-b51a-e1f651e635f7 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=5e5be758-6a3f-476e-8adf-d41aa504b492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4a:43:b8:49:79:8e:3d:ac:90:60:64:e0:ce: 5c:f5:14:44:49:38:2b:48:4e:54:64:b9:17:28:4c: 3f:58:4d:05:77:40:3d:2b:20:fc:9a:a9:13:c2:4c: b3:73:bd:21:a1:b4:57:29:21:ea:60:dc:de:b6:09: 3a:24:84:5e:93:72:27:d8:f5:9e:11:8b:08:24:ec: ba:9c:69:a5:84:ba:61:6d:3a:ce:27:ef:f4:2f:48: 92:3e:92:c3:6b:b4:ba:11:35:3b:72:01:64:29:80: 79:b2:a0:93:3e:08:ed:7c:d6:ab:13:46:99:a7:58: 01:43:2b:ed:6a:67:1a:e4:94:3b:a1:63:04:51:a0: 86:0d:f6:7f:08:98:0f:3e:4a:f1:2c:d9:c8:d5:e1: 06:d8:46:ed:ba:cc:38:21:a5:b9:d6:80:b4:97:48: 3c:77:b2:12:45:fb:23:54:8b:b9:9d:2d:46:ed:e8: 11:78:63:77:ef:ad:d6:84:78:47:74:d5:28:b9:98: 9e:7d:5c:f1:97:2e:bb:34:cb:65:f4:c3:c9:3a:cd: 4f:b1:7e:48:3e:c1:00:26:d0:97:af:4c:3f:7a:be: fd:de:77:d0:8c:9a:8a:ee:e5:29:72:c2:aa:3f:e0: 58:f9:6a:ae:c1:77:cd:a2:81:ae:d9:1f:3f:1d:d3: d1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:54:3F:28:3E:17:75:E3:E3:B4:CC:2D:4A:B3:9B:52:C2:02:2D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl X509v3 Authority Key Identifier: keyid:F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer sbgp-ipAddrBlock: critical IPv6: 2001:505:140::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:de:cd:92:41:75:8f:45:fa:7b:b4:bf:b2:67:aa:72:e2:ff: 58:71:e2:e6:c6:b1:25:2d:72:72:57:45:6c:b0:2d:ae:96:eb: 43:72:a0:70:a6:87:18:17:f6:6f:63:55:2f:89:58:6f:0c:e1: cd:df:2c:cd:1a:59:b6:57:c9:65:88:d4:3b:1d:d4:17:a9:24: c7:22:f1:94:eb:06:23:2d:f6:a9:56:6b:ac:c4:da:23:f0:79: 01:01:58:87:09:51:5d:75:47:40:64:ed:2e:46:50:57:17:64: 65:42:2f:bf:5d:81:44:98:8f:4a:84:7d:19:00:2f:02:bb:52: 3c:59:eb:4a:aa:68:40:22:e2:e9:3d:20:04:19:a1:18:30:bf: 72:aa:9b:47:61:b3:7e:cb:d0:3b:55:01:cf:98:49:05:dc:90: 79:df:00:fe:e7:7d:9c:06:9f:58:cd:d4:3e:17:d5:6a:d0:5f: 02:e6:ac:33:27:fe:0b:fc:cf:08:84:d0:31:b0:27:b9:87:25: b2:c5:bb:8e:32:45:38:94:c5:a2:1e:7c:a3:b2:36:12:61:58: 34:28:73:a9:bb:4f:81:52:74:ce:d5:59:ab:57:fb:5b:9c:57: 60:9a:22:6f:f2:64:54:18:54:3f:7d:b1:af:b2:aa:2b:89:bd: 87:27:8b:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4QMxNsVD76A3+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNjZWJkMDAtMjFhNS00YWY2LWI1MWEtZTFmNjUxZTYz NWY3MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NWU1YmU3NTgtNmEzZi00NzZlLThhZGYtZDQxYWE1MDRiNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkpDuEl5jj2skGBk4M5c9RRESTgrSE5UZLkX KEw/WE0Fd0A9KyD8mqkTwkyzc70hobRXKSHqYNzetgk6JIRek3In2PWeEYsIJOy6 nGmlhLphbTrOJ+/0L0iSPpLDa7S6ETU7cgFkKYB5sqCTPgjtfNarE0aZp1gBQyvt amca5JQ7oWMEUaCGDfZ/CJgPPkrxLNnI1eEG2Ebtusw4IaW51oC0l0g8d7ISRfsj VIu5nS1G7egReGN3763WhHhHdNUouZiefVzxly67NMtl9MPJOs1PsX5IPsEAJtCX r0w/er793nfQjJqK7uUpcsKqP+BY+WquwXfNooGu2R8/HdPR1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBNUPyg+F3Xj47TMLUqzm1LCAi1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kY2Nl YmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2NTFlNjM1ZjcvZmRmZWRmYWMtYmZiYS0z YzY5LWE5OGYtMzRkNWY2OGY2NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGNjZWJkMDAtMjFhNS00YWY2LWI1 MWEtZTFmNjUxZTYzNWY3L2RjY2ViZDAwLTIxYTUtNGFmNi1iNTFhLWUxZjY1MWU2 MzVmNy5jcmwwHwYDVR0jBBgwFoAU9IpUS8vYmgeJky6Dr29fBOHaqy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kY2NlYmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2 NTFlNjM1ZjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBQFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH7ezZJBdY9F+nu0v7JnqnLi/1hx4ubGsSUtcnJXRWywLa6W60Ny oHCmhxgX9m9jVS+JWG8M4c3fLM0aWbZXyWWI1Dsd1BepJMci8ZTrBiMt9qlWa6zE 2iPweQEBWIcJUV11R0Bk7S5GUFcXZGVCL79dgUSYj0qEfRkALwK7UjxZ60qqaEAi 4uk9IAQZoRgwv3Kqm0dhs37L0DtVAc+YSQXckHnfAP7nfZwGn1jN1D4X1WrQXwLm rDMn/gv8zwiE0DGwJ7mHJbLFu44yRTiUxaIefKOyNhJhWDQoc6m7T4FSdM7VWatX +1ucV2CaIm/yZFQYVD99sa+yqiuJvYcnizc= -----END CERTIFICATE-----Generated at Sat Aug 23 08:05:10 2025 by rpki-client