$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa File: 4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa (raw, json) Hash identifier: JNdIDT4TunDSk2S9y0b1fBBdBtc8gc7nZbWogCmV53w= Subject key identifier: 5B:B8:B8:6C:13:71:4F:B3:3E:E5:7F:4F:53:A3:4D:44:D8:50:BC:E7 Certificate issuer: /CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e Certificate serial: 010D0C9F4328584AECC152167D9BF5125BC79400 Authority key identifier: FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 394456 IP address blocks: 2607:b6c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:52:16:7d:9b:f5:12:5b:c7:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a5e4b730-1656-40db-b1d0-68f2d40ff948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8c:2f:5a:8d:60:f5:b7:57:73:3e:ee:ca:d2: 86:bf:b8:83:76:eb:02:a5:69:7b:b3:1e:3c:55:03: a7:2e:f7:7d:41:ce:ab:40:9a:ed:b3:ca:b5:39:7f: 08:da:7e:fa:92:9b:aa:fc:1f:8f:74:1b:22:17:59: 07:c0:51:b0:9e:e1:0c:bb:cc:01:37:95:54:bb:a2: ab:6c:07:bd:e6:27:d7:9a:67:20:ad:e6:1c:87:43: a0:4a:f3:32:ca:2c:98:cd:39:69:fc:f5:cd:ba:b2: 99:54:c1:19:5d:38:07:85:da:ff:34:eb:c2:33:84: 6a:d6:f7:9a:a3:e2:12:53:f2:5d:af:dc:ed:3e:21: 92:c0:b5:7f:fa:37:e6:ac:51:73:17:7e:02:32:fe: 75:73:cc:80:de:80:31:e2:b3:71:d1:9a:19:21:b8: 20:45:55:82:b5:56:28:71:14:a8:ca:81:a3:a0:d4: 8b:21:6b:f1:68:2b:51:eb:8f:6a:50:5f:df:85:11: f5:60:d1:0a:5f:9a:0c:5e:5d:a4:84:4f:c3:81:f2: f7:fd:6f:fb:66:70:10:19:b9:66:f4:fb:fc:ab:16: 9d:85:0a:7c:83:2b:5d:e9:7f:bb:cd:b2:77:a5:8e: 95:91:9a:ca:ce:86:60:41:64:30:26:d8:11:aa:39: d2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B8:B8:6C:13:71:4F:B3:3E:E5:7F:4F:53:A3:4D:44:D8:50:BC:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl X509v3 Authority Key Identifier: keyid:FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer sbgp-ipAddrBlock: critical IPv6: 2607:b6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:19:42:6d:47:92:bb:56:53:1c:51:31:59:94:03:69:25:fb: 34:46:9e:fb:d6:21:40:4f:c2:54:50:44:30:90:45:22:c8:86: f9:ea:fd:05:d4:bc:22:6b:c3:4f:fb:4e:c9:78:f2:03:87:b3: 27:7b:8a:84:77:ef:96:ab:c1:3f:6d:62:47:20:16:c7:8b:48: e2:71:41:42:d2:fe:21:6c:fa:ff:4e:3c:b6:e7:56:c3:bd:c8: aa:65:f9:64:75:f2:9b:0a:04:39:b2:a3:16:76:a9:c3:b0:21: 8e:15:19:1d:6c:88:e3:13:52:f8:76:62:57:e7:4a:e9:43:78: 1f:76:10:e5:8a:b2:42:9e:71:a1:9c:10:ce:c5:eb:4b:e6:0f: 0a:29:09:7b:61:5b:22:16:c5:ac:a2:90:c1:ec:ae:0c:5d:29: b4:99:8c:16:dd:db:30:f9:22:62:6e:27:5b:1b:a3:1b:00:2c: 59:a0:d1:ed:42:f9:d9:39:96:60:2d:55:b5:0c:f2:83:3b:40: 95:50:b0:0f:4d:9a:f7:f6:62:aa:ef:2e:b8:e7:24:04:b3:1c: ac:75:0f:c6:3b:dc:d3:35:f6:dd:77:35:c0:67:6b:84:8a:0f: 17:ef:10:a0:7a:93:39:65:17:a6:c5:3a:80:8f:99:97:71:32: ff:18:2b:f9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErswVIWfZv1ElvHlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdiM2NmNGMtYmJhMC00ODFjLThlODItNzRmMDUwYzVm YTJlMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTVlNGI3MzAtMTY1Ni00MGRiLWIxZDAtNjhmMmQ0MGZmOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7owvWo1g9bdXcz7uytKGv7iDdusCpWl7sx48 VQOnLvd9Qc6rQJrts8q1OX8I2n76kpuq/B+PdBsiF1kHwFGwnuEMu8wBN5VUu6Kr bAe95ifXmmcgreYch0OgSvMyyiyYzTlp/PXNurKZVMEZXTgHhdr/NOvCM4Rq1vea o+ISU/Jdr9ztPiGSwLV/+jfmrFFzF34CMv51c8yA3oAx4rNx0ZoZIbggRVWCtVYo cRSoyoGjoNSLIWvxaCtR649qUF/fhRH1YNEKX5oMXl2khE/DgfL3/W/7ZnAQGblm 9Pv8qxadhQp8gytd6X+7zbJ3pY6VkZrKzoZgQWQwJtgRqjnSzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFu4uGwTcU+zPuV/T1OjTUTYULznMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jN2Iz Y2Y0Yy1iYmEwLTQ4MWMtOGU4Mi03NGYwNTBjNWZhMmUvNGQxNzQ2OTgtZjBlMS0z ZGZjLTg5MzctNTlkMmM1MWYzOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzdiM2NmNGMtYmJhMC00ODFjLThl ODItNzRmMDUwYzVmYTJlL2M3YjNjZjRjLWJiYTAtNDgxYy04ZTgyLTc0ZjA1MGM1 ZmEyZS5jcmwwHwYDVR0jBBgwFoAU/7ynqLDJPgswXH1AXm0eDyu6kwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jN2IzY2Y0Yy1iYmEwLTQ4MWMtOGU4Mi03NGYw NTBjNWZhMmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge2wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGGUJtR5K7VlMcUTFZlANpJfs0Rp771iFAT8JUUEQwkEUiyIb56v0F 1Lwia8NP+07JePIDh7Mne4qEd++Wq8E/bWJHIBbHi0jicUFC0v4hbPr/Tjy251bD vciqZflkdfKbCgQ5sqMWdqnDsCGOFRkdbIjjE1L4dmJX50rpQ3gfdhDlirJCnnGh nBDOxetL5g8KKQl7YVsiFsWsopDB7K4MXSm0mYwW3dsw+SJibidbG6MbACxZoNHt QvnZOZZgLVW1DPKDO0CVULAPTZr39mKq7y645yQEsxysdQ/GO9zTNfbddzXAZ2uE ig8X7xCgepM5ZRemxTqAj5mXcTL/GCv5 -----END CERTIFICATE-----Generated at Sun Aug 24 04:42:35 2025 by rpki-client