$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/4903a6a5-2e05-34a2-b9df-6f26be762807.roa File: 4903a6a5-2e05-34a2-b9df-6f26be762807.roa (raw, json) Hash identifier: j6e/GB+8Mo3kbjudTaFKfMkrmxVdPiN0VuqbVBr7Ksc= Subject key identifier: 9D:35:5E:BA:9A:EB:B7:5E:BE:7D:23:8B:FA:25:4A:45:4E:26:9D:F5 Certificate issuer: /CN=1eceffa4-1513-452e-91b8-8d0a0b51f920 Certificate serial: 010D0C9F4328584AECC120C46A4B957B7A888100 Authority key identifier: CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/4903a6a5-2e05-34a2-b9df-6f26be762807.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 18780 IP address blocks: 2607:7d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:20:c4:6a:4b:95:7b:7a:88:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eceffa4-1513-452e-91b8-8d0a0b51f920 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c2d25184-b38c-424e-8489-9d304dda2f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:17:01:fb:e8:9d:b6:9b:ba:d7:6c:03:48:f2: 66:3b:12:96:5a:00:7f:02:c3:11:12:5a:2f:cf:02: 54:cd:59:a1:25:6b:56:8c:9a:75:1e:09:bb:42:b6: 46:40:6a:ff:c1:4c:33:75:9d:12:e6:56:2c:94:f1: f3:b1:68:d0:58:25:c8:5c:c6:1c:47:b4:43:4c:b6: ff:35:21:16:8d:0f:44:7f:ba:ec:4e:60:72:b6:5a: 78:da:fa:13:2d:1b:0a:9d:0e:2c:db:79:e3:25:b3: d6:49:d0:ea:5a:8c:d8:65:87:84:ad:6d:48:97:8d: f7:29:55:06:2f:56:0d:d0:8a:7d:82:24:3f:d9:36: 67:16:f4:19:40:35:2b:2a:14:5a:6f:4e:25:61:77: c9:4a:68:04:35:a5:a8:54:a5:3e:14:64:30:e2:56: 49:a6:e1:82:6f:fc:5a:94:0f:94:f6:a6:a2:bf:06: 35:de:7f:72:47:ee:6e:b5:0c:07:fc:f3:ab:0f:3a: 1e:66:b5:1e:de:6a:2f:75:13:14:b8:d5:9f:b6:f6: ef:c8:f2:10:ea:0b:39:71:9b:36:c6:ec:16:b2:7f: 9d:2d:e0:e5:f3:14:72:1e:c5:b0:85:4a:2b:96:8f: 04:49:d7:2c:3e:e7:67:e6:39:15:4b:70:2c:93:98: 11:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:35:5E:BA:9A:EB:B7:5E:BE:7D:23:8B:FA:25:4A:45:4E:26:9D:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/4903a6a5-2e05-34a2-b9df-6f26be762807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl X509v3 Authority Key Identifier: keyid:CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer sbgp-ipAddrBlock: critical IPv6: 2607:7d00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:af:c8:ac:09:63:a7:aa:0d:fe:02:5c:b0:49:52:1a:21:7c: 51:1b:3f:10:90:25:ad:7b:15:87:c7:c0:84:ca:50:6d:95:a3: bd:0c:d7:29:be:4f:38:bc:f3:35:28:37:bf:f6:4a:4d:fd:64: 07:cf:22:cd:1b:c1:e1:a9:3d:56:90:93:1c:59:b2:76:4f:07: 7d:03:0f:e9:10:2c:27:24:e0:2c:86:91:9f:1e:de:83:e4:7f: 95:82:b5:b0:3a:d6:52:a3:de:60:ff:83:51:d6:c1:ca:6f:51: 30:f0:aa:8c:9d:7c:c1:0d:73:9f:f8:2a:12:a0:a6:10:68:c5: cf:c8:20:e9:b9:92:3d:30:25:2a:5b:8c:c7:cc:b2:08:73:9b: e3:2a:c4:30:6e:25:63:8b:9d:52:58:9e:59:ce:26:13:2c:12: 65:95:fe:dc:28:ca:d1:27:d6:c5:2e:a9:77:ee:5d:2a:74:78: 5a:6b:77:eb:51:d1:6d:e7:f8:fe:e4:5b:99:d6:45:07:f0:6b: f7:14:21:36:ab:e0:c0:7a:d3:cd:9e:09:2c:25:94:87:d4:ae: 3b:54:63:24:99:fc:c0:f2:af:07:53:41:b3:03:bd:ff:06:fe: de:9c:e6:c5:3a:ca:fa:bc:69:24:e9:47:94:26:44:de:16:1c: 00:be:c5:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErswSDEakuVe3qIgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjZWZmYTQtMTUxMy00NTJlLTkxYjgtOGQwYTBiNTFm OTIwMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzJkMjUxODQtYjM4Yy00MjRlLTg0ODktOWQzMDRkZGEyZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhcB++idtpu612wDSPJmOxKWWgB/AsMRElov zwJUzVmhJWtWjJp1Hgm7QrZGQGr/wUwzdZ0S5lYslPHzsWjQWCXIXMYcR7RDTLb/ NSEWjQ9Ef7rsTmBytlp42voTLRsKnQ4s23njJbPWSdDqWozYZYeErW1Il433KVUG L1YN0Ip9giQ/2TZnFvQZQDUrKhRab04lYXfJSmgENaWoVKU+FGQw4lZJpuGCb/xa lA+U9qaivwY13n9yR+5utQwH/POrDzoeZrUe3movdRMUuNWftvbvyPIQ6gs5cZs2 xuwWsn+dLeDl8xRyHsWwhUorlo8ESdcsPudn5jkVS3Ask5gRDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ01Xrqa67devn0ji/olSkVOJp31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZWNl ZmZhNC0xNTEzLTQ1MmUtOTFiOC04ZDBhMGI1MWY5MjAvNDkwM2E2YTUtMmUwNS0z NGEyLWI5ZGYtNmYyNmJlNzYyODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWVjZWZmYTQtMTUxMy00NTJlLTkx YjgtOGQwYTBiNTFmOTIwLzFlY2VmZmE0LTE1MTMtNDUyZS05MWI4LThkMGEwYjUx ZjkyMC5jcmwwHwYDVR0jBBgwFoAUzk8tSTH2YFFhfyV/MTIcHpbLfA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZWNlZmZhNC0xNTEzLTQ1MmUtOTFiOC04ZDBh MGI1MWY5MjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgd9ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6r8isCWOnqg3+AlywSVIaIXxRGz8QkCWtexWHx8CEylBtlaO9DNcp vk84vPM1KDe/9kpN/WQHzyLNG8HhqT1WkJMcWbJ2Twd9Aw/pECwnJOAshpGfHt6D 5H+VgrWwOtZSo95g/4NR1sHKb1Ew8KqMnXzBDXOf+CoSoKYQaMXPyCDpuZI9MCUq W4zHzLIIc5vjKsQwbiVji51SWJ5ZziYTLBJllf7cKMrRJ9bFLql37l0qdHhaa3fr UdFt5/j+5FuZ1kUH8Gv3FCE2q+DAetPNngksJZSH1K47VGMkmfzA8q8HU0GzA73/ Bv7enObFOsr6vGkk6UeUJkTeFhwAvsW8 -----END CERTIFICATE-----Generated at Sun Aug 24 08:36:45 2025 by rpki-client